last executing test programs: 28m2.597685256s ago: executing program 3 (id=710): r0 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000040)=0x20f, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x4e, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x1}, 0xc) 28m2.497699041s ago: executing program 3 (id=713): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFULA_CFG_NLBUFSIZ={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) (rerun: 32) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) (async) r4 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) r5 = accept(r2, 0x0, &(0x7f0000000200)) (async, rerun: 64) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r6, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x80000001}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x1ff}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x2}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x8}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x3}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x20000040) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r7) (async) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000640)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r12, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x44000) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r14, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r8, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x54}, 0x1, 0x0, 0x0, 0x8019}, 0x44) (async) r15 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r14) sendmsg$NLBL_MGMT_C_LISTALL(r14, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000004}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, r15, 0x500, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000) (async) r16 = epoll_create(0x80000001) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000003340)=0x0) (async) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000003380)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f0000003480)=0xe8) (async, rerun: 32) r19 = bpf$MAP_CREATE(0x0, &(0x7f00000034c0)=@bloom_filter={0x1e, 0x745, 0x7, 0x6, 0x144, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1, 0x8}, 0x50) (rerun: 32) sendmmsg$unix(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000009c0)="24d4c647ff371741d15ed7a2f4e2314688768c26c864cc8cb99abc16664008cfcebc39195a57e9582baa7ccbbf4506cc18b5a5251f82fb22b9ebdf48538e3bde4174", 0x42}, {&(0x7f0000000a40)="32f90d61c3fceb4fd078a744be4e3d112cdb348867486aefe849d51caa7dccc4cf5a1c5c8b747c5e663575caf7e3185dcf85aaef6480e01b587d0a92e879a888ea0a9f1bcb05722af24dfe77a9f67ced06ba037a7b0c789748d9fd56dc28f6fe72c206b25f0067caafef9b65517fe22abc3eb506daa480be06d9bb0ae160a90e303510d6821a60adc836eea20156f85d7a2e4006fd6c401064f6ffdaf24bff169256d19ac2d6ae221b5f36b507d692bd18d16d25f2cf0228259d24e88814793fb9ec672a9984d748348dd7bb75581de8ab2c7528c65be2fe1c9849ca0c3f26192212f2059f57", 0xe6}, {&(0x7f0000000b40)="72d4c4d3c89f55744a378dbb6e5906ffab3b716bcd8ba297d4b9bda8740466c80846e1bed566324c2c586d9265e426db417172ea627210d2c619d1540f3e06010214ccaf4eb75cf63c8b4078d2b579935d12938f5a23adf445771b945a9a1db360f7cc1d1e4a2857a130aa3cd584205c853976e68c59f19500760550e8c6da8b85a599567d97d32b6d7732b9896acec8beb7276fd17fb5527e81f15f5f73cb7a163611d1522528451c1d25580ccf16f020738dd8cfc7abb4f99fdb260b9ded53d6430201b508f826cfa3bc86a70d565bd70ee388006cc2296db7da9cb8dbea244d8130f9be", 0xe5}], 0x3, 0x0, 0x0, 0x4805}}, {{&(0x7f0000000c80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000d00)="d7beb68d546356de7d6167c777b96a4e67657795c6ef925f49122df7e57e9ec001fb3b0a1ca6ee14e8529f8b0a2c1aa705d59e498efdb7453459c75722cae8ff112ad6dd5e80b38e6a757f0ed1", 0x4d}, {&(0x7f0000000d80)="c8a80e464e68", 0x6}], 0x2, &(0x7f0000000e00)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x14, 0x1, 0x1, [r16]}}], 0x30, 0x20000044}}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000000e40)="de4dbbd8af2460a24f162241662d48c903a636e7d1033d89ae0a872f4f3afd6de6723f7bcc4884a91e8b7ada0f33e538e92aca37c164ee971c8454bdce66b8741ae89fa3e5c7502d1f2af7b37aba2c8203bced72bd45f73d5f636b2b2901df74927f1d76e2c3df576390a3cd09169a279ecc2fbc8faeea172a5cee86e2cd15771b4c25daa5775f49c2", 0x89}, {&(0x7f0000000f00)="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", 0x1000}, {&(0x7f0000001f00)="f4ee7c94b52b136883181235ab295abcda217573474f76dd7b83d3573222b568c73d86173fc103267549518ba0bd5d2dbb9dbd7f2bf03184f5a05fb8a57996395b5cfe87df53c9378ba39ec04f7c42e353a1ad8ad41e8bd0c8185408f5bd9ae0b75d868c31880e7dbc2d351eada9969869449347374e76a62d581fc02e757f8d27271d1a079d61844d1f57ff33677025d977db9a6d0afd38c7a67fee648a2a6351d2c8750dc074f7c263a59f370ae6a04fdf95d3bef0f66921499a0685dddb46f4", 0xc1}, {&(0x7f0000002000)="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", 0x1000}, {&(0x7f0000003000)="eb07fa22adeb523c133f55dc92508f0ceb8418ebed28fc78f6c67c9d45b05bfbfcaff84a836ea3771f9236d7b55c98b52739f44bb48a21a3d404e3", 0x3b}, {&(0x7f0000003040)="b27672e172bf9bb2439380fe2a2846baaabbf57cf447629b7d4d1fc5cf62c1545b634aebaa6add0c3c3be2519c", 0x2d}, {&(0x7f0000003080)="d733f274c0400cfe3d6c666c92f43eda6a1bdaa386dc2c11597306f1c68beb1d664f4437d280ed6afe23894b13df2ecb9f79db0424d1f17d32a90d285a8daa37ac6e2dfe4a9b11ef74092da79430a3e30b345ecb841b7c3842e36d5548a9799efbecbfe61d6af44baeb5c1cc5ba85bc2e8294a656e6e33f219cef4a272da0cb49771d9e6c0bed0e8867a2daa0964a0bb654137b934ca3f127830fc2ca9444a03bec2eaf3dfebf086", 0xa8}, {&(0x7f0000003140)="428d1298923cca8972261cfb0251a90fe6bc54313d2f", 0x16}, {&(0x7f0000003180)="39147f4ffc9cc68a6c2569141665349c0e51757ef84145e91c6d1e", 0x1b}, {&(0x7f00000031c0)="e2cabc7aee9ff03f24bacf0fd592201defd93179f98eef0efa1eecd78dc76dadb939f77abf665d7e4221d74f5603ad9643c4a94772454c348e4cab49a2705bc9619dd25ea70eddba98c4580adb46fe1309693a21c95018a95e583c5493aa1958be9b4a3b0a1bab12b087b5f794748d1c6be92d96473250df2f8e846518d9e5a4140453d56687cc26621cbdeb3110486f3670498bba0ad3dee763ff49b64b8c83dbfc0b4f6440e81e", 0xa8}], 0xa, &(0x7f0000003540)=[@cred={{0x1c, 0x1, 0x2, {r17, r18}}}, @rights={{0x30, 0x1, 0x1, [r2, r3, r0, r4, r2, r1, r19, 0xffffffffffffffff]}}], 0x50, 0x4042080}}], 0x3, 0x4008080) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r5, 0x84, 0x7a, &(0x7f0000003680)={0x1, 0xffffffffffffffff, 0x80000}, &(0x7f00000036c0)=0xc) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000003700)={0x1, 0x81}, &(0x7f0000003740)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r20, 0x84, 0x0, &(0x7f0000003780)={r21, 0xc710, 0x80000001, 0x4}, 0x10) 28m1.242223482s ago: executing program 3 (id=727): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f0000000280)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff0000003f000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2], 0x48}}, 0x0) 28m0.881466024s ago: executing program 3 (id=731): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r0, 0x103, 0x1, &(0x7f0000000080)="8d95d475c3e997a4bdf4b7ff04439b4335f201000000670000004399ddf4c7199363f753b59422a928a9863217d7cad0af69efb2365d09b9ef703999de379903e52ebc", 0x43) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) syz_emit_ethernet(0x3e, &(0x7f00000007c0)=ANY=[@ANYBLOB="0180c200000effffffffffff0800450000300000000000019078ac6e0001ac1414aa0301901d00000000000000030000000000000007ac1e010100000000"], 0x0) 28m0.663119779s ago: executing program 3 (id=734): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0xe, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018130000", @ANYRES32=r1, @ANYBLOB="000000001b00f90085000000260000009500000000000000"], &(0x7f0000000340)='GPL\x00'}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r2, 0x1f4d2000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) close(r3) syz_emit_ethernet(0x4a, &(0x7f0000000740)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000380)=[{&(0x7f00000003c0)="af", 0x1}], 0x1) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000580)) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f00000005c0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000000600)={&(0x7f0000000640)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000700)=[{&(0x7f0000009b80)=""/102389, 0x18ff5}], 0xf000}}], 0x48}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000440)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56741, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xfffffffffffffd06}}]}, 0x30}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a5c000000060a010400000000000000000a0000010900010073797a3100000000300004802c000180090001007866726d000000001c0002800500030000000000080001400000001308000240000000fb0800020073797a32"], 0x84}}, 0x20044840) 28m0.09987845s ago: executing program 3 (id=737): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0xc0, 0xff, 0x7, 0x48, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0x7800, 0x8, 0x7, 0x100}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x3, [@decl_tag={0xc, 0x0, 0x0, 0x11, 0x5, 0x5}, @float={0xd, 0x0, 0x0, 0x10, 0xc}, @fwd={0x6}, @int={0x8, 0x0, 0x0, 0x1, 0x2, 0x7d, 0x0, 0x3}]}, {0x0, [0x61]}}, &(0x7f00000002c0)=""/140, 0x53, 0x8c, 0x1, 0x1, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@arena={0x21, 0x0, 0x0, 0x28, 0x400, r1, 0x3, '\x00', r2, r3, 0x0, 0x3}, 0x50) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f328db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052", 0x33}, {&(0x7f0000000680)="2a637c1b8b3894ec89aaef510a473f", 0xf}], 0x2) 27m45.038841749s ago: executing program 32 (id=737): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0xc0, 0xff, 0x7, 0x48, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0x7800, 0x8, 0x7, 0x100}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x3, [@decl_tag={0xc, 0x0, 0x0, 0x11, 0x5, 0x5}, @float={0xd, 0x0, 0x0, 0x10, 0xc}, @fwd={0x6}, @int={0x8, 0x0, 0x0, 0x1, 0x2, 0x7d, 0x0, 0x3}]}, {0x0, [0x61]}}, &(0x7f00000002c0)=""/140, 0x53, 0x8c, 0x1, 0x1, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@arena={0x21, 0x0, 0x0, 0x28, 0x400, r1, 0x3, '\x00', r2, r3, 0x0, 0x3}, 0x50) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f328db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052", 0x33}, {&(0x7f0000000680)="2a637c1b8b3894ec89aaef510a473f", 0xf}], 0x2) 17m13.9690741s ago: executing program 0 (id=5642): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f00000004c0)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000540)={0x0, 0xefff, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x20000880) close(0x3) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0x9, @local, 0x104}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000240)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x10, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], {0x4e1d, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x1}}}}}}}}, 0x0) pipe(&(0x7f0000000000)) 17m13.380100739s ago: executing program 0 (id=5647): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x49, &(0x7f0000000080), 0x4) unshare(0x26020480) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x4}, 0x4) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, 0x0) 17m13.26236785s ago: executing program 0 (id=5648): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x28, r1, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYBLOB="1d003300d0000900080211000001080211000000505050505050"], 0x44}}, 0x0) 17m12.590668835s ago: executing program 0 (id=5654): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0xe, &(0x7f00000001c0)=ANY=[@ANYBLOB="bf16000000000000b70100003b0204007b1ae0ff00000000b7010000000000007b1ae8ff000000007b1af0ff00000000bf61000000000000b702000001000000bfa300000000000007030000e0ffffffb7040000180000008500000049000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0xff03, 0x0, &(0x7f0000000300)="52540012345652540012345786dd6000000000003b40000000000000000000000000000000012bc90000000000000000000000000001", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 17m12.405409559s ago: executing program 0 (id=5655): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x49, 0x1}, 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000540)={'erspan0\x00', &(0x7f0000000440)={'ip_vti0\x00', 0x0, 0x1, 0x8000, 0x5, 0x484, {{0x28, 0x4, 0x1, 0x28, 0xa0, 0x64, 0x0, 0x4, 0x29, 0x0, @empty, @private=0xa010101, {[@timestamp={0x44, 0x28, 0x2b, 0x0, 0x7, [0xffffffff, 0x1dc, 0x7, 0x2, 0xff, 0x0, 0x9, 0x9, 0x80000000]}, @ssrr={0x89, 0x3, 0x1c}, @ssrr={0x89, 0x1b, 0x8, [@multicast2, @local, @loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0xe}, @dev={0xac, 0x14, 0x14, 0x19}]}, @timestamp={0x44, 0x2c, 0x55, 0x0, 0xf, [0x53, 0x37, 0x6, 0x3, 0x7, 0x1, 0x1, 0x8000, 0x0, 0x2]}, @timestamp={0x44, 0xc, 0xf0, 0x0, 0xa, [0x5, 0x80000001]}, @ssrr={0x89, 0x7, 0xb2, [@rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x4, 0xe0, 0x3, 0xf}]}}}}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x9, &(0x7f0000000380)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r3}, @alu={0x7, 0x1, 0xb, 0x2, 0xa}, @alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x1}, @exit, @ldst={0x1, 0x0, 0x3, 0x1}, @exit], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_ext={0x1c, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x52ae, r2, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 17m11.807510667s ago: executing program 0 (id=5659): socket$inet6(0xa, 0x1, 0x0) (async) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000700)="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", 0x118) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x100000000000001}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x100000000000001}]}}]}, 0x48}}, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r7 = accept(r2, 0x0, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f00000000c0)=0x6) setsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000100)={0x0, 0xea60}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000980)={'syztnl1\x00', &(0x7f0000000b80)={'syztnl1\x00', r5, 0x80, 0x20, 0x8, 0x8, {{0x40, 0x4, 0x1, 0x8, 0x100, 0x64, 0x0, 0x81, 0x4, 0x0, @broadcast, @rand_addr=0x64010101, {[@cipso={0x86, 0x42, 0x3, [{0x2, 0x2}, {0x7, 0xb, "3ae3e12f0458feba7e"}, {0x2, 0x7, "07b444d784"}, {0x7, 0x2}, {0x7, 0x12, "8316edce096f330dfa1058529ab263ad"}, {0x6, 0x2}, {0x0, 0x12, "5c4d76773561a2257474eaa3ba1a1ea1"}]}, @timestamp_addr={0x44, 0x24, 0xb3, 0x1, 0x6, [{@multicast1}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x400}, {@remote, 0x5}, {@empty, 0x7}]}, @end, @noop, @cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "b0747a6df337199780800d8eee3e"}]}, @cipso={0x86, 0x6d, 0x3, [{0x5, 0xc, "b86ae13489b31e83cfb1"}, {0x0, 0x7, "00363535fc"}, {0x5, 0xd, "015df4c1603a72e72f56af"}, {0x5, 0x11, "ac5d50e3e548318962748d403c2ee6"}, {0x6, 0xe, "fb5c772f3c23cbca0db1b0e69c2b"}, {0x1, 0x10, "6a110a3f9e3e9e8aa61c466209a8"}, {0x5, 0xb, "d20bac708b5bd37099"}, {0x5, 0xb, "c9a4fb4d3a113ed1d7"}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000980)={'syztnl1\x00', &(0x7f0000000b80)={'syztnl1\x00', r5, 0x80, 0x20, 0x8, 0x8, {{0x40, 0x4, 0x1, 0x8, 0x100, 0x64, 0x0, 0x81, 0x4, 0x0, @broadcast, @rand_addr=0x64010101, {[@cipso={0x86, 0x42, 0x3, [{0x2, 0x2}, {0x7, 0xb, "3ae3e12f0458feba7e"}, {0x2, 0x7, "07b444d784"}, {0x7, 0x2}, {0x7, 0x12, "8316edce096f330dfa1058529ab263ad"}, {0x6, 0x2}, {0x0, 0x12, "5c4d76773561a2257474eaa3ba1a1ea1"}]}, @timestamp_addr={0x44, 0x24, 0xb3, 0x1, 0x6, [{@multicast1}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x400}, {@remote, 0x5}, {@empty, 0x7}]}, @end, @noop, @cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "b0747a6df337199780800d8eee3e"}]}, @cipso={0x86, 0x6d, 0x3, [{0x5, 0xc, "b86ae13489b31e83cfb1"}, {0x0, 0x7, "00363535fc"}, {0x5, 0xd, "015df4c1603a72e72f56af"}, {0x5, 0x11, "ac5d50e3e548318962748d403c2ee6"}, {0x6, 0xe, "fb5c772f3c23cbca0db1b0e69c2b"}, {0x1, 0x10, "6a110a3f9e3e9e8aa61c466209a8"}, {0x5, 0xb, "d20bac708b5bd37099"}, {0x5, 0xb, "c9a4fb4d3a113ed1d7"}]}]}}}}}) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x6, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x1, 0x2}, {0xa, 0x1}, {0x0, 0x2}, {0xf, 0x5}]}]}, {0x0, [0x61, 0x30, 0x2e, 0x61]}}, &(0x7f0000000a40)=""/220, 0x4a, 0xdc, 0x1, 0x40, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@arena={0x21, 0x0, 0x0, 0x36, 0x400, 0xffffffffffffffff, 0x0, '\x00', r8, r9, 0x5, 0x5}, 0x50) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@arena={0x21, 0x0, 0x0, 0x36, 0x400, 0xffffffffffffffff, 0x0, '\x00', r8, r9, 0x5, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r10, &(0x7f00000002c0), &(0x7f0000000300)=@tcp=r7}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r10, &(0x7f00000002c0), &(0x7f0000000300)=@tcp=r7}, 0x20) recvmsg$can_bcm(r7, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2000) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x8020000c, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c) 16m56.555396058s ago: executing program 33 (id=5659): socket$inet6(0xa, 0x1, 0x0) (async) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000700)="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", 0x118) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x100000000000001}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x100000000000001}]}}]}, 0x48}}, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r7 = accept(r2, 0x0, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f00000000c0)=0x6) setsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000100)={0x0, 0xea60}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000980)={'syztnl1\x00', &(0x7f0000000b80)={'syztnl1\x00', r5, 0x80, 0x20, 0x8, 0x8, {{0x40, 0x4, 0x1, 0x8, 0x100, 0x64, 0x0, 0x81, 0x4, 0x0, @broadcast, @rand_addr=0x64010101, {[@cipso={0x86, 0x42, 0x3, [{0x2, 0x2}, {0x7, 0xb, "3ae3e12f0458feba7e"}, {0x2, 0x7, "07b444d784"}, {0x7, 0x2}, {0x7, 0x12, "8316edce096f330dfa1058529ab263ad"}, {0x6, 0x2}, {0x0, 0x12, "5c4d76773561a2257474eaa3ba1a1ea1"}]}, @timestamp_addr={0x44, 0x24, 0xb3, 0x1, 0x6, [{@multicast1}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x400}, {@remote, 0x5}, {@empty, 0x7}]}, @end, @noop, @cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "b0747a6df337199780800d8eee3e"}]}, @cipso={0x86, 0x6d, 0x3, [{0x5, 0xc, "b86ae13489b31e83cfb1"}, {0x0, 0x7, "00363535fc"}, {0x5, 0xd, "015df4c1603a72e72f56af"}, {0x5, 0x11, "ac5d50e3e548318962748d403c2ee6"}, {0x6, 0xe, "fb5c772f3c23cbca0db1b0e69c2b"}, {0x1, 0x10, "6a110a3f9e3e9e8aa61c466209a8"}, {0x5, 0xb, "d20bac708b5bd37099"}, {0x5, 0xb, "c9a4fb4d3a113ed1d7"}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000980)={'syztnl1\x00', &(0x7f0000000b80)={'syztnl1\x00', r5, 0x80, 0x20, 0x8, 0x8, {{0x40, 0x4, 0x1, 0x8, 0x100, 0x64, 0x0, 0x81, 0x4, 0x0, @broadcast, @rand_addr=0x64010101, {[@cipso={0x86, 0x42, 0x3, [{0x2, 0x2}, {0x7, 0xb, "3ae3e12f0458feba7e"}, {0x2, 0x7, "07b444d784"}, {0x7, 0x2}, {0x7, 0x12, "8316edce096f330dfa1058529ab263ad"}, {0x6, 0x2}, {0x0, 0x12, "5c4d76773561a2257474eaa3ba1a1ea1"}]}, @timestamp_addr={0x44, 0x24, 0xb3, 0x1, 0x6, [{@multicast1}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x400}, {@remote, 0x5}, {@empty, 0x7}]}, @end, @noop, @cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "b0747a6df337199780800d8eee3e"}]}, @cipso={0x86, 0x6d, 0x3, [{0x5, 0xc, "b86ae13489b31e83cfb1"}, {0x0, 0x7, "00363535fc"}, {0x5, 0xd, "015df4c1603a72e72f56af"}, {0x5, 0x11, "ac5d50e3e548318962748d403c2ee6"}, {0x6, 0xe, "fb5c772f3c23cbca0db1b0e69c2b"}, {0x1, 0x10, "6a110a3f9e3e9e8aa61c466209a8"}, {0x5, 0xb, "d20bac708b5bd37099"}, {0x5, 0xb, "c9a4fb4d3a113ed1d7"}]}]}}}}}) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x6, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x1, 0x2}, {0xa, 0x1}, {0x0, 0x2}, {0xf, 0x5}]}]}, {0x0, [0x61, 0x30, 0x2e, 0x61]}}, &(0x7f0000000a40)=""/220, 0x4a, 0xdc, 0x1, 0x40, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@arena={0x21, 0x0, 0x0, 0x36, 0x400, 0xffffffffffffffff, 0x0, '\x00', r8, r9, 0x5, 0x5}, 0x50) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@arena={0x21, 0x0, 0x0, 0x36, 0x400, 0xffffffffffffffff, 0x0, '\x00', r8, r9, 0x5, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r10, &(0x7f00000002c0), &(0x7f0000000300)=@tcp=r7}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r10, &(0x7f00000002c0), &(0x7f0000000300)=@tcp=r7}, 0x20) recvmsg$can_bcm(r7, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2000) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x8020000c, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c) 1m8.535066282s ago: executing program 6 (id=13147): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x5, 0xd10, 0x0, {0x77359400}, {0x77359400}, {0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x0, 0x1}, 0xff, 0x0, 0x0, 0x0, "645b6048a2e4931133f6d9919fd48557d76811cd874f3c107bbfc1c8831026d40798a2be4cc414e02216198977dc3d41ed0880c64c39e5f4059bae641ed15112"}}, 0x80}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xa, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="61123000000000006113680000000000bf2000000000000015000600071b48013d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd70}, 0x2d) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r3) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x300000c, 0x80010, 0xffffffffffffffff, 0x3a141000) 1m6.311436923s ago: executing program 6 (id=13152): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0xffffffffffffff5e, &(0x7f0000000ac0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x50, 0x10, 0x403, 0x70bd27, 0x3, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0880000008440000300012800b00010067656e65766500001e0002801400070000000000000000002100000000000001050004000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m2.666004155s ago: executing program 6 (id=13159): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071100f000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async, rerun: 64) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 64) close(0x4) (async) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000500)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r3, 0x215eb000) (async) socket$netlink(0x10, 0x3, 0x12) (async) r4 = socket(0x2b, 0x80801, 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000540)={'filter\x00', 0x4}, 0x68) (async) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@ipv6_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@RTA_PRIORITY={0x8, 0x1e}, @RTA_MULTIPATH={0xc}]}, 0x30}}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000080)={0x2, 'dummy0\x00', 0x2}, 0x18) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_SPORT={0x6, 0x1c, 0x4e23}]}, 0x24}}, 0x0) 58.943648383s ago: executing program 6 (id=13165): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) 57.592874559s ago: executing program 6 (id=13169): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0xffffffffffffff5e, &(0x7f0000000ac0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x50, 0x10, 0x403, 0x70bd27, 0x3, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0880000008440000300012800b00010067656e65766500001e0002801400070000000000000000004100000000000001050004000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 55.070849524s ago: executing program 6 (id=13175): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="050000000d0000004200000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000440), 0x810f0, r0}, 0x38) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newchain={0x60, 0x1e, 0x1, 0x1, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0x1}, {0x10, 0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x34, 0x2, [@TCA_FW_ACT={0x30, 0x4, [@m_ct={0x2c, 0x11, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x60}}, 0x4044004) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0xffffffffffffff88) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000004a00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 39.00200182s ago: executing program 34 (id=13175): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="050000000d0000004200000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000440), 0x810f0, r0}, 0x38) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newchain={0x60, 0x1e, 0x1, 0x1, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0x1}, {0x10, 0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x34, 0x2, [@TCA_FW_ACT={0x30, 0x4, [@m_ct={0x2c, 0x11, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x60}}, 0x4044004) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0xffffffffffffff88) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000004a00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 17.863260771s ago: executing program 1 (id=13216): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) shutdown(r1, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000700)={'vcan0\x00', 0x0}) bind$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x8}]}, 0x2c}}, 0x0) unshare(0x22020600) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='ipvlan1\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x5, 0xc3, &(0x7f0000000240)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, &(0x7f0000000340), 0x8, 0x10, &(0x7f0000000380), 0x10}, 0x94) syz_emit_ethernet(0x82, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) bind$can_j1939(r0, &(0x7f0000000800)={0x1d, r2, 0x1}, 0x18) r6 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYRESHEX=r3], 0x230}}, 0x20040804) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r7, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xa801}, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18ee0000008882a242fc6390ae651942dd7648f729a9e3729a065e88c3cce45059b8b44bc737401bdbe98ce5", @ANYRES16=r6, @ANYBLOB="000325bd7000ffdbdf25090000000400"], 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 17.016068726s ago: executing program 4 (id=13219): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='nicvf0\x00') sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x4000000) 15.548148581s ago: executing program 2 (id=13220): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 14.389002967s ago: executing program 4 (id=13221): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000700)=@base={0xa, 0x16, 0x1ff, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18080000ff0100000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="feffffffffffffff7900170400000000180000000000001100000000000000009500000000000000d50a00000000000095"], &(0x7f00000008c0)='GPL\x00', 0x2}, 0x94) 13.851109274s ago: executing program 5 (id=13222): syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}}}}}}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x18, 0x1404, 0x1, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x20040004) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x18, 0x1404, 0x1, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x20040004) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)=@delqdisc={0x58, 0x25, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0xc, 0xc}, {0x4, 0x6}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x1, 0x0, 0x6, 0x1, 0xd865}, {0xdd, 0x2, 0xf, 0x8000, 0x1, 0x3}, 0x7ff, 0xff800000, 0x3a2}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000001}, 0x94) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)=@delqdisc={0x58, 0x25, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0xc, 0xc}, {0x4, 0x6}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x1, 0x0, 0x6, 0x1, 0xd865}, {0xdd, 0x2, 0xf, 0x8000, 0x1, 0x3}, 0x7ff, 0xff800000, 0x3a2}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000001}, 0x94) sendmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0xffffff0a, &(0x7f0000000800)=[{&(0x7f0000000840)="c01803002d000b12d25a80648c2594f90224fc60100c024002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0xffffff0a, &(0x7f0000000800)=[{&(0x7f0000000840)="c01803002d000b12d25a80648c2594f90224fc60100c024002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet(0x2, 0x2, 0x1) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000080)={0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x38, r5, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x34}]}]}]}, 0x38}}, 0x4000) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0x128, r5, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3000000}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8870}]}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa5}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'veth0_to_hsr\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff0a4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x35}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6b}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x50}, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r7, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r6], 0x38}}, 0x10) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000080)}) (async) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000080)}) write$tun(r2, &(0x7f00000000c0)={@val={0x0, 0x86dd}, @val={0x2, 0x1, 0x5, 0x6, 0x8, 0x2}, @ipv4=@udp={{0xc, 0x4, 0x1, 0x9, 0x94, 0x68, 0x0, 0x9, 0x11, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x23}, {[@generic={0x94, 0xd, "2d5c5513078ddda024ff46"}, @end, @end, @rr={0x7, 0x3, 0xd3}, @rr={0x7, 0x7, 0x45, [@loopback]}]}}, {0x4e21, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x3, "4579774d2a20d277e57a14269783a401b31b87d1681b81b562da121987509f7b", "d5476f78b20e52eef670dea6525decf3", {"17b79d5fe4c2047e798941fb3144cf74", "3888feac72f5633cbde104310477d2b8"}}}}}, 0xa2) (async) write$tun(r2, &(0x7f00000000c0)={@val={0x0, 0x86dd}, @val={0x2, 0x1, 0x5, 0x6, 0x8, 0x2}, @ipv4=@udp={{0xc, 0x4, 0x1, 0x9, 0x94, 0x68, 0x0, 0x9, 0x11, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x23}, {[@generic={0x94, 0xd, "2d5c5513078ddda024ff46"}, @end, @end, @rr={0x7, 0x3, 0xd3}, @rr={0x7, 0x7, 0x45, [@loopback]}]}}, {0x4e21, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x3, "4579774d2a20d277e57a14269783a401b31b87d1681b81b562da121987509f7b", "d5476f78b20e52eef670dea6525decf3", {"17b79d5fe4c2047e798941fb3144cf74", "3888feac72f5633cbde104310477d2b8"}}}}}, 0xa2) 13.845687508s ago: executing program 1 (id=13223): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a000000000013611194000000000018000000000000000000000000000000950000000000089a"], &(0x7f0000000000)='GPL\x00'}, 0x80) 12.619505746s ago: executing program 4 (id=13224): r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r0, 0x110, 0x7, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002780)=ANY=[@ANYBLOB="180000002f00090028bd70000000170004000000040018"], 0x18}, 0x1, 0x0, 0x0, 0x42884}, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r2) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000d80)={&(0x7f0000000180), 0xc, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x25c, r4, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf8a}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1e0}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe}]}, @TIPC_NLA_NODE={0x98, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x37, 0x3, "cab94dbcf044532e105909c8a3641f913afe139c6ce0744967e574af1bd39ef0ddf30c20e3d3cff9dd06e7872fce40e218d0cb"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "502087fb2cd7a0846d6a85c9143fd68de220a78761"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x200}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb51}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x725}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5aee}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82e8fc5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf715}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc0b7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xafef}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x36fd}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7455}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x8010}, 0x8800) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f8, 0x3c0, 0xffffff80, 0x178, 0x3c0, 0x178, 0x528, 0x22b, 0x258, 0x528, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3c0, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {0x34, 0x0, 0x0, 0x40000}, {0x0, 0x0, 0xfd}, {}, {}, {}, {0x20}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x0, 0x9}, {}, {}, {0x0, 0x0, 0xff}, {}, {}, {}, {0x6}, {}, {0x9}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x870}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x3, 0x3}, {0x200}, {0x0, 0xa}, {}, {}, {0x0, 0x0, 0x0, 0x400}, {}, {}, {0x0, 0x8a}, {}, {}, {0x6, 0x0, 0xfc}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52", 0x59}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_bridge\x00', 'geneve1\x00', {0xff}}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}, {[], 0x6}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x5) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 12.550386815s ago: executing program 2 (id=13225): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x14, r1, 0x1}, 0x14}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x10, 0x2c, 0x0, 0x0, 0xc0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, {{0x1000, 0x2000, 0x1, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x40, 0x0, 0x0, {[@mss={0x2, 0x4}]}}}}}}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 11.97947729s ago: executing program 1 (id=13226): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0xffffffffffffff5e, &(0x7f0000000ac0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x50, 0x10, 0x403, 0x70bd27, 0x3, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0880000008440000300012800b00010067656e65766500001e00028014000700000000000000000000fc000000000001050004000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 11.568024519s ago: executing program 5 (id=13227): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x0) write$cgroup_subtree(r0, &(0x7f0000000400)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x4010, r1, 0x952de000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01001e000000000000000c0000000c"], 0x0, 0x2a}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000effd0010000000004000700070100000807f3007500fcff0000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x41000}, 0x94) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) r4 = socket(0x2b, 0x80801, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f00000004c0)=0x8, 0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa0, r2, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40011}, 0x24000080) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000500)={0x7, 'wlan1\x00', {0xb0dd}}) 10.80332001s ago: executing program 4 (id=13228): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000001c00000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r3, r2, 0x25, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14) (async) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000d042abd70100000000000000000", @ANYRES32=r2, @ANYBLOB="48270100602101001c0012800900010000000c000e0003000000"], 0x3c}}, 0x0) 10.243370709s ago: executing program 2 (id=13229): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c"], 0xb4}}, 0x48890) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES8=r1], 0x0, 0x80}, 0x28) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000006c0)={'macvtap0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="4400000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="05030200157e0000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3, @ANYBLOB="080004004440"], 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x48094) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES64=r1, @ANYRES64=r5, @ANYRES16=0x0, @ANYRESOCT=r1], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000540)={r6, &(0x7f0000000580), 0x0}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000006bc4b09cc0c4e80d9bab37958cd7b9a86d2be14a41e7dc55b7eb63", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES16=r7, @ANYBLOB="010000000300"/28], 0x5f) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000080)=@req={0x9, 0x1ff, 0x5, 0xffffce18}, 0xffffff0d) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r8, 0x0) ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f0000000740)={&(0x7f0000000040), 0x8, &(0x7f00000006c0), &(0x7f0000000700)}) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000000480)={&(0x7f0000000280)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@rdma_args={0xfffffffffffffd02, 0x114, 0x1, {{0x0, 0xfffffffe}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000000580)=""/53, 0x2c}], 0x1, 0x1000000000000, 0x12b6}}, @mask_cswp={0x0, 0x114, 0x9, {{0x7fff, 0x4}, &(0x7f00000002c0)=0x235d920b, &(0x7f0000000300)=0x80, 0xba33, 0x5, 0xfffffffffffffc01, 0x3, 0x20, 0x9}}], 0x48, 0x10}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) 9.212378016s ago: executing program 5 (id=13230): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) (async, rerun: 64) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f0000000880)={0x11, 0x300, r3, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) (async) write(r4, &(0x7f00000008c0)="0802110000010802110000000800450000280000000040007ce70a00", 0x1c) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x28, r6, 0x627, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4054}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r8) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, r9, 0x331, 0x70bd2c, 0x25dfdbfb, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0xc0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r5, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)={0x1fc, r6, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SRF={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x8}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x158, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_SRF={0x138, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "f6f4914aab46d7758ddfa446da5cc8274b78a6656897f9e8f6051b209f5485e32d3c826b2135f0a81c1ec7ccdbbb680130bf2c7ba967f7ce8bf7391ed0680a725f75d5f781444081246993817d46b45e95a991d5112c3c59bc68990289dfb5c1fcd268f372f00bc198e0292275ab9228b297be740f725bf675b958cf50267429ec39c037ec320c79e77d1e2127c65028ec76be667a0c00b2fff7be63a0c8bd82e32556f8b54f4a1d7f100bb85160a354eec0ca577265ddfc1af0c4e4729ba1b03a25cca7fdd9ae1dd6f29393d7076f051d26f384c0cddc2c5e0cb38055ce98103331977e1f1bac90d1ab883ba687436e87c6bc5e5e446c0a3648c5ec5011d6"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1}]}]}, @NL80211_ATTR_NAN_FUNC={0x54, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x48, 0xb, "b5a6b06d13c059b30c972e1f0d7181f4c5df15c63118a6ac126bbb220e4eb0627df386c8e9e69b223530570c69a0cf57c24b590e0db57859679593d9758b628b54ccf622"}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x8000}]}, @NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "75f8f06f165d"}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xf7}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x20008004}, 0xe00e011c213ef550) (async, rerun: 32) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r9, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf52}]}, 0x24}, 0x1, 0x0, 0x0, 0x8086}, 0x20000045) (rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r8) 6.988654779s ago: executing program 4 (id=13231): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0xffffffffffffffd3) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f00000003c0)=0x57bb, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000400)={0x0, 0x0}, 0x10) sendmmsg$alg(r1, &(0x7f00000023c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=[@op={0x18}], 0x18, 0x40}], 0x31, 0x4044804) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000002480)={{r1, &(0x7f0000000000)='aead\x00', 0x20000, &(0x7f0000000040)={@_ha_fsid={[0x2, 0x9]}, {0x3, 0x401, 0x1, 0x6}}, 0x8000000, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x6}, 0x3, &(0x7f0000002400)=[{0x3, 0xf7a, &(0x7f0000000180)='\x00', &(0x7f00000011c0)="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", 0x1000, 0x10}, {0x2, 0x7fffffff, &(0x7f00000021c0)='!\x00', &(0x7f0000002200)="cb36db4a2eecf56185562f363cb4bc348ec8f2de0cba53ce9f093f311a4312c7d07af6c11ebe104f02d02082eea0d69b62142b58b2c8d63c44223d468e524be844f0a4293b674fd9d164bdcc6bb53bea945b1bd5c25757464a997de49d9148f40cac8c4290b29aaf1283693d717d1d6ba8b50c0dc8df1c2b7cb59e92dda6af0b00662679f6d68bf45f5a960854a0ee6d5dfd65ccffc0f9f77de3ab87b8901d087e83896709007ef727409c32d8047dbbf2e3ac5855450c3f7a7ad97b5066715ec7b3f824b632a88ccd723fc2499b54d33ebf77479611b71b4353592f15f3ad53dbd284b7f1047ec79affdd655b4f849852b836baa2", 0xf5, 0xa}, {0x2, 0x4, &(0x7f0000002300)='\x00', &(0x7f0000002340)="a5f1c2e453660be7921691e8f70a29ddcf59b3697d4db49e0bcb9c3ddc9ab37528e15e2d4afad808d2efc616d8c650381bc632ac1bf1b031578764cdb2c1d268079411ea851f30f203667d624cb032611b", 0x51, 0x10}]}) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="2e00000010008188040f6fec59acbc0435a181003f00000000060000000000000e000d000d6ed60012801900121f", 0x2e}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f00000005c0)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xbc}, [@ldst={0x6}]}, &(0x7f0000000600)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000640)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000740), 0xfffffffffffffd56, 0x10, &(0x7f0000000780), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002500)=@base={0x6, 0x4, 0x8, 0xa}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002580)={0x3, 0xc, &(0x7f0000002640)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f00000026c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@map=0x1, 0xffffffffffffffff, 0x22, 0x2004}, 0x20) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002700)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002780)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x20c, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x50) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48000000149dcf0000082b9c7000fddbdf250a08", @ANYRES32=r7, @ANYBLOB="0800080001010000140006000000200000ffffff080000000400000014000100fc00"/48], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4) (async) r8 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000002980)={'syzkaller1\x00', 0x0}) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) sendmsg$nl_route_sched(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000002a40)=@newqdisc={0x2c, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}, {0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x7}}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002ac0)={&(0x7f0000002b00)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xffee, 0xffe0}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002d40)={&(0x7f0000002b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x6, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x1, 0x1}, {0xa, 0x5}]}, @restrict={0xe, 0x0, 0x0, 0xb, 0x3}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x6}}, @var={0x7, 0x0, 0x0, 0xe, 0x4, 0x2}]}, {0x0, [0x61, 0x61, 0x51, 0x61]}}, &(0x7f0000002c40)=""/230, 0xffffffffffffff9e, 0xe6, 0x1, 0x10001}, 0x28) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002dc0), 0x4) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002e80)={{}, &(0x7f0000002e00), &(0x7f0000002e40)='%pI4 \x00'}, 0x20) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000002fc0)={r0, &(0x7f0000002ec0)='\x00', 0x4002, &(0x7f0000002f00)={@align=0x8, {0x0, 0x7, 0x9, 0xfffffffffffffff9}}, 0x3, &(0x7f0000002f40)={@_ha_fsid}, &(0x7f0000002f80)=0xdc5b}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5}, 0x50) 6.962500765s ago: executing program 1 (id=13232): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x40, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850029bf850d22b7f20490d8899606601e485a1dd0376e16fe0c0fb9af2e04f216917a620f7cc7f6904cc9a7d76e6610f5641d8a9f5a4e52471f73f04997f4a6e06d0d5893bc9be19508acb9996f8329df65d1bd17b67e5b8642fcf3035cb25d0fceb084699fe013e539ad5788b39e489aaf5a3dc6c15eb758454d092e3759fcb72c3bd222abc3261c297ca1f3983cca0b20b68c864abd47c1a5b6d28fe5ae3b7222dd1bbcc82a95895d2f647ab41479f0a62ee983ce9e64501a5f008dbfb4381b98941f5129c6d29050e35221d6b6bd3bc0a733115371c5712f39ca18cdea1fadb32937cad191fce039d27ab709724416415a274dd7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.311515207s ago: executing program 2 (id=13233): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) r2 = syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/cgroup\x00') close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r2, 0x215eb000) socket$netlink(0x10, 0x3, 0x12) r3 = socket(0x2b, 0x80801, 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) 5.88988401s ago: executing program 5 (id=13234): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) (async) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f0000002880)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e1, 0xc) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x203}}, @prinfo={0x18}], 0x48}], 0x1, 0x0) openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) (async) r3 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x9) (async) sendfile(r3, r3, 0x0, 0x9) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc010000100000001800000000000000000000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc010000100000001800000000000000000000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4}, 0x94) r6 = openat$cgroup_procs(r4, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) sendfile(r5, r6, 0x0, 0x3ffffffffffffa) 5.345773977s ago: executing program 1 (id=13235): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000700)=@base={0xa, 0x16, 0x1ff, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18080000ff0100000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="000000fffd0000007900e80200000000180000000000001100000000000000009500000000000000d50a00000000000095"], &(0x7f00000008c0)='GPL\x00', 0x2}, 0x94) 4.367555887s ago: executing program 5 (id=13236): r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x400) getsockname$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x42073, 0xffffffffffffffff, 0x4c90000) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000180)=0x2) 4.366869289s ago: executing program 4 (id=13237): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x337, 0x3f, 0x10, 0xff, 0xba, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r4 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r4, 0x6, 0x1f, &(0x7f00000001c0)='espintcp', 0x8) connect$inet(r4, &(0x7f0000000300)={0x2, 0x4e22, @remote}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x20, 0x3, &(0x7f0000000600)=@framed, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0x5, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x348b5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000680)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x7ffffffe, 0x600, 0x1}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[], 0x24}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x28, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x28}}, 0x0) unshare(0x20000400) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x248241, 0x0) writev(r7, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[], 0x88}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a3c000000090a01040000004c000000000a0000040900020073797a31e9ffffff08000a40fffffffc0900010073797a3100000000080005400000000b14000000110001000000000000000100000a388aa11b79b14a0000"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x28, 0xd, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 4.183157128s ago: executing program 2 (id=13238): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) 3.790221535s ago: executing program 1 (id=13239): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r2) sendmsg$NFC_CMD_DEV_DOWN(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x170, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x84}]}}]}, 0x170}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0000002079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950001000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5b787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b9243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fb4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7e58ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eee46eb20c20bb82aa31771cd379ec83554cea5e6539d85b980e358d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002157a3609b6fd9843ee19ec647249a9375de5858818f3c2432e6ced4380217ac51a84a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd809269f816fa748b20ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f9289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f05714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc30935455f6de5b64bcdfaf8ac04ce96c421e5dbc85e168d3559ab13df98163e39e4065e65a2f43412535d6f7c09830f3a086535bd07820e690d2755768612bb7330a8b285f2585892eaff1889a61ee0c2a6d1831d41805707bb43991d40feb5dd0700"/2728], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000980)=ANY=[@ANYBLOB="8c0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c0002800500010000000000ef205eea6461d0c2cb110cde1c9e55a3b4a800a0c494fd03e6e078f09a2baf8a12d5825c9ab5c36260014b7a9748cec35b9429943ad245c35f56d00df99eb5ce3a698532f8a667ae9fdc22699aa1534bbf54a4339b2457f4aa9e7d7ff14decca636e8d2aa82382"], 0x8c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYRES8=r5, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b0001006772657461700000", @ANYRES32, @ANYBLOB='\b\x00\r\x00\x00\x00\x00\x00\b\x00'], 0x4c}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x4, 0x4, 0x4, 0x10005, 0xca00, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x0, 0x0, 0x0, 0x0, @value=r6}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r7, 0xa2, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={r8}, 0xc) pwrite64(r7, &(0x7f0000000400)="0a79f5775c9f83f018c041bd65fcadf58063d42c683c0783daf148a89c78b16d5c7dfe3c1956450c84425c8b8c878f9d9031810c7e8db3e381749bd130b9fc89921f7b04355556a90ae6ee9f0375c950ada181cac98f21fcc6d0f67279968474b20be6f61b2cd2690a11171824cb7812028f55cb789a5c232ceac8d23dfacf914a269d301890a62a0c868d66cb278d70c946d725dc5bde72b8791ec15b98a6a3ba0cdc6cc0f88e4fe55529b6b7b22422952efcdaad3ee43cf1625efe9098e5c390975a41fb6acd7a5a63592b98889db19397b7c4ea0c0f5c28d6efdbdb4f666f3a", 0xe1, 0x3) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={r8, 0x2, 0x10}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x108, 0xe, 0x0, &(0x7f0000000340)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf48f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6_vti0\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r2) (async) sendmsg$NFC_CMD_DEV_DOWN(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x170, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x84}]}}]}, 0x170}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="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"/2728], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000980)=ANY=[@ANYBLOB="8c0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c0002800500010000000000ef205eea6461d0c2cb110cde1c9e55a3b4a800a0c494fd03e6e078f09a2baf8a12d5825c9ab5c36260014b7a9748cec35b9429943ad245c35f56d00df99eb5ce3a698532f8a667ae9fdc22699aa1534bbf54a4339b2457f4aa9e7d7ff14decca636e8d2aa82382"], 0x8c}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYRES8=r5, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b0001006772657461700000", @ANYRES32, @ANYBLOB='\b\x00\r\x00\x00\x00\x00\x00\b\x00'], 0x4c}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x4, 0x4, 0x4, 0x10005, 0xca00, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x0, 0x0, 0x0, 0x0, @value=r6}, 0x50) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r7, 0xa2, &(0x7f00000002c0)}, 0x10) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={r8}, 0xc) (async) pwrite64(r7, &(0x7f0000000400)="0a79f5775c9f83f018c041bd65fcadf58063d42c683c0783daf148a89c78b16d5c7dfe3c1956450c84425c8b8c878f9d9031810c7e8db3e381749bd130b9fc89921f7b04355556a90ae6ee9f0375c950ada181cac98f21fcc6d0f67279968474b20be6f61b2cd2690a11171824cb7812028f55cb789a5c232ceac8d23dfacf914a269d301890a62a0c868d66cb278d70c946d725dc5bde72b8791ec15b98a6a3ba0cdc6cc0f88e4fe55529b6b7b22422952efcdaad3ee43cf1625efe9098e5c390975a41fb6acd7a5a63592b98889db19397b7c4ea0c0f5c28d6efdbdb4f666f3a", 0xe1, 0x3) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={r8, 0x2, 0x10}, 0xc) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x108, 0xe, 0x0, &(0x7f0000000340)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf48f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 3.057685499s ago: executing program 2 (id=13240): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000002c0)="10000000000000000100000024000000", 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, 0x25, 0x1, 0x7fff6, 0x25dfdbfe, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x400c805}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x8}, 0x94) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r1) 0s ago: executing program 5 (id=13241): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0xffffffffffffff5e, &(0x7f0000000ac0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x50, 0x10, 0x403, 0x70bd27, 0x3, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0880000008440000300012800b00010067656e65766500001e00028014000700000000000000000080fe000000000001050004000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) kernel console output (not intermixed with test programs): hci2: command tx timeout [ 1543.916343][ T733] batadv1: left allmulticast mode [ 1543.916369][ T733] batadv1: left promiscuous mode [ 1543.920103][ T733] bridge0: port 3(batadv1) entered disabled state [ 1543.962504][ T733] bridge_slave_1: left allmulticast mode [ 1543.962532][ T733] bridge_slave_1: left promiscuous mode [ 1543.965022][ T733] bridge0: port 2(bridge_slave_1) entered disabled state [ 1544.000048][ T733] ¾x9ÿ: left allmulticast mode [ 1544.000076][ T733] ¾x9ÿ: left promiscuous mode [ 1544.000287][ T733] bridge0: port 1(1¾x9ÿ) entered disabled state [ 1544.145445][ T733] pim6reg: left allmulticast mode [ 1544.145572][ T733] bridge0: left allmulticast mode [ 1544.146533][ T733] dvmrp0: left allmulticast mode [ 1545.129433][ T733] bond11 (unregistering): (slave geneve5): Releasing active interface [ 1545.166820][ T733] bond2 (unregistering): (slave geneve3): Releasing active interface [ 1545.188921][ T733] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1545.290301][ T733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1545.304382][ T733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1545.305608][ T733] bond0 (unregistering): Released all slaves [ 1545.343627][ T733] bond1 (unregistering): Released all slaves [ 1545.395207][ T733] bond2 (unregistering): Released all slaves [ 1545.439056][ T733] bond3 (unregistering): Released all slaves [ 1545.476668][ T733] bond4 (unregistering): Released all slaves [ 1545.505604][ T733] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1545.508167][ T733] bond5 (unregistering): Released all slaves [ 1545.563264][ T733] bond6 (unregistering): Released all slaves [ 1545.602458][ T733] bond7 (unregistering): (slave veth5): Releasing active interface [ 1545.635079][ T733] bond7 (unregistering): Released all slaves [ 1545.659780][ T733] bond8 (unregistering): Released all slaves [ 1545.689203][ T733] bond9 (unregistering): Released all slaves [ 1545.724936][ T733] bond10 (unregistering): Released all slaves [ 1545.762614][ T733] bond11 (unregistering): Released all slaves [ 1545.793376][ T733] bond12 (unregistering): (slave dummy0): Releasing active interface [ 1545.796328][ T733] bond12 (unregistering): Released all slaves [ 1546.005787][T10304] Bluetooth: hci2: command tx timeout [ 1546.205957][T16005] pim6reg: entered allmulticast mode [ 1546.250030][T16015] tipc: Enabling of bearer rejected, failed to enable media [ 1546.298295][T16018] netlink: 'syz.4.12047': attribute type 1 has an invalid length. [ 1547.975696][T16063] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12054'. [ 1548.075433][T10304] Bluetooth: hci5: unexpected event for opcode 0x0c6d [ 1548.525955][T15896] bridge0: port 1(bridge_slave_0) entered blocking state [ 1548.526112][T15896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1548.526282][T15896] bridge_slave_0: entered allmulticast mode [ 1548.529622][T15896] bridge_slave_0: entered promiscuous mode [ 1548.575252][T15896] bridge0: port 2(bridge_slave_1) entered blocking state [ 1548.575445][T15896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1548.575637][T15896] bridge_slave_1: entered allmulticast mode [ 1548.578534][T15896] bridge_slave_1: entered promiscuous mode [ 1548.678259][T15896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1548.691735][T15896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1548.737699][T15896] team0: Port device team_slave_0 added [ 1548.748831][T15896] team0: Port device team_slave_1 added [ 1548.787825][T15896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1548.787845][T15896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1548.787869][T15896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1548.848326][T15896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1548.848344][T15896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1548.848408][T15896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1549.855353][ T5276] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1549.942099][T15896] hsr_slave_0: entered promiscuous mode [ 1549.943487][T15896] hsr_slave_1: entered promiscuous mode [ 1549.944298][T15896] debugfs: 'hsr0' already exists in 'hsr' [ 1549.944349][T15896] Cannot create hsr debugfs directory [ 1550.203324][T16096] xfrm1: entered allmulticast mode [ 1550.277608][T16096] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12061'. [ 1552.977484][T16155] netlink: 'syz.6.12071': attribute type 4 has an invalid length. [ 1553.054292][ T733] hsr_slave_0: left promiscuous mode [ 1553.057399][T16158] netlink: 'syz.6.12071': attribute type 4 has an invalid length. [ 1553.058148][ T733] hsr_slave_1: left promiscuous mode [ 1553.088165][ T733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1553.088189][ T733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1553.165798][ T733] veth1_macvtap: left promiscuous mode [ 1553.165845][ T733] veth0_macvtap: left promiscuous mode [ 1553.166423][ T733] veth1_vlan: left promiscuous mode [ 1553.166456][ T733] veth0_vlan: left promiscuous mode [ 1553.698206][T16173] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.12074'. [ 1553.698309][T16173] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.12074'. [ 1553.938387][T16176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12074'. [ 1554.403885][ T733] team0 (unregistering): Port device macvlan0 removed [ 1554.557715][ T733] team0 (unregistering): Port device team_slave_1 removed [ 1554.580415][ T8090] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1554.600056][ T733] team0 (unregistering): Port device team_slave_0 removed [ 1555.082530][T16171] syz.4.12074 (16171) used obsolete PPPIOCDETACH ioctl [ 1555.248862][T16173] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12074'. [ 1555.279999][ T5276] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1555.558231][T16183] netlink: 'syz.6.12077': attribute type 29 has an invalid length. [ 1556.155179][T16201] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12082'. [ 1558.277393][T16247] netlink: 'syz.4.12086': attribute type 1 has an invalid length. [ 1558.354506][T16251] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1558.909715][T16253] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1558.924079][T16253] bond20: (slave bond21): making interface the new active one [ 1558.978397][T16253] bond20: (slave bond21): Enslaving as an active interface with an up link [ 1559.057029][T16262] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1559.107038][ T733] IPVS: stop unused estimator thread 0... [ 1559.345287][T16266] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12089'. [ 1559.944298][T16287] netlink: 'syz.5.12095': attribute type 64 has an invalid length. [ 1560.041015][T16292] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1560.409866][T16276] netlink: 292 bytes leftover after parsing attributes in process `syz.2.12093'. [ 1562.021962][T15896] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1562.085509][T15896] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1562.103817][T15896] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1562.138067][T15896] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1562.160328][T15896] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1562.208227][T15896] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1562.224360][T15896] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1562.257897][T15896] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1562.281117][T16328] netlink: 'syz.5.12102': attribute type 26 has an invalid length. [ 1562.281142][T16328] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12102'. [ 1562.283734][T16328] netlink: 'syz.5.12102': attribute type 26 has an invalid length. [ 1562.283753][T16328] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12102'. [ 1562.780358][T16337] netlink: 'syz.2.12103': attribute type 1 has an invalid length. [ 1562.885412][T16337] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1562.990317][T15896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1563.184956][T16340] bond1: (slave geneve2): making interface the new active one [ 1563.219513][T16340] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1563.518696][T15896] 8021q: adding VLAN 0 to HW filter on device team0 [ 1563.585956][T17402] bridge0: port 1(bridge_slave_0) entered blocking state [ 1563.586079][T17402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1563.746557][T17402] bridge0: port 2(bridge_slave_1) entered blocking state [ 1563.746678][T17402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1566.797296][T16418] netlink: 'syz.4.12120': attribute type 1 has an invalid length. [ 1567.356146][T16418] 8021q: adding VLAN 0 to HW filter on device bond22 [ 1567.644811][T16426] bond22: (slave geneve9): making interface the new active one [ 1567.696393][T16426] bond22: (slave geneve9): Enslaving as an active interface with an up link [ 1568.220211][T15896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1568.616820][T15896] veth0_vlan: entered promiscuous mode [ 1568.933094][T15896] veth1_vlan: entered promiscuous mode [ 1569.620647][T15896] veth0_macvtap: entered promiscuous mode [ 1569.720848][T15896] veth1_macvtap: entered promiscuous mode [ 1569.852398][T15896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1569.928521][T15896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1569.976317][T17395] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.993448][T17395] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.154870][T16467] ip_tables: iptables: counters copy to user failed while replacing table [ 1570.250777][T16469] netlink: 'syz.5.12131': attribute type 10 has an invalid length. [ 1570.348583][ T8093] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.349026][ T8093] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.412595][T16469] bridge0: port 3(batadv1) entered disabled state [ 1570.489794][T16469] bridge0: port 3(batadv1) entered blocking state [ 1570.489934][T16469] bridge0: port 3(batadv1) entered forwarding state [ 1570.546835][T16469] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1570.938372][T16483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12133'. [ 1571.530066][T16493] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12133'. [ 1571.668856][T16484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12133'. [ 1571.710686][T17402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1571.710712][T17402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1572.652939][T17399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1572.652965][T17399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1573.497500][T16540] netlink: 68 bytes leftover after parsing attributes in process `syz.1.12146'. [ 1575.186741][ T5630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1575.199978][ T5630] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1575.209884][ T5630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1575.223758][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1575.364900][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1576.236179][T16581] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12159'. [ 1576.236220][T16581] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12159'. [ 1576.719639][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1576.772479][T16591] ip_tables: iptables: counters copy to user failed while replacing table [ 1577.066021][ T5457] syz_tun (unregistering): left promiscuous mode [ 1577.512288][T10304] Bluetooth: hci1: command tx timeout [ 1578.390830][T16569] wg0 speed is unknown, defaulting to 1000 [ 1578.396594][T16569] wlan1 speed is unknown, defaulting to 1000 [ 1578.891154][T16629] SET target dimension over the limit! [ 1578.907476][T16628] 8021q: VLANs not supported on sit0 [ 1578.909291][T16628] Bluetooth: MGMT ver 1.23 [ 1578.910562][T16626] trusted_key: syz.5.12169 sent an empty control message without MSG_MORE. [ 1578.968534][T16629] netlink: 'syz.5.12169': attribute type 10 has an invalid length. [ 1578.988766][T16629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1579.580232][T16648] xt_MASQUERADE: bad MAP_IPS. [ 1579.595682][T10304] Bluetooth: hci1: command tx timeout [ 1580.684083][T16569] bridge0: port 1(bridge_slave_0) entered blocking state [ 1580.685627][T16569] bridge0: port 1(bridge_slave_0) entered disabled state [ 1580.685798][T16569] bridge_slave_0: entered allmulticast mode [ 1580.727279][T16569] bridge_slave_0: entered promiscuous mode [ 1580.744609][T16569] bridge0: port 2(bridge_slave_1) entered blocking state [ 1580.746648][T16569] bridge0: port 2(bridge_slave_1) entered disabled state [ 1580.746814][T16569] bridge_slave_1: entered allmulticast mode [ 1580.776564][T16569] bridge_slave_1: entered promiscuous mode [ 1580.880159][T16680] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1580.895743][T16569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1581.034011][T16569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1581.183471][T16569] team0: Port device team_slave_0 added [ 1581.210008][T16569] team0: Port device team_slave_1 added [ 1581.275866][T16690] netlink: 'syz.1.12186': attribute type 1 has an invalid length. [ 1581.453322][T16569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1581.453344][T16569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1581.453370][T16569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1581.577297][T16569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1581.577319][T16569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1581.577346][T16569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1581.674806][T10304] Bluetooth: hci1: command tx timeout [ 1581.968569][T16706] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.12188'. [ 1581.968640][T16706] openvswitch: netlink: Message has 512 unknown bytes. [ 1582.113566][T16569] hsr_slave_0: entered promiscuous mode [ 1582.137683][T16569] hsr_slave_1: entered promiscuous mode [ 1582.139797][T16569] debugfs: 'hsr0' already exists in 'hsr' [ 1582.139829][T16569] Cannot create hsr debugfs directory [ 1582.273479][T16714] netlink: 112 bytes leftover after parsing attributes in process `syz.5.12192'. [ 1582.882442][T16736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12196'. [ 1582.910167][T16725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12196'. [ 1583.215264][T16745] netlink: 256 bytes leftover after parsing attributes in process `syz.1.12199'. [ 1583.215908][T16745] netlink: 256 bytes leftover after parsing attributes in process `syz.1.12199'. [ 1583.216482][T16745] netlink: 256 bytes leftover after parsing attributes in process `syz.1.12199'. [ 1583.217052][T16745] netlink: 256 bytes leftover after parsing attributes in process `syz.1.12199'. [ 1583.217615][T16745] netlink: 256 bytes leftover after parsing attributes in process `syz.1.12199'. [ 1583.218262][T16745] netlink: 256 bytes leftover after parsing attributes in process `syz.1.12199'. [ 1583.325091][T16748] netlink: 'syz.2.12200': attribute type 1 has an invalid length. [ 1583.482679][T16748] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1583.761949][T10304] Bluetooth: hci1: command tx timeout [ 1583.870871][T16758] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 1583.899161][T16759] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 1584.073574][T16569] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.696295][T16770] netlink: 'syz.5.12205': attribute type 2 has an invalid length. [ 1584.720286][T16569] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1585.604500][ T8093] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1585.831835][T10304] Bluetooth: hci1: command tx timeout [ 1585.860957][T16569] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1585.989729][T10304] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1586.004256][T16794] gre1: entered promiscuous mode [ 1586.160360][T16799] gre1: entered promiscuous mode [ 1587.169267][T16825] __nla_validate_parse: 68 callbacks suppressed [ 1587.169289][T16825] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12219'. [ 1587.305001][T16825] bridge0: port 3(batadv1) entered blocking state [ 1587.306045][T16825] bridge0: port 3(batadv1) entered disabled state [ 1587.306210][T16825] batadv1: entered allmulticast mode [ 1587.339008][T16825] batadv1: entered promiscuous mode [ 1587.398591][T16829] netlink: 40 bytes leftover after parsing attributes in process `syz.6.12220'. [ 1588.063961][T17402] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1588.063985][T17402] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1588.196206][T16844] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12225'. [ 1588.221131][T16569] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1588.375442][T16846] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12225'. [ 1588.510626][T16569] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1588.525595][T16569] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1588.577111][T16569] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1588.582052][T16569] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1588.670525][T16569] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1588.812800][T16569] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1588.857712][T16569] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1589.269922][T16863] netlink: 'syz.1.12230': attribute type 15 has an invalid length. [ 1589.269947][T16863] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12230'. [ 1589.355053][T16866] syzkaller0: entered promiscuous mode [ 1589.355080][T16866] syzkaller0: entered allmulticast mode [ 1589.895973][T16884] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12232'. [ 1589.967281][T16884] bridge0: port 3(batadv1) entered blocking state [ 1589.967401][T16884] bridge0: port 3(batadv1) entered disabled state [ 1589.967571][T16884] batadv1: entered allmulticast mode [ 1590.029063][T16884] batadv1: entered promiscuous mode [ 1590.447140][T16569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1590.833448][T16569] 8021q: adding VLAN 0 to HW filter on device team0 [ 1590.875140][T17400] bridge0: port 1(bridge_slave_0) entered blocking state [ 1590.875256][T17400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1590.910096][T17400] bridge0: port 2(bridge_slave_1) entered blocking state [ 1590.910215][T17400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1591.624234][T17393] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1591.624258][T17393] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1592.287611][T16928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12244'. [ 1592.338322][T16928] bridge0: port 4(batadv2) entered blocking state [ 1592.340432][T16928] bridge0: port 4(batadv2) entered disabled state [ 1592.340686][T16928] batadv2: entered allmulticast mode [ 1592.388804][T16928] batadv2: entered promiscuous mode [ 1592.430382][T16930] netlink: 36 bytes leftover after parsing attributes in process `syz.6.12245'. [ 1593.299067][T16909] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1593.453622][T17395] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 1593.453646][T17395] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 1593.540048][T16952] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12251'. [ 1594.064321][T16959] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12253'. [ 1594.326915][T16569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1594.461084][T16970] netlink: 88 bytes leftover after parsing attributes in process `syz.2.12256'. [ 1594.496011][T16966] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1594.958984][T16977] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1595.390474][T16569] veth0_vlan: entered promiscuous mode [ 1595.423989][T16569] veth1_vlan: entered promiscuous mode [ 1595.637625][T16569] veth0_macvtap: entered promiscuous mode [ 1595.662349][T16985] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12261'. [ 1595.700107][T16569] veth1_macvtap: entered promiscuous mode [ 1595.855231][T16569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1595.886295][T16987] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12262'. [ 1595.921137][T16569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1596.049678][T17397] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1596.081256][T17400] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1596.083041][T17400] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1596.084337][T17400] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1596.997067][T17009] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1596.999269][T17010] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12269'. [ 1597.061421][T17400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1597.061448][T17400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1597.184899][T17017] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12273'. [ 1597.698441][T17402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1597.698467][T17402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1598.375934][T17044] SET target dimension over the limit! [ 1598.408812][T17044] sctp: [Deprecated]: syz.2.12279 (pid 17044) Use of int in max_burst socket option. [ 1598.408812][T17044] Use struct sctp_assoc_value instead [ 1598.700601][T17053] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1598.749105][T17052] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12280'. [ 1598.791752][T17051] netlink: 288 bytes leftover after parsing attributes in process `syz.2.12282'. [ 1598.925734][T17056] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12283'. [ 1600.018689][T17083] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12294'. [ 1600.560891][T17098] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12296'. [ 1600.560949][T17098] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 1600.593897][T17099] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12296'. [ 1600.593930][T17099] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12296'. [ 1600.665645][T17097] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12298'. [ 1600.800795][T17102] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12296'. [ 1600.800826][T17102] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12296'. [ 1600.853825][T17095] syzkaller0: entered promiscuous mode [ 1600.853852][T17095] syzkaller0: entered allmulticast mode [ 1600.893648][ T59] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1600.913342][ T59] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1600.919391][ T59] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1600.919433][ T59] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1602.449676][T17133] batadv0: entered promiscuous mode [ 1602.449850][T17133] macsec1: entered promiscuous mode [ 1602.466408][T17133] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1602.485734][T17133] batadv0: left promiscuous mode [ 1602.974583][T17145] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1603.504364][T17163] syzkaller1: entered promiscuous mode [ 1603.504390][T17163] syzkaller1: entered allmulticast mode [ 1603.767693][T17175] __nla_validate_parse: 5 callbacks suppressed [ 1603.767715][T17175] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12323'. [ 1603.851791][T17172] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12322'. [ 1603.851826][T17172] openvswitch: netlink: Flow key attr not present in new flow. [ 1603.877119][T17178] af_packet: packet size is too long (4294967270 > 2016) [ 1604.285118][T17184] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12327'. [ 1604.369526][T17189] xt_hashlimit: size too large, truncated to 1048576 [ 1604.399966][T10304] Bluetooth: hci0: command 0x0419 tx timeout [ 1604.636509][T17199] netlink: 260 bytes leftover after parsing attributes in process `syz.5.12333'. [ 1604.637643][T17199] netlink: 'syz.5.12333': attribute type 1 has an invalid length. [ 1604.637664][T17199] netlink: 224 bytes leftover after parsing attributes in process `syz.5.12333'. [ 1604.639018][T17199] netlink: 'syz.5.12333': attribute type 1 has an invalid length. [ 1604.669446][T17199] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1604.719250][T17199] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1605.146055][T17204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12334'. [ 1605.226723][T17204] bridge0: port 5(batadv3) entered blocking state [ 1605.227225][T17204] bridge0: port 5(batadv3) entered disabled state [ 1605.227613][T17204] batadv3: entered allmulticast mode [ 1605.230509][T17204] batadv3: entered promiscuous mode [ 1605.808485][T17222] af_packet: packet size is too long (4294967270 > 1298) [ 1605.865625][T17217] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12338'. [ 1605.988825][T17399] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 1605.988846][T17399] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 1606.632390][ T5630] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 1606.632687][ T5630] Bluetooth: hci0: command 0x0419 tx timeout [ 1607.184838][T17253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12347'. [ 1607.228179][T17253] bridge0: port 6(batadv4) entered blocking state [ 1607.228435][T17253] bridge0: port 6(batadv4) entered disabled state [ 1607.228595][T17253] batadv4: entered allmulticast mode [ 1607.270295][T17253] batadv4: entered promiscuous mode [ 1607.338131][T17257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1607.836346][T17272] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20003 [ 1607.864859][T17397] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled [ 1607.864882][T17397] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled [ 1609.753809][T17245] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1610.241461][T17288] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12353'. [ 1610.267397][T17285] af_packet: packet size is too long (4294967270 > 2016) [ 1611.152938][T17298] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12357'. [ 1611.389851][T17296] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1611.707600][T17302] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1613.089755][T17332] netlink: 'syz.4.12368': attribute type 83 has an invalid length. [ 1613.116253][T17332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12368'. [ 1613.162340][T17332] vlan2: entered promiscuous mode [ 1613.162367][T17332] bond0: entered promiscuous mode [ 1613.162381][T17332] bond_slave_0: entered promiscuous mode [ 1613.162651][T17332] bond_slave_1: entered promiscuous mode [ 1613.247108][T17336] netlink: 'syz.1.12370': attribute type 1 has an invalid length. [ 1613.260852][T17336] netlink: 'syz.1.12370': attribute type 1 has an invalid length. [ 1613.490300][T17332] syzkaller1: entered promiscuous mode [ 1613.490327][T17332] syzkaller1: entered allmulticast mode [ 1613.573390][T17345] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12371'. [ 1613.573425][T17345] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 1613.829589][T17344] FAULT_INJECTION: forcing a failure. [ 1613.829589][T17344] name failslab, interval 1, probability 0, space 0, times 0 [ 1613.829625][T17344] CPU: 1 UID: 0 PID: 17344 Comm: syz.2.12372 Not tainted syzkaller #0 PREEMPT(full) [ 1613.829647][T17344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1613.829660][T17344] Call Trace: [ 1613.829669][T17344] [ 1613.829679][T17344] dump_stack_lvl+0xe8/0x150 [ 1613.829720][T17344] should_fail_ex+0x410/0x560 [ 1613.829753][T17344] ? __alloc_skb+0x1db/0x7a0 [ 1613.829786][T17344] should_failslab+0xa8/0x100 [ 1613.829818][T17344] ? __alloc_skb+0x1db/0x7a0 [ 1613.829844][T17344] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1613.829868][T17344] ? __alloc_skb+0x18d/0x7a0 [ 1613.829896][T17344] ? __alloc_skb+0x1db/0x7a0 [ 1613.829932][T17344] __alloc_skb+0x1db/0x7a0 [ 1613.829965][T17344] rtmsg_ifinfo_build_skb+0x7f/0x260 [ 1613.830014][T17344] ? ip6_route_dev_notify+0x9a/0x5b0 [ 1613.830131][T17344] rtmsg_ifinfo+0x8c/0x1a0 [ 1613.830166][T17344] netif_state_change+0x297/0x3a0 [ 1613.830223][T17344] ? __pfx_generic_xdp_install+0x10/0x10 [ 1613.830254][T17344] ? __pfx_netif_state_change+0x10/0x10 [ 1613.830288][T17344] ? dev_change_xdp_fd+0x1ab/0x200 [ 1613.830315][T17344] do_setlink+0x3c57/0x4670 [ 1613.830346][T17344] ? lockdep_hardirqs_on+0x7b/0x110 [ 1613.830387][T17344] ? __lock_acquire+0x747/0x2de0 [ 1613.830416][T17344] ? __pfx_do_setlink+0x10/0x10 [ 1613.830459][T17344] ? do_raw_spin_lock+0x12b/0x2f0 [ 1613.830507][T17344] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1613.830535][T17344] ? __mutex_lock+0x1096/0x1550 [ 1613.830564][T17344] ? __mutex_lock+0x5d4/0x1550 [ 1613.830591][T17344] ? rtnl_newlink+0xc10/0x1c30 [ 1613.830623][T17344] ? __pfx___mutex_lock+0x10/0x10 [ 1613.830657][T17344] ? ns_capable+0x89/0xe0 [ 1613.830701][T17344] ? rtnl_nets_add+0x16c/0x300 [ 1613.830721][T17344] ? refcount_inc+0x46/0x70 [ 1613.830750][T17344] rtnl_newlink+0x146f/0x1c30 [ 1613.830795][T17344] ? __pfx_rtnl_newlink+0x10/0x10 [ 1613.830822][T17344] ? do_syscall_64+0x166/0x520 [ 1613.830844][T17344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1613.830908][T17344] ? kasan_quarantine_put+0xbb/0x1f0 [ 1613.830933][T17344] ? lockdep_hardirqs_on+0x7b/0x110 [ 1613.830959][T17344] ? nlmon_xmit+0xb0/0x100 [ 1613.831013][T17344] ? kmem_cache_free+0x182/0x650 [ 1613.831050][T17344] ? __lock_acquire+0x747/0x2de0 [ 1613.831083][T17344] ? __local_bh_enable_ip+0xd6/0x140 [ 1613.831108][T17344] ? lockdep_hardirqs_on+0x7b/0x110 [ 1613.831129][T17344] ? __dev_queue_xmit+0x29b/0x3920 [ 1613.831150][T17344] ? __local_bh_enable_ip+0xd6/0x140 [ 1613.831191][T17344] ? lock_acquire+0x115/0x350 [ 1613.831213][T17344] ? __pfx_rtnl_newlink+0x10/0x10 [ 1613.831256][T17344] ? __pfx_rtnl_newlink+0x10/0x10 [ 1613.831283][T17344] rtnetlink_rcv_msg+0x802/0xc00 [ 1613.831317][T17344] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1613.831346][T17344] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1613.831372][T17344] ? ref_tracker_free+0x689/0x830 [ 1613.831402][T17344] ? __pfx_ref_tracker_free+0x10/0x10 [ 1613.831443][T17344] netlink_rcv_skb+0x226/0x4a0 [ 1613.831469][T17344] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1613.831500][T17344] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1613.831539][T17344] ? netlink_deliver_tap+0x2e/0x1b0 [ 1613.831562][T17344] ? netlink_deliver_tap+0x2e/0x1b0 [ 1613.831592][T17344] netlink_unicast+0x7bd/0x940 [ 1613.831627][T17344] netlink_sendmsg+0x813/0xb40 [ 1613.831662][T17344] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1613.831694][T17344] ? apparmor_socket_sendmsg+0x98/0x360 [ 1613.831726][T17344] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1613.831750][T17344] sock_sendmsg_nosec+0x13a/0x180 [ 1613.831779][T17344] ____sys_sendmsg+0x54e/0x850 [ 1613.831808][T17344] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1613.831841][T17344] ? import_iovec+0x73/0xa0 [ 1613.831876][T17344] ___sys_sendmsg+0x2a5/0x360 [ 1613.831897][T17344] ? __lock_acquire+0x747/0x2de0 [ 1613.831925][T17344] ? __pfx____sys_sendmsg+0x10/0x10 [ 1613.831987][T17344] ? __fget_files+0x2a/0x420 [ 1613.832007][T17344] ? __fget_files+0x3a2/0x420 [ 1613.832039][T17344] __x64_sys_sendmsg+0x1b1/0x290 [ 1613.832065][T17344] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1613.832111][T17344] do_syscall_64+0x166/0x520 [ 1613.832132][T17344] ? trace_irq_disable+0x3b/0x140 [ 1613.832155][T17344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1613.832183][T17344] ? clear_bhb_loop+0x70/0xc0 [ 1613.832209][T17344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1613.832230][T17344] RIP: 0033:0x7fe2cab9e1d9 [ 1613.832252][T17344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1613.832269][T17344] RSP: 002b:00007fe2cb9d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1613.832293][T17344] RAX: ffffffffffffffda RBX: 00007fe2cae25fa0 RCX: 00007fe2cab9e1d9 [ 1613.832308][T17344] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1613.832322][T17344] RBP: 00007fe2cb9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1613.832335][T17344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1613.832347][T17344] R13: 00007fe2cae26038 R14: 00007fe2cae25fa0 R15: 00007ffc84540078 [ 1613.832382][T17344] [ 1614.595032][T17344] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1614.596197][T17347] netlink: 'syz.5.12373': attribute type 3 has an invalid length. [ 1615.023010][T17358] netlink: 80 bytes leftover after parsing attributes in process `syz.4.12375'. [ 1615.023042][T17358] netlink: 80 bytes leftover after parsing attributes in process `syz.4.12375'. [ 1615.024085][T17358] netlink: 80 bytes leftover after parsing attributes in process `syz.4.12375'. [ 1615.024106][T17358] netlink: 80 bytes leftover after parsing attributes in process `syz.4.12375'. [ 1615.025010][T17358] netlink: 80 bytes leftover after parsing attributes in process `syz.4.12375'. [ 1615.025030][T17358] netlink: 80 bytes leftover after parsing attributes in process `syz.4.12375'. [ 1615.119709][T17360] bridge0: port 7(batadv5) entered blocking state [ 1615.119945][T17360] bridge0: port 7(batadv5) entered disabled state [ 1615.120100][T17360] batadv5: entered allmulticast mode [ 1615.144486][T17360] batadv5: entered promiscuous mode [ 1615.258204][T17369] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1616.489109][T17408] netlink: 'syz.1.12387': attribute type 10 has an invalid length. [ 1616.529094][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1616.575448][T17408] bridge0: port 2(bridge_slave_1) entered disabled state [ 1616.576193][T17408] bridge0: port 1(bridge_slave_0) entered disabled state [ 1616.661256][T17408] bridge0: port 2(bridge_slave_1) entered blocking state [ 1616.661424][T17408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1616.661786][T17408] bridge0: port 1(bridge_slave_0) entered blocking state [ 1616.661924][T17408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1616.724492][T17411] __nla_validate_parse: 61 callbacks suppressed [ 1616.724514][T17411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12387'. [ 1616.899718][T17417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12387'. [ 1616.942603][T17418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12388'. [ 1616.942649][T17418] netlink: 'syz.2.12388': attribute type 10 has an invalid length. [ 1616.942666][T17418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12388'. [ 1616.946582][T17408] bridge0: port 2(bridge_slave_1) entered disabled state [ 1616.946845][T17408] bridge0: port 1(bridge_slave_0) entered disabled state [ 1617.084345][T17412] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12388'. [ 1617.084373][T17412] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12388'. [ 1617.086089][T17417] batadv1: left allmulticast mode [ 1617.086150][T17417] batadv1: left promiscuous mode [ 1617.086384][T17417] bridge0: port 3(batadv1) entered disabled state [ 1617.158838][T17417] bridge_slave_1: left allmulticast mode [ 1617.159166][T17417] bridge_slave_1: left promiscuous mode [ 1617.159589][T17417] bridge0: port 2(bridge_slave_1) entered disabled state [ 1617.189344][T17417] bridge_slave_0: left allmulticast mode [ 1617.190123][T17417] bridge_slave_0: left promiscuous mode [ 1617.190394][T17417] bridge0: port 1(bridge_slave_0) entered disabled state [ 1617.493647][T17431] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12391'. [ 1617.543565][T17431] bridge0: port 4(batadv2) entered blocking state [ 1617.543733][T17431] bridge0: port 4(batadv2) entered disabled state [ 1617.543909][T17431] batadv2: entered allmulticast mode [ 1617.754204][T17431] batadv2: entered promiscuous mode [ 1617.974023][T17438] netlink: 'syz.2.12394': attribute type 1 has an invalid length. [ 1617.974048][T17438] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12394'. [ 1618.019596][T17391] batman_adv: batadv5: No IGMP Querier present - multicast optimizations disabled [ 1618.019629][T17391] batman_adv: batadv5: No MLD Querier present - multicast optimizations disabled [ 1618.419210][T17391] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 1618.419234][T17391] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 1618.763319][T17438] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1619.751877][ T5630] Bluetooth: hci4: command 0x0406 tx timeout [ 1620.274725][T17480] netlink: 'syz.5.12405': attribute type 3 has an invalid length. [ 1620.274754][T17480] netlink: 244 bytes leftover after parsing attributes in process `syz.5.12405'. [ 1620.527677][T17492] Cannot find set identified by id 4 to match [ 1620.650681][T17495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12412'. [ 1621.015174][T17509] FAULT_INJECTION: forcing a failure. [ 1621.015174][T17509] name failslab, interval 1, probability 0, space 0, times 0 [ 1621.015211][T17509] CPU: 1 UID: 0 PID: 17509 Comm: syz.5.12416 Not tainted syzkaller #0 PREEMPT(full) [ 1621.015233][T17509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1621.015245][T17509] Call Trace: [ 1621.015254][T17509] [ 1621.015263][T17509] dump_stack_lvl+0xe8/0x150 [ 1621.015297][T17509] should_fail_ex+0x410/0x560 [ 1621.015332][T17509] should_failslab+0xa8/0x100 [ 1621.015363][T17509] __kmalloc_noprof+0xfe/0x720 [ 1621.015387][T17509] ? __asan_memcpy+0x40/0x70 [ 1621.015408][T17509] ? nft_trans_alloc+0x22/0x2a0 [ 1621.015506][T17509] ? nft_trans_alloc+0x22/0x2a0 [ 1621.015537][T17509] nft_trans_alloc+0x22/0x2a0 [ 1621.015565][T17509] nf_tables_newsetelem+0x298a/0x4200 [ 1621.015621][T17509] ? skb_clone+0x212/0x3a0 [ 1621.015655][T17509] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 1621.015694][T17509] ? nla_validate_array+0xfc/0x260 [ 1621.015743][T17509] ? reacquire_held_locks+0x117/0x1a0 [ 1621.015771][T17509] ? __pfx___nla_validate_parse+0x10/0x10 [ 1621.015818][T17509] ? nfnetlink_rcv+0x8d1/0x28c0 [ 1621.015847][T17509] ? lock_acquire+0x115/0x350 [ 1621.015870][T17509] ? nfnl_pernet+0x23/0x240 [ 1621.015900][T17509] ? __nla_parse+0x40/0x60 [ 1621.015935][T17509] nfnetlink_rcv+0x1288/0x28c0 [ 1621.015997][T17509] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1621.016040][T17509] ? ref_tracker_free+0x689/0x830 [ 1621.016097][T17509] ? skb_clone+0x246/0x3a0 [ 1621.016123][T17509] ? __netlink_deliver_tap+0x811/0x860 [ 1621.016158][T17509] ? netlink_deliver_tap+0x2e/0x1b0 [ 1621.016182][T17509] ? netlink_deliver_tap+0x2e/0x1b0 [ 1621.016213][T17509] netlink_unicast+0x7bd/0x940 [ 1621.016249][T17509] netlink_sendmsg+0x813/0xb40 [ 1621.016284][T17509] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1621.016319][T17509] ? apparmor_socket_sendmsg+0x98/0x360 [ 1621.016349][T17509] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1621.016371][T17509] sock_sendmsg_nosec+0x13a/0x180 [ 1621.016401][T17509] ____sys_sendmsg+0x54e/0x850 [ 1621.016429][T17509] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1621.016461][T17509] ? import_iovec+0x73/0xa0 [ 1621.016496][T17509] ___sys_sendmsg+0x2a5/0x360 [ 1621.016517][T17509] ? __lock_acquire+0x747/0x2de0 [ 1621.016545][T17509] ? __pfx____sys_sendmsg+0x10/0x10 [ 1621.016609][T17509] ? __fget_files+0x2a/0x420 [ 1621.016627][T17509] ? __fget_files+0x3a2/0x420 [ 1621.016660][T17509] __x64_sys_sendmsg+0x1b1/0x290 [ 1621.016684][T17509] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1621.016730][T17509] do_syscall_64+0x166/0x520 [ 1621.016754][T17509] ? trace_irq_disable+0x3b/0x140 [ 1621.016775][T17509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1621.016805][T17509] ? clear_bhb_loop+0x70/0xc0 [ 1621.016831][T17509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1621.016852][T17509] RIP: 0033:0x7f7e6439e1d9 [ 1621.016873][T17509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1621.016890][T17509] RSP: 002b:00007f7e6523f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1621.016914][T17509] RAX: ffffffffffffffda RBX: 00007f7e64625fa0 RCX: 00007f7e6439e1d9 [ 1621.016929][T17509] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1621.016943][T17509] RBP: 00007f7e6523f090 R08: 0000000000000000 R09: 0000000000000000 [ 1621.016955][T17509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1621.016968][T17509] R13: 00007f7e64626038 R14: 00007f7e64625fa0 R15: 00007ffea7bf14f8 [ 1621.017005][T17509] [ 1621.831108][T17515] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12419'. [ 1621.832325][T17515] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12419'. [ 1622.460596][T17530] netlink: 'syz.1.12423': attribute type 1 has an invalid length. [ 1622.858881][T17545] netlink: 'syz.5.12426': attribute type 11 has an invalid length. [ 1623.085539][T17549] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12428'. [ 1623.167968][T17530] bond1: entered promiscuous mode [ 1623.168513][T17530] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1623.269452][T17559] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.12430'. [ 1623.375767][T17535] bond1: (slave bridge0): making interface the new active one [ 1623.375794][T17535] bridge0: entered promiscuous mode [ 1623.378255][T17535] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 1623.447776][T17543] ipvlan2: entered allmulticast mode [ 1623.447801][T17543] bond1: entered allmulticast mode [ 1623.447814][T17543] bridge0: entered allmulticast mode [ 1623.448139][T17543] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1623.448167][T17543] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1623.538857][T17569] FAULT_INJECTION: forcing a failure. [ 1623.538857][T17569] name failslab, interval 1, probability 0, space 0, times 0 [ 1623.538890][T17569] CPU: 1 UID: 0 PID: 17569 Comm: syz.4.12431 Not tainted syzkaller #0 PREEMPT(full) [ 1623.538913][T17569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1623.538925][T17569] Call Trace: [ 1623.538934][T17569] [ 1623.538944][T17569] dump_stack_lvl+0xe8/0x150 [ 1623.538978][T17569] should_fail_ex+0x410/0x560 [ 1623.539011][T17569] should_failslab+0xa8/0x100 [ 1623.539041][T17569] __kmalloc_cache_noprof+0xa3/0x600 [ 1623.539065][T17569] ? nfnetlink_rcv+0x1021/0x28c0 [ 1623.539085][T17569] ? nfnetlink_rcv+0x1021/0x28c0 [ 1623.539113][T17569] nfnetlink_rcv+0x1021/0x28c0 [ 1623.539181][T17569] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1623.539220][T17569] ? ref_tracker_free+0x689/0x830 [ 1623.539275][T17569] ? skb_clone+0x246/0x3a0 [ 1623.539302][T17569] ? __netlink_deliver_tap+0x811/0x860 [ 1623.539336][T17569] ? netlink_deliver_tap+0x2e/0x1b0 [ 1623.539359][T17569] ? netlink_deliver_tap+0x2e/0x1b0 [ 1623.539389][T17569] netlink_unicast+0x7bd/0x940 [ 1623.539422][T17569] netlink_sendmsg+0x813/0xb40 [ 1623.539457][T17569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1623.539490][T17569] ? apparmor_socket_sendmsg+0x98/0x360 [ 1623.539520][T17569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1623.539542][T17569] sock_sendmsg_nosec+0x13a/0x180 [ 1623.539575][T17569] ____sys_sendmsg+0x54e/0x850 [ 1623.539603][T17569] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1623.539634][T17569] ? import_iovec+0x73/0xa0 [ 1623.539667][T17569] ___sys_sendmsg+0x2a5/0x360 [ 1623.539687][T17569] ? __lock_acquire+0x747/0x2de0 [ 1623.539714][T17569] ? __pfx____sys_sendmsg+0x10/0x10 [ 1623.539776][T17569] ? __fget_files+0x2a/0x420 [ 1623.539794][T17569] ? __fget_files+0x3a2/0x420 [ 1623.539825][T17569] __x64_sys_sendmsg+0x1b1/0x290 [ 1623.539849][T17569] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1623.539894][T17569] do_syscall_64+0x166/0x520 [ 1623.539917][T17569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1623.539938][T17569] ? clear_bhb_loop+0x70/0xc0 [ 1623.539963][T17569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1623.539982][T17569] RIP: 0033:0x7f8235f9e1d9 [ 1623.540002][T17569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1623.540018][T17569] RSP: 002b:00007f8236dd4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1623.540041][T17569] RAX: ffffffffffffffda RBX: 00007f8236225fa0 RCX: 00007f8235f9e1d9 [ 1623.540055][T17569] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1623.540068][T17569] RBP: 00007f8236dd4090 R08: 0000000000000000 R09: 0000000000000000 [ 1623.540081][T17569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1623.540093][T17569] R13: 00007f8236226038 R14: 00007f8236225fa0 R15: 00007ffd35874608 [ 1623.540127][T17569] [ 1624.559865][T17575] netlink: 80 bytes leftover after parsing attributes in process `syz.4.12432'. [ 1624.559898][T17575] netlink: 80 bytes leftover after parsing attributes in process `syz.4.12432'. [ 1625.460378][T17611] Unsupported ieee802154 address type: 0 [ 1625.504608][T17611] netlink: 'syz.5.12442': attribute type 21 has an invalid length. [ 1625.504702][T17611] netlink: 132 bytes leftover after parsing attributes in process `syz.5.12442'. [ 1625.801438][T17621] FAULT_INJECTION: forcing a failure. [ 1625.801438][T17621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1625.801474][T17621] CPU: 0 UID: 0 PID: 17621 Comm: syz.1.12443 Not tainted syzkaller #0 PREEMPT(full) [ 1625.801498][T17621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1625.801509][T17621] Call Trace: [ 1625.801518][T17621] [ 1625.801528][T17621] dump_stack_lvl+0xe8/0x150 [ 1625.801565][T17621] should_fail_ex+0x410/0x560 [ 1625.801608][T17621] _copy_to_user+0x31/0xb0 [ 1625.801642][T17621] simple_read_from_buffer+0xe1/0x170 [ 1625.801680][T17621] proc_fail_nth_read+0x1bb/0x230 [ 1625.801702][T17621] ? common_file_perm+0x20e/0x2b0 [ 1625.801734][T17621] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1625.801766][T17621] ? rw_verify_area+0x24a/0x4c0 [ 1625.801791][T17621] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1625.801813][T17621] vfs_read+0x213/0xa80 [ 1625.801841][T17621] ? __pfx___mutex_lock+0x10/0x10 [ 1625.801866][T17621] ? __pfx_vfs_read+0x10/0x10 [ 1625.801890][T17621] ? __fget_files+0x2a/0x420 [ 1625.801915][T17621] ? __fget_files+0x3a2/0x420 [ 1625.801933][T17621] ? __fget_files+0x2a/0x420 [ 1625.801963][T17621] ksys_read+0x150/0x270 [ 1625.801987][T17621] ? __pfx_ksys_read+0x10/0x10 [ 1625.802022][T17621] do_syscall_64+0x166/0x520 [ 1625.802044][T17621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1625.802065][T17621] ? clear_bhb_loop+0x70/0xc0 [ 1625.802090][T17621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1625.802111][T17621] RIP: 0033:0x7fc0f595ea0e [ 1625.802133][T17621] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1625.802151][T17621] RSP: 002b:00007fc0f68aefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1625.802173][T17621] RAX: ffffffffffffffda RBX: 00007fc0f68af6c0 RCX: 00007fc0f595ea0e [ 1625.802188][T17621] RDX: 000000000000000f RSI: 00007fc0f68af0a0 RDI: 0000000000000004 [ 1625.802202][T17621] RBP: 00007fc0f68af090 R08: 0000000000000000 R09: 0000000000000000 [ 1625.802214][T17621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1625.802227][T17621] R13: 00007fc0f5c26038 R14: 00007fc0f5c25fa0 R15: 00007ffee5713358 [ 1625.802264][T17621] [ 1626.063147][T17623] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12444'. [ 1626.063175][T17623] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12444'. [ 1627.213754][T17664] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12453'. [ 1627.336542][T17672] netlink: del zone limit has 8 unknown bytes [ 1627.449742][T17667] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12456'. [ 1627.481082][T17679] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12456'. [ 1627.768973][T17687] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.12462'. [ 1627.769821][T17688] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.12462'. [ 1627.899186][T17691] netlink: 'syz.4.12463': attribute type 83 has an invalid length. [ 1628.027154][T17694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12465'. [ 1628.910968][T17716] netlink: 'syz.4.12473': attribute type 1 has an invalid length. [ 1628.937989][T17716] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12473'. [ 1631.426625][T17764] syzkaller0: Caught tx_queue_len zero misconfig [ 1631.463377][T17764] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12490'. [ 1631.839356][T17771] netlink: 13 bytes leftover after parsing attributes in process `syz.1.12492'. [ 1632.275512][T17789] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12496'. [ 1632.275539][T17789] openvswitch: netlink: Flow actions attr not present in new flow. [ 1632.736349][T17800] syz_tun: mtu less than device minimum [ 1633.317530][T17809] netlink: 76 bytes leftover after parsing attributes in process `syz.4.12499'. [ 1633.465771][T17816] netlink: 76 bytes leftover after parsing attributes in process `syz.4.12499'. [ 1633.810851][T17829] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1633.837691][T17829] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1633.981490][T17832] netlink: 76 bytes leftover after parsing attributes in process `syz.4.12504'. [ 1634.656328][T17856] syzkaller1: entered promiscuous mode [ 1634.656562][T17856] syzkaller1: entered allmulticast mode [ 1635.110362][T17866] netlink: 'syz.5.12513': attribute type 58 has an invalid length. [ 1635.110390][T17866] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12513'. [ 1635.151867][T17875] netlink: 'syz.4.12514': attribute type 4 has an invalid length. [ 1635.205221][T17879] netlink: 'syz.4.12514': attribute type 4 has an invalid length. [ 1635.259222][T17878] ip_tables: iptables: counters copy to user failed while replacing table [ 1635.955366][T17885] syz_tun: entered allmulticast mode [ 1636.038772][T17888] bridge0: port 2(wlan0) entered blocking state [ 1636.039325][T17888] bridge0: port 2(wlan0) entered disabled state [ 1636.039691][T17888] mac80211_hwsim hwsim98 wlan0: entered allmulticast mode [ 1636.073850][T17888] mac80211_hwsim hwsim98 wlan0: entered promiscuous mode [ 1636.101105][T17888] bridge0: port 2(wlan0) entered blocking state [ 1636.101338][T17888] bridge0: port 2(wlan0) entered forwarding state [ 1636.403966][T17885] openvswitch: netlink: IPv4 tun info is not correct [ 1636.430716][T17887] syzkaller0: entered promiscuous mode [ 1636.430744][T17887] syzkaller0: entered allmulticast mode [ 1636.547482][T17904] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12519'. [ 1636.575158][T17900] macsec1: entered promiscuous mode [ 1636.646075][T17906] netlink: 'syz.1.12521': attribute type 1 has an invalid length. [ 1636.774008][T17910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12521'. [ 1644.460348][T17881] syz_tun: left allmulticast mode [ 1644.670014][T17910] bond2: (slave bridge1): making interface the new active one [ 1644.689897][T17910] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 1644.932026][T17943] netlink: 'syz.4.12529': attribute type 1 has an invalid length. [ 1645.005925][T17943] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1645.064960][T17943] bond1: (slave geneve2): making interface the new active one [ 1645.067237][T17943] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1646.027490][T17975] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12536'. [ 1647.558809][T17395] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1647.573618][T18004] netlink: 'syz.2.12543': attribute type 1 has an invalid length. [ 1647.759474][T18010] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12545'. [ 1647.820732][T18004] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1647.977716][T18011] bond5: (slave geneve5): making interface the new active one [ 1648.019196][T18011] bond5: (slave geneve5): Enslaving as an active interface with an up link [ 1648.539414][T18030] syzkaller1: entered promiscuous mode [ 1648.539485][T18030] syzkaller1: entered allmulticast mode [ 1648.827284][T18034] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12554'. [ 1648.827312][T18034] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12554'. [ 1648.827337][T18034] netlink: 'syz.5.12554': attribute type 15 has an invalid length. [ 1649.021035][T18034] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12554'. [ 1649.021065][T18034] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12554'. [ 1649.021089][T18034] netlink: 'syz.5.12554': attribute type 15 has an invalid length. [ 1649.074242][T17395] netdevsim netdevsim5 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 1649.075267][T17395] netdevsim netdevsim5 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 1649.075304][T17395] netdevsim netdevsim5 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 1649.395690][T18041] netlink: Conntrack attr has 1 unknown bytes [ 1649.395733][T18041] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1649.527909][T18040] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1649.915228][T18053] batman_adv: batadv0: Adding interface: syz_tun [ 1649.915248][T18053] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1649.915276][T18053] batman_adv: batadv0: Interface activated: syz_tun [ 1650.147611][T18060] netlink: 'syz.1.12562': attribute type 1 has an invalid length. [ 1650.208428][T18060] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1650.326281][T18067] netlink: 32 bytes leftover after parsing attributes in process `syz.5.12565'. [ 1650.404989][T18072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12563'. [ 1650.566702][T18062] bond3: (slave geneve2): making interface the new active one [ 1650.590998][T18062] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1650.719122][T18072] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1650.728040][T18067] ip_vti0: entered promiscuous mode [ 1650.765943][T18067] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12565'. [ 1650.993720][T18088] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12570'. [ 1651.325798][T18099] sctp: [Deprecated]: syz.4.12569 (pid 18099) Use of int in max_burst socket option deprecated. [ 1651.325798][T18099] Use struct sctp_assoc_value instead [ 1651.585835][T18110] FAULT_INJECTION: forcing a failure. [ 1651.585835][T18110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1651.585878][T18110] CPU: 1 UID: 0 PID: 18110 Comm: syz.6.12575 Not tainted syzkaller #0 PREEMPT(full) [ 1651.585901][T18110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1651.585913][T18110] Call Trace: [ 1651.585923][T18110] [ 1651.585936][T18110] dump_stack_lvl+0xe8/0x150 [ 1651.585971][T18110] should_fail_ex+0x410/0x560 [ 1651.586004][T18110] _copy_from_iter+0x1d3/0x1660 [ 1651.586032][T18110] ? __alloc_skb+0x27a/0x7a0 [ 1651.586062][T18110] ? __alloc_skb+0x27a/0x7a0 [ 1651.586091][T18110] ? __alloc_skb+0x27a/0x7a0 [ 1651.586119][T18110] ? __pfx__copy_from_iter+0x10/0x10 [ 1651.586144][T18110] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1651.586165][T18110] ? __alloc_skb+0x27a/0x7a0 [ 1651.586191][T18110] ? __alloc_skb+0x27a/0x7a0 [ 1651.586223][T18110] ? netlink_sendmsg+0x650/0xb40 [ 1651.586247][T18110] ? skb_put+0x112/0x210 [ 1651.586269][T18110] netlink_sendmsg+0x6c0/0xb40 [ 1651.586303][T18110] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1651.586336][T18110] ? apparmor_socket_sendmsg+0x98/0x360 [ 1651.586364][T18110] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1651.586386][T18110] sock_sendmsg_nosec+0x13a/0x180 [ 1651.586415][T18110] ____sys_sendmsg+0x54e/0x850 [ 1651.586442][T18110] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1651.586473][T18110] ? import_iovec+0x73/0xa0 [ 1651.586506][T18110] ___sys_sendmsg+0x2a5/0x360 [ 1651.586525][T18110] ? __lock_acquire+0x747/0x2de0 [ 1651.586552][T18110] ? __pfx____sys_sendmsg+0x10/0x10 [ 1651.586611][T18110] ? __fget_files+0x2a/0x420 [ 1651.586630][T18110] ? __fget_files+0x3a2/0x420 [ 1651.586660][T18110] __x64_sys_sendmsg+0x1b1/0x290 [ 1651.586685][T18110] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1651.586728][T18110] do_syscall_64+0x166/0x520 [ 1651.586749][T18110] ? trace_irq_disable+0x3b/0x140 [ 1651.586771][T18110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1651.586791][T18110] ? clear_bhb_loop+0x70/0xc0 [ 1651.586815][T18110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1651.586834][T18110] RIP: 0033:0x7f0f1ff9e1d9 [ 1651.586854][T18110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1651.586878][T18110] RSP: 002b:00007f0f20e8a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1651.586901][T18110] RAX: ffffffffffffffda RBX: 00007f0f20225fa0 RCX: 00007f0f1ff9e1d9 [ 1651.586915][T18110] RDX: 0000000000000080 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1651.586929][T18110] RBP: 00007f0f20e8a090 R08: 0000000000000000 R09: 0000000000000000 [ 1651.586941][T18110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1651.586953][T18110] R13: 00007f0f20226038 R14: 00007f0f20225fa0 R15: 00007ffc29fafec8 [ 1651.586987][T18110] [ 1651.984062][T18113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12576'. [ 1652.045163][T18113] bond4: entered promiscuous mode [ 1652.045707][T18113] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1652.264496][T18112] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1652.269618][T18112] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1652.300745][T18112] bond4: (slave wireguard0): Error -95 calling set_mac_address [ 1652.480346][T18123] netlink: 'syz.2.12579': attribute type 15 has an invalid length. [ 1653.552755][T18135] xt_CT: No such helper "snmp_trap" [ 1653.681490][ T31] audit: type=1107 audit(1791875440.662:82): pid=18139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ЩÞéŸÿVyZOp)Éç†ýÉn×C'eˆ·ÅTkHôcú}lÓU,8mȹ’5¦ ¿2Á4‘4Ù«ÿ«[ůOûI=Pýý3î—t S6‚A᫤À*Ù¥ÉYb^Hù}i|—gKœ“ÝHÈTñfêl.ȶcäìRCL{ü¿j ëúêZÛ@z/ž­û–ˆ!åí8Ç.Ó­7òð¿ö`RÕó‹Nb^§`Œâ»ôüLŒÙõÿ!ãÁŸâ{fq¿5»Rß÷ÊÑçÉÌ[pÉ’ìÌ' [ 1653.840893][T18145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12587'. [ 1653.840937][T18145] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1654.036026][T18149] FAULT_INJECTION: forcing a failure. [ 1654.036026][T18149] name failslab, interval 1, probability 0, space 0, times 0 [ 1654.036061][T18149] CPU: 1 UID: 0 PID: 18149 Comm: syz.1.12589 Not tainted syzkaller #0 PREEMPT(full) [ 1654.036083][T18149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1654.036096][T18149] Call Trace: [ 1654.036105][T18149] [ 1654.036114][T18149] dump_stack_lvl+0xe8/0x150 [ 1654.036148][T18149] should_fail_ex+0x410/0x560 [ 1654.036181][T18149] should_failslab+0xa8/0x100 [ 1654.036209][T18149] ? skb_clone+0x212/0x3a0 [ 1654.036232][T18149] kmem_cache_alloc_noprof+0xa1/0x600 [ 1654.036257][T18149] ? skb_clone+0x212/0x3a0 [ 1654.036285][T18149] skb_clone+0x212/0x3a0 [ 1654.036311][T18149] __netlink_deliver_tap+0x413/0x860 [ 1654.036349][T18149] ? netlink_deliver_tap+0x2e/0x1b0 [ 1654.036375][T18149] netlink_deliver_tap+0x19c/0x1b0 [ 1654.036433][T18149] netlink_unicast+0x781/0x940 [ 1654.036469][T18149] netlink_sendmsg+0x813/0xb40 [ 1654.036503][T18149] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1654.036537][T18149] ? apparmor_socket_sendmsg+0x98/0x360 [ 1654.036566][T18149] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1654.036588][T18149] sock_sendmsg_nosec+0x13a/0x180 [ 1654.036618][T18149] ____sys_sendmsg+0x54e/0x850 [ 1654.036645][T18149] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1654.036677][T18149] ? import_iovec+0x73/0xa0 [ 1654.036710][T18149] ___sys_sendmsg+0x2a5/0x360 [ 1654.036730][T18149] ? __lock_acquire+0x747/0x2de0 [ 1654.036757][T18149] ? __pfx____sys_sendmsg+0x10/0x10 [ 1654.036822][T18149] ? __fget_files+0x2a/0x420 [ 1654.036840][T18149] ? __fget_files+0x3a2/0x420 [ 1654.036871][T18149] __x64_sys_sendmsg+0x1b1/0x290 [ 1654.036896][T18149] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1654.036950][T18149] do_syscall_64+0x166/0x520 [ 1654.036972][T18149] ? trace_irq_disable+0x3b/0x140 [ 1654.036994][T18149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1654.037015][T18149] ? clear_bhb_loop+0x70/0xc0 [ 1654.037039][T18149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1654.037059][T18149] RIP: 0033:0x7fc0f599e1d9 [ 1654.037078][T18149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1654.037095][T18149] RSP: 002b:00007fc0f68af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1654.037117][T18149] RAX: ffffffffffffffda RBX: 00007fc0f5c25fa0 RCX: 00007fc0f599e1d9 [ 1654.037132][T18149] RDX: 0000000000000080 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1654.037145][T18149] RBP: 00007fc0f68af090 R08: 0000000000000000 R09: 0000000000000000 [ 1654.037157][T18149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1654.037169][T18149] R13: 00007fc0f5c26038 R14: 00007fc0f5c25fa0 R15: 00007ffee5713358 [ 1654.037203][T18149] [ 1654.509163][T18153] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12590'. [ 1654.896714][T13994] hid-generic 0005:0018:63AA.0004: item fetching failed at offset 4/5 [ 1654.949942][T13994] hid-generic 0005:0018:63AA.0004: probe with driver hid-generic failed with error -22 [ 1655.206732][T18172] ip6t_hbh: Not strict - not implemented [ 1655.667592][T18179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12596'. [ 1656.436516][T18205] netlink: 88 bytes leftover after parsing attributes in process `syz.5.12603'. [ 1656.439600][T18206] netlink: 'syz.4.12602': attribute type 1 has an invalid length. [ 1656.440138][T18200] netlink: 'syz.4.12602': attribute type 1 has an invalid length. [ 1657.053306][T18227] ip_tables: iptables: counters copy to user failed while replacing table [ 1657.123006][T18229] netlink: 'syz.1.12610': attribute type 1 has an invalid length. [ 1657.252355][T18219] gretap0: entered promiscuous mode [ 1658.077275][T18253] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12617'. [ 1658.249539][T18252] FAULT_INJECTION: forcing a failure. [ 1658.249539][T18252] name failslab, interval 1, probability 0, space 0, times 0 [ 1658.249574][T18252] CPU: 1 UID: 0 PID: 18252 Comm: syz.2.12616 Not tainted syzkaller #0 PREEMPT(full) [ 1658.249597][T18252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1658.249608][T18252] Call Trace: [ 1658.249618][T18252] [ 1658.249631][T18252] dump_stack_lvl+0xe8/0x150 [ 1658.249665][T18252] should_fail_ex+0x410/0x560 [ 1658.249698][T18252] should_failslab+0xa8/0x100 [ 1658.249725][T18252] ? skb_clone+0x212/0x3a0 [ 1658.249748][T18252] kmem_cache_alloc_noprof+0xa1/0x600 [ 1658.249772][T18252] ? skb_clone+0x212/0x3a0 [ 1658.249802][T18252] skb_clone+0x212/0x3a0 [ 1658.249827][T18252] __netlink_deliver_tap+0x413/0x860 [ 1658.249865][T18252] ? netlink_deliver_tap+0x2e/0x1b0 [ 1658.249890][T18252] netlink_deliver_tap+0x19c/0x1b0 [ 1658.249916][T18252] netlink_sendskb+0x68/0x140 [ 1658.249941][T18252] netlink_rcv_skb+0x2a4/0x4a0 [ 1658.249966][T18252] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1658.250006][T18252] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1658.250045][T18252] ? netlink_deliver_tap+0x2e/0x1b0 [ 1658.250068][T18252] ? netlink_deliver_tap+0x2e/0x1b0 [ 1658.250098][T18252] netlink_unicast+0x7bd/0x940 [ 1658.250131][T18252] netlink_sendmsg+0x813/0xb40 [ 1658.250166][T18252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1658.250199][T18252] ? apparmor_socket_sendmsg+0x98/0x360 [ 1658.250228][T18252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1658.250251][T18252] sock_sendmsg_nosec+0x13a/0x180 [ 1658.250280][T18252] ____sys_sendmsg+0x54e/0x850 [ 1658.250308][T18252] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1658.250340][T18252] ? import_iovec+0x73/0xa0 [ 1658.250374][T18252] ___sys_sendmsg+0x2a5/0x360 [ 1658.250393][T18252] ? __lock_acquire+0x747/0x2de0 [ 1658.250421][T18252] ? __pfx____sys_sendmsg+0x10/0x10 [ 1658.250482][T18252] ? __fget_files+0x2a/0x420 [ 1658.250500][T18252] ? __fget_files+0x3a2/0x420 [ 1658.250531][T18252] __x64_sys_sendmsg+0x1b1/0x290 [ 1658.250556][T18252] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1658.250601][T18252] do_syscall_64+0x166/0x520 [ 1658.250630][T18252] ? trace_irq_disable+0x3b/0x140 [ 1658.250651][T18252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1658.250672][T18252] ? clear_bhb_loop+0x70/0xc0 [ 1658.250697][T18252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1658.250717][T18252] RIP: 0033:0x7fe2cab9e1d9 [ 1658.250737][T18252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1658.250753][T18252] RSP: 002b:00007fe2cb9d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1658.250775][T18252] RAX: ffffffffffffffda RBX: 00007fe2cae25fa0 RCX: 00007fe2cab9e1d9 [ 1658.250790][T18252] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000006 [ 1658.250803][T18252] RBP: 00007fe2cb9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1658.250816][T18252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1658.250828][T18252] R13: 00007fe2cae26038 R14: 00007fe2cae25fa0 R15: 00007ffc84540078 [ 1658.250861][T18252] [ 1659.269046][T18272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12619'. [ 1660.228574][T18299] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12625'. [ 1660.228623][T18299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12625'. [ 1660.281127][T18289] openvswitch: netlink: VXLAN extension 61 out of range max 1 [ 1660.964322][T18315] FAULT_INJECTION: forcing a failure. [ 1660.964322][T18315] name failslab, interval 1, probability 0, space 0, times 0 [ 1660.964358][T18315] CPU: 1 UID: 0 PID: 18315 Comm: syz.1.12631 Not tainted syzkaller #0 PREEMPT(full) [ 1660.964380][T18315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1660.964392][T18315] Call Trace: [ 1660.964402][T18315] [ 1660.964412][T18315] dump_stack_lvl+0xe8/0x150 [ 1660.964447][T18315] should_fail_ex+0x410/0x560 [ 1660.964480][T18315] should_failslab+0xa8/0x100 [ 1660.964518][T18315] __kmalloc_cache_noprof+0xa3/0x600 [ 1660.964542][T18315] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1660.964563][T18315] ? u32_init+0x374/0x710 [ 1660.964696][T18315] ? u32_init+0x374/0x710 [ 1660.964729][T18315] u32_init+0x374/0x710 [ 1660.964764][T18315] tcf_proto_create+0x248/0x330 [ 1660.964846][T18315] tc_new_tfilter+0x1495/0x1900 [ 1660.964885][T18315] ? __lock_acquire+0x747/0x2de0 [ 1660.964916][T18315] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1660.964958][T18315] ? lock_acquire+0x115/0x350 [ 1660.964996][T18315] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1660.965019][T18315] rtnetlink_rcv_msg+0x802/0xc00 [ 1660.965053][T18315] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1660.965081][T18315] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1660.965108][T18315] ? ref_tracker_free+0x689/0x830 [ 1660.965139][T18315] ? __pfx_ref_tracker_free+0x10/0x10 [ 1660.965178][T18315] netlink_rcv_skb+0x226/0x4a0 [ 1660.965204][T18315] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1660.965234][T18315] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1660.965272][T18315] ? netlink_deliver_tap+0x2e/0x1b0 [ 1660.965295][T18315] ? netlink_deliver_tap+0x2e/0x1b0 [ 1660.965325][T18315] netlink_unicast+0x7bd/0x940 [ 1660.965359][T18315] netlink_sendmsg+0x813/0xb40 [ 1660.965394][T18315] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1660.965428][T18315] ? apparmor_socket_sendmsg+0x98/0x360 [ 1660.965456][T18315] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1660.965478][T18315] sock_sendmsg_nosec+0x13a/0x180 [ 1660.965515][T18315] ____sys_sendmsg+0x54e/0x850 [ 1660.965543][T18315] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1660.965575][T18315] ? import_iovec+0x73/0xa0 [ 1660.965609][T18315] ___sys_sendmsg+0x2a5/0x360 [ 1660.965629][T18315] ? __lock_acquire+0x747/0x2de0 [ 1660.965655][T18315] ? __pfx____sys_sendmsg+0x10/0x10 [ 1660.965716][T18315] ? __fget_files+0x2a/0x420 [ 1660.965735][T18315] ? __fget_files+0x3a2/0x420 [ 1660.965765][T18315] __x64_sys_sendmsg+0x1b1/0x290 [ 1660.965790][T18315] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1660.965836][T18315] do_syscall_64+0x166/0x520 [ 1660.965857][T18315] ? trace_irq_disable+0x3b/0x140 [ 1660.965878][T18315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1660.965898][T18315] ? clear_bhb_loop+0x70/0xc0 [ 1660.965923][T18315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1660.965942][T18315] RIP: 0033:0x7fc0f599e1d9 [ 1660.965963][T18315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1660.965980][T18315] RSP: 002b:00007fc0f68af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1660.966002][T18315] RAX: ffffffffffffffda RBX: 00007fc0f5c25fa0 RCX: 00007fc0f599e1d9 [ 1660.966017][T18315] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000006 [ 1660.966029][T18315] RBP: 00007fc0f68af090 R08: 0000000000000000 R09: 0000000000000000 [ 1660.966042][T18315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1660.966055][T18315] R13: 00007fc0f5c26038 R14: 00007fc0f5c25fa0 R15: 00007ffee5713358 [ 1660.966089][T18315] [ 1661.582564][T17331] hid-generic 0005:0018:63AA.0005: item fetching failed at offset 4/5 [ 1661.583319][T17331] hid-generic 0005:0018:63AA.0005: probe with driver hid-generic failed with error -22 [ 1661.626619][T18325] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12634'. [ 1662.164864][T18339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12638'. [ 1662.227690][T18340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12637'. [ 1662.343826][T18339] bond5: Invalid ad_actor_system MAC address. [ 1662.343850][T18339] bond5: option ad_actor_system: invalid value (1) [ 1662.392015][T18339] bond5 (unregistering): Released all slaves [ 1662.583609][T18356] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12639'. [ 1662.585441][T18340] bridge0: port 3(batadv1) entered blocking state [ 1662.588836][T18340] bridge0: port 3(batadv1) entered disabled state [ 1662.589008][T18340] batadv1: entered allmulticast mode [ 1662.661039][T18340] batadv1: entered promiscuous mode [ 1663.220118][T18364] netlink: 'syz.1.12644': attribute type 11 has an invalid length. [ 1664.056606][T17393] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1664.056630][T17393] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1664.675388][T18386] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12651'. [ 1664.950893][T18393] netlink: 68 bytes leftover after parsing attributes in process `syz.6.12651'. [ 1665.415669][T18410] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12659'. [ 1665.745707][T18419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12662'. [ 1665.767995][T18414] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12660'. [ 1666.275580][T18433] netlink: 'syz.2.12667': attribute type 11 has an invalid length. [ 1666.275607][T18433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12667'. [ 1666.458629][T18433] netlink: 'syz.2.12667': attribute type 11 has an invalid length. [ 1666.458655][T18433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12667'. [ 1667.059330][T18454] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12671'. [ 1667.059361][T18454] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12671'. [ 1667.060925][T18459] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12675'. [ 1668.602180][T18489] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1668.706239][T18489] bond5 (unregistering): Released all slaves [ 1669.783606][T18524] __nla_validate_parse: 5 callbacks suppressed [ 1669.783627][T18524] netlink: 60 bytes leftover after parsing attributes in process `syz.5.12690'. [ 1670.221785][T18533] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12692'. [ 1672.268026][T18585] netlink: 256 bytes leftover after parsing attributes in process `syz.5.12706'. [ 1673.143933][T18602] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.12712'. [ 1673.853495][T18617] netlink: 524 bytes leftover after parsing attributes in process `syz.2.12717'. [ 1674.634934][ T5624] Bluetooth: hci1: command 0x0405 tx timeout [ 1674.762122][T18638] netlink: 144 bytes leftover after parsing attributes in process `syz.4.12726'. [ 1674.826064][T18638] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1675.060844][T18643] netlink: 'syz.5.12728': attribute type 3 has an invalid length. [ 1675.547568][T18651] syzkaller0: entered promiscuous mode [ 1675.547651][T18651] syzkaller0: entered allmulticast mode [ 1675.602372][T17393] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1675.602421][T17393] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1675.602455][T17393] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1675.602487][T17393] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1676.930087][T18689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12741'. [ 1677.006082][T18689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12741'. [ 1677.248488][T18699] netlink: 'syz.2.12745': attribute type 10 has an invalid length. [ 1677.249006][T18699] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1677.412852][T18703] syzkaller0: left promiscuous mode [ 1677.412878][T18703] syzkaller0: left allmulticast mode [ 1677.567978][T18706] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12744'. [ 1677.598122][T18706] x_tables: duplicate underflow at hook 2 [ 1678.156559][T18721] netlink: 'syz.2.12753': attribute type 1 has an invalid length. [ 1678.302074][T18721] bond6: entered promiscuous mode [ 1678.304466][T18721] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1678.378854][T18729] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12755'. [ 1678.434687][T18724] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1678.435209][T18724] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1678.435231][T18724] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1678.512393][T18724] bond6: (slave wireguard0): making interface the new active one [ 1678.512420][T18724] wireguard0: entered promiscuous mode [ 1678.545212][T18724] bond6: (slave wireguard0): Enslaving as an active interface with an up link [ 1678.786320][T18728] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12754'. [ 1678.787895][T31767] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1679.248057][T18743] netlink: 'syz.5.12759': attribute type 10 has an invalid length. [ 1679.248097][T18743] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1679.296890][T18747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12760'. [ 1679.468522][T18747] bridge0: port 4(batadv2) entered blocking state [ 1679.468662][T18747] bridge0: port 4(batadv2) entered disabled state [ 1679.468841][T18747] batadv2: entered allmulticast mode [ 1679.530248][T18747] batadv2: entered promiscuous mode [ 1679.888664][T18760] bridge0: port 8(bond0) entered blocking state [ 1679.888780][T18760] bridge0: port 8(bond0) entered disabled state [ 1679.925605][T18760] bond0: entered allmulticast mode [ 1679.925630][T18760] bond_slave_0: entered allmulticast mode [ 1679.925689][T18760] bond_slave_1: entered allmulticast mode [ 1680.060035][T18760] bond0: entered promiscuous mode [ 1680.060061][T18760] bond_slave_0: entered promiscuous mode [ 1680.060248][T18760] bond_slave_1: entered promiscuous mode [ 1680.146693][T18764] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12764'. [ 1680.151395][T18760] bridge0: port 8(bond0) entered blocking state [ 1680.151590][T18760] bridge0: port 8(bond0) entered forwarding state [ 1680.212595][T17393] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 1680.212618][T17393] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 1680.276196][T18769] xt_hashlimit: size too large, truncated to 1048576 [ 1680.577953][T18769] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1681.102456][T18794] netlink: 'syz.1.12773': attribute type 10 has an invalid length. [ 1681.203332][ T5630] Bluetooth: hci2: command 0x0406 tx timeout [ 1681.504857][T18806] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12776'. [ 1688.329984][T18794] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1688.429751][T18806] bridge0: port 5(batadv3) entered blocking state [ 1688.432703][T18806] bridge0: port 5(batadv3) entered disabled state [ 1688.434593][T18806] batadv3: entered allmulticast mode [ 1688.439985][T18806] batadv3: entered promiscuous mode [ 1689.126029][T18814] syzkaller1: entered promiscuous mode [ 1689.126053][T18814] syzkaller1: entered allmulticast mode [ 1689.157087][T18814] netlink: 'syz.6.12780': attribute type 2 has an invalid length. [ 1689.477933][T18834] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12785'. [ 1689.510840][ T8093] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 1689.510861][ T8093] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 1690.115571][T18854] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12788'. [ 1690.117061][T18851] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12788'. [ 1690.348150][T18862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12790'. [ 1690.454299][T18862] bridge0: port 5(batadv3) entered blocking state [ 1690.454505][T18862] bridge0: port 5(batadv3) entered disabled state [ 1690.454712][T18862] batadv3: entered allmulticast mode [ 1690.459332][T18862] batadv3: entered promiscuous mode [ 1690.944965][ T8093] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 1690.944988][ T8093] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 1691.097932][T18876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12793'. [ 1691.108958][T18881] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12799'. [ 1691.123637][T18876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12793'. [ 1691.148546][T18881] ip6t_rpfilter: unknown options [ 1691.339334][T18888] ip_tables: iptables: counters copy to user failed while replacing table [ 1691.368647][T18888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12800'. [ 1691.475912][T18890] netlink: 'syz.6.12797': attribute type 2 has an invalid length. [ 1691.475936][T18890] netlink: 1347 bytes leftover after parsing attributes in process `syz.6.12797'. [ 1691.749987][T18896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12801'. [ 1691.750083][T18896] bond0: left allmulticast mode [ 1691.750101][T18896] bond_slave_0: left allmulticast mode [ 1691.750540][T18896] bond_slave_1: left allmulticast mode [ 1691.760340][T18896] bond0: left promiscuous mode [ 1691.760362][T18896] bond_slave_0: left promiscuous mode [ 1691.762307][T18896] bond_slave_1: left promiscuous mode [ 1691.765503][T18896] bridge0: port 8(bond0) entered disabled state [ 1691.838837][T18896] batadv5: left allmulticast mode [ 1691.838869][T18896] batadv5: left promiscuous mode [ 1691.839113][T18896] bridge0: port 7(batadv5) entered disabled state [ 1691.869046][T18896] batadv4: left allmulticast mode [ 1691.869076][T18896] batadv4: left promiscuous mode [ 1691.869308][T18896] bridge0: port 6(batadv4) entered disabled state [ 1691.927076][T18896] batadv3: left allmulticast mode [ 1691.927105][T18896] batadv3: left promiscuous mode [ 1691.927331][T18896] bridge0: port 5(batadv3) entered disabled state [ 1691.960422][T18896] batadv2: left allmulticast mode [ 1691.960450][T18896] batadv2: left promiscuous mode [ 1691.960716][T18896] bridge0: port 4(batadv2) entered disabled state [ 1692.003414][T18896] bridge0: port 3(batadv1) entered disabled state [ 1692.022488][T18896] bridge_slave_1: left allmulticast mode [ 1692.022517][T18896] bridge_slave_1: left promiscuous mode [ 1692.022796][T18896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1692.066294][T18896] bridge_slave_0: left allmulticast mode [ 1692.066325][T18896] bridge_slave_0: left promiscuous mode [ 1692.069872][T18896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1692.228982][T18902] bridge0: port 1(batadv2) entered blocking state [ 1692.229187][T18902] bridge0: port 1(batadv2) entered disabled state [ 1692.229352][T18902] batadv2: entered allmulticast mode [ 1692.257691][T18902] batadv2: entered promiscuous mode [ 1692.738763][T17392] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 1692.738786][T17392] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 1693.399656][T18907] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1693.753492][T18913] veth3: entered promiscuous mode [ 1693.753737][T18913] veth3: entered allmulticast mode [ 1694.036557][T18932] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1694.129997][T18932] bond2 (unregistering): Released all slaves [ 1694.657762][T18948] __nla_validate_parse: 1 callbacks suppressed [ 1694.657785][T18948] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12815'. [ 1694.657801][T18948] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12815'. [ 1694.742817][T18950] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1695.186006][T18958] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1695.686564][T18973] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12826'. [ 1695.790010][T10304] Bluetooth: hci4: unexpected event for opcode 0x0c6d [ 1696.067053][T18980] batman_adv: batadv0: Adding interface: veth0 [ 1696.067074][T18980] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1696.067106][T18980] batman_adv: batadv0: Interface activated: veth0 [ 1696.107150][T18984] netlink: 63 bytes leftover after parsing attributes in process `syz.1.12829'. [ 1696.244453][T18981] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12830'. [ 1696.244534][T18981] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12830'. [ 1696.299610][T18981] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12830'. [ 1696.382869][T18981] netlink: 'syz.6.12830': attribute type 1 has an invalid length. [ 1696.382895][T18981] netlink: 224 bytes leftover after parsing attributes in process `syz.6.12830'. [ 1696.720242][T18980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1696.720271][T18980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1696.768967][T18995] netlink: 96 bytes leftover after parsing attributes in process `syz.6.12834'. [ 1696.804310][T18980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1696.804337][T18980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1696.819383][T18980] batman_adv: batadv0: Interface deactivated: veth0 [ 1696.819406][T18980] batman_adv: batadv0: Removing interface: veth0 [ 1696.842405][T18997] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12834'. [ 1696.974929][T19000] netlink: 'syz.6.12834': attribute type 16 has an invalid length. [ 1697.182378][T18995] vlan3: entered allmulticast mode [ 1697.182405][T18995] gretap0: entered allmulticast mode [ 1697.480459][T19007] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1698.815860][T19027] ip_tables: iptables: counters copy to user failed while replacing table [ 1698.828011][T19027] netlink: 'syz.4.12841': attribute type 21 has an invalid length. [ 1698.830260][T19027] netlink: 'syz.4.12841': attribute type 5 has an invalid length. [ 1699.022474][ T5630] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1699.030467][ T5630] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1699.058075][ T5630] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1699.069060][ T5630] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1699.080725][ T5630] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1699.392238][T19036] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 1700.156184][T19054] ip_tables: iptables: counters copy to user failed while replacing table [ 1700.220851][T19054] __nla_validate_parse: 3 callbacks suppressed [ 1700.220874][T19054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12847'. [ 1700.489235][T19054] 8021q: adding VLAN 0 to HW filter on device team1 [ 1700.500436][ T7837] batman_adv: batadv0: Interface deactivated: syz_tun [ 1700.566555][ T7837] batman_adv: batadv0: Removing interface: syz_tun [ 1700.955073][T19064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12850'. [ 1701.096049][T19061] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12850'. [ 1701.192652][T10304] Bluetooth: hci5: command tx timeout [ 1701.943628][T19029] wg0 speed is unknown, defaulting to 1000 [ 1701.947420][T19029] wlan1 speed is unknown, defaulting to 1000 [ 1702.458898][T19096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1702.597404][T19106] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12859'. [ 1703.000735][T19111] vlan3: entered allmulticast mode [ 1703.000762][T19111] bond0: entered allmulticast mode [ 1703.000775][T19111] bond_slave_0: entered allmulticast mode [ 1703.000791][T19111] bond_slave_1: entered allmulticast mode [ 1703.273039][T10304] Bluetooth: hci5: command tx timeout [ 1704.327458][T19029] bridge0: port 1(bridge_slave_0) entered blocking state [ 1704.330930][T19029] bridge0: port 1(bridge_slave_0) entered disabled state [ 1704.341045][T19143] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12867'. [ 1704.360433][T10304] Bluetooth: hci1: unexpected event for opcode 0x0c6d [ 1704.371661][T19029] bridge_slave_0: entered allmulticast mode [ 1704.375061][T19029] bridge_slave_0: entered promiscuous mode [ 1704.520813][T19029] bridge0: port 2(bridge_slave_1) entered blocking state [ 1704.531950][T19029] bridge0: port 2(bridge_slave_1) entered disabled state [ 1704.532337][T19029] bridge_slave_1: entered allmulticast mode [ 1704.572351][T19029] bridge_slave_1: entered promiscuous mode [ 1704.658268][T19147] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12869'. [ 1704.778522][T19151] netlink: 176 bytes leftover after parsing attributes in process `syz.6.12868'. [ 1705.252181][T19029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1705.284385][T19029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1705.352462][T10304] Bluetooth: hci5: command tx timeout [ 1705.583454][T19029] team0: Port device team_slave_0 added [ 1705.590114][T19029] team0: Port device team_slave_1 added [ 1705.723826][T19165] netlink: 4912 bytes leftover after parsing attributes in process `syz.4.12875'. [ 1705.829418][T19029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1705.829439][T19029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1705.829465][T19029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1705.910501][T19164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12876'. [ 1705.924483][T19164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12876'. [ 1705.965900][T19168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12877'. [ 1705.966460][T19029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1705.966475][T19029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1705.966502][T19029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1706.084740][T19175] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1706.609932][T19189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12883'. [ 1706.764848][T19029] hsr_slave_0: entered promiscuous mode [ 1706.769305][T19029] hsr_slave_1: entered promiscuous mode [ 1706.770200][T19029] debugfs: 'hsr0' already exists in 'hsr' [ 1706.770220][T19029] Cannot create hsr debugfs directory [ 1707.366073][T19200] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12887'. [ 1707.366097][T19200] tipc: Invalid UDP bearer configuration [ 1707.366144][T19200] tipc: Enabling of bearer rejected, failed to enable media [ 1707.432634][T10304] Bluetooth: hci5: command tx timeout [ 1707.545995][T19205] No such timeout policy "s" [ 1707.546017][T19205] netlink: Failed to associated timeout policy 's' [ 1707.883356][T19209] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1708.269881][T19212] netlink: 'syz.6.12891': attribute type 10 has an invalid length. [ 1708.444814][T19224] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12895'. [ 1709.038398][T19029] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1709.038438][T19029] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1709.038463][T19029] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1709.818584][ T8093] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1710.090712][T19029] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1710.090750][T19029] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1710.090776][T19029] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1710.167224][T19240] netlink: 260 bytes leftover after parsing attributes in process `syz.2.12898'. [ 1710.310165][T19240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12898'. [ 1710.475294][T19249] smc: net device lo erased user defined pnetid SYZ0 [ 1710.509699][T19242] netlink: 'syz.1.12899': attribute type 10 has an invalid length. [ 1710.609669][T19249] smc: smcd device lo erased user defined pnetid SYZ0 [ 1710.814077][T19029] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1710.814117][T19029] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1710.814260][T19029] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1710.914271][T19242] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1711.019741][T19253] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12901'. [ 1711.048914][T19260] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12901'. [ 1711.933743][T19280] netlink: 52 bytes leftover after parsing attributes in process `syz.4.12907'. [ 1711.988820][T19282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12905'. [ 1712.544157][T19293] netlink: 'syz.6.12911': attribute type 10 has an invalid length. [ 1712.641956][T19293] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1713.238549][T19302] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12913'. [ 1713.279323][T19029] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1713.376882][T19029] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1713.404038][T19029] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1713.457305][T19029] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1713.479897][T19029] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1713.541551][T19029] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1713.549698][T19029] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1713.620488][T19029] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1713.860562][T19327] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1714.505814][T19029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1714.594727][T19029] 8021q: adding VLAN 0 to HW filter on device team0 [ 1714.650440][T17393] bridge0: port 1(bridge_slave_0) entered blocking state [ 1714.650558][T17393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1714.710491][ T8093] bridge0: port 2(bridge_slave_1) entered blocking state [ 1714.710609][ T8093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1715.146264][T19351] netlink: 'syz.6.12923': attribute type 10 has an invalid length. [ 1715.148703][T19351] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1716.478458][T19385] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1716.579545][T19388] macvlan3: entered promiscuous mode [ 1716.579570][T19388] macvlan3: entered allmulticast mode [ 1716.630452][T19388] bond2: (slave macvlan3): Error -22 calling dev_set_mtu [ 1717.586401][T19403] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12932'. [ 1717.718424][T19406] netlink: 'syz.1.12934': attribute type 10 has an invalid length. [ 1717.718465][T19406] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1718.335306][T19029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1721.710958][T19442] FAULT_INJECTION: forcing a failure. [ 1721.710958][T19442] name failslab, interval 1, probability 0, space 0, times 0 [ 1721.710995][T19442] CPU: 1 UID: 0 PID: 19442 Comm: syz.6.12945 Not tainted syzkaller #0 PREEMPT(full) [ 1721.711018][T19442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1721.711031][T19442] Call Trace: [ 1721.711040][T19442] [ 1721.711058][T19442] dump_stack_lvl+0xe8/0x150 [ 1721.711095][T19442] should_fail_ex+0x410/0x560 [ 1721.711136][T19442] should_failslab+0xa8/0x100 [ 1721.711168][T19442] ? skb_clone+0x212/0x3a0 [ 1721.711195][T19442] kmem_cache_alloc_noprof+0xa1/0x600 [ 1721.711221][T19442] ? skb_clone+0x212/0x3a0 [ 1721.711251][T19442] skb_clone+0x212/0x3a0 [ 1721.711278][T19442] __netlink_deliver_tap+0x413/0x860 [ 1721.711318][T19442] ? netlink_deliver_tap+0x2e/0x1b0 [ 1721.711344][T19442] netlink_deliver_tap+0x19c/0x1b0 [ 1721.711370][T19442] netlink_sendskb+0x68/0x140 [ 1721.711394][T19442] netlink_rcv_skb+0x2a4/0x4a0 [ 1721.711419][T19442] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1721.711450][T19442] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1721.711491][T19442] ? down_read+0x2be/0x330 [ 1721.711525][T19442] genl_rcv+0x28/0x40 [ 1721.711551][T19442] netlink_unicast+0x7bd/0x940 [ 1721.711587][T19442] netlink_sendmsg+0x813/0xb40 [ 1721.711623][T19442] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1721.711658][T19442] ? apparmor_socket_sendmsg+0x98/0x360 [ 1721.711689][T19442] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1721.711713][T19442] sock_sendmsg_nosec+0x13a/0x180 [ 1721.711743][T19442] ____sys_sendmsg+0x54e/0x850 [ 1721.711772][T19442] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1721.711806][T19442] ? import_iovec+0x73/0xa0 [ 1721.711841][T19442] ___sys_sendmsg+0x2a5/0x360 [ 1721.711862][T19442] ? __lock_acquire+0x747/0x2de0 [ 1721.711892][T19442] ? __pfx____sys_sendmsg+0x10/0x10 [ 1721.711955][T19442] ? __fget_files+0x2a/0x420 [ 1721.711975][T19442] ? __fget_files+0x3a2/0x420 [ 1721.712007][T19442] __x64_sys_sendmsg+0x1b1/0x290 [ 1721.712034][T19442] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1721.712089][T19442] do_syscall_64+0x166/0x520 [ 1721.712112][T19442] ? trace_irq_disable+0x3b/0x140 [ 1721.712135][T19442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1721.712159][T19442] ? clear_bhb_loop+0x70/0xc0 [ 1721.712184][T19442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1721.712205][T19442] RIP: 0033:0x7f0f1ff9e1d9 [ 1721.712226][T19442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1721.712244][T19442] RSP: 002b:00007f0f20e69028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1721.712268][T19442] RAX: ffffffffffffffda RBX: 00007f0f20226090 RCX: 00007f0f1ff9e1d9 [ 1721.712283][T19442] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1721.712296][T19442] RBP: 00007f0f20e69090 R08: 0000000000000000 R09: 0000000000000000 [ 1721.712309][T19442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1721.712322][T19442] R13: 00007f0f20226128 R14: 00007f0f20226090 R15: 00007ffc29fafec8 [ 1721.712358][T19442] [ 1722.520765][T19448] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12946'. [ 1722.592492][T19451] netlink: 'syz.2.12947': attribute type 5 has an invalid length. [ 1722.599110][T19448] bridge0: port 6(batadv4) entered blocking state [ 1722.619297][T19448] bridge0: port 6(batadv4) entered disabled state [ 1722.619487][T19448] batadv4: entered allmulticast mode [ 1722.660252][T19448] batadv4: entered promiscuous mode [ 1722.718873][T19451] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12947'. [ 1722.879119][T19460] netlink: 'syz.1.12949': attribute type 10 has an invalid length. [ 1722.917208][T19460] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1723.018101][T19458] netlink: 80 bytes leftover after parsing attributes in process `syz.4.12948'. [ 1723.090529][T19029] veth0_vlan: entered promiscuous mode [ 1723.549881][T19029] veth1_vlan: entered promiscuous mode [ 1723.812879][T19029] veth0_macvtap: entered promiscuous mode [ 1723.884204][T19029] veth1_macvtap: entered promiscuous mode [ 1724.040454][T19029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1724.084797][T19029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1724.113503][ T8093] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1724.148873][T17386] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1724.149065][T17386] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1724.244992][T17406] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1724.275430][T19483] netlink: 260 bytes leftover after parsing attributes in process `syz.6.12958'. [ 1725.023305][T17586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1725.023331][T17586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1725.345637][T19498] netlink: 'syz.1.12963': attribute type 23 has an invalid length. [ 1725.436960][T17393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1725.436984][T17393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1725.509463][T19504] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 1725.509501][T19504] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1725.915993][ T8093] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled [ 1725.916016][ T8093] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled [ 1726.168531][T19512] netlink: 272 bytes leftover after parsing attributes in process `syz.4.12968'. [ 1726.172508][T19510] netlink: 272 bytes leftover after parsing attributes in process `syz.4.12968'. [ 1726.582762][T19526] netdevsim netdevsim6: Firmware load for './file0/file0/..' refused, path contains '..' component [ 1726.905158][T19541] netlink: 'syz.6.12976': attribute type 1 has an invalid length. [ 1726.939218][T19530] bond5: option fail_over_mac: invalid value (16) [ 1726.960874][T19530] bond5 (unregistering): Released all slaves [ 1727.235338][T19541] bond2: entered promiscuous mode [ 1727.237890][T19541] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1727.289476][T19543] bond2: (slave bridge5): making interface the new active one [ 1727.289504][T19543] bridge5: entered promiscuous mode [ 1727.290831][T19543] bond2: (slave bridge5): Enslaving as an active interface with an up link [ 1727.522066][T19549] netlink: 'syz.4.12978': attribute type 10 has an invalid length. [ 1727.522511][T19549] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1727.698186][T19554] netlink: 52 bytes leftover after parsing attributes in process `syz.6.12980'. [ 1727.698217][T19554] netlink: 52 bytes leftover after parsing attributes in process `syz.6.12980'. [ 1727.698233][T19554] netlink: 52 bytes leftover after parsing attributes in process `syz.6.12980'. [ 1727.699525][T19557] netlink: 260 bytes leftover after parsing attributes in process `syz.5.12981'. [ 1727.894736][T19557] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12981'. [ 1727.967962][T19559] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12982'. [ 1728.180757][T19567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12982'. [ 1728.214961][T19562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12983'. [ 1728.765010][T19580] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1730.115835][T19602] netlink: 'syz.2.12993': attribute type 10 has an invalid length. [ 1730.116309][T19602] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1730.495724][T19613] veth0: mtu less than device minimum [ 1730.515605][T19610] syzkaller0: entered promiscuous mode [ 1730.515629][T19610] syzkaller0: entered allmulticast mode [ 1730.850353][T19617] netlink: 260 bytes leftover after parsing attributes in process `syz.2.12997'. [ 1731.080572][T19617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12997'. [ 1731.413353][T19629] IPVS: set_ctl: invalid protocol: 12 172.20.20.31:20001 [ 1732.310165][T19645] netlink: 'syz.2.13007': attribute type 10 has an invalid length. [ 1732.310661][T19645] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1732.315786][T19643] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13006'. [ 1732.606495][T19643] hsr_slave_1 (unregistering): left promiscuous mode [ 1733.283791][T19654] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1734.265820][T19683] netlink: 260 bytes leftover after parsing attributes in process `syz.6.13017'. [ 1734.402944][T19688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13019'. [ 1734.458238][T19683] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13017'. [ 1734.503940][T19689] netlink: 'syz.2.13020': attribute type 10 has an invalid length. [ 1734.504462][T19689] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1734.893432][T19707] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13023'. [ 1735.159763][T19713] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13024'. [ 1735.160272][T19714] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13024'. [ 1735.221054][T19713] netlink: 256 bytes leftover after parsing attributes in process `syz.5.13024'. [ 1735.679428][T19721] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1735.726815][T19726] netlink: 'syz.4.13027': attribute type 1 has an invalid length. [ 1735.726843][T19726] netlink: 228 bytes leftover after parsing attributes in process `syz.4.13027'. [ 1735.786822][T19731] Bluetooth: hci0: unsupported parameter 5161 [ 1735.786846][T19731] Bluetooth: hci0: unsupported parameter 8192 [ 1735.786864][T19731] Bluetooth: hci0: unsupported parameter 5161 [ 1735.786878][T19731] Bluetooth: hci0: unsupported parameter 8192 [ 1736.316794][T19744] netlink: 80 bytes leftover after parsing attributes in process `syz.1.13034'. [ 1736.363717][T19752] netlink: 48 bytes leftover after parsing attributes in process `syz.4.13038'. [ 1736.367925][T19752] netlink: 'syz.4.13038': attribute type 15 has an invalid length. [ 1736.966350][T19776] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1738.239714][T19805] netlink: 'syz.1.13048': attribute type 1 has an invalid length. [ 1738.698014][T19817] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1738.779259][T19817] bond7 (unregistering): Released all slaves [ 1739.324040][T19823] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1739.395956][T19823] bond7 (unregistering): Released all slaves [ 1739.959220][T19844] openvswitch: netlink: IP tunnel dst address not specified [ 1739.983512][T19843] geneve6: entered promiscuous mode [ 1739.983539][T19843] geneve6: entered allmulticast mode [ 1740.047439][T17398] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 1740.060353][T17398] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 1740.060398][T17398] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 1740.060432][T17398] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 1740.119759][T19843] openvswitch: netlink: IP tunnel dst address not specified [ 1740.336483][T19851] netlink: 'syz.5.13061': attribute type 1 has an invalid length. [ 1740.844597][T17393] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1741.555667][T19878] netlink: 'syz.5.13065': attribute type 10 has an invalid length. [ 1741.556177][T19878] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1741.794614][T19885] netlink: 'syz.1.13068': attribute type 33 has an invalid length. [ 1741.814805][T19894] netlink: 'syz.2.13067': attribute type 32 has an invalid length. [ 1742.099641][T19885] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1742.134797][T19885] bond5 (unregistering): Released all slaves [ 1742.149458][T19900] __nla_validate_parse: 9 callbacks suppressed [ 1742.149522][T19900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13069'. [ 1742.463810][T19903] mac80211_hwsim hwsim125 wlan0: entered promiscuous mode [ 1742.735824][T19913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13075'. [ 1743.667191][T19930] syzkaller0: entered promiscuous mode [ 1743.667216][T19930] syzkaller0: entered allmulticast mode [ 1743.718584][T17386] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1743.718639][T17386] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1743.718676][T17386] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1743.734454][T31767] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1743.988091][T19937] netlink: 'syz.4.13079': attribute type 12 has an invalid length. [ 1744.024055][T19938] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13081'. [ 1744.026842][T19933] netlink: 'syz.1.13080': attribute type 10 has an invalid length. [ 1744.120490][T19942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13082'. [ 1744.154110][T19937] bond3: option primary_reselect: invalid value (255) [ 1744.156860][T19937] bond3 (unregistering): Released all slaves [ 1744.418045][T19933] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1745.730761][T19978] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20002 [ 1745.744031][T19979] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20002 [ 1745.779373][T19977] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13095'. [ 1745.924257][T19977] bridge0: port 7(batadv5) entered blocking state [ 1745.924380][T19977] bridge0: port 7(batadv5) entered disabled state [ 1745.928335][T19977] batadv5: entered allmulticast mode [ 1745.966747][T19977] batadv5: entered promiscuous mode [ 1746.284928][T19983] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13098'. [ 1746.284962][T19983] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13098'. [ 1746.337943][T19984] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13097'. [ 1746.460722][T19995] netlink: 'syz.6.13101': attribute type 12 has an invalid length. [ 1746.648871][T19995] bond3: option primary_reselect: invalid value (255) [ 1746.660652][T19995] bond3 (unregistering): Released all slaves [ 1746.850937][T19997] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13097'. [ 1747.428137][T20013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13104'. [ 1747.501944][T20013] syzkaller0: left promiscuous mode [ 1747.501970][T20013] syzkaller0: left allmulticast mode [ 1747.947115][T20024] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13108'. [ 1748.367554][T20035] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13111'. [ 1750.414243][T20058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13119'. [ 1751.114307][T20058] netlink: 'syz.4.13119': attribute type 10 has an invalid length. [ 1752.008544][T20055] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1752.028345][T20055] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1752.303500][T20055] batadv1: left promiscuous mode [ 1752.374117][T20055] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1752.753778][T20055] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 1752.874033][ T8093] batman_adv: batadv5: No IGMP Querier present - multicast optimizations disabled [ 1752.874057][ T8093] batman_adv: batadv5: No MLD Querier present - multicast optimizations disabled [ 1756.188808][T20092] openvswitch: netlink: Missing key (keys=200040, expected=80) [ 1759.625889][T20113] ip_tables: iptables: counters copy to user failed while replacing table [ 1760.167784][T20120] netlink: 604 bytes leftover after parsing attributes in process `syz.1.13139'. [ 1762.250535][T20127] IPVS: Unknown mcast interface: bridge0 [ 1762.445795][T20132] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13143'. [ 1762.542956][T20132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13143'. [ 1762.973688][T20137] netlink: 'syz.5.13144': attribute type 10 has an invalid length. [ 1762.975004][T20137] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1763.178104][T20139] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13146'. [ 1763.486827][T20132] netlink: 2 bytes leftover after parsing attributes in process `syz.1.13143'. [ 1765.238756][T20148] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1766.394935][T20159] netlink: 'syz.6.13152': attribute type 1 has an invalid length. [ 1767.627524][T20159] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1768.184078][T20166] bond3: (slave geneve4): making interface the new active one [ 1768.198719][T20166] bond3: (slave geneve4): Enslaving as an active interface with an up link [ 1771.769190][T17588] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1774.577581][T20229] netlink: 'syz.5.13168': attribute type 5 has an invalid length. [ 1774.604834][T20228] netlink: 'syz.6.13169': attribute type 1 has an invalid length. [ 1775.682855][T20228] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1777.500165][T20246] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 1778.041136][T20259] netlink: 'syz.6.13175': attribute type 9 has an invalid length. [ 1778.041164][T20259] netlink: 'syz.6.13175': attribute type 4 has an invalid length. [ 1783.017748][T20281] netlink: 'syz.5.13180': attribute type 1 has an invalid length. [ 1783.403377][T20292] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13180'. [ 1783.403412][T20292] block nbd10: Unsupported socket: should be TCP or UNIX. [ 1784.397346][T20281] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1784.786028][T20297] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1786.383511][T20304] netlink: 'syz.5.13185': attribute type 1 has an invalid length. [ 1787.628046][T20304] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1788.555641][T20310] bond2: (slave geneve2): making interface the new active one [ 1788.685462][T20310] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1788.800687][T10304] Bluetooth: hci1: command 0x0405 tx timeout [ 1789.126917][T20323] sctp: [Deprecated]: syz.2.13188 (pid 20323) Use of int in max_burst socket option. [ 1789.126917][T20323] Use struct sctp_assoc_value instead [ 1790.974129][T20339] xt_limit: Overflow, try lower: 536871034/127 [ 1791.106217][T20338] netlink: 112 bytes leftover after parsing attributes in process `syz.1.13191'. [ 1791.845505][T20337] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1792.316039][T20338] Bluetooth: hci0: unsupported parameter 5134 [ 1792.316076][T20338] Bluetooth: hci0: unsupported parameter 8192 [ 1792.316090][T20338] Bluetooth: hci0: unsupported parameter 5134 [ 1792.316103][T20338] Bluetooth: hci0: unsupported parameter 8192 [ 1793.256314][T20347] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13193'. [ 1793.869908][T20347] bridge0: port 6(batadv0) entered blocking state [ 1793.870562][T20347] bridge0: port 6(batadv0) entered disabled state [ 1793.870957][T20347] batadv0: entered allmulticast mode [ 1793.977623][T20347] batadv0: entered promiscuous mode [ 1794.614576][T20352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13195'. [ 1795.294311][T10304] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1795.301780][T10304] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1795.388277][T20358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13196'. [ 1795.399136][T10304] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1795.453994][T10304] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1795.455573][T10304] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1795.803798][T20355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13196'. [ 1795.957317][T20368] bridge0: port 7(veth1_to_bridge) entered blocking state [ 1795.957932][T20368] bridge0: port 7(veth1_to_bridge) entered disabled state [ 1795.958318][T20368] veth1_to_bridge: entered allmulticast mode [ 1796.125046][T20368] veth1_to_bridge: entered promiscuous mode [ 1796.185429][T20368] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1796.225756][T20368] bridge0: port 7(veth1_to_bridge) entered blocking state [ 1796.225869][T20368] bridge0: port 7(veth1_to_bridge) entered forwarding state [ 1797.632433][ T5630] Bluetooth: hci3: command tx timeout [ 1799.702251][ T5630] Bluetooth: hci3: command tx timeout [ 1800.350703][T20395] netlink: 'syz.4.13202': attribute type 1 has an invalid length. [ 1801.643189][T20395] bond4: entered promiscuous mode [ 1801.645713][T20395] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1801.755137][ T5630] Bluetooth: hci3: command tx timeout [ 1802.510443][T20396] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1802.561155][T20396] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1802.561188][T20396] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1802.743332][T20396] bond4: (slave ip6gre1): making interface the new active one [ 1802.743362][T20396] ip6gre1: entered promiscuous mode [ 1802.778216][T20396] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 1803.119255][T17588] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1803.833067][ T5630] Bluetooth: hci3: command tx timeout [ 1805.425336][T20424] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13207'. [ 1805.703303][T20434] netlink: 232 bytes leftover after parsing attributes in process `syz.2.13209'. [ 1805.998063][T20436] netlink: 232 bytes leftover after parsing attributes in process `syz.2.13209'. [ 1806.278526][T20437] x_tables: duplicate underflow at hook 3 [ 1806.398470][T31767] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1806.398510][T31767] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1807.528145][T20421] lo: entered promiscuous mode [ 1807.726078][T20421] tunl0: entered promiscuous mode [ 1808.114254][T20421] gre0: entered promiscuous mode [ 1808.296739][T20421] gretap0: entered promiscuous mode [ 1809.209959][T20421] erspan0: entered promiscuous mode [ 1809.610823][T20421] ip_vti0: entered promiscuous mode [ 1812.532237][T31767] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1812.532276][T31767] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1813.192670][T20361] wg0 speed is unknown, defaulting to 1000 [ 1813.195745][T20361] wlan1 speed is unknown, defaulting to 1000 [ 1815.831381][T31767] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1815.831420][T31767] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1817.612242][T31767] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1817.612282][T31767] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1818.375372][T20498] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.13222'. [ 1818.379792][T20497] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.13222'. [ 1819.446883][T20504] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1820.016271][T20507] ip_tables: iptables: counters copy to user failed while replacing table [ 1820.177831][T20511] netlink: 'syz.1.13226': attribute type 1 has an invalid length. [ 1820.920623][T20511] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1821.111688][ T31] audit: type=1804 audit(1791875608.092:83): pid=20517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.13227" name="/newroot/51/memory.events" dev="tmpfs" ino=278 res=1 errno=0 [ 1821.245942][ T31] audit: type=1800 audit(1791875608.212:84): pid=20517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.13227" name="memory.events" dev="tmpfs" ino=278 res=0 errno=0 [ 1821.658203][T20526] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13228'. [ 1823.285411][T20518] bond5: (slave geneve3): making interface the new active one [ 1823.394556][T20518] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 1824.562379][T10304] Bluetooth: hci5: command 0x0405 tx timeout [ 1825.241519][T20541] netlink: 'syz.4.13231': attribute type 13 has an invalid length. [ 1827.221218][T31767] batadv5: left allmulticast mode [ 1827.223842][T31767] batadv5: left promiscuous mode [ 1827.224977][T31767] bridge0: port 7(batadv5) entered disabled state [ 1827.564861][T31767] batadv4: left allmulticast mode [ 1827.565350][T31767] batadv4: left promiscuous mode [ 1827.616650][T31767] bridge0: port 6(batadv4) entered disabled state [ 1827.915269][T31767] batadv3: left allmulticast mode [ 1827.915793][T31767] batadv3: left promiscuous mode [ 1827.916889][T31767] bridge0: port 5(batadv3) entered disabled state [ 1828.215560][T31767] batadv2: left allmulticast mode [ 1828.216267][T31767] batadv2: left promiscuous mode [ 1828.217373][T31767] bridge0: port 4(batadv2) entered disabled state [ 1828.783502][T31767] batadv1: left allmulticast mode [ 1828.783957][T31767] batadv1: left promiscuous mode [ 1828.785037][T31767] bridge0: port 3(batadv1) entered disabled state [ 1830.784246][T31767] bridge_slave_1: left allmulticast mode [ 1830.784707][T31767] bridge_slave_1: left promiscuous mode [ 1830.785881][T31767] bridge0: port 2(bridge_slave_1) entered disabled state [ 1831.134564][T31767] bridge_slave_0: left allmulticast mode [ 1831.135023][T31767] bridge_slave_0: left promiscuous mode [ 1831.165276][T31767] bridge0: port 1(bridge_slave_0) entered disabled state [ 1831.194173][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 1831.206198][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1831.214699][ C1] CPU: 1 UID: 0 PID: 733 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 1831.224088][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1831.234173][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 1831.241035][ C1] RIP: 0010:llc_conn_state_process+0xd13/0x1380 [ 1831.247374][ C1] Code: 4c 89 f7 e8 ff 39 64 f8 31 c0 84 db 0f 94 c0 4d 8b 36 8d 5c 00 01 b8 01 00 00 00 bd 07 00 00 00 0f 44 e8 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 1a 06 00 00 41 89 1e 43 0f b6 04 2c 84 [ 1831.267793][ C1] RSP: 0018:ffffc90000a18bf0 EFLAGS: 00010246 [ 1831.273927][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff888027698000 [ 1831.281919][ C1] RDX: 0000000000000100 RSI: 0000000000000002 RDI: 0000000000000000 [ 1831.289908][ C1] RBP: 0000000000000007 R08: 0000000000000100 R09: 0000000000000005 [ 1831.297901][ C1] R10: 0000000000000005 R11: 0000000000000100 R12: 1ffff1100c37e402 [ 1831.305896][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888061bf2012 [ 1831.313885][ C1] FS: 0000000000000000(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000 [ 1831.323025][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1831.329639][ C1] CR2: 00007f0e903f2078 CR3: 00000000495a6000 CR4: 00000000003526f0 [ 1831.337639][ C1] Call Trace: [ 1831.340941][ C1] [ 1831.343814][ C1] llc_conn_tmr_common_cb+0x34a/0x780 [ 1831.349227][ C1] call_timer_fn+0x18d/0x5f0 [ 1831.353864][ C1] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 1831.359521][ C1] ? call_timer_fn+0xd5/0x5f0 [ 1831.364223][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1831.369375][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1831.374625][ C1] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 1831.380310][ C1] __run_timer_base+0x652/0x8b0 [ 1831.385186][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1831.390581][ C1] ? try_to_wake_up+0x8c5/0x14d0 [ 1831.395568][ C1] run_timer_softirq+0xb7/0x170 [ 1831.400438][ C1] handle_softirqs+0x226/0x860 [ 1831.405226][ C1] ? do_softirq+0x77/0xd0 [ 1831.409578][ C1] ? nsim_dev_trap_report_work+0x7a4/0xb40 [ 1831.415417][ C1] do_softirq+0x77/0xd0 [ 1831.419600][ C1] [ 1831.422543][ C1] [ 1831.425488][ C1] __local_bh_enable_ip+0x100/0x140 [ 1831.430711][ C1] nsim_dev_trap_report_work+0x7a4/0xb40 [ 1831.436376][ C1] ? process_scheduled_works+0x97a/0x1630 [ 1831.442118][ C1] process_scheduled_works+0xc3d/0x1630 [ 1831.447701][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1831.453715][ C1] ? assign_work+0x3cf/0x5d0 [ 1831.458420][ C1] worker_thread+0xa47/0xfb0 [ 1831.463047][ C1] kthread+0x38b/0x480 [ 1831.467137][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1831.472272][ C1] ? __pfx_kthread+0x10/0x10 [ 1831.476877][ C1] ret_from_fork+0x514/0xb70 [ 1831.481509][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1831.486635][ C1] ? __switch_to+0xc89/0x1420 [ 1831.491335][ C1] ? __pfx_kthread+0x10/0x10 [ 1831.495949][ C1] ret_from_fork_asm+0x1a/0x30 [ 1831.500758][ C1] [ 1831.503788][ C1] Modules linked in: [ 1831.510649][ C1] ---[ end trace 0000000000000000 ]--- [ 1831.516196][ C1] RIP: 0010:llc_conn_state_process+0xd13/0x1380 [ 1831.516232][ C1] Code: 4c 89 f7 e8 ff 39 64 f8 31 c0 84 db 0f 94 c0 4d 8b 36 8d 5c 00 01 b8 01 00 00 00 bd 07 00 00 00 0f 44 e8 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 1a 06 00 00 41 89 1e 43 0f b6 04 2c 84 [ 1831.516250][ C1] RSP: 0018:ffffc90000a18bf0 EFLAGS: 00010246 [ 1831.516270][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff888027698000 [ 1831.516284][ C1] RDX: 0000000000000100 RSI: 0000000000000002 RDI: 0000000000000000 [ 1831.516298][ C1] RBP: 0000000000000007 R08: 0000000000000100 R09: 0000000000000005 [ 1831.516311][ C1] R10: 0000000000000005 R11: 0000000000000100 R12: 1ffff1100c37e402 [ 1831.516325][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888061bf2012 [ 1831.516341][ C1] FS: 0000000000000000(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000 [ 1831.516365][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1831.516381][ C1] CR2: 00007f0e903f2078 CR3: 00000000495a6000 CR4: 00000000003526f0 [ 1831.516403][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 1831.619104][ C1] Kernel Offset: disabled [ 1831.623448][ C1] Rebooting in 86400 seconds..