last executing test programs: 2.054913407s ago: executing program 2 (id=736): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r1, 0x7ad71c5c2912d839, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710443000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x26}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}]}, 0x4c}}, 0x0) 1.939042838s ago: executing program 2 (id=740): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(nhpoly1305-sse2)\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0x2000000000000108, &(0x7f0000000740)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x20000004}, @exit, @func], &(0x7f0000001800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x1b) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYRES8=r3, @ANYRES16=r3, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r2], 0x5c}}, 0x800) 1.466216612s ago: executing program 2 (id=745): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000080)=0x8, 0x4) r1 = openat$cgroup_ro(r0, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendfile(r2, r1, 0x0, 0x800) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) recvfrom$phonet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x40890) 1.377341526s ago: executing program 2 (id=748): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000340)={r5}) bind$xdp(r6, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) bind$xdp(r6, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x28}}, 0x10) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg(r1, &(0x7f0000000140), 0x0, 0x4000000) bind$inet(r9, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) r12 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r12, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) getsockopt$MRT6(r12, 0x29, 0xd1, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x81, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x34, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROTECT={0x5}, @IFLA_BRPORT_MCAST_FLOOD={0x5}, @IFLA_BRPORT_MODE={0x5}, @IFLA_BRPORT_ISOLATED={0x5, 0x21, 0x1}, @IFLA_BRPORT_STATE={0x5}, @IFLA_BRPORT_VLAN_TUNNEL={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x74}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) sendto$inet(r6, &(0x7f0000000140)="0980e33dcc66d24afc49dee812f8bda8a5f2a06d554daa433282bccd0dcc993474cdf62e7acc6ee655d2a4eb64d1b41b45866cf9a60cde70f47c3721058ce4fe21a24e9ae5bf633ba151c93fc4dfaae34d4d9977c59ff16007c6ea0e18134047d5cc2c30211a9c14b4e15442d037ab43eb4a53e4d999aa2840cc0ea0a633c0cb5223a54c00", 0x85, 0x20000001, &(0x7f00000002c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) 1.214284133s ago: executing program 4 (id=749): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0xed00, 0x0, 0x0, 0x0, 0x7ffffffd}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x24, 0x8, 0x0, 0x0, 0xb000}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x25, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @rand_addr=0x64010101}}}, &(0x7f0000000140)=0x9c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000a40)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000a80)={0xb, {{0xa, 0x0, 0x0, @mcast2}}}, 0x90) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x220, 0x220, 0x220, 0x308, 0x308, 0x220, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYRESDEC=0x0], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f00000000c0), 0x2, r6}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f0000000380)=""/63, &(0x7f00000001c0), &(0x7f00000004c0)="1422cf0b4de2270e6e71550ea12a00"/25, 0x5, r6}, 0x38) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x8844) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r7, 0x89e8, &(0x7f0000000c80)={@default, @default, @bcast, 0x9, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000001b40)={0x13c, r5, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x2e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x6a8}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1000, 0x6}}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xd6, 0xbe, "333484249bb50b7d421ef4f154c8ba362035e425e319ebd735c699c4428f09ff29232e9ad79ef360577f505ba8d4802bf40e5955be41c7facf396a51b2152592a51f317a1a4eaa87d73c7f89c2d2d122062f48c5a0c5a55b211bcc1b45703a5816d339956fbb2d0c95ba8462b5d3a7e4f4ef3026abca18505da83689096b61189f139ca6f65b34fc5451086848caed59498b9cdeb206261cd98a9a86abccb835caf2d96cf626485633a0a0eb4d6f158714c0fa90c48ed8149c74a5d88894a349b7175635f2a134adcb5251e330338679428c"}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x2cca}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x1]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x20048841) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r8, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0xfff7ff1f, 0x1}}, 0x20) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000000440)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}}, @exit], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="4400000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000000c00058005000100000000007d1ca53fd31c69700577e45bc7c6d713f139fc6fb787bc15173297f24d09ed53b77c664cb6f3ec0f3cf35ea4a93b68fe1bbc814d0069049d29bc09763734cf9cb036d7d8277c6dc0c882eedf7e8b2e9774fa7bfcd38b48546f770c869c94bcda9eef220b"], 0x44}}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b702000024000080bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006502040001001f000404000001007d60b7030000000000006a0a00fefdff00008500000026000000b7000000000000009500000000000000c743a0c8e3ebbadcb74220e5a7efcc9ac1467fb2ea80dbcf8df265e1b40e4c8afd5c0c000000008da68076774bbcdb2c769937000090af27db5b56024db96bcbbbd2cb2000ce03000000000000007e357754508535766c80114604a86fe569b05614eab9297eb290a248a120c9c6e39f403ff065fd3052aae80675eeba68562eaeaea5fecf298ca20f274233106eab63ecf772de7b265040b6c50b7420b48a93fe94c756108afcd0b2eb78040000005f02a5a6474ae549070004000000ed5020e6474ac921fee1f6d8ad6a80d0947cd6d4a561ced21a0b4a902be6af7ec2d1ba002e57f301000000000000000000000000100000aaf25343063e6581f9e6de14ad72e5ad84309f47f96a576cd20cef7ed951a73ea73d7c7f14e306f1f1d1377e57abb19700f0077e9d0000b93eb0f2c6f8141e350dc68147e5958128d22d58625cf9dba211bfff9c3709c9b134625d3d2369f516a49eeeb1a662c8dfb875bdf5c6ba73cccdfacb202994c40d322717faff03323dce8a34ee0ca2cf61efb4b30000642735d6d482ba98d252f36c54333a8b1aa736369392b9067665339820f5f1557b0bf7cc06a5a13c714e0b1a1f000000ff3283076cda3d0b1a2905cfc3d04f1db264b530abcbe44bc405f600807909727fb819afa1907228fa9e83433eedb4ac88d0285594ffb0d14c09d5c77f33702822b02488ea570204c8441ced81cacf945dcb2486d658eec8bcaffbe800a041a378b40dc9e3600e916ae6307bd8325a442095bc9a8b0c95905979f34adddbb26f0d24425c8ab9d937d84b521914f92eed3d3e9de82942a952e86b567aff5bc2e3d1fcc00f618363df5d0d181ee8f4b8fd356c9eb365adc037e443820c05c5db16ff07a9cb471e2ebf91ab00a05f88c1cd55f8c81f5eb1f8d615ca27efb2193bb61665a1ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50225563cd37343d09da72472efc2b2877fbab12a891513e5f0763ae06c0610a2869747c143d7500760600f3ffb2310e19ac58bf29d7f178d09a9f634a3ae492f54649589e3692768a0f3a082c5242c8fa7ff40007ff275df45508ad85950d8e08465fa1067ea8f383b3e7a7ddf5977d46f4bc38f914b4a496426d8468f9ba618b6b2218b50c8fc9efbce3ba799cf70de7e13be871aa7eb402e2b11f440361e18d4e334bfc6ae54e62e67a0338c756c544189e4519a029674e2a2bbbc7f6600000000000800000e5e30b70b198246d3a62660600000030a0af132e680510811d3ab71af5d98e2d3d928a749e8b9402d14655612bd58fb40b4625cb69bf6cea97b447f2d970d99100000000086000001b881afb2cc500003a73562af4878f75b4c98274eeb666aa1f5fcf91990cf0dcfef9540057b8a3fff2bc02c5941626d2015f414546e87835ba18e9101734a9e9c6955fc6b9a25fe2a3dd8bab7f21beccba5493a164c663eceed401737c12c65804712236a9a29a43b1e27e9b6816f2328ea8423121f12b7b35aa721fef26934ccafde573bee5c33ef15309f43cbd5d61aa679a9c402d337ebf57a5eacb569401c1df7b9c45b09743c61d1db37f0000000000020000000061d7d6818db785d8ba13dc577fe61a68eb365de5661f43d4c789bb117a3d208ae44a381b718b3157e218959156ff8e92b7e92bc275d2c9114547351a0d0f2a70d13be0194b6cb68b03000000000000004f153bbc7f52861e4e5df0d19e4e40ac44cfda6f87807e5b5ed7072c04da88afd3d4b79f060e004a0e2f00b9e726ac75d2ac0691314c627e9a8a07bdd607919fd48f01ad6d2f7621d9a75b134f1bc25ed7c33d411a5baa4daa3add16afc502b2b7629541d722e91d631e5ffb9d4beb5aa5a2c4e490a5bd5cf4538ba310b8cbc221af38ea842d4cb908bcd574f794459fd54b58c6a791e6df620047bade4ba41ee014184395a479544619f749ff70088b0fd115077f7eff7c5a3315ca604d110df1c54407f191a78d8362e4dc6e1138391c2a65246779bb76c9f1daea4f085f38810edef6dd047937c231cba791a4e7713c5b3b0a0b6ba37db5016e02d114d714459d065a79609fea4efebad04edac11aac0e53dd094827453144fa419ee81823d00a90a9058ba740d2f41253a8d01a8c1a7265a084e30ad10d412aee8170a7111d62473e7bd8f3d64fb7ebdd32aada331900000000000000000000000084ef49dda7733c3e2f3902000000bf48ea48e0e1f463d9dcb285038ec38d5f4969ed0e98a71ac7bf8159a234833a5241722b2d24aa2fa4965d4eb7966fb27d118b6ef3308627e67d42f1041d5e92da28e0a7724ce715854775cbe06c5166f1dac0745f1373156a536cb6394c2c4473e2050cacf693fdf8e305080000001a901ecd90a5f53b8327a485557bc2a147b036477915e600000000034258ebbb6099b597d17ee2fc97ca850b8580b1337016a40566814594c13052b9d2b0741326825f19a244609ac04a0c29691a7c8f7a78c1a7590a293c561f304533c638ae635f5ce026f7fa034d8cfe0e11831d4829692beab26891ef583cfcb713a4d3a2d8b958c0875d7e4bdcf98802db086ebcbb9d82fa569a18f06facc2ffe1ea9ae4231e1e7a5dd7503faa2de7f898c97788c4b9c61c70ff92abdf7476cc351156d11c0ada7614f315f4c6cca119d16827d4e864f5a7a9b690272a510c451dc07f391309d02e31e53b2bf0b5f86e776b1bcfe6c85ccd7ddf8a9559d58bb5603895f265685fdd11263c946f8ef3ccec1b0d45a47a89b8237cbbdab14e4ca6dc76b2c41e071b93a065c0f5aa718e1cfab29beea78a6bd9a3114f0fb92be9a5862627b4bd99db2c08e4636e43f05f33535d5d1f9bb40e1fd8e5125a3d29b31dd94a6744bbc21722222b976089f073a4d3fcafc6d06518cf0c4fc6c8e3da0000000000000000000000007d3b60775243f2143d9f54804b11102cf0e4c641db1ba8bf75e46ab3a8fdece6562e7ebb3e407f3c7504dfa3da3aecbd49af3d1edeea11cc970416fadeedc8423bfdc85041ac4d8243a1130e6f4cb5bbfed9d095e18c98c7d690e4e491a7ddcd5635bc61dbed719ca28e8ca3f1fbbe588913ed057f1d6e34a79f4dc10df54d1993a5bc5f9ef6dbd339ee4b0b5764169f305e284ef82cc23e9366d4bc7eb45c7230b13433e5240657cb8eba33260147be8620b6d98cc48b000000000000000000000000c1ce872b18984f080100000000000000bd3fded92547d4182f47b35531d5546d35336491d8378f09b398f36749083a147eb09ff1ed601bd36b873d3947fb223da647052528e0466cb917db7800f7c7000b593fca1903991cca1343882e3a1f60044f11c081dae4fc5bcf20efacdd2c577f4bcda2eea6f75a31dc90eebb6135b6fb824052181b0ad8a49ebf03ccf61d7e39bf6b0762d24d19796016301d1415b5110ba9df7f204aedb2a2e4e621c0553d312b309db67192f98ef7800000d629c04e216afc8fc66616bbf304e452373aa927c2ad6f5417f1b9bc322b802c1c42112a92a331cdc113b9ace3ff52ede7a853f9a89002ba070bac2f635a03db3375e5564f1a798bf9c0f8c72725d2eca9b0ec7e453d78ea20eca61530fe574299b393ca144adcb06108dfbb934065a87972739150a8752ac111c4d9062ccb95c54034fbdee131d94dfbaab1854d55665746fb7b47d25e54070b0d14c0a29c57bc4930075e1761913b036d43852c6df9f10e15105b2a18668298a3577943514db0dce953dcec62139ff3f16066efec5d8cbc0600000000007289be5883aab951ea67cf2ff691d05c1ea91dd569ed9897fe8d88a0a6977dc8955be17e8026aff11c61fa5cc76196c1423cd597345253baa1537eb6962a3ce1fe5d5ab46938e8fb23fa7047bc59c4345e912585a9adb5fe2ff51b64a326321b594e3f2d339f4090bdae6b30b62064bacbc155d3c930576f506b093ca7c60957bdfdd6536baaa871cf6a603c736b78761e6463b8ac503e219cc3d98f649602ad24d5667368290ee926fba76ee482a201a03efece3b236f4ee2ffcd5d90d92a2f0c5cfa48c87f27c2f1e92988a6508c12f6b7755cc48eb10edafca92cb0260c72295a27a24846d3a2334bd60e94c0fd07e5db0a4964a7fc4e89f11a300510776934e87bb3c21394f46954a012b2a3b0760f1bad1dbd6b466ed7153bd18ee2c0b2353c38df9e0782eb000000000000000000000000001b58cadcc5aaf65e05663985a177aa1d1ea2ad1b8151c7d58f5b92827f550269b3585d98e1394e816a477e52ce2f6de2bd7192f46cf965e774968d151d2bda084b10ec4c8d2c6ab582b1e5e3ed874235ff128c661298ed75879d8a4025ad1c3d9ef6355dc7284c6e648a61da026a777fcc7ae2c60ce64a2f2b0000000000000000000000000000003022110d1230e998429a6fd8f35939a8ae5acc89125539d84b98df6f8ee2ad0b238759bf400ac14c591aefe9d15d18aa94f73b0ea8f3cb4a9c2e4f745a2afb593fabb9481600b2f44e64dcb0d0d57d5aeae626d2700608bb283800000000008a4c26b16213f0d9d7c3c57413b1e5895c9c12259519274ca8fd3bce804c8176a297f28add10956f3aaa3db687abcc17d326fd3674b7680206e875332b82c1de5ff793f6971d98c787c6daef28f66b542f08eeb6c82fbe03a3dc625bddf98d2a200c94065db5d5414361a785ff39392d9b1c870d8a2287af0ee98231100efa30652f2dd84da00970b5d209c623b26770258fcf63690f17cce7a78aeba7f6cbc4c143f48b1d0a10afdc93eaaff72e6622fd4da72ca7b30cd30b568599a6b44a2dee51985d802ed8088391a6717c4d97d5850f4721a9df90f08c1c532737ea464c405cb5ea5763ba0391d3d58973997075cbe0c89a3f79d6a98c8e93a915674e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r11, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6000, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000340008803000008024000100f44da367a88ee6564f020211456727083b5cebee8b1bf5eb7337341b459b392208000980040000801400020077673000"/86], 0x5c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 1.213840664s ago: executing program 3 (id=750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x270, 0x128, 0x0, 0x148, 0x128, 0x148, 0x250, 0x240, 0x240, 0x250, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x0, 0x21, 0x45, 0x42}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x0, 0xea9a, 0x7, 'syz0\x00', 'syz0\x00', {0x80000001}}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'vcan0\x00', {0xff}}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x6, 0x6, 0x1, 'pptp\x00', 'syz1\x00', {0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a80180001801400"], 0x4c}}, 0x0) 1.187533978s ago: executing program 1 (id=751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004070000000000000400000004000e1ff95000000000000002ba76bb33123751c4e3409e62751ee00ba19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac03d046837d907b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e3e8eea3fd8cf49827ca315f5b87e1ca6433a8acd715f5888b2007f0000000000000000010089937090c34410000000000000090000000000414027efc842b6d6f800005335001db43a5c000000000000000024000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000000cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617da7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdce57a79d6fce424c22001f6c3784a1975fa657d05003a32a4fd67ce446ac5430207db79240acaf091231b986e77d05d988d6edc71df48dca02113a38300c2bd2b5543ffc16695572361629d1022f722ec23812b70d72cd0010000007881bfa35b9fd6864e90ddb31f75f6324989cdc7044f563a1f74d4efe895fdbc463f747c08f40105869035000000000003000000000000000000000000000000000000080000003ddf4aa4b1c8b8a0ae6feb6737c275dc2740f742b5425f1d5819610608bbab35471cdb0500000000000000d4123f955267fe4a75c114f874e086287547d4099aeec9f15b8ee25a2a5ccf4a9b603c88e12ff25184d4e3c2f7f623559435b2c505fb7113400000f0bc440550ee91302f5a00000000000000000000000000000000e67ccc00148ac4c43021cce9f24f4b2f9492c32e7a92a557ac2b44b8f7a49789906d922b3e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec0c0acef5383b5a2720caeb68f1e9c05b05d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696abaa042a7097ddefe0671f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb328790700000021e041254f06bd7f000000000000000000000000000000282ffe000000000000000431e8e3204a7d95938c5334a0dd177f1a7389ee570d95e543a27546d3770740f354df6dfdb3d1179b4b9fccd0cd5b7578802c66f5dbf22ad0bd03cbe0fecd096bcf419d35988948d1cd4c51c406040000000090a3bc3cbc08255975f3cee08dab765d8a4ef870aaae3f81ed6364837171ce5564f3cf6feba1b6745409000000000000003459263499fae97e7dcb30e4cff009e0f4f78c155c4ab19b878fcb4cc14b8d2823643a17120418f42b42ed879cb23e6d4e0d11db988d0bc46de02702d29243b72215d5563bdae8c2ccda4498687cd50f3a9058f61d52d70aabccb18d41d75788faf60ce9be97c13e4252d9d112d9ac47368829f8a29eca17de807c840293dd387eee13fdecf3d5a334350f045a22b9adb0539d44d58a00fb9e83ebf4fea36b87e2afdf63f7abf5caf2b01317a5f65f22c8bcf36b390dece1e98541ae932ec3486f74c1eea673c1647568acb17efcef24a9c3504dfa7c7eefe3dcb8d570a730a0837839f54527ce334b8173e7bf73bcd8d80ef294fde6549a0f1a23b78b41f79ea543d2b38b80d3d28c6c93901b763fc8b88794aa74facc345e28f0ad79de4df5afd52e7dfc387e4d2ca4d5caca74754987dbbd4d64e233b4a1d81a9aeb981734ca5416cacf516ca8384d85310f24d393fd48c668465546117377547d11a61bd2bd9e35fa0da5118554a1d93147b103a51baf94aeb1b6292038300423344e6add2226ba5f6724a08567ef515898f0f7dfd3fc198092af3265c5df377a66bbde4fa4a049692e06ee5022c58290bdc37eeb16f4e099e33679044ba21898f76c982c8203663f1adb7bbb42ed8d9b0bb8bd9255e342959b822fa8b3d08b29f2201dfe3a3c5c8bf8bc82f249e7eb9f8571823d730fdc78c6b3122a3fd9209dcae70c10c7b17e83dd759a52fe5c362358dbb780a52f540000000000000000000011230e1d6f9fd3315ada8ecee55fc0ec6ec0ec950c0ad006a06a162035d5729795c4a58b59f9a252723480b08ae9bd52c176380a42b972a3400b5d28b273e60000007cac9d35a991c27e23ce5217fec9ce89ea2dea8ddb383e53cdd077e7c2d73404b7450664f70225897307d8a140ba97bfc2232dccdb1dd0496c219315c02f2ef46f30add1aa13e52d67116328c3a5ee3356eadea07abe8506767771d68e760f8c623fb64865a942acc4912dcd1fa5d729cb45c15577bbb8b08a705efeaf09dd6aadeb8d61501e4fd9c9b1ac845a2138cbde58a04589888c0e528a5134e1dfa8b3f6d8a76517df589cae1019a3bc280e99fb661271357dbbd7e9c42d3fe45efaaa00"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000200)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000000180)='\x00\x00\x00\x00\x00', 0x5}], 0x1}, 0x2404c014) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) (async) syz_emit_ethernet(0x165, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x12f, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x19, 0x8, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37ada"}, {0x0, 0x1, "0000000500000000260004"}, {}, {0x0, 0x4, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2d"}, {0x2, 0x9, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a"}, {0x21, 0x6, "b8a3e100906e61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015c8837473"}, {}, {0x0, 0x4, "d5170000dce9674a36da018dff16e7ff6f50ca0ee2ebcac4da3574ab0b8f14c4b7a94fe18e"}]}}}}}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) sendmmsg(r1, &(0x7f00000001c0), 0x0, 0x0) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c0008000180200000003cffffef0000405a6300000000000000a8a5274200000000000000a702a7d4c203b1293268f997056ee1a738547cb10700000000000000b0b2134539c5549c7026ab7d738e70e259ceb8247f747aa16192ccf9bf864c0adb957f6d8fa500000000000000000000ffe2000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b40009009078001c0e0300050200000000000000000002d5883800038f00000074c8046b48413c036a9b0dfb9fee7cd1ef69f15eb324e3fe61a74ff03f9d4bf87187339265d97b2b419bd9c9c4cf4c9a2d4c28d5d7f312a6bbdd9626c103a82a8342a5ad5f9b20824fbfaa35f9c61a49d9b1f2ad797a12c1600e548375b6c97030418ff795"], 0x4e) 1.18275838s ago: executing program 0 (id=752): bind(0xffffffffffffffff, &(0x7f0000000080)=@isdn={0x22, 0xb, 0xe8, 0xae, 0x4}, 0x80) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) r1 = accept(r0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x64, 0x0, 0x1, 0x401, 0x0, 0x88ffffff, {0x2}, [@CTA_TUPLE_ORIG={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}]}, 0x64}, 0x1, 0x600000000000000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x6, [@decl_tag={0x9, 0x0, 0x0, 0x11, 0x3, 0x6}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0xff}}, @var={0xf, 0x0, 0x0, 0xe, 0x4, 0x2}, @var={0x3, 0x0, 0x0, 0xe, 0x3, 0x1}]}, {0x0, [0x5f, 0x30, 0x0, 0x2e]}}, &(0x7f00000004c0)=""/152, 0x66, 0x98, 0x0, 0x1, 0x10000}, 0x28) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x20, 0x10, 0x2, 0x75, {{0x8, 0x4, 0x0, 0x0, 0x20, 0x67, 0x0, 0xf, 0x29, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0xb, 0x30, [@local, @private=0xa010101]}]}}}}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r6, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x4, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1a6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call]}, &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r5, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000580)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, @bcast, @rose={'rose', 0x0}, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 1.086592636s ago: executing program 3 (id=753): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d40), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x64, r3, 0x1, 0x0, 0x0, {0x49}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x64}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xfc, r3, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0xfc}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x60, r7, 0x1, 0x0, 0x25dfdc01, {}, [{{0x8, 0x1, r8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r6}}}]}}]}, 0x60}, 0x1, 0x400000000000000}, 0x40000) r9 = socket$inet(0xa, 0x801, 0x84) connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r9, 0x8) r10 = accept4(r9, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x5}, &(0x7f0000000100)=0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000611068000000000020000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000d80)={0x34, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xbf3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.038870714s ago: executing program 2 (id=754): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000140), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="14050000000000000011032ff2f65a80648c2594", 0x14}], 0x4e, 0x0, 0x0, 0x600}, 0x0) 1.030792991s ago: executing program 4 (id=755): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x9, 0x4, 0x2}) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xe) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0x22, "15dad01da21bce2179faca905237d6f8228eef8be215f5869d5e783483d9f33be691"}, &(0x7f0000000100)=0x2a) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0xf, 0x4, 0xe, 0x9, 0x6, 0x4, 0x7, 0xffff8000, r1}, 0x20) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@private1, 0x0}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@mpls_getnetconf={0x34, 0x52, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x6}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x4}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xdb5}, @NETCONFA_IFINDEX={0x8, 0x1, r2}]}, 0x34}}, 0x400c004) sendto$inet6(r0, &(0x7f0000000300)="b9a4e54a92b8ac87b0ab4dc4f01a4005ba172e80bc9be7ea9642c8e8f5c8f87687624722f86f3daac8a33ff6f1ef55cb83bc13bcdd8fb58747ea50b5459cf671a380f7630fce79e3703dc8bf5405bbe3121b8839a376cfe05eed1692cd51d06c7435bad5b52002a9ff6b1a07b6b046f7037074e00ffa7f6b21f03141f9c17c114f1adf39902960242b1851fe44cbd47bd2800bbd9ddff8786416e710230cd3a18a762abb2dab0d6e7550d7db1930518e0d02f3b48bf0c1f88b69edf6e8c5fd555245adc194790d0602170a0dec12f43861e929258a7036e43480d0994e9d79631a82e9aa56", 0xe5, 0x1, &(0x7f0000000400)={0xa, 0x4e22, 0xe, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x8}, 0x1c) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r3, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0xaa10}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x4000) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000580)={0x1, 0x1, 0x80, r2, 0x3}, 0xc) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r4, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc050}, 0x40000) r5 = socket$netlink(0x10, 0x3, 0x1) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r3, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4949b6629839d6ff) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000800)={0x1d, r2, 0x3, {0x2}, 0xfd}, 0x18) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000840)) sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x48, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xabc2}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}]}, 0x48}}, 0x5187eb6d41fb6ef3) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x94, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'netdevsim0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'hsr0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x8010}, 0x5) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000b40)={r0, r0}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), r5) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000d00)={'gretap0\x00', &(0x7f0000000c00)={'syztnl2\x00', 0x0, 0x40, 0x8, 0xae18, 0x2, {{0x34, 0x4, 0x0, 0x12, 0xd0, 0x65, 0x0, 0xc, 0x29, 0x0, @local, @broadcast, {[@end, @ra={0x94, 0x4}, @end, @generic={0x88, 0x7, "9f8be53e99"}, @cipso={0x86, 0x42, 0x0, [{0x6, 0x8, "c8df8cd4a366"}, {0x1, 0x4, "cd68"}, {0x1, 0x12, "a1be9184a313fd60535cdbe8dc3f3656"}, {0x2, 0xd, "400dea3141d1a099141610"}, {0x7, 0xc, "e99f1bc6168f900addf9"}, {0x0, 0x5, "b4cb2e"}]}, @timestamp_prespec={0x44, 0x54, 0x94, 0x3, 0x7, [{@local, 0x1}, {@broadcast}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@empty, 0x800}, {@rand_addr=0x64010102, 0x8}, {@multicast2, 0x3000000}, {@dev={0xac, 0x14, 0x14, 0x34}, 0xe8d}, {@multicast1, 0x9}, {@empty, 0x3}, {@rand_addr=0x64010101, 0x9}]}, @ra={0x94, 0x4, 0x1}, @end, @timestamp_prespec={0x44, 0x14, 0xfb, 0x3, 0x8, [{@broadcast, 0x9}, {@broadcast, 0x4b91}]}]}}}}}) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000d40)={@remote, 0x0}, &(0x7f0000000d80)=0x14) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000001040)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001000)={&(0x7f0000000dc0)={0x21c, r6, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x21c}}, 0x42) sendto$inet6(r0, &(0x7f0000001080)="ac67a1cc789531ed82f2e0026c6ece9ddd2d96d335", 0x15, 0x240200d0, &(0x7f00000010c0)={0xa, 0x4e20, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffff80}, 0x1c) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x2}}}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000001240)={'sit0\x00', &(0x7f0000001200)={@local, 0x1, 0x0, 0x30, 0x0, [{@loopback}, {@local}, {@private}]}}) recvmmsg(r5, &(0x7f0000001840)=[{{&(0x7f0000001280)=@l2tp, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001300)=""/158, 0x9e}, {&(0x7f00000013c0)=""/229, 0xe5}, {&(0x7f00000014c0)=""/232, 0xe8}, {&(0x7f00000015c0)=""/104, 0x68}, {&(0x7f0000001640)=""/126, 0x7e}], 0x5, &(0x7f0000001740)=""/247, 0xf7}, 0xffff}], 0x1, 0x40000102, &(0x7f0000001880)={0x77359400}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_REMOVE(r5, &(0x7f0000001b40)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a00)={0xdc, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1e}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8001}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x2000}, 0x8804) 929.982631ms ago: executing program 2 (id=756): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) tee(r1, r0, 0x80000001, 0x0) vmsplice(r0, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x1) 743.098181ms ago: executing program 1 (id=757): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvmsg$unix(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x120) ioctl$SIOCGSTAMP(r0, 0x80108907, &(0x7f0000000000)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="4000000012000501000000000000000005001900ff00000028001a000a0101020000000000000000000000000a01010000000100000000000000000002"], 0x40}}, 0x20040810) 674.884767ms ago: executing program 1 (id=758): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x695, 0x56}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8c0}, 0x50) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x14, r4, 0x917}, 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="186b0000521bdd4a7f00", @ANYRES32=r0, @ANYBLOB="00000000000000002702000014000000b703000000000000850000005e000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000006c000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00'}, 0x90) 672.863168ms ago: executing program 4 (id=759): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES64=0x0, @ANYRES8=r0], 0x44}}, 0x0) 621.605949ms ago: executing program 0 (id=760): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@remote, @in=@loopback, 0xfffe, 0x8000, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5c}, {0x0, 0x8000000000000001, 0x0, 0x0, 0x0, 0x4}}, {{@in=@multicast1, 0x3, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0xffffffff}}, 0xe8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, 0x0, 0x0, 0x44191) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000280)={0x9, {{0xa, 0x4e22, 0xfff, @remote, 0x1000}}}, 0x88) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) unshare(0x6020400) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, 0x0, 0x0}, 0x20) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a1c000000000a010200000000000000000100ffff08000240000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073017a320000000014000000060a0104000000000000000001"], 0x84}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x4004000) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)="ad18d4a3a6bf19be635978e863e20aa9722e5e9399", 0x15}, 0x1, 0x0, 0x0, 0x40000}, 0x20044840) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000000), 0x0) r9 = accept4(r8, 0x0, 0x0, 0x800) writev(r9, 0x0, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3e}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x11, 0x34, @random="5633e5bde725f2b28b44e0b849"}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xc0}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00400000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="e4ffffff000000000000000000000000a30a00000000000800ffffffffffffff000000000000000000000000000000000000f428c7b8018300000000000000000000000000000000000000000000080000000000000000000000000000000000000500"/118], 0xb8}}, 0x0) 597.717034ms ago: executing program 4 (id=761): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r3], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 528.652944ms ago: executing program 1 (id=762): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000001040)=""/31, 0x1f}], 0x1}}], 0x1, 0x200, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x44b, 0x70bd26, 0x25dfdbfe, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7fff}]}}}]}, 0x40}}, 0x0) 527.467541ms ago: executing program 3 (id=763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x270, 0x128, 0x0, 0x148, 0x128, 0x148, 0x250, 0x240, 0x240, 0x250, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x0, 0x21, 0x45, 0x42}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x0, 0xea9a, 0x7, 'syz0\x00', 'syz0\x00', {0x80000001}}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'vcan0\x00', {0xff}}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x6, 0x6, 0x1, 'pptp\x00', 'syz1\x00', {0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a80180001801400"], 0x4c}}, 0x0) 492.585537ms ago: executing program 0 (id=764): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x3, 0x3, 0x3}, 0x3) r3 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x1, {0x4e22, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x401c011}, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'nicvf0\x00', {0x2, 0x4e20, @loopback}}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) 222.088177ms ago: executing program 3 (id=765): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000040), 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000300)=0x9c3cc356e0b08a4a, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000000100001080000000066bcfcc000000003", @ANYRES32=0x0, @ANYBLOB="50010000000000000a000200ffffffffffff000008001b0000000000"], 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000180), 0x4) (async) setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000040), 0x4) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000300)=0x9c3cc356e0b08a4a, 0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000000100001080000000066bcfcc000000003", @ANYRES32=0x0, @ANYBLOB="50010000000000000a000200ffffffffffff000008001b0000000000"], 0x34}}, 0x0) (async) 220.97913ms ago: executing program 1 (id=766): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@loopback, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4}]}]}, 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a0000000210001000400000000000000fc020000000000000000000000000001fe80000000000000000000000000003a00000000000000020a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100fc0000000000000000000000000000017f000001000000000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c040000000000000a000a00bfd1d1618738ba0117a70b84b1568d5a1c68d838d7ef2a5c2b615e6525ea6d9c003ea52bdceaefffca5dff"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x6, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x9, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x0, 0x3, 0x3}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r15 = syz_open_procfs$namespace(r12, &(0x7f0000001780)='ns/ipc\x00') r16 = getpid() sendmmsg$unix(r11, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r12, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r12, 0x0, r14}}}, @cred={{0x1c, 0x1, 0x2, {r16, r13}}}, @rights={{0x18, 0x1, 0x1, [r15, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000c00)=@newsa={0x228, 0x10, 0x100, 0x70bd25, 0x25dfdbff, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x0, 0x1ff, 0x4, 0xa, 0x40, 0x80, 0xc, r9, r13}, {@in=@private=0xa010102, 0x4d6, 0x33}, @in6=@mcast2, {0x741, 0x8, 0x1, 0xffffffffffffffff, 0x2, 0x5, 0x5, 0x4}, {0x2, 0xcd, 0x6, 0xffffffffffffff7f}, {0xdf88, 0x64f, 0x80000001}, 0x70bd28, 0x0, 0x2, 0x1, 0x1, 0x8}, [@encap={0x1c, 0x4, {0x2, 0x4e23, 0x4e22, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}}, @coaddr={0x14, 0xe, @in=@broadcast}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4}, @algo_auth={0xf5, 0x1, {{'cbcmac(twofish-generic)\x00'}, 0x568, "68bd609d5c4b76d1d73040ccc2cab758dbe401187e862bf4679a7f7790338c36618e5665beaa3c7f43e62ae3f6009274cdfaf49d06db9b95d577c7a86df8557910153620bc5c7e256fe008ff1bf369bb2adbd03f4ead0d914e440742f73863323192da8181ddc8c682976ef2a83a4b7909f603aabc63873cbfdb873d4943ef7a5906e8868fbfe9d2a6d572ae74eee018a16198fb751b6e254bf7f19f0f5451a818e0064f055a4a1a3f73c74546"}}, @etimer_thresh={0x8, 0xc, 0x1}]}, 0x228}, 0x1, 0x0, 0x0, 0x10}, 0x4804) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmsg(r17, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r6, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004001}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)={0x538, r2, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x1c4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x98, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x65}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x124, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x77}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '.}+&!$\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff81}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '[\x99.-#&\x00'}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x24, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x13, 0x5, "7b52688b46f530e877da3c1639ffed"}, @ETHTOOL_A_BITSET_BITS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x100, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x84, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\']@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xcf8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '(}-}\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '):}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x5f, 0x5, "9f85df6309ce845253f07020003aaae052b42e45044f40bb70790e8be83bf408b2ff94cbddf7e24d8640829a9cc19b96bc9d01b693175f25896f7610ca7ec2a3351a72172425cf6ea9f516039687f2f361a694eb97a031e0c71304"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xd4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xc9, 0x4, "4454547aa653dc246a4fbaa627edb735f5d90c03e464a39f99a728e617fb33c96b46ab77c258b26cb1b814b1ee8c992fc77bc13fe36b2df83af3eef5c286c10f97013dea8a11f4329f73a5ec710438cb634f8090ad2ec5b302a5df6ead2b879301e2dc09e7e05dfa324b4d81363073a0824d890943d9c943df214f9b18acd68145287ff02382403010608229c210719f57be82fd3dbffaec0af232d7efc8fe01b7c699877f23cbadfc8832cfcb9dacc6f038251e0d36d7091c8239e0a93725818850e39b32"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x118, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x611}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_MASK={0xa2, 0x5, "43dd731047b5ca79cc8220cbc741f38bbfcf90a8a38ec5508ae1568969ead991c49cc98e2ecf9a4aaa8ecbb6608088b993816df816554c65a9c723e735d6c703550a21c006a587050642fc7ff84255ac2ea93e1c7f9328dc9e27bd28511243bfd482c9d10b1b6134dcd38e237627529ee615da5fd8be3633e49389486df4982e8d0ea814b1a1949ee1609cf04dc909f7bd8d007ee312e1baadafb55afa1d"}, @ETHTOOL_A_BITSET_MASK={0x59, 0x5, "e89c3bb3eccc1e5693bbe3d061d95c8bfde24e93d1a039f143ca5635e4b4598a1110637ca4901ce016b2e60871fe73b703fa15021720e02a97bea7cd0691617a923cc4a39ae84e2f3509557dbcd69528094048d56e"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x538}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r18 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r18, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000002200)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x2, 0x1, 0x0, [@mcast1]}}}, @rthdrdstopts={{0x18}}], 0x40}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000e40)=ANY=[@ANYBLOB="b4f5ed02f30000007311220000000000060000000000000095007400000000006c5c629ab3c5c3bdcd0af88a0b1f4b20fa3774eb2bb81600ec4b80dfc584989ec1d86c76586c0b901f16d50deda24c1f07600266bc2484d24271ff62da77e338ee3e9939e064"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 217.757046ms ago: executing program 4 (id=767): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0x14}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b1a, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x9}}}, 0x24}}, 0x0) recvmmsg(r1, &(0x7f0000004880)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}], 0x3, 0x2100, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xbc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) 217.166272ms ago: executing program 0 (id=768): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720af0fff8ffffff71a4f0ff0000000071103100000000001d400500000000004704000001ed00000f030000000000006f44000000000000730a00fe000000007203000000000006b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f18564a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccc99069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad24b89b6a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c87852730a3bd7ac923fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca4856ff03b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec860cde7c79f7b4d4e24c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b450100000001000000393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00400000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd599c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb80610eb37bd2d40ebdfed687f0b093e68f10b72146a0b749ee2105e2da94a288146abbbaf7c0b24fe0000000000000000f1a4f4de6a8d12dc9e71a20cbd412898586843b534d36e21379a8a06133c1babde9e5bd5b6afc5f684aada43ee560e800f58cb33b8483f6518abde7c86bd5d389c1b3c40fdd4bebe4adf87b1025ff57eb50984cc5bad9ea1c15484ea627c3c1501d612ed65939266e7332966f03e0376076e7c5dfe25f367dda7f69db89829b360dd2f59cbaad10f13e269eca792725bbacb96aa0a5c426ca76f84322661"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000140), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="11072abd7000ffdbdf250500000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x4004040) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@ipv4_newroute={0x1c, 0x18, 0x9, 0x0, 0x1, {0x2, 0x0, 0x80, 0x0, 0xff, 0x4, 0xff, 0x3, 0x2a00}}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x8080) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r5, 0x0, 0xb, &(0x7f0000000040)=""/202, &(0x7f0000000400)=0xca) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x5) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r7}}]}, {0x4, 0xa}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x68}}, 0x0) 151.018932ms ago: executing program 3 (id=769): bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x7, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) 150.090139ms ago: executing program 0 (id=770): syz_emit_ethernet(0xe, &(0x7f0000000040)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@generic={0x88f5}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x20) 143.304013ms ago: executing program 4 (id=771): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYRES16=r1, @ANYRES16=r0, @ANYBLOB="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"], 0x310}}, 0x4080) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000040)) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r4 = socket(0x1, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@delqdisc={0x34, 0x25, 0x400, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0xfff3, 0xc}, {0xfff1, 0xfff1}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x34}}, 0x20040084) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES64=r5], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x2000c055) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500004000002020207b1af8ff00001e00bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x200008, 0x5, 0x20000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800800000000000850a602200000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{0x0}, {&(0x7f0000000640)}, {&(0x7f0000000300)="9d14305f5b9176fd46a2d6cc0bf8b00ea77d12943b509e31c729441020bfc543d3aa7b29e7107a90c117dc452406d912306165e7e7628186000661e280329d16092058e2f02d853b230704e80cee683918af77403bbbf00203d235", 0x5b}, {0x0}], 0x4}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa", 0x96}], 0x1}}], 0x2, 0x2090) sendto$inet(r2, &(0x7f00000000c0)="7cd5a68d1dbdb39b0e20497b308bd60d7338bca9a23a999a003e0473e44d3826f46765647faeb8abf310cccbc0424c7690c8b977fa869e7d4e567eb2e2f2060699ce09f88325e2c9f368ba0ec632c8fd0b4d714be9601280f56113a7b990634fc08f4fcb20a36406cd3c5d6d6464f891922dda8b3bedbd7b0977051d6ab52b892b4f703811a7fb781f527ca73e57bb5b04c39edf6c7cb64e03c4f53d2d463aba7a24e7876cd6c23b0fad58d11b7c9aa0ec1e70d1edec6893864430b14eb89f02b896f20e2d9f076452b2e0cab8c43b9a9ee1c3b473b04679bac4", 0xda, 0x15, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 138.901235ms ago: executing program 1 (id=772): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14], 0x22) r5 = socket$inet6(0xa, 0x1, 0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000240), &(0x7f0000000280)=0x4) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 51.424716ms ago: executing program 3 (id=773): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x76, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 0 (id=774): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000000000000b9731139000001c9f56014c8c3967de0fd22000085100000029cbdedfbd8b44d9bfdcb5394230000850000007600000095000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0xe, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x23d, 0x0, 0x0, 0x0, 0x10001}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x6}]}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x68, &(0x7f0000000140)=""/104, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x6, 0x0, 0x9d}, 0x10, 0x1798f, 0xffffffffffffffff, 0x2, &(0x7f0000000240)=[0x1], &(0x7f0000000280)=[{0x3, 0x4, 0xb, 0xc}, {0x1, 0x3, 0x3}], 0x10, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x8000, 0x40, 0x7, 0x7, {{0x5, 0x4, 0x1, 0xf, 0x14, 0x67, 0x0, 0xd, 0x29, 0x0, @multicast2, @multicast1}}}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0xc, 0x1, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0xc, 0x1, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x25, 0x8, @val=@netkit={@void, @value, @void, @void, r3}}, 0x1c) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000980)="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", 0x567}], 0x2, 0x0, 0x0, 0x2c}, 0x44004) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000300)={'veth0\x00', &(0x7f0000000440)=@ethtool_eeprom={0x48, 0x6bf, 0x8}}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r9) (async) close(r9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0x28, &(0x7f0000000fc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @jmp={0x5, 0x0, 0x4, 0xb0b03fbf029d9ea5, 0x1, 0x18, 0xfffffffffffffffc}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x7ff, 0x2f, &(0x7f0000000800)=""/47, 0x40f00, 0x38, '\x00', r2, 0x25, r9, 0x8, &(0x7f0000000840)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000880)=[r6, r0, r6, r6], &(0x7f00000008c0)=[{0x4, 0x5, 0x4, 0x8}, {0x1, 0x4, 0x5}, {0x5, 0x4, 0x4, 0x2}, {0x3, 0x3, 0x3, 0xa}], 0x10, 0x4}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r5, r6, 0x26, 0x0, @void}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r10, 0x0) (async) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r10, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004a00003c00000000000690780a210106ac1414aa890fe9e0000002ac1414bbe0000002070200000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="3e228ef7f8d9a3ce55d0229b8f0baf6fd07668ea78e08f9e2fed5e4f56daae63e4f4623f284c9a78dd52f66f905f7c99562b97d0677c39"], 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004a00003c00000000000690780a210106ac1414aa890fe9e0000002ac1414bbe0000002070200000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="3e228ef7f8d9a3ce55d0229b8f0baf6fd07668ea78e08f9e2fed5e4f56daae63e4f4623f284c9a78dd52f66f905f7c99562b97d0677c39"], 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000068000100000000000000000000000000000000001c0002000000000000000000020000000000b45cbe"], 0x34}}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)=ANY=[@ANYRES32=r6, @ANYRES32=r0, @ANYBLOB="1b0000929fcc302218580300", @ANYRES32=r10, @ANYBLOB, @ANYRES64=r3], 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c010000160001000000000000000000ffffffff000000000000000000000000e00000020000000000000000000000000000000000000000000000003c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000006c000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007e00000000000000000400000000000000000000000000000000000000000000000000000000000000ff0f000000000000000000800000000000000000000000000000000000000000000000000000000100000000000000000000000032100000080022"], 0x12c}}, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xcc) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000400)={'gre0\x00', @remote}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000400)={'gre0\x00', @remote}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.114' (ED25519) to the list of known hosts. [ 70.026267][ T5820] cgroup: Unknown subsys name 'net' [ 70.151290][ T5820] cgroup: Unknown subsys name 'cpuset' [ 70.159587][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.462731][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.469274][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.476724][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.506508][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.510158][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.515389][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.528821][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.537833][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.549658][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.557597][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.565560][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.569757][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.573438][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.580605][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.595831][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.604091][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.611308][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.625827][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.634211][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.634713][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.650944][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.655097][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.658227][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.666819][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.679330][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.691390][ T5152] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.703610][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.721453][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.225888][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 76.376832][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 76.459010][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 76.567814][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.577969][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.585699][ T5832] bridge_slave_0: entered allmulticast mode [ 76.592807][ T5832] bridge_slave_0: entered promiscuous mode [ 76.602662][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.609990][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.617184][ T5832] bridge_slave_1: entered allmulticast mode [ 76.624805][ T5832] bridge_slave_1: entered promiscuous mode [ 76.698942][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 76.721803][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 76.771717][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.778981][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.786305][ T5847] bridge_slave_0: entered allmulticast mode [ 76.793526][ T5847] bridge_slave_0: entered promiscuous mode [ 76.808966][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.854433][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.861756][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.869035][ T5847] bridge_slave_1: entered allmulticast mode [ 76.876930][ T5847] bridge_slave_1: entered promiscuous mode [ 76.896504][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.981634][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.989321][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.996470][ T5830] bridge_slave_0: entered allmulticast mode [ 77.003627][ T5830] bridge_slave_0: entered promiscuous mode [ 77.043782][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.053339][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.061641][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.068986][ T5830] bridge_slave_1: entered allmulticast mode [ 77.077526][ T5830] bridge_slave_1: entered promiscuous mode [ 77.086238][ T5832] team0: Port device team_slave_0 added [ 77.108336][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.155222][ T5832] team0: Port device team_slave_1 added [ 77.197572][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.224680][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.232093][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.239852][ T5837] bridge_slave_0: entered allmulticast mode [ 77.246733][ T5837] bridge_slave_0: entered promiscuous mode [ 77.267121][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.286181][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.293411][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.300890][ T5838] bridge_slave_0: entered allmulticast mode [ 77.307805][ T5838] bridge_slave_0: entered promiscuous mode [ 77.315092][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.322437][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.329677][ T5837] bridge_slave_1: entered allmulticast mode [ 77.336558][ T5837] bridge_slave_1: entered promiscuous mode [ 77.344819][ T5847] team0: Port device team_slave_0 added [ 77.361787][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.369036][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.395536][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.407357][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.414708][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.421975][ T5838] bridge_slave_1: entered allmulticast mode [ 77.429749][ T5838] bridge_slave_1: entered promiscuous mode [ 77.456736][ T5847] team0: Port device team_slave_1 added [ 77.476646][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.484082][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.510616][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.557001][ T5830] team0: Port device team_slave_0 added [ 77.574219][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.585827][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.607625][ T5830] team0: Port device team_slave_1 added [ 77.616491][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.627861][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.637920][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.645412][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.671583][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.699041][ T5152] Bluetooth: hci1: command tx timeout [ 77.699046][ T5839] Bluetooth: hci0: command tx timeout [ 77.722280][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.729567][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.755534][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.778747][ T5152] Bluetooth: hci2: command tx timeout [ 77.778781][ T5850] Bluetooth: hci4: command tx timeout [ 77.790457][ T5839] Bluetooth: hci3: command tx timeout [ 77.823933][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.831038][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.857648][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.880387][ T5838] team0: Port device team_slave_0 added [ 77.887788][ T5837] team0: Port device team_slave_0 added [ 77.896378][ T5837] team0: Port device team_slave_1 added [ 77.902918][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.910221][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.936772][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.951710][ T5832] hsr_slave_0: entered promiscuous mode [ 77.958770][ T5832] hsr_slave_1: entered promiscuous mode [ 77.966918][ T5838] team0: Port device team_slave_1 added [ 78.024840][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.032118][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.058329][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.070704][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.077671][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.103813][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.153020][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.160075][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.186728][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.201384][ T5847] hsr_slave_0: entered promiscuous mode [ 78.207655][ T5847] hsr_slave_1: entered promiscuous mode [ 78.214155][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 78.220183][ T5847] Cannot create hsr debugfs directory [ 78.242716][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.249921][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.275955][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.329249][ T5830] hsr_slave_0: entered promiscuous mode [ 78.335533][ T5830] hsr_slave_1: entered promiscuous mode [ 78.342046][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 78.347783][ T5830] Cannot create hsr debugfs directory [ 78.408100][ T5837] hsr_slave_0: entered promiscuous mode [ 78.414436][ T5837] hsr_slave_1: entered promiscuous mode [ 78.421453][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 78.427201][ T5837] Cannot create hsr debugfs directory [ 78.541846][ T5838] hsr_slave_0: entered promiscuous mode [ 78.548075][ T5838] hsr_slave_1: entered promiscuous mode [ 78.555078][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 78.560859][ T5838] Cannot create hsr debugfs directory [ 78.959214][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.980348][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.991007][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.010349][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.053196][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.070187][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.080710][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.102844][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.160047][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.181362][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.200787][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.223532][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.321818][ T5830] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.332561][ T5830] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.347730][ T5830] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.372265][ T5830] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.487654][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.495061][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.514682][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.534187][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.547315][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.587488][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.597290][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.626169][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.633424][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.672104][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.679326][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.692315][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.701462][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.733113][ T4358] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.740313][ T4358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.778673][ T5839] Bluetooth: hci0: command tx timeout [ 79.784299][ T5850] Bluetooth: hci1: command tx timeout [ 79.794643][ T4358] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.801827][ T4358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.821905][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.861466][ T5839] Bluetooth: hci3: command tx timeout [ 79.861472][ T5152] Bluetooth: hci2: command tx timeout [ 79.868418][ T5850] Bluetooth: hci4: command tx timeout [ 79.880270][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.887370][ T3552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.907643][ T3552] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.914855][ T3552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.945804][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.991703][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.075083][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.147304][ T3965] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.154544][ T3965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.196058][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.231898][ T3552] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.239185][ T3552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.255795][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.263048][ T3552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.291461][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.298675][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.369019][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.496942][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.560528][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.586102][ T5832] veth0_vlan: entered promiscuous mode [ 80.624616][ T5832] veth1_vlan: entered promiscuous mode [ 80.727131][ T5837] veth0_vlan: entered promiscuous mode [ 80.782251][ T5847] veth0_vlan: entered promiscuous mode [ 80.802972][ T5837] veth1_vlan: entered promiscuous mode [ 80.813528][ T5832] veth0_macvtap: entered promiscuous mode [ 80.835588][ T5847] veth1_vlan: entered promiscuous mode [ 80.856886][ T5832] veth1_macvtap: entered promiscuous mode [ 80.886515][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.909073][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.943502][ T5837] veth0_macvtap: entered promiscuous mode [ 80.954521][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.991137][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.001560][ T5837] veth1_macvtap: entered promiscuous mode [ 81.014559][ T5847] veth0_macvtap: entered promiscuous mode [ 81.051044][ T1086] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.066225][ T5847] veth1_macvtap: entered promiscuous mode [ 81.083409][ T1086] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.093284][ T1086] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.111511][ T1086] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.157403][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.174969][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.213843][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.229700][ T62] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.239431][ T62] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.263408][ T62] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.285807][ T62] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.295429][ T5838] veth0_vlan: entered promiscuous mode [ 81.307312][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.361614][ T3419] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.370823][ T4572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.380602][ T1086] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.389404][ T4572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.414214][ T1086] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.423628][ T1086] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.433559][ T5838] veth1_vlan: entered promiscuous mode [ 81.489594][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.498967][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.586174][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.593184][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.624396][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.646153][ T5830] veth0_vlan: entered promiscuous mode [ 81.673355][ T5838] veth0_macvtap: entered promiscuous mode [ 81.714591][ T5838] veth1_macvtap: entered promiscuous mode [ 81.799753][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.817392][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.826111][ T5830] veth1_vlan: entered promiscuous mode [ 81.843141][ T4572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.858499][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.868791][ T5850] Bluetooth: hci1: command tx timeout [ 81.870261][ T5839] Bluetooth: hci0: command tx timeout [ 81.882955][ T4572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.905040][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.945584][ T5839] Bluetooth: hci4: command tx timeout [ 81.945611][ T5152] Bluetooth: hci3: command tx timeout [ 81.957611][ T5850] Bluetooth: hci2: command tx timeout [ 82.040191][ T5830] veth0_macvtap: entered promiscuous mode [ 82.091456][ T3802] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.159445][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.166350][ T5830] veth1_macvtap: entered promiscuous mode [ 82.173337][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.209092][ T3802] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.233124][ T3802] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.267724][ T3802] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.369749][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.412169][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.525169][ T1086] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.534763][ T5973] xt_l2tp: missing protocol rule (udp|l2tpip) [ 82.554456][ T5976] Zero length message leads to an empty skb [ 82.562972][ T1086] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.573229][ T5975] xt_l2tp: missing protocol rule (udp|l2tpip) [ 82.605817][ T1086] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.625725][ T1086] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.638480][ T5978] netlink: 54 bytes leftover after parsing attributes in process `syz.0.10'. [ 82.647579][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'. [ 82.662567][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.671607][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.828855][ T3552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.862523][ T3552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.881142][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.935653][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.074678][ T1329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.121491][ T1329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.328355][ T6001] syz.1.17 uses obsolete (PF_INET,SOCK_PACKET) [ 83.408921][ T6008] IPVS: set_ctl: invalid protocol: 22 224.0.0.1:20002 [ 83.432415][ T6011] netlink: 100 bytes leftover after parsing attributes in process `syz.3.20'. [ 83.489277][ T6012] xt_hashlimit: overflow, rate too high: 0 [ 83.730057][ T6025] IPVS: set_ctl: invalid protocol: 135 172.30.1.3:20003 [ 83.749866][ T6025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22'. [ 83.829312][ T6031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24'. [ 83.939406][ T5850] Bluetooth: hci1: command tx timeout [ 83.945303][ T5152] Bluetooth: hci0: command tx timeout [ 84.020274][ T5850] Bluetooth: hci3: command tx timeout [ 84.020285][ T5839] Bluetooth: hci2: command tx timeout [ 84.031325][ T5152] Bluetooth: hci4: command tx timeout [ 84.137692][ T6048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28'. [ 84.162524][ T6048] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 84.281943][ T6052] sctp: [Deprecated]: syz.2.29 (pid 6052) Use of int in max_burst socket option. [ 84.281943][ T6052] Use struct sctp_assoc_value instead [ 84.398420][ T6056] netlink: 16 bytes leftover after parsing attributes in process `syz.4.32'. [ 84.415803][ T6056] netlink: 32 bytes leftover after parsing attributes in process `syz.4.32'. [ 84.436324][ T6056] gretap1: entered promiscuous mode [ 84.443967][ T6056] gretap1: entered allmulticast mode [ 84.541759][ T6063] netlink: 104 bytes leftover after parsing attributes in process `syz.2.34'. [ 84.732533][ T6072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.36'. [ 84.759741][ T6072] tc_dump_action: action bad kind [ 85.509787][ T6105] warning: `syz.0.45' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.571114][ T6111] netlink: 'syz.4.46': attribute type 1 has an invalid length. [ 85.590845][ T6111] nbd: error processing sock list [ 85.605729][ T6111] block nbd0: shutting down sockets [ 85.693602][ T6109] bond1: option lp_interval: invalid value (0) [ 85.717700][ T6109] bond1: option lp_interval: allowed values 1 - 2147483647 [ 85.760700][ T6109] bond1 (unregistering): Released all slaves [ 85.826048][ T6129] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.343712][ T6151] netlink: 'syz.0.62': attribute type 11 has an invalid length. [ 86.362373][ T6151] netlink: 'syz.0.62': attribute type 4 has an invalid length. [ 86.369520][ T6154] openvswitch: netlink: Flow key attr not present in new flow. [ 86.823063][ T10] cfg80211: failed to load regulatory.db [ 87.142926][ T6197] netlink: 'syz.1.75': attribute type 3 has an invalid length. [ 87.172693][ T6201] netlink: 'syz.2.74': attribute type 13 has an invalid length. [ 87.181533][ T6201] netlink: 'syz.2.74': attribute type 17 has an invalid length. [ 87.374202][ T6201] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 87.744938][ T6225] __nla_validate_parse: 73 callbacks suppressed [ 87.744955][ T6225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.84'. [ 87.787549][ T6228] netlink: 12 bytes leftover after parsing attributes in process `syz.0.84'. [ 87.833048][ T6230] syzkaller0: entered promiscuous mode [ 87.859061][ T6230] syzkaller0: entered allmulticast mode [ 87.902951][ T6230] 0: reclassify loop, rule prio 0, protocol 800 [ 88.000389][ T6237] netlink: 'syz.3.87': attribute type 1 has an invalid length. [ 88.008028][ T6237] netlink: 228 bytes leftover after parsing attributes in process `syz.3.87'. [ 88.038331][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.87'. [ 88.093589][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.87'. [ 88.151119][ T6245] batman_adv: batadv0: Adding interface: dummy0 [ 88.161037][ T6245] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.192948][ T6245] batman_adv: batadv0: Interface activated: dummy0 [ 88.226021][ T6241] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96 [ 88.237269][ T6248] syzkaller0: entered promiscuous mode [ 88.242980][ T6248] syzkaller0: entered allmulticast mode [ 88.245554][ T6241] netlink: 112 bytes leftover after parsing attributes in process `syz.2.90'. [ 88.480592][ T6255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.95'. [ 88.513204][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.96'. [ 88.527609][ T6259] netlink: 'syz.4.98': attribute type 18 has an invalid length. [ 88.565289][ T6262] tipc: Can't bind to reserved service type 2 [ 88.742316][ T6273] netlink: 'syz.0.102': attribute type 1 has an invalid length. [ 88.986687][ T6287] veth1_macvtap: left promiscuous mode [ 89.016855][ T6287] macsec0: entered promiscuous mode [ 89.039490][ T6287] macsec0: entered allmulticast mode [ 89.403340][ T6309] netlink: 'syz.0.113': attribute type 1 has an invalid length. [ 89.453687][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.114'. [ 89.505388][ T6318] netlink: 512 bytes leftover after parsing attributes in process `syz.2.114'. [ 89.659868][ T6309] veth3: entered promiscuous mode [ 89.805534][ T6325] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 91.072536][ T6337] x_tables: duplicate underflow at hook 2 [ 91.678600][ T6363] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.730668][ T6361] vlan2: entered promiscuous mode [ 91.736064][ T6361] vlan2: entered allmulticast mode [ 91.742205][ T6361] hsr_slave_1: entered allmulticast mode [ 91.776588][ T6361] netlink: 'syz.3.130': attribute type 24 has an invalid length. [ 92.679148][ T6417] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 92.741324][ T6417] netlink: 'syz.0.148': attribute type 7 has an invalid length. [ 92.762930][ T6422] netlink: 'syz.2.150': attribute type 1 has an invalid length. [ 92.772150][ T6417] netlink: 'syz.0.148': attribute type 8 has an invalid length. [ 92.785257][ T6422] __nla_validate_parse: 8 callbacks suppressed [ 92.785273][ T6422] netlink: 224 bytes leftover after parsing attributes in process `syz.2.150'. [ 92.805144][ T6417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.148'. [ 93.258617][ T6440] v: renamed from nlmon0 [ 93.337892][ T6451] 8021q: VLANs not supported on ip_vti0 [ 93.353152][ T6451] netlink: 40 bytes leftover after parsing attributes in process `syz.0.158'. [ 93.598079][ T6467] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 93.625938][ T5951] IPVS: starting estimator thread 0... [ 93.641550][ T6475] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.164'. [ 93.671825][ T6475] netlink: 'syz.0.164': attribute type 10 has an invalid length. [ 93.691900][ T6475] netlink: 40 bytes leftover after parsing attributes in process `syz.0.164'. [ 93.738327][ T6476] IPVS: using max 31 ests per chain, 74400 per kthread [ 93.788639][ T6475] team0: Port device geneve0 added [ 93.924235][ T6483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.167'. [ 93.985746][ T6483] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 94.151519][ T6487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.169'. [ 94.199568][ T6495] netlink: 216 bytes leftover after parsing attributes in process `syz.0.170'. [ 94.203794][ T6496] netlink: 'syz.4.169': attribute type 8 has an invalid length. [ 94.210690][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'. [ 94.217444][ T6488] netlink: 'syz.4.169': attribute type 8 has an invalid length. [ 94.283436][ T6494] netlink: 12 bytes leftover after parsing attributes in process `syz.3.171'. [ 94.413607][ T6500] tipc: Started in network mode [ 94.420273][ T6500] tipc: Node identity 1, cluster identity 4711 [ 94.427999][ T6500] tipc: Node number set to 1 [ 94.502664][ T6503] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 94.596408][ T6512] x_tables: duplicate underflow at hook 2 [ 94.889724][ T6532] netlink: 'syz.4.182': attribute type 1 has an invalid length. [ 94.985185][ T6532] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.334889][ T6554] sctp: [Deprecated]: syz.2.188 (pid 6554) Use of int in max_burst socket option deprecated. [ 95.334889][ T6554] Use struct sctp_assoc_value instead [ 95.410834][ T6561] xt_TCPMSS: Only works on TCP SYN packets [ 95.568970][ T6569] netlink: 'syz.1.192': attribute type 1 has an invalid length. [ 95.697778][ T6576] netlink: 'syz.2.194': attribute type 1 has an invalid length. [ 95.743892][ T6578] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 95.760588][ T6578] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 95.770588][ T6578] team0: Failed to send options change via netlink (err -105) [ 95.782710][ T6578] team0: Port device batadv1 added [ 95.817054][ T6586] block nbd0: Unsupported socket: should be TCP or UNIX. [ 96.220555][ T6576] bond1 (unregistering): Released all slaves [ 96.300346][ T6603] ip6tnl1: entered promiscuous mode [ 96.339444][ T6603] ip6tnl1: entered allmulticast mode [ 97.414752][ T6671] netlink: 'syz.3.219': attribute type 11 has an invalid length. [ 97.435672][ T6671] netlink: 'syz.3.219': attribute type 4 has an invalid length. [ 97.454443][ T6671] netlink: 'syz.3.219': attribute type 5 has an invalid length. [ 97.465551][ T6671] netlink: 'syz.3.219': attribute type 6 has an invalid length. [ 97.731555][ T6686] veth5: entered promiscuous mode [ 97.736645][ T6686] veth5: entered allmulticast mode [ 98.166995][ T6722] __nla_validate_parse: 10 callbacks suppressed [ 98.167013][ T6722] netlink: 16 bytes leftover after parsing attributes in process `syz.0.231'. [ 98.236417][ T6722] netlink: 240 bytes leftover after parsing attributes in process `syz.0.231'. [ 98.425824][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.239'. [ 98.535277][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.241'. [ 98.602942][ T6741] netlink: 72 bytes leftover after parsing attributes in process `syz.4.240'. [ 98.631651][ T6746] netlink: 24 bytes leftover after parsing attributes in process `syz.0.242'. [ 98.740272][ T6749] netlink: 16 bytes leftover after parsing attributes in process `syz.0.242'. [ 98.815401][ T6750] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 98.831784][ T6750] bond1 (unregistering): Released all slaves [ 98.863687][ T6749] netlink: 32 bytes leftover after parsing attributes in process `syz.0.242'. [ 98.886848][ T6749] netlink: 4728 bytes leftover after parsing attributes in process `syz.0.242'. [ 99.121610][ T6764] syzkaller1: entered promiscuous mode [ 99.135284][ T6764] syzkaller1: entered allmulticast mode [ 99.299151][ T6776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.251'. [ 99.713615][ T6796] netlink: 'syz.3.256': attribute type 1 has an invalid length. [ 99.856950][ T6800] netlink: 'syz.2.259': attribute type 1 has an invalid length. [ 99.910734][ T6800] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.940385][ T6805] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 99.966581][ T6808] netlink: 'syz.4.260': attribute type 10 has an invalid length. [ 99.988438][ T6806] netlink: 'syz.4.260': attribute type 10 has an invalid length. [ 100.012302][ T6808] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.022605][ T6808] bridge_slave_1: left allmulticast mode [ 100.029681][ T6808] bridge_slave_1: left promiscuous mode [ 100.036706][ T6808] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.050618][ T6818] netlink: 'syz.3.263': attribute type 1 has an invalid length. [ 100.062756][ T6808] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 100.192232][ T6828] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 100.622174][ T6853] ipip0: entered promiscuous mode [ 100.634383][ T6853] ipip0: entered allmulticast mode [ 100.850319][ T6861] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 100.884453][ T6865] netlink: 'syz.4.279': attribute type 20 has an invalid length. [ 100.953381][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.988413][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.020517][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.040280][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.727241][ T6870] infiniband sy: set active [ 101.743952][ T6870] infiniband sy: added bond_slave_0 [ 101.862751][ T6870] RDS/IB: sy: added [ 101.879540][ T6870] smc: adding ib device sy with port count 1 [ 101.885999][ T6870] smc: ib device sy port 1 has no pnetid [ 102.141181][ T6913] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 102.497218][ T6930] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.845282][ T6944] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 102.921113][ T6947] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 103.464645][ T6965] __nla_validate_parse: 10 callbacks suppressed [ 103.464663][ T6965] netlink: 32 bytes leftover after parsing attributes in process `syz.2.308'. [ 103.750717][ T6982] netlink: 24 bytes leftover after parsing attributes in process `syz.4.312'. [ 104.326729][ T7007] netlink: 'syz.3.321': attribute type 4 has an invalid length. [ 104.391648][ T7009] x_tables: duplicate entry at hook 2 [ 104.519193][ T7017] netlink: 44 bytes leftover after parsing attributes in process `syz.1.322'. [ 104.861327][ T7033] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.017055][ T7038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.370678][ T7061] netlink: 'syz.3.337': attribute type 2 has an invalid length. [ 105.384977][ T7061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.337'. [ 105.443879][ T7015] lo speed is unknown, defaulting to 1000 [ 105.468356][ T7015] lo speed is unknown, defaulting to 1000 [ 105.484150][ T7015] lo speed is unknown, defaulting to 1000 [ 105.554957][ T7015] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 105.632325][ T7015] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 105.656591][ T7071] : renamed from bond0 (while UP) [ 105.695464][ T7065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.739417][ T7077] syzkaller0: entered promiscuous mode [ 105.759545][ T7077] syzkaller0: entered allmulticast mode [ 105.789182][ T7015] lo speed is unknown, defaulting to 1000 [ 105.826876][ T7071] dvmrp0: entered allmulticast mode [ 105.878766][ T7015] lo speed is unknown, defaulting to 1000 [ 105.878826][ T7069] tipc: Started in network mode [ 105.904704][ T7069] tipc: Node identity 0e2c593caa19, cluster identity 4711 [ 105.929103][ T7069] tipc: Enabled bearer , priority 0 [ 105.947516][ T7015] lo speed is unknown, defaulting to 1000 [ 105.948364][ T7081] xt_TCPMSS: Only works on TCP SYN packets [ 105.991473][ T7015] lo speed is unknown, defaulting to 1000 [ 106.067038][ T7015] lo speed is unknown, defaulting to 1000 [ 106.135112][ T7067] tipc: Resetting bearer [ 106.206734][ T7067] tipc: Disabling bearer [ 106.256061][ T7093] netlink: 'syz.2.343': attribute type 1 has an invalid length. [ 106.281730][ T7099] netlink: 'syz.1.346': attribute type 1 has an invalid length. [ 106.289622][ T7099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.346'. [ 106.418398][ T7103] netlink: 12 bytes leftover after parsing attributes in process `syz.4.349'. [ 106.638426][ T7117] netlink: 'syz.2.353': attribute type 1 has an invalid length. [ 106.716451][ T7117] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 106.759149][ T7120] netlink: 'syz.1.354': attribute type 1 has an invalid length. [ 106.772366][ T7117] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 106.795524][ T7125] netlink: 28 bytes leftover after parsing attributes in process `syz.2.353'. [ 106.809639][ T7117] bond0: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 106.819243][ T7131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.358'. [ 106.840798][ T7133] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.357'. [ 106.859260][ T7128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.357'. [ 106.897600][ T7120] 8021q: adding VLAN 0 to HW filter on device bond2 [ 106.927778][ T7131] vxcan2: entered allmulticast mode [ 107.010540][ T7134] bond2: (slave geneve2): making interface the new active one [ 107.052245][ T7134] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 107.077077][ T7138] veth3: entered promiscuous mode [ 107.085018][ T7138] bond2: (slave veth3): Enslaving as an active interface with a down link [ 107.106053][ T7120] vlan2: entered allmulticast mode [ 107.111641][ T7120] bond2: entered allmulticast mode [ 107.118030][ T7120] geneve2: entered allmulticast mode [ 107.123716][ T7150] netlink: 'syz.4.361': attribute type 11 has an invalid length. [ 107.130321][ T7120] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 107.132838][ T7150] netlink: 'syz.4.361': attribute type 11 has an invalid length. [ 107.834333][ T7179] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21 [ 107.910240][ T7176] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 107.936788][ T7142] lo speed is unknown, defaulting to 1000 [ 108.005857][ T7190] bridge_slave_0: left allmulticast mode [ 108.027632][ T7190] bridge_slave_0: left promiscuous mode [ 108.040386][ T7190] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.054915][ T7190] bridge_slave_1: left allmulticast mode [ 108.060843][ T7190] bridge_slave_1: left promiscuous mode [ 108.067617][ T7190] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.081848][ T7190] : (slave bond_slave_0): Releasing backup interface [ 108.091740][ T7190] : (slave bond_slave_1): Releasing backup interface [ 108.105845][ T7190] team0: Port device team_slave_0 removed [ 108.117299][ T7190] team0: Port device team_slave_1 removed [ 108.124099][ T7190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.133035][ T7190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.142803][ T7190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.151610][ T7190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.161812][ T7190] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 108.582996][ T7219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.880789][ T7233] tipc: Enabling of bearer rejected, failed to enable media [ 109.306776][ T7256] FAULT_INJECTION: forcing a failure. [ 109.306776][ T7256] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 109.338314][ T7256] CPU: 1 UID: 0 PID: 7256 Comm: syz.2.388 Not tainted syzkaller #0 PREEMPT(full) [ 109.338339][ T7256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 109.338356][ T7256] Call Trace: [ 109.338363][ T7256] [ 109.338371][ T7256] dump_stack_lvl+0xe8/0x150 [ 109.338405][ T7256] should_fail_ex+0x414/0x560 [ 109.338443][ T7256] _copy_from_user+0x2d/0xb0 [ 109.338464][ T7256] ___sys_sendmsg+0x158/0x2a0 [ 109.338488][ T7256] ? __pfx____sys_sendmsg+0x10/0x10 [ 109.338539][ T7256] ? __fget_files+0x2a/0x420 [ 109.338558][ T7256] ? __fget_files+0x3a0/0x420 [ 109.338587][ T7256] __x64_sys_sendmsg+0x19b/0x260 [ 109.338610][ T7256] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 109.338638][ T7256] ? __pfx_ksys_write+0x10/0x10 [ 109.338664][ T7256] do_syscall_64+0xec/0xf80 [ 109.338682][ T7256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.338697][ T7256] ? trace_irq_disable+0x37/0x100 [ 109.338717][ T7256] ? clear_bhb_loop+0x60/0xb0 [ 109.338737][ T7256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.338753][ T7256] RIP: 0033:0x7fe1b898f749 [ 109.338774][ T7256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.338787][ T7256] RSP: 002b:00007fe1b9860038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.338806][ T7256] RAX: ffffffffffffffda RBX: 00007fe1b8be5fa0 RCX: 00007fe1b898f749 [ 109.338819][ T7256] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 109.338829][ T7256] RBP: 00007fe1b9860090 R08: 0000000000000000 R09: 0000000000000000 [ 109.338839][ T7256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.338849][ T7256] R13: 00007fe1b8be6038 R14: 00007fe1b8be5fa0 R15: 00007ffe1e8b0928 [ 109.338873][ T7256] [ 109.678394][ T5850] block nbd0: Receive control failed (result -32) [ 109.751624][ T7260] __nla_validate_parse: 4 callbacks suppressed [ 109.751651][ T7260] netlink: 28 bytes leftover after parsing attributes in process `syz.2.390'. [ 109.823658][ T7267] netlink: 104 bytes leftover after parsing attributes in process `syz.4.393'. [ 109.951079][ T7270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.392'. [ 109.983030][ T7273] sctp: [Deprecated]: syz.0.394 (pid 7273) Use of int in max_burst socket option deprecated. [ 109.983030][ T7273] Use struct sctp_assoc_value instead [ 110.115988][ T7277] netlink: 'syz.2.395': attribute type 11 has an invalid length. [ 110.156014][ T7280] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 110.409004][ T7293] trusted_key: syz.4.400 sent an empty control message without MSG_MORE. [ 110.469274][ T7293] netlink: 20 bytes leftover after parsing attributes in process `syz.4.400'. [ 110.672019][ T7310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.407'. [ 110.721759][ T7310] openvswitch: netlink: Unknown nsh attribute 0 [ 110.902406][ T7325] netlink: 244 bytes leftover after parsing attributes in process `syz.1.410'. [ 110.935836][ T7328] Unknown status report in ack skb [ 111.123181][ T7337] netlink: 96 bytes leftover after parsing attributes in process `syz.0.415'. [ 111.206488][ T7337] 8021q: VLANs not supported on ip_vti0 [ 111.262749][ T5202] udevd[5202]: worker [5831] terminated by signal 33 (Unknown signal 33) [ 111.530957][ T7362] x_tables: duplicate entry at hook 1 [ 111.597367][ T7366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.423'. [ 111.704687][ T7362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.423'. [ 111.716370][ T7362] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 111.803989][ T7380] ip6gre1: entered promiscuous mode [ 111.819792][ T7380] ip6gre1: entered allmulticast mode [ 111.979306][ T7391] netlink: 24 bytes leftover after parsing attributes in process `syz.4.432'. [ 112.138573][ T7402] netlink: 'syz.1.436': attribute type 3 has an invalid length. [ 112.257610][ T7414] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 112.257665][ T7411] x_tables: duplicate underflow at hook 2 [ 112.293924][ T7415] netlink: 'syz.1.440': attribute type 29 has an invalid length. [ 112.302279][ T7413] netlink: 'syz.1.440': attribute type 29 has an invalid length. [ 112.350015][ T7420] FAULT_INJECTION: forcing a failure. [ 112.350015][ T7420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.377207][ T7420] CPU: 0 UID: 0 PID: 7420 Comm: syz.2.442 Not tainted syzkaller #0 PREEMPT(full) [ 112.377233][ T7420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 112.377244][ T7420] Call Trace: [ 112.377250][ T7420] [ 112.377258][ T7420] dump_stack_lvl+0xe8/0x150 [ 112.377286][ T7420] should_fail_ex+0x414/0x560 [ 112.377321][ T7420] _copy_from_iter+0x1cd/0x1630 [ 112.377352][ T7420] ? __pfx__copy_from_iter+0x10/0x10 [ 112.377371][ T7420] ? __build_skb_around+0x22d/0x3c0 [ 112.377392][ T7420] ? __alloc_skb+0x198/0x3a0 [ 112.377409][ T7420] ? netlink_sendmsg+0x642/0xb30 [ 112.377429][ T7420] ? skb_put+0x11b/0x210 [ 112.377451][ T7420] netlink_sendmsg+0x6b2/0xb30 [ 112.377481][ T7420] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.377506][ T7420] ? aa_sock_msg_perm+0xf1/0x1b0 [ 112.377529][ T7420] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 112.377545][ T7420] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.377567][ T7420] __sock_sendmsg+0x21c/0x270 [ 112.377595][ T7420] ____sys_sendmsg+0x505/0x820 [ 112.377621][ T7420] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.377650][ T7420] ? import_iovec+0x74/0xa0 [ 112.377673][ T7420] ___sys_sendmsg+0x21f/0x2a0 [ 112.377696][ T7420] ? __pfx____sys_sendmsg+0x10/0x10 [ 112.377750][ T7420] ? __fget_files+0x2a/0x420 [ 112.377769][ T7420] ? __fget_files+0x3a0/0x420 [ 112.377795][ T7420] __x64_sys_sendmsg+0x19b/0x260 [ 112.377816][ T7420] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 112.377840][ T7420] ? __pfx_ksys_write+0x10/0x10 [ 112.377866][ T7420] do_syscall_64+0xec/0xf80 [ 112.377881][ T7420] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.377894][ T7420] ? trace_irq_disable+0x37/0x100 [ 112.377912][ T7420] ? clear_bhb_loop+0x60/0xb0 [ 112.377930][ T7420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.377946][ T7420] RIP: 0033:0x7fe1b898f749 [ 112.377959][ T7420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.377971][ T7420] RSP: 002b:00007fe1b9860038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.377988][ T7420] RAX: ffffffffffffffda RBX: 00007fe1b8be5fa0 RCX: 00007fe1b898f749 [ 112.377998][ T7420] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 112.378007][ T7420] RBP: 00007fe1b9860090 R08: 0000000000000000 R09: 0000000000000000 [ 112.378016][ T7420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.378025][ T7420] R13: 00007fe1b8be6038 R14: 00007fe1b8be5fa0 R15: 00007ffe1e8b0928 [ 112.378048][ T7420] [ 112.723712][ T7435] syzkaller0: entered promiscuous mode [ 112.744639][ T7435] syzkaller0: entered allmulticast mode [ 112.866002][ T7435] hsr_slave_0: left promiscuous mode [ 112.963456][ T7450] gre0: entered promiscuous mode [ 113.003912][ T7452] syz_tun: entered promiscuous mode [ 113.036757][ T7452] batadv_slave_1: entered promiscuous mode [ 113.051471][ T7452] batadv_slave_1: left promiscuous mode [ 113.070341][ T7452] syz_tun: left promiscuous mode [ 113.295083][ T7467] netlink: 'syz.0.455': attribute type 11 has an invalid length. [ 113.301189][ T7475] FAULT_INJECTION: forcing a failure. [ 113.301189][ T7475] name failslab, interval 1, probability 0, space 0, times 1 [ 113.317550][ T7475] CPU: 1 UID: 0 PID: 7475 Comm: syz.4.458 Not tainted syzkaller #0 PREEMPT(full) [ 113.317576][ T7475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 113.317586][ T7475] Call Trace: [ 113.317593][ T7475] [ 113.317601][ T7475] dump_stack_lvl+0xe8/0x150 [ 113.317628][ T7475] should_fail_ex+0x414/0x560 [ 113.317657][ T7475] should_failslab+0xa8/0x100 [ 113.317678][ T7475] kmem_cache_alloc_noprof+0x88/0x710 [ 113.317698][ T7475] ? __netlink_lookup+0xbd/0x8a0 [ 113.317717][ T7475] ? skb_clone+0x212/0x3a0 [ 113.317741][ T7475] skb_clone+0x212/0x3a0 [ 113.317765][ T7475] __netlink_deliver_tap+0x404/0x850 [ 113.317796][ T7475] ? netlink_deliver_tap+0x2e/0x1b0 [ 113.317817][ T7475] netlink_deliver_tap+0x19c/0x1b0 [ 113.317838][ T7475] netlink_unicast+0x7fa/0x9e0 [ 113.317866][ T7475] ? __pfx_netlink_unicast+0x10/0x10 [ 113.317884][ T7475] ? __alloc_skb+0x198/0x3a0 [ 113.317900][ T7475] ? netlink_sendmsg+0x642/0xb30 [ 113.317919][ T7475] ? skb_put+0x11b/0x210 [ 113.317942][ T7475] netlink_sendmsg+0x805/0xb30 [ 113.317971][ T7475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.317994][ T7475] ? aa_sock_msg_perm+0xf1/0x1b0 [ 113.318017][ T7475] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 113.318034][ T7475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.318055][ T7475] __sock_sendmsg+0x21c/0x270 [ 113.318091][ T7475] ____sys_sendmsg+0x505/0x820 [ 113.318117][ T7475] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.318145][ T7475] ? import_iovec+0x74/0xa0 [ 113.318170][ T7475] ___sys_sendmsg+0x21f/0x2a0 [ 113.318190][ T7475] ? __pfx____sys_sendmsg+0x10/0x10 [ 113.318241][ T7475] ? __fget_files+0x2a/0x420 [ 113.318260][ T7475] ? __fget_files+0x3a0/0x420 [ 113.318289][ T7475] __x64_sys_sendmsg+0x19b/0x260 [ 113.318310][ T7475] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 113.318338][ T7475] ? __pfx_ksys_write+0x10/0x10 [ 113.318365][ T7475] do_syscall_64+0xec/0xf80 [ 113.318383][ T7475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.318398][ T7475] ? trace_irq_disable+0x37/0x100 [ 113.318418][ T7475] ? clear_bhb_loop+0x60/0xb0 [ 113.318439][ T7475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.318456][ T7475] RIP: 0033:0x7fd32c18f749 [ 113.318472][ T7475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.318486][ T7475] RSP: 002b:00007fd32a3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.318505][ T7475] RAX: ffffffffffffffda RBX: 00007fd32c3e5fa0 RCX: 00007fd32c18f749 [ 113.318518][ T7475] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 113.318529][ T7475] RBP: 00007fd32a3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 113.318539][ T7475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.318549][ T7475] R13: 00007fd32c3e6038 R14: 00007fd32c3e5fa0 R15: 00007ffdcd4d8e98 [ 113.318580][ T7475] [ 113.382915][ T7472] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 113.849244][ T7504] netlink: 'syz.1.464': attribute type 1 has an invalid length. [ 113.872574][ T7504] netlink: 'syz.1.464': attribute type 2 has an invalid length. [ 114.088885][ T7526] FAULT_INJECTION: forcing a failure. [ 114.088885][ T7526] name failslab, interval 1, probability 0, space 0, times 0 [ 114.103351][ T7526] CPU: 0 UID: 0 PID: 7526 Comm: syz.0.472 Not tainted syzkaller #0 PREEMPT(full) [ 114.103376][ T7526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 114.103387][ T7526] Call Trace: [ 114.103394][ T7526] [ 114.103401][ T7526] dump_stack_lvl+0xe8/0x150 [ 114.103427][ T7526] should_fail_ex+0x414/0x560 [ 114.103454][ T7526] should_failslab+0xa8/0x100 [ 114.103474][ T7526] __kmalloc_cache_noprof+0x84/0x700 [ 114.103489][ T7526] ? __pfx_stack_trace_save+0x10/0x10 [ 114.103511][ T7526] ? rtnl_newlink+0xfb/0x1c90 [ 114.103534][ T7526] rtnl_newlink+0xfb/0x1c90 [ 114.103552][ T7526] ? kasan_save_track+0x4f/0x80 [ 114.103567][ T7526] ? kasan_save_track+0x3e/0x80 [ 114.103582][ T7526] ? kasan_save_free_info+0x46/0x50 [ 114.103601][ T7526] ? __kasan_slab_free+0x5c/0x80 [ 114.103615][ T7526] ? kmem_cache_free+0x197/0x620 [ 114.103629][ T7526] ? nlmon_xmit+0xb0/0x100 [ 114.103646][ T7526] ? dev_hard_start_xmit+0x2cd/0x800 [ 114.103665][ T7526] ? __dev_queue_xmit+0x144f/0x3100 [ 114.103684][ T7526] ? __netlink_deliver_tap+0x5ad/0x850 [ 114.103702][ T7526] ? netlink_deliver_tap+0x19c/0x1b0 [ 114.103720][ T7526] ? netlink_unicast+0x7fa/0x9e0 [ 114.103737][ T7526] ? netlink_sendmsg+0x805/0xb30 [ 114.103758][ T7526] ? __pfx_rtnl_newlink+0x10/0x10 [ 114.103774][ T7526] ? do_syscall_64+0xec/0xf80 [ 114.103792][ T7526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.103842][ T7526] ? kasan_quarantine_put+0xbb/0x1f0 [ 114.103858][ T7526] ? lockdep_hardirqs_on+0x7b/0x110 [ 114.103880][ T7526] ? kmem_cache_free+0x197/0x620 [ 114.103896][ T7526] ? nlmon_xmit+0xb0/0x100 [ 114.103925][ T7526] ? __lock_acquire+0x6b6/0x2cf0 [ 114.103950][ T7526] ? __local_bh_enable_ip+0xd0/0x130 [ 114.103967][ T7526] ? lockdep_hardirqs_on+0x7b/0x110 [ 114.103983][ T7526] ? __dev_queue_xmit+0x280/0x3100 [ 114.104001][ T7526] ? __local_bh_enable_ip+0xd0/0x130 [ 114.104024][ T7526] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 114.104054][ T7526] ? __pfx_rtnl_newlink+0x10/0x10 [ 114.104071][ T7526] rtnetlink_rcv_msg+0x7cf/0xb70 [ 114.104092][ T7526] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 114.104110][ T7526] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 114.104127][ T7526] ? ref_tracker_free+0x63a/0x7d0 [ 114.104145][ T7526] ? __asan_memcpy+0x40/0x70 [ 114.104167][ T7526] ? __pfx_ref_tracker_free+0x10/0x10 [ 114.104194][ T7526] netlink_rcv_skb+0x208/0x470 [ 114.104216][ T7526] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 114.104237][ T7526] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 114.104277][ T7526] ? netlink_deliver_tap+0x2e/0x1b0 [ 114.104306][ T7526] netlink_unicast+0x82f/0x9e0 [ 114.104338][ T7526] ? __pfx_netlink_unicast+0x10/0x10 [ 114.104356][ T7526] ? __alloc_skb+0x198/0x3a0 [ 114.104375][ T7526] ? netlink_sendmsg+0x642/0xb30 [ 114.104394][ T7526] ? skb_put+0x11b/0x210 [ 114.104416][ T7526] netlink_sendmsg+0x805/0xb30 [ 114.104446][ T7526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.104470][ T7526] ? aa_sock_msg_perm+0xf1/0x1b0 [ 114.104493][ T7526] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 114.104509][ T7526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.104531][ T7526] __sock_sendmsg+0x21c/0x270 [ 114.104558][ T7526] ____sys_sendmsg+0x505/0x820 [ 114.104583][ T7526] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.104612][ T7526] ? import_iovec+0x74/0xa0 [ 114.104635][ T7526] ___sys_sendmsg+0x21f/0x2a0 [ 114.104658][ T7526] ? __pfx____sys_sendmsg+0x10/0x10 [ 114.104711][ T7526] ? __fget_files+0x2a/0x420 [ 114.104731][ T7526] ? __fget_files+0x3a0/0x420 [ 114.104761][ T7526] __x64_sys_sendmsg+0x19b/0x260 [ 114.104784][ T7526] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 114.104813][ T7526] ? __pfx_ksys_write+0x10/0x10 [ 114.104841][ T7526] do_syscall_64+0xec/0xf80 [ 114.104857][ T7526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.104872][ T7526] ? trace_irq_disable+0x37/0x100 [ 114.104891][ T7526] ? clear_bhb_loop+0x60/0xb0 [ 114.104910][ T7526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.104926][ T7526] RIP: 0033:0x7f7464d8f749 [ 114.104943][ T7526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.104956][ T7526] RSP: 002b:00007f7465ba6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.104975][ T7526] RAX: ffffffffffffffda RBX: 00007f7464fe5fa0 RCX: 00007f7464d8f749 [ 114.104988][ T7526] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 114.104998][ T7526] RBP: 00007f7465ba6090 R08: 0000000000000000 R09: 0000000000000000 [ 114.105008][ T7526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.105018][ T7526] R13: 00007f7464fe6038 R14: 00007f7464fe5fa0 R15: 00007ffd12de4dc8 [ 114.105044][ T7526] [ 114.183098][ T7530] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.317038][ T7535] netlink: 'syz.1.476': attribute type 39 has an invalid length. [ 114.918036][ T7559] netlink: 'syz.3.481': attribute type 9 has an invalid length. [ 115.137449][ T7575] __nla_validate_parse: 19 callbacks suppressed [ 115.137468][ T7575] netlink: 48 bytes leftover after parsing attributes in process `syz.4.484'. [ 115.188734][ T7582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.486'. [ 115.231873][ T7582] bridge_slave_1: left allmulticast mode [ 115.232448][ T7584] netlink: zone id is out of range [ 115.246744][ T7584] netlink: zone id is out of range [ 115.258994][ T7584] netlink: zone id is out of range [ 115.259471][ T7582] bridge_slave_1: left promiscuous mode [ 115.269837][ T7584] netlink: zone id is out of range [ 115.280625][ T7584] netlink: zone id is out of range [ 115.291528][ T7582] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.301501][ T7584] netlink: del zone limit has 4 unknown bytes [ 115.312095][ T7582] bridge_slave_0: left allmulticast mode [ 115.328482][ T7582] bridge_slave_0: left promiscuous mode [ 115.334463][ T7582] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.425988][ T7589] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 115.477126][ T7601] xt_hashlimit: size too large, truncated to 1048576 [ 115.579957][ T7604] netlink: 'syz.4.492': attribute type 20 has an invalid length. [ 115.588266][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.492'. [ 115.597346][ T7604] netlink: 'syz.4.492': attribute type 20 has an invalid length. [ 115.610629][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.492'. [ 115.872709][ T7626] sctp: [Deprecated]: syz.3.495 (pid 7626) Use of struct sctp_assoc_value in delayed_ack socket option. [ 115.872709][ T7626] Use struct sctp_sack_info instead [ 115.908723][ T7625] veth0: entered promiscuous mode [ 115.960505][ T7622] veth0: left promiscuous mode [ 116.008314][ T7633] openvswitch: netlink: IPv6 tunnel dst address is zero [ 116.100090][ T7639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.160439][ T7639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.177778][ T7644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.500'. [ 116.214091][ T7644] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.500'. [ 116.415272][ T7662] bond2: entered allmulticast mode [ 116.422990][ T7662] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.448077][ T7665] netlink: 244 bytes leftover after parsing attributes in process `syz.3.505'. [ 116.465218][ T7659] bond3: entered allmulticast mode [ 116.471101][ T7659] 8021q: adding VLAN 0 to HW filter on device bond3 [ 116.702018][ T7684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.510'. [ 116.717511][ T7684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.510'. [ 116.790954][ T7687] netlink: 12 bytes leftover after parsing attributes in process `syz.3.513'. [ 116.811831][ T30] audit: type=1107 audit(1768703789.392:2): pid=7688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 117.344208][ T7703] xt_CONNSECMARK: invalid mode: 0 [ 117.351664][ T7700] sctp: [Deprecated]: syz.2.518 (pid 7700) Use of int in max_burst socket option. [ 117.351664][ T7700] Use struct sctp_assoc_value instead [ 117.702192][ T7725] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.793006][ T7733] ip6t_srh: unknown srh match flags 5F28 [ 117.964322][ T7744] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 118.061496][ T7734] bond1: entered promiscuous mode [ 118.066936][ T7734] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.128039][ T7743] bond1: (slave xfrm1): refused to change device type [ 118.191808][ T7748] block nbd1: Unsupported socket: should be TCP or UNIX. [ 118.251853][ T7748] sctp: Trying to GSO but underlying device doesn't support it. [ 118.293484][ T7754] veth5: entered promiscuous mode [ 118.308060][ T7754] veth5: entered allmulticast mode [ 118.527605][ T7773] validate_nla: 3 callbacks suppressed [ 118.527624][ T7773] netlink: 'syz.4.540': attribute type 9 has an invalid length. [ 118.578623][ T7776] netlink: 'syz.4.540': attribute type 9 has an invalid length. [ 118.604812][ T7782] Driver unsupported XDP return value 0 on prog (id 123) dev N/A, expect packet loss! [ 119.002517][ T7807] sctp: [Deprecated]: syz.4.549 (pid 7807) Use of struct sctp_assoc_value in delayed_ack socket option. [ 119.002517][ T7807] Use struct sctp_sack_info instead [ 120.387689][ T7820] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 120.532461][ T7840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.539754][ T7843] sctp: [Deprecated]: syz.1.558 (pid 7843) Use of int in maxseg socket option. [ 120.539754][ T7843] Use struct sctp_assoc_value instead [ 120.541050][ T7840] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 120.566143][ T7840] bond0: (slave gre0): Error -95 calling set_mac_address [ 120.574097][ T7843] __nla_validate_parse: 14 callbacks suppressed [ 120.574115][ T7843] netlink: 260 bytes leftover after parsing attributes in process `syz.1.558'. [ 120.579902][ T7845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.559'. [ 120.599523][ T7850] netlink: 'syz.4.560': attribute type 1 has an invalid length. [ 120.607820][ T7851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.561'. [ 120.619994][ T7845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.559'. [ 120.641123][ T7842] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 120.721837][ T7857] netlink: 40 bytes leftover after parsing attributes in process `syz.0.561'. [ 120.866774][ T7866] netlink: 'syz.3.564': attribute type 1 has an invalid length. [ 120.879024][ T7864] netlink: 12 bytes leftover after parsing attributes in process `syz.4.562'. [ 121.013255][ T7866] 8021q: adding VLAN 0 to HW filter on device bond2 [ 121.029664][ T7866] netlink: 'syz.3.564': attribute type 1 has an invalid length. [ 121.104627][ T7876] bond2: (slave batadv1): Opening slave failed [ 121.214041][ T7867] bond2: (slave veth3): Enslaving as an active interface with a down link [ 121.240396][ T7866] netlink: 'syz.3.564': attribute type 1 has an invalid length. [ 121.303678][ T7867] bond2: (slave veth5): Enslaving as an active interface with a down link [ 121.312964][ T7896] netlink: 'syz.2.569': attribute type 3 has an invalid length. [ 121.321651][ T7866] netlink: 'syz.3.564': attribute type 1 has an invalid length. [ 121.400878][ T7867] bond2: (slave veth7): Enslaving as an active interface with a down link [ 121.419372][ T7866] netlink: 'syz.3.564': attribute type 1 has an invalid length. [ 121.576609][ T7867] bond2: (slave veth9): Enslaving as an active interface with a down link [ 121.589012][ T7866] netlink: 'syz.3.564': attribute type 1 has an invalid length. [ 121.668833][ T7867] bond2: (slave veth11): Enslaving as an active interface with a down link [ 121.716245][ T7867] bond2: (slave veth13): Enslaving as an active interface with a down link [ 121.872296][ T7927] syzkaller0: entered promiscuous mode [ 121.877829][ T7927] syzkaller0: entered allmulticast mode [ 122.194363][ T7951] netlink: 24 bytes leftover after parsing attributes in process `syz.4.585'. [ 122.253827][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.586'. [ 122.331496][ T7971] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 122.400056][ T7974] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 122.428707][ T911] lo speed is unknown, defaulting to 1000 [ 122.602478][ T7976] netem: change failed [ 122.767790][ T7989] netlink: 32 bytes leftover after parsing attributes in process `syz.3.598'. [ 122.815680][ T7997] xt_TCPMSS: Only works on TCP SYN packets [ 122.861330][ T7997] sctp: [Deprecated]: syz.4.599 (pid 7997) Use of int in max_burst socket option. [ 122.861330][ T7997] Use struct sctp_assoc_value instead [ 123.273035][ T8015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.604'. [ 123.285669][ T8015] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 123.293147][ T8016] delete_channel: no stack [ 123.306310][ T8020] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 123.424485][ T8016] bridge_slave_0 (unregistering): left allmulticast mode [ 123.433360][ T8016] bridge_slave_0 (unregistering): left promiscuous mode [ 123.442165][ T8016] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.561958][ T8034] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 123.884414][ T8047] syzkaller0: entered promiscuous mode [ 123.919189][ T8047] syzkaller0: entered allmulticast mode [ 125.156380][ T8061] : renamed from veth1_vlan (while UP) [ 125.350700][ T8076] syzkaller0: entered promiscuous mode [ 125.356239][ T8076] syzkaller0: entered allmulticast mode [ 125.492907][ T8095] validate_nla: 2 callbacks suppressed [ 125.492925][ T8095] netlink: 'syz.0.627': attribute type 1 has an invalid length. [ 125.550777][ T8099] netlink: 'syz.2.629': attribute type 12 has an invalid length. [ 125.552024][ T8098] syzkaller0: entered promiscuous mode [ 125.566437][ T8098] syzkaller0: entered allmulticast mode [ 125.644195][ T8106] netlink: 'syz.2.632': attribute type 1 has an invalid length. [ 125.796976][ T8115] __nla_validate_parse: 3 callbacks suppressed [ 125.796996][ T8115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.632'. [ 125.825559][ T8106] netlink: 48 bytes leftover after parsing attributes in process `syz.2.632'. [ 125.909999][ T8106] netlink: 56 bytes leftover after parsing attributes in process `syz.2.632'. [ 125.948627][ T8106] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 125.990023][ T8106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.632'. [ 126.125008][ T8148] netlink: 36 bytes leftover after parsing attributes in process `syz.2.646'. [ 126.127754][ T8141] netlink: 20 bytes leftover after parsing attributes in process `syz.0.644'. [ 126.147838][ T8149] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 126.167363][ T8149] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 126.177231][ T8149] gretap1: entered promiscuous mode [ 126.185516][ T8149] gretap1: entered allmulticast mode [ 126.255077][ T8137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.642'. [ 126.384764][ T8162] netlink: 108 bytes leftover after parsing attributes in process `syz.3.648'. [ 126.385106][ T8161] netlink: 14 bytes leftover after parsing attributes in process `syz.0.649'. [ 126.702162][ T8180] gre0: left promiscuous mode [ 126.864345][ T8180] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.871931][ T8180] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.040379][ T8180] bridge_slave_0: left allmulticast mode [ 127.046048][ T8180] bridge_slave_0: left promiscuous mode [ 127.059093][ T8180] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.084501][ T8180] bridge_slave_1: left allmulticast mode [ 127.099202][ T8180] bridge_slave_1: left promiscuous mode [ 127.104964][ T8180] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.138838][ T8180] bond0: (slave bond_slave_0): Releasing backup interface [ 127.173965][ T8180] bond0: (slave bond_slave_1): Releasing backup interface [ 127.229030][ T8180] team0: Port device team_slave_0 removed [ 127.276957][ T8180] team0: Port device team_slave_1 removed [ 127.295031][ T8180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.324355][ T8180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.347687][ T8180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.372830][ T8180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.392009][ T8180] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 127.421168][ T980] lo speed is unknown, defaulting to 1000 [ 127.434867][ T980] syz2: Port: 1 Link DOWN [ 127.573738][ T8209] ieee802154 phy0 wpan0: encryption failed: -90 [ 127.805168][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.666'. [ 127.959038][ T8240] geneve2: entered promiscuous mode [ 127.964322][ T8240] geneve2: entered allmulticast mode [ 127.982226][ T8248] Bluetooth: MGMT ver 1.23 [ 127.990037][ T62] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 128.012349][ T62] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 128.032985][ T62] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 128.058424][ T8242] 8021q: VLANs not supported on tunl0 [ 128.074004][ T62] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 128.302972][ T8261] netlink: 'syz.3.673': attribute type 12 has an invalid length. [ 128.355754][ T8270] syzkaller0: entered promiscuous mode [ 128.370738][ T8270] syzkaller0: entered allmulticast mode [ 128.615408][ T8293] IPv6: addrconf: prefix option has invalid lifetime [ 128.681060][ T8295] bond2 (unregistering): Released all slaves [ 128.724365][ T8301] ip6gre1: entered promiscuous mode [ 128.764725][ T8301] ip6gre1: entered allmulticast mode [ 129.078430][ T8328] netlink: 'syz.3.693': attribute type 1 has an invalid length. [ 129.130010][ T8328] 8021q: adding VLAN 0 to HW filter on device bond3 [ 129.151033][ T8328] bond3: (slave geneve2): making interface the new active one [ 129.161326][ T8328] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 129.197465][ T8328] veth15: entered promiscuous mode [ 129.219299][ T8328] vlan4: entered allmulticast mode [ 129.224474][ T8328] bond3: entered allmulticast mode [ 129.238247][ T8328] geneve2: entered allmulticast mode [ 129.245198][ T8328] bond3: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 129.483093][ T8352] netlink: 'syz.4.698': attribute type 26 has an invalid length. [ 130.234139][ T8404] netlink: 'syz.1.712': attribute type 1 has an invalid length. [ 130.336638][ T8410] bond4: (slave ip6gretap1): making interface the new active one [ 130.383267][ T8410] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 130.403468][ T8410] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 130.435543][ T8410] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 130.740166][ T8444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.901758][ T8457] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.916698][ T8459] __nla_validate_parse: 11 callbacks suppressed [ 130.916716][ T8459] netlink: 256 bytes leftover after parsing attributes in process `syz.3.727'. [ 130.940509][ T8457] Cannot find add_set index 2 as target [ 130.956367][ T8457] netlink: 16 bytes leftover after parsing attributes in process `syz.0.724'. [ 130.967670][ T8465] netlink: 108 bytes leftover after parsing attributes in process `syz.3.727'. [ 131.023251][ T8467] netlink: 240 bytes leftover after parsing attributes in process `syz.4.729'. [ 131.123045][ T8478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.731'. [ 131.168583][ T8485] netlink: 36 bytes leftover after parsing attributes in process `syz.4.733'. [ 131.168583][ T8486] netlink: 36 bytes leftover after parsing attributes in process `syz.4.733'. [ 131.662928][ T8511] ipt_ECN: cannot use operation on non-tcp rule [ 131.799206][ T8461] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 131.872674][ T8519] syzkaller0: entered promiscuous mode [ 131.897899][ T8519] syzkaller0: entered allmulticast mode [ 131.911618][ T8519] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.743'. [ 132.158861][ T8538] netlink: 'syz.2.748': attribute type 1 has an invalid length. [ 132.360978][ T8543] x_tables: unsorted underflow at hook 2 [ 132.782774][ T8583] netlink: 36 bytes leftover after parsing attributes in process `syz.4.759'. [ 132.883919][ T8588] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 132.905400][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.911830][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.922990][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.052768][ T8598] lo: entered promiscuous mode [ 133.079808][ T8598] tunl0: entered promiscuous mode [ 133.125380][ T8598] gre0: entered promiscuous mode [ 133.154960][ T8598] gretap0: entered promiscuous mode [ 133.198517][ T8598] erspan0: entered promiscuous mode [ 133.208023][ T8598] ip_vti0: entered promiscuous mode [ 133.345838][ T8615] netlink: 28 bytes leftover after parsing attributes in process `syz.1.772'. [ 133.360479][ T8618] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 133.368088][ T8618] IPv6: NLM_F_CREATE should be set when creating new route [ 133.375372][ T8618] IPv6: NLM_F_CREATE should be set when creating new route [ 133.383165][ T8615] netlink: 'syz.1.772': attribute type 7 has an invalid length. [ 133.391881][ T8618] ------------[ cut here ]------------ [ 133.397418][ T8618] WARNING: drivers/net/netdevsim/fib.c:831 at nsim_fib_event_nb+0xed8/0x1080, CPU#1: syz.4.771/8618 [ 133.409944][ T8618] Modules linked in: [ 133.414151][ T8618] CPU: 1 UID: 0 PID: 8618 Comm: syz.4.771 Not tainted syzkaller #0 PREEMPT(full) [ 133.423405][ T8618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 133.433852][ T8618] RIP: 0010:nsim_fib_event_nb+0xed8/0x1080 [ 133.439989][ T8618] Code: fa be 02 00 00 00 eb 0a e8 45 b6 d7 fa be 01 00 00 00 4c 89 f7 e8 f8 b8 a4 fd 4c 8b 64 24 08 e9 91 f4 ff ff e8 29 b6 d7 fa 90 <0f> 0b 90 e9 70 fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 35 [ 133.460206][ T8618] RSP: 0018:ffffc9001bbcef08 EFLAGS: 00010287 [ 133.466723][ T8618] RAX: ffffffff86e94287 RBX: 0000000000000002 RCX: 0000000000080000 [ 133.475519][ T8618] RDX: ffffc9000cd59000 RSI: 0000000000007535 RDI: 0000000000007536 [ 133.484365][ T8618] RBP: dffffc0000000000 R08: ffff8880580d682f R09: 1ffff1100b01ad05 [ 133.492797][ T8618] R10: dffffc0000000000 R11: ffffed100b01ad06 R12: ffff88807924d000 [ 133.500924][ T8618] R13: ffffc9001bbcf080 R14: 0000000000000001 R15: ffffc9001bbcf098 [ 133.508983][ T8618] FS: 00007fd32a3f66c0(0000) GS:ffff888125f1e000(0000) knlGS:0000000000000000 [ 133.517935][ T8618] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 133.524594][ T8618] CR2: 0000000000000000 CR3: 0000000076b6c000 CR4: 00000000003526f0 [ 133.532170][ T8615] netlink: 'syz.1.772': attribute type 8 has an invalid length. [ 133.532634][ T8618] Call Trace: [ 133.543591][ T8618] [ 133.546546][ T8618] notifier_call_chain+0x19d/0x3a0 [ 133.552158][ T8618] ? atomic_notifier_call_chain+0x26/0x180 [ 133.558012][ T8618] atomic_notifier_call_chain+0xda/0x180 [ 133.564244][ T8618] call_fib_notifiers+0x31/0x60 [ 133.569922][ T8618] call_fib6_multipath_entry_notifiers+0xe6/0x150 [ 133.576389][ T8618] ? inet6_rtm_newroute+0xe8b/0x18c0 [ 133.581828][ T8618] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 133.588992][ T8618] ? inet6_rtm_newroute+0xe8b/0x18c0 [ 133.594333][ T8618] inet6_rtm_newroute+0x12f5/0x18c0 [ 133.599587][ T8618] ? kasan_quarantine_put+0xbb/0x1f0 [ 133.604972][ T8618] ? lockdep_hardirqs_on+0x7b/0x110 [ 133.610249][ T8618] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 133.615825][ T8618] ? kmem_cache_free+0x197/0x620 [ 133.621075][ T8618] ? nlmon_xmit+0xb0/0x100 [ 133.625561][ T8618] ? lockdep_hardirqs_on+0x7b/0x110 [ 133.630879][ T8618] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 133.636455][ T8618] rtnetlink_rcv_msg+0x7cf/0xb70 [ 133.641469][ T8618] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 133.646611][ T8618] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 133.652118][ T8618] ? ref_tracker_free+0x63a/0x7d0 [ 133.657162][ T8618] ? __asan_memcpy+0x40/0x70 [ 133.661820][ T8618] ? __pfx_ref_tracker_free+0x10/0x10 [ 133.667999][ T8618] netlink_rcv_skb+0x208/0x470 [ 133.673590][ T8618] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 133.679137][ T8618] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 133.684471][ T8618] ? netlink_deliver_tap+0x2e/0x1b0 [ 133.689772][ T8618] netlink_unicast+0x82f/0x9e0 [ 133.694583][ T8618] ? __pfx_netlink_unicast+0x10/0x10 [ 133.700462][ T8618] ? __alloc_skb+0x198/0x3a0 [ 133.705107][ T8618] ? netlink_sendmsg+0x642/0xb30 [ 133.710107][ T8618] ? skb_put+0x11b/0x210 [ 133.714380][ T8618] netlink_sendmsg+0x805/0xb30 [ 133.719232][ T8618] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.724555][ T8618] ? aa_sock_msg_perm+0xf1/0x1b0 [ 133.729569][ T8618] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 133.734879][ T8618] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.740258][ T8618] __sock_sendmsg+0x21c/0x270 [ 133.744970][ T8618] ____sys_sendmsg+0x52d/0x820 [ 133.749771][ T8618] ? __pfx_____sys_sendmsg+0x10/0x10 [ 133.755060][ T8618] ? import_iovec+0x74/0xa0 [ 133.759588][ T8618] ___sys_sendmsg+0x21f/0x2a0 [ 133.764287][ T8618] ? __pfx____sys_sendmsg+0x10/0x10 [ 133.771406][ T8618] ? __pfx_futex_wake_mark+0x10/0x10 [ 133.776747][ T8618] ? __fget_files+0x2a/0x420 [ 133.781490][ T8618] ? __fget_files+0x3a0/0x420 [ 133.786178][ T8618] __sys_sendmmsg+0x227/0x430 [ 133.790879][ T8618] ? __pfx___sys_sendmmsg+0x10/0x10 [ 133.796090][ T8618] ? do_futex+0x333/0x420 [ 133.800452][ T8618] ? fd_install+0x95/0x3d0 [ 133.804868][ T8618] ? lock_acquire+0x107/0x340 [ 133.809585][ T8618] ? rcu_is_watching+0x15/0xb0 [ 133.814359][ T8618] __x64_sys_sendmmsg+0xa0/0xc0 [ 133.819250][ T8618] do_syscall_64+0xec/0xf80 [ 133.823768][ T8618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.829865][ T8618] ? trace_irq_disable+0x37/0x100 [ 133.834886][ T8618] ? clear_bhb_loop+0x60/0xb0 [ 133.839583][ T8618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.845472][ T8618] RIP: 0033:0x7fd32c18f749 [ 133.849932][ T8618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.869653][ T8618] RSP: 002b:00007fd32a3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 133.878859][ T8618] RAX: ffffffffffffffda RBX: 00007fd32c3e5fa0 RCX: 00007fd32c18f749 [ 133.887635][ T8618] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 000000000000000c [ 133.895784][ T8618] RBP: 00007fd32c213f91 R08: 0000000000000000 R09: 0000000000000000 [ 133.903798][ T8618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.911803][ T8618] R13: 00007fd32c3e6038 R14: 00007fd32c3e5fa0 R15: 00007ffdcd4d8e98 [ 133.919845][ T8618] [ 133.922881][ T8618] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 133.930174][ T8618] CPU: 1 UID: 0 PID: 8618 Comm: syz.4.771 Not tainted syzkaller #0 PREEMPT(full) [ 133.939357][ T8618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 133.949404][ T8618] Call Trace: [ 133.952673][ T8618] [ 133.955593][ T8618] vpanic+0x1e0/0x670 [ 133.959605][ T8618] panic+0xb9/0xc0 [ 133.963337][ T8618] ? __pfx_panic+0x10/0x10 [ 133.967759][ T8618] __warn+0x317/0x4b0 [ 133.971739][ T8618] ? nsim_fib_event_nb+0xed8/0x1080 [ 133.976940][ T8618] ? nsim_fib_event_nb+0xed8/0x1080 [ 133.982143][ T8618] __report_bug+0x288/0x500 [ 133.986639][ T8618] ? inet6_rtm_newroute+0x12f5/0x18c0 [ 133.992004][ T8618] ? rtnetlink_rcv_msg+0x7cf/0xb70 [ 133.997117][ T8618] ? netlink_rcv_skb+0x208/0x470 [ 134.002062][ T8618] ? nsim_fib_event_nb+0xed8/0x1080 [ 134.007267][ T8618] ? __pfx___report_bug+0x10/0x10 [ 134.012296][ T8618] ? nsim_fib_event_nb+0xed8/0x1080 [ 134.017491][ T8618] report_bug+0x16a/0x220 [ 134.021818][ T8618] ? nsim_fib_event_nb+0xed8/0x1080 [ 134.027035][ T8618] ? nsim_fib_event_nb+0xeda/0x1080 [ 134.032236][ T8618] handle_bug+0x98/0x200 [ 134.036486][ T8618] exc_invalid_op+0x1a/0x50 [ 134.040982][ T8618] asm_exc_invalid_op+0x1a/0x20 [ 134.045825][ T8618] RIP: 0010:nsim_fib_event_nb+0xed8/0x1080 [ 134.051634][ T8618] Code: fa be 02 00 00 00 eb 0a e8 45 b6 d7 fa be 01 00 00 00 4c 89 f7 e8 f8 b8 a4 fd 4c 8b 64 24 08 e9 91 f4 ff ff e8 29 b6 d7 fa 90 <0f> 0b 90 e9 70 fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 35 [ 134.071253][ T8618] RSP: 0018:ffffc9001bbcef08 EFLAGS: 00010287 [ 134.077320][ T8618] RAX: ffffffff86e94287 RBX: 0000000000000002 RCX: 0000000000080000 [ 134.085303][ T8618] RDX: ffffc9000cd59000 RSI: 0000000000007535 RDI: 0000000000007536 [ 134.093277][ T8618] RBP: dffffc0000000000 R08: ffff8880580d682f R09: 1ffff1100b01ad05 [ 134.101255][ T8618] R10: dffffc0000000000 R11: ffffed100b01ad06 R12: ffff88807924d000 [ 134.109224][ T8618] R13: ffffc9001bbcf080 R14: 0000000000000001 R15: ffffc9001bbcf098 [ 134.117201][ T8618] ? nsim_fib_event_nb+0xed7/0x1080 [ 134.122410][ T8618] ? nsim_fib_event_nb+0xed7/0x1080 [ 134.127616][ T8618] notifier_call_chain+0x19d/0x3a0 [ 134.132729][ T8618] ? atomic_notifier_call_chain+0x26/0x180 [ 134.138535][ T8618] atomic_notifier_call_chain+0xda/0x180 [ 134.144186][ T8618] call_fib_notifiers+0x31/0x60 [ 134.149050][ T8618] call_fib6_multipath_entry_notifiers+0xe6/0x150 [ 134.155467][ T8618] ? inet6_rtm_newroute+0xe8b/0x18c0 [ 134.160748][ T8618] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 134.167772][ T8618] ? inet6_rtm_newroute+0xe8b/0x18c0 [ 134.173056][ T8618] inet6_rtm_newroute+0x12f5/0x18c0 [ 134.178257][ T8618] ? kasan_quarantine_put+0xbb/0x1f0 [ 134.183554][ T8618] ? lockdep_hardirqs_on+0x7b/0x110 [ 134.188790][ T8618] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 134.194452][ T8618] ? kmem_cache_free+0x197/0x620 [ 134.199383][ T8618] ? nlmon_xmit+0xb0/0x100 [ 134.203813][ T8618] ? lockdep_hardirqs_on+0x7b/0x110 [ 134.209026][ T8618] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 134.214567][ T8618] rtnetlink_rcv_msg+0x7cf/0xb70 [ 134.219503][ T8618] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 134.224609][ T8618] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 134.230060][ T8618] ? ref_tracker_free+0x63a/0x7d0 [ 134.235096][ T8618] ? __asan_memcpy+0x40/0x70 [ 134.239689][ T8618] ? __pfx_ref_tracker_free+0x10/0x10 [ 134.245152][ T8618] netlink_rcv_skb+0x208/0x470 [ 134.249915][ T8618] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 134.255369][ T8618] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 134.260661][ T8618] ? netlink_deliver_tap+0x2e/0x1b0 [ 134.265861][ T8618] netlink_unicast+0x82f/0x9e0 [ 134.270627][ T8618] ? __pfx_netlink_unicast+0x10/0x10 [ 134.275916][ T8618] ? __alloc_skb+0x198/0x3a0 [ 134.280501][ T8618] ? netlink_sendmsg+0x642/0xb30 [ 134.285436][ T8618] ? skb_put+0x11b/0x210 [ 134.289676][ T8618] netlink_sendmsg+0x805/0xb30 [ 134.294444][ T8618] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.299729][ T8618] ? aa_sock_msg_perm+0xf1/0x1b0 [ 134.304665][ T8618] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 134.309948][ T8618] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.315239][ T8618] __sock_sendmsg+0x21c/0x270 [ 134.319925][ T8618] ____sys_sendmsg+0x52d/0x820 [ 134.324688][ T8618] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.329974][ T8618] ? import_iovec+0x74/0xa0 [ 134.334482][ T8618] ___sys_sendmsg+0x21f/0x2a0 [ 134.339158][ T8618] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.344357][ T8618] ? __pfx_futex_wake_mark+0x10/0x10 [ 134.349666][ T8618] ? __fget_files+0x2a/0x420 [ 134.354252][ T8618] ? __fget_files+0x3a0/0x420 [ 134.358962][ T8618] __sys_sendmmsg+0x227/0x430 [ 134.363641][ T8618] ? __pfx___sys_sendmmsg+0x10/0x10 [ 134.368831][ T8618] ? do_futex+0x333/0x420 [ 134.373164][ T8618] ? fd_install+0x95/0x3d0 [ 134.377571][ T8618] ? lock_acquire+0x107/0x340 [ 134.382252][ T8618] ? rcu_is_watching+0x15/0xb0 [ 134.387022][ T8618] __x64_sys_sendmmsg+0xa0/0xc0 [ 134.391882][ T8618] do_syscall_64+0xec/0xf80 [ 134.396385][ T8618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.402451][ T8618] ? trace_irq_disable+0x37/0x100 [ 134.407470][ T8618] ? clear_bhb_loop+0x60/0xb0 [ 134.412141][ T8618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.418199][ T8618] RIP: 0033:0x7fd32c18f749 [ 134.422613][ T8618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.442213][ T8618] RSP: 002b:00007fd32a3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 134.450629][ T8618] RAX: ffffffffffffffda RBX: 00007fd32c3e5fa0 RCX: 00007fd32c18f749 [ 134.458595][ T8618] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 000000000000000c [ 134.466563][ T8618] RBP: 00007fd32c213f91 R08: 0000000000000000 R09: 0000000000000000 [ 134.474536][ T8618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.482504][ T8618] R13: 00007fd32c3e6038 R14: 00007fd32c3e5fa0 R15: 00007ffdcd4d8e98 [ 134.490490][ T8618] [ 134.493888][ T8618] Kernel Offset: disabled [ 134.498243][ T8618] Rebooting in 86400 seconds..