last executing test programs: 2m50.862821959s ago: executing program 4 (id=2746): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4000801}, 0x8011) (async) r1 = socket(0x2d, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={&(0x7f0000000500)=@generic={0x2d, "00000000000008011800020000dd000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004020000000000000000ffdc000000000000000000f300"}, 0x80, 0x0}, 0x0) (async) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000040)=0x5, 0x4) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e00000000000000ca00000003"], 0x48) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000002340)={{r1, &(0x7f00000021c0)='nl80211\x00', 0x315000, &(0x7f0000002200)={@align=0x5, {0x5, 0x400, 0x8, 0x10}}, 0x0, &(0x7f0000002240)={@_ha_fsid}, &(0x7f0000002280)=0x4}, {[0x0, 0x4, 0xfffffff9, 0x772c]}, 0x9, 0x53, &(0x7f00000022c0)=""/83}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f0000002440)={"595b990107ff5187f9e582d15eb4a0e9", 0x0, 0x0, {0x7, 0x10}, {0x1ff, 0x6dd7}, 0x200, [0x518d, 0x6, 0x1, 0x7, 0xfff, 0x9, 0x8, 0x3, 0x3, 0x7, 0xc3, 0x1, 0x9, 0x7e, 0x7fff, 0x2]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f00000025c0)={{r3}, r9, 0x0, @inherit={0x60, &(0x7f0000002540)={0x1, 0x3, 0x1000000008000, 0x200, {0xd, 0x5b7, 0x7, 0x5, 0x1000}, [0x5, 0xfa, 0x9]}}, @subvolid=0xffffffffffffffff}) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c000200cb"], 0x44}, 0x1, 0x0, 0x0, 0x200480d8}, 0x8080) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f00000023c0)=@ringbuf={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x20, '\x00', r8, 0x0, r5, 0x8, 0x0, 0xffffffffffffff0c}, 0x94) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r12, 0x84, 0x20, &(0x7f0000000100)=0xf, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r12, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) (async) readv(r12, &(0x7f0000000600)=[{&(0x7f0000000180)=""/135, 0x87}], 0x1) (async) setsockopt(r12, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r13, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c080}, 0x4) (async) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x48, r13, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x20, 0x0, 0x7, 0x0, {0x9fe, 0xf, 0x0, 0x3f9, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x8, 0xa, 0x8}}]}, 0x48}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 2m49.126630615s ago: executing program 4 (id=2758): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x8a}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) (async) recvmmsg(r2, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000001c0)=""/140, 0x8c}, {&(0x7f0000000280)=""/236, 0xec}, {&(0x7f0000001600)=""/4109, 0x100d}], 0x3}, 0x8}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4078, 0xfee}, {&(0x7f0000002840)=""/4109, 0x100d}, {&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f0000002740)=""/84, 0x54}], 0x5}, 0x900000}], 0x7, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000000c0), 0x0, 0x4004) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3103000000000000000004"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c001580"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, &(0x7f00000003c0)={r7, &(0x7f0000000100)='{/{\\@{.%\x00', 0x40, &(0x7f0000000300)={@_ha_fsid={[0x4cad, 0x10001]}, {0x2, 0x5, 0x4, 0x3ff}}, 0x80, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)}) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x30, 0x2, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_FILTER={0xd, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x428}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8d4}, 0x8000) (async) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000040)={0x0, @dev, @dev}, &(0x7f0000000400)=0xc) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r4, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1000}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}]}, 0x68}, 0x1, 0x0, 0x0, 0x4011}, 0x885) (async) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x1010, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) (async) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000080)={@mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x5, 0x6, 0x0, 0x0, 0x5, 0x8602008e, r6}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) 2m48.058263764s ago: executing program 4 (id=2765): setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x7fffffff, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2a240, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r2, &(0x7f00000000c0)=""/45, 0x2d, 0x1000, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000180)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0xffffffffffffffff, "124c8645dc0d754d1ed42a34ff249ff5dda4b79c273799784ec7a16ff1089284", 0x8001, 0x8, 0x46, 0xffffffff}, 0x3c) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfa}, 0xa) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, 0x4, 0x8, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xda}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x201}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000340)={@dev={0xac, 0x14, 0x14, 0x3b}, @multicast1, 0x0, "790707e53283c525552c199fb1ce2f571265e92574ad0fedb01062e5a8cf5cd8", 0x401, 0xfff, 0xc2, 0x9}, 0x3c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, r5, 0xb6ad4000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e22, @empty}}}, &(0x7f0000000480)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000004c0)={r7, 0x4, 0x5, [0x3, 0x1, 0xfff8, 0x5, 0x9]}, 0x12) r8 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r8, &(0x7f0000001880)={&(0x7f0000000500)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000001800)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/66, 0x42}, {&(0x7f00000016c0)=""/249, 0xf9}, {&(0x7f00000017c0)=""/18, 0x12}], 0x5, 0x0, 0x0, 0x4}, 0x20000000) r9 = accept4$llc(0xffffffffffffffff, &(0x7f00000018c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000001900)=0x10, 0x80000) setsockopt$sock_int(r9, 0x1, 0x22, &(0x7f0000001940)=0x80000001, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001980)={r0, 0xffffffffffffffff}, 0x4) pipe(&(0x7f00000019c0)={0xffffffffffffffff}) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001a80), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001a00)=@bloom_filter={0x1e, 0xfff, 0x4, 0x5, 0x8280, r10, 0x1, '\x00', 0x0, r11, 0x1, 0x5, 0x0, 0x0, @value=r12}, 0x50) ioctl$FIONCLEX(r1, 0x5450) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001ac0)) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r13, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x34, 0x4, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20010005}, 0x4004044) sendmmsg(r3, &(0x7f0000006100)=[{{&(0x7f0000001c00)=@nl=@unspec, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c80)="a8460aa809ef9c8cd329ade0b1ee9f4ee93d3204768e5dccf399ac91871c26bd54", 0x21}, {&(0x7f0000001cc0)="bc0f87afe3a7b9f1604b28501f60582351f443f65bb87a310684247cdca73e95474a00adf919fba8157ea7c6745ad5df3355930219df48c65d4d8eaa8008c0bc6dde37b19aea244a67e9066458e4b48b3350371cdf483e389252f17bf689404afa9bc59750fd44b7f9e21ae6898694571dd075afe8af420333749b9f6f16927b2b96541ad6d41b22c716ea47734fa22d926057e7f92900f88a16ea5d53ee90bcac9f06aed37d2aa81e4adcdbf344", 0xae}, {&(0x7f0000001d80)="70916950c462e5af22e13fcbad9927ed8e94eaec0e245d6d04515768b00cc0bf5db1fd99394ef9c4f03cabc8cf4eb70bebf1c78965022f68d4c1e99b18c553c0b2857f9fdbc5d75fed7755d6440d9589e3237ec1b71d3e8d", 0x58}], 0x3, &(0x7f0000001e40)=[{0x108, 0x10d, 0x9, "596912c764f339ffd1e24e1a026240549f96c72d3b568d658281e3a2ce24ebf3d672d224257c01255d6b27ae87284e1709269713f41724ca5592247ca6f72483e823fab0018089f86f8479fd934fe542206c49aa447245dec19d9a9632f8eb28b6e92811b553c8d9c2b810f938a214e63a530cce8620a386063dd9583caec8bd75ac620488588c7a26f2fa85b2f62b127c7dfd78a54f8cd391715b6764692244923aadc27804f14a21225e3bd20563edcab603dc018c43a47b80643e6ba682cc18fb33806a02cb0bd495120889485263fc29937d08afe4d4efab8f99937142f31ee560713e05bc6da0d805cef96c963a619f3f2a7e8b40"}, {0x38, 0x10e, 0x4e8000, "08efe8694cd20d0645431fbdf8ad42209f6b1eb4838872315c5fe9169b754fe49c970d8c707f"}], 0x140}}, {{&(0x7f0000001f80)=@ieee802154={0x24, @short={0x2, 0x2, 0xfffd}}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000002000)="1cc079bcf4ef07607326f06d262019837308e89b442b11e7d1cb67d0d829ad9eb8f60da4fc52815dad97a19b7807296343741c1109d699ec07dc956869e13c40065a4232a2923f6a4a0fcfeef39bd9cc1e8c0c21feb56666fb8b1cc7a8028b86a23ff2d4eabab4a5f0fe2a9e7b70a2d51fa616b859427a9deee0121dc7dd516d3866f669f08372535b86407edb5b9d74919c4a954767ee6d9b3d303c4c32494e4af94997374a30f81f10c221694938d9ae57c5b2ed9fdb586ce0f753622cd615b0a8c6fdd0a63f933de3ae35590bf0ee222a9f754ffc975f8f51eb5d5eebfc61ebce", 0xe2}, {&(0x7f0000002100)="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", 0xfe}, {&(0x7f0000002200)="efb544efc229621b589d39f19c38629509dfb2b05df36307d1beffe7b669ea374aa6d33b42ce91df63017d923c8b1e8ecda0b6413552f4b5a53e6648f24dac7c942dbd92b0a410604b932974d6da590dc8f36fba15639c060e79de04641f108f45121dc6037cde78014a8f97131d4ca80ccec97f258eb6c9d5f66c3d3c4cc58ae84886c701e0357bbceca35354676a2bd1af", 0x92}], 0x3, &(0x7f0000002300)=[{0x1010, 0x29, 0x7, "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"}, {0x10, 0x119, 0xd}, {0x20, 0x109, 0x0, "41e05566ca9fc99a82b3070b643de8d7"}, {0xd8, 0x114, 0x6, "cf94d4019fff8673ffc5e63b89985f421731ade4584cdd64d380a9d0b45ad1ffe55ccc403499b9296960bdc07dd6fd44b9e86c9d7930c56f7fbe5632a85a7c58e37bf2cccdc0ab257d10291f0f1cf412ebaf5a34a943836019dc1deadf3268ca7a7bb79ac629e5608c56535950b62079a2966d3a66eab1632f82926325d1006febe51a850112c2d00848692ec3085eae0b37b0817496b6e08f9c3545b01e3445d3da1e786b62095c6c7ae27b79b8cf83794c153a2d03fe27c0f98afe32bcc7a56f4f26"}, {0x88, 0x113, 0x9, "e75407846930dd0b268af4189ce5db5cdf7c12e43ec48ed9e4d137ea95f4573b90e128fee2fdc10a34f2a3482a98f9059c961eebc02131ff3469b63c694e5ab29ef8320f4e54a3c14d5760d7bf814b959e857fe9894c2fac2d106bea82e9b90a83498dbed222dd83596ba7df40bb2ec33586f3b5964b48"}, {0x10, 0x10f, 0x1200000}, {0xc0, 0x3a, 0x4, "f6b946e4a4a74379a23d0f8ffb399396323d8e715680ab0b7645a7383b2334e4436c167c8c307dc064abc8af8996c7c47f7cf63b9745392591c569a668a4082d6c66165ddc2b83ae210899f1b34767ee8f4cce78083167ee76c07d5fe88331d52e1cb7420037e6a86d248ee1bf126582259922b563099ca3a60f8f1ec887d6a82acd60902b5f257acf26a363969e4c124042a9ccb0bb429b8ca79c4a88c12d97104960e65543d7ac70da077b603c"}], 0x1270}}, {{&(0x7f0000003580)=@ieee802154={0x24, @short={0x2, 0x2, 0xfffe}}, 0x80, &(0x7f0000003840)=[{&(0x7f0000003600)="9df6dfc0a9e93710a0d9cba1fc63ea8f2e9da29309079746164f39e263bdd9bf3547a9db3de2ca40eb309d6e4083a05be16fa4d1ed", 0x35}, {&(0x7f0000003640)="938bd0ccdba271fe92a7cc4655fb5d16528b9cc680a1e210a50a48f0033c73ce22c1dfa5306f1198f8e3b1ba40b0d064f9cdf6f0291b486de0c96f1efbd4d9b68a1106e63ceae7b792c3174a6178010d37602df1a568b2ced0314621f71749f3bfcc2e175b210ab63cdc818c4e955ad86e724c931f88be6452758b5326090d9b7e8f9db668df986631b69ab0887b6cc7dce09a11850632ffcbe4fc3175887ca7cf34adfd950308c46b3ca74fdfcdd9326a7e05b06f02c775eb3bdfd0583b474b480a68cfa6a7214016d239d0767a775a827935d3e1189ae74e39dcba1c886649f5df9e5a7be034217ac4", 0xea}, {&(0x7f0000003740)="99e9c045f84dfbec98b07d0860dfa2e0da79e92bab52cf6d74ed57984bbdfe838c7180f9e1df748d29f9d2d6522817dbf481ddffdbd8cb73adb14efa27f401fb8786018cf5e4bc2989dab978399fe07d7637c31a90193f8180ec37b0d472259d519363e856673558759652f940b9d190461da850b0026a013463ec61676384af696dca9ecb4273bf935c2dea201feda2cb228a552ed6f85cce11552b16f4074961a053d5a420621f0f473c6e5f2300c7e658974b8a02a2aa77ba7966ba734800ed90ad0ebeaa6e7af5ec8bf6406b", 0xce}], 0x3, &(0x7f0000003880)=[{0xf0, 0x10e, 0x0, "da6d6179f20d9f51e8ecb0785fc470a916befc063106a5d67ffd485b7645ae3933607a1e63e939218b906c46f6c569f54f11d4db59b5ee2c98f268280268f8ec2a1bf0767adcfce5f6f15d4487c8f0228fe54a5022d58a8185eeb8d1847f5f96c8b512d200120522b7ca7cd42f5d3de0eb9cbafd0992cd9c51c6d7487a024910002115ddc348b622f4b8fe59c222dbcea755a5609feb3b26eeb92243d8ca7329f9c5870fcdee5c6f34ed77830be44409f7aa5867c02338908b7e7172e3d02c55109bdb609e73301c584c1f0014a43cf21e9b35f0dc23182a65"}, {0x90, 0x101, 0xd, "c8f38ff7787ca70b5d458babaddc6b6049e1507a3dd5058f84ab296877ccba5960fa3b8366a60bb1fdb5134e65c1878200a91de185a21957f72ba15fb06f85829dce82b7190ece62a8447a1e3092efa6e0900955398d014aff8ad432f660b4a832e858aa9da2d72acadde3280aec48b2c22844ef5fc003eca9"}, {0x20, 0x102, 0x3, "fabac299e91f67add0a4702f"}, {0x78, 0x10c, 0x9, "7fb7a47d958996f25313959ec1c4e02a805270e0c3f5b73c31e2cd46876bceb079731a655429ed106b3408ce2daf6cd19c4a7b22dd62034fcb5b4b0cb8ea30bd323e30ebac53ee4724c485703b9bfcbe8aa48faf7c59d6d6374bad718ba08100dcecc6"}], 0x218}}, {{&(0x7f0000003ac0)=@isdn={0x22, 0x4, 0x5, 0x1}, 0x80, &(0x7f0000003e80)=[{&(0x7f0000003b40)="f9e27ddb6f49a7f20e318bd4cd14801cbcb19498ebb1954987656f867ceb506a5a5e02d9c352e02a436d0ae923537ec102e8c2289f339a0082b1366bda34190c", 0x40}, {&(0x7f0000003b80)="451c22ab35917992dd378e9fc7ffa708f6378b80159dba66d67644016b96c7e228eba3b8518984de5651141030a0d720c75c5220c6f0cee7c77071af0a421638df98599a0e4ac2d4189488e78a6e9c1bbd1e59cec87958ef3f851eec05fdc6c42cd917aa6d61563ed2b32127d32b8a0f34bfd2095964b576ff7791f123c0a0b12fcc6864ff8ef5de7509718226c8e0e8486e9e1edbebe8b5e6bce4758b5db8b59d46cf8ac5a48d3fa18cf82b03abcb4dc25cce83416bf260", 0xb8}, {&(0x7f0000003c40)="74b9a40feaac460c5386a2c824282706a531b87dee61207840514a75f2af0c5ea0fe8d2f9465c540c23125e704e2b698439c895b72a615b5717c6034492d024eb85a4b5f35c9ef793320aa072bff5f6a2c918961c7168aa7cd5911fdd9dcbe8808dc9d05368ca260f3f8e15813c7d0b1c76811a178dfddfff21e121107de006ef596d3b92e17f2fdb2d13676508595f228c9181079e1", 0x96}, {&(0x7f0000003d00)="cba03a69b4a89ddd211870e61a47f38bc5282d002227ddc989a8d5f08e0abc3fb559aa0800faf81186942f76b83dc6c6d10f2480112f848cabe65a89d19779380970bd4f45d10374d84bc0954cc725439b71757fa839cf79134c2298df1e98406b8999447bd26fc6728b179afe3cd0e8e89595df7029b2", 0x77}, {&(0x7f0000003d80)="547bbb489088766304cb73f38351b2eaa3aeac945fa92bfd9e643ad3d1e3103a282c53ef69cf72ae7ebeda1a0146b52729dc7383027b023e3376b9b402cf846c2d321922b094ec78e4d2c170a3aa2674063d375f319adc8b9dd2a7f13ea4c58d329d223e38aa7b5d51de8fb3201c21c6147b3b32be2a368b1cfb2a327f2ff87e95e1cd4b8cfe35826de22bbaaeffe285d1559604cf4809443317a1434865ddc820661da6c809297f8f047766294960508afedc32c20dc93938015a140b29b15eb4f7d20b5e8db7a0f7ebf182de8ecec21e3a222a328783cc45d5e4cdb98ee274667db4a596ed", 0xe6}], 0x5, &(0x7f0000003f00)=[{0x88, 0x0, 0x2, "f6c806a1c1c76cf89df942f2fd9b4c59d045294d9e0c9456021ad660e398834823ad90166b417ad5e576a91993d2eb1c4ab33a9414b284201e495c41c8efc672227a2f74ffed1f4bd24605f18075ec39410644e7f49ef1f45029bc739356da7926753736b49c0dfac716d562a363685dafa0"}, {0x1010, 0x10b, 0x1, "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"}, {0x1010, 0x109, 0x2, "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"}, {0x18, 0x112, 0x9, "725268c9"}, {0x20, 0x117, 0x45b, "154b7b94537ab9b1ac4bca"}, {0x98, 0x118, 0x2, "b2c80470dce7ec41d72f22b1d13d66fc5797941ae66eb76fccf65af20d56db5e7a6a646e5b1e4255608e6adc81d145edbe78dae4c89b38f41d6036b5392c4deb04dc04813d2797a75c69394de9e931557016b50f7f95cecbfe8da1e10bd10567741c9c3e43657d470a4a41750c17de87fdfdffd2267a66b969dd78b193f7f90523b9aa060982"}, {0x50, 0x117, 0x3, "c95c6d05b5ab9b003541a91e12fc30a6fe860e7539ae2d9c3b499f684cd0c8431a3c9c018aae1283e6316bf4ee64b9f2792a9eeb03d7febba570e132002853"}], 0x21c8}}], 0x4, 0x44090) ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f0000006200)=r6) 2m42.407419997s ago: executing program 4 (id=2783): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff010000003d000000560000022500000019000a001000000007fd17e5ffff080004000000000000000a", 0x39}], 0x1) r2 = socket(0x2c, 0x5, 0x7) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x22000801) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x14, r0, 0x1, 0xfffffffe, 0x25dfdbfb, {0x41}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) 2m41.865354702s ago: executing program 4 (id=2788): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@private}}, 0xe8) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=@srh={0x1, 0x0, 0x4, 0x0, 0x2, 0x10, 0x385}, 0x8) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001500)=@newlink={0x30, 0x10, 0x503, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}}, 0x0) 2m41.304534107s ago: executing program 4 (id=2793): bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x7, 0x400}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x94}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newtaction={0x9c, 0x30, 0xb, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ct={0x84, 0x1, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x7c}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @dev}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_NAT_PORT_MAX={0x6}, @TCA_CT_ACTION={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000001e000000611000000000000062000b000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x44}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0xf, 0xf7, 0x0, 0x1, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x7, 0x2, 0x4}}) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_deladdr={0x18, 0x15, 0x20, 0x70bd25, 0x25dfdbfe, {0x2, 0x18, 0x108, 0xfe, r3}}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) 2m25.939502768s ago: executing program 32 (id=2793): bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x7, 0x400}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x94}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newtaction={0x9c, 0x30, 0xb, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ct={0x84, 0x1, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x7c}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @dev}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_NAT_PORT_MAX={0x6}, @TCA_CT_ACTION={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000001e000000611000000000000062000b000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x44}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0xf, 0xf7, 0x0, 0x1, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x7, 0x2, 0x4}}) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_deladdr={0x18, 0x15, 0x20, 0x70bd25, 0x25dfdbfe, {0x2, 0x18, 0x108, 0xfe, r3}}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) 46.236784977s ago: executing program 1 (id=3293): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2}}}, @dstopts_2292={{0x18, 0x29, 0x3b}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x58}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x2c, 0x9, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4) 45.93953159s ago: executing program 1 (id=3295): r0 = socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) close(0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x10}}, 0x2400e0d5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket(0x18, 0x80000, 0x3) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x4, 0x8, 0x1, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) r8 = socket(0xf, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e0000001800028014001d"], 0x48}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) write$nci(r4, &(0x7f0000000c40)=@NCI_OP_RF_DISCOVER_SELECT_RSP={0x1, 0x0, 0x2, 0x4, 0x5, 0x40}, 0x4) connect(0xffffffffffffffff, 0x0, 0x0) read$nci(r4, &(0x7f0000000380)=""/100, 0x64) write$nci(r4, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) read$nci(r4, &(0x7f0000000500)=""/100, 0x64) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) 44.692792056s ago: executing program 1 (id=3303): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r1}, 0x8) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x4, &(0x7f0000000500)=ANY=[@ANYRESHEX=r3], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = socket(0x2d, 0x2, 0x0) sendto(r5, 0x0, 0x0, 0x0, &(0x7f0000000700)=@generic={0x2d, "00000100000008010800"}, 0x80) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0x7d, &(0x7f0000000700)={r7, 0xfffff801, 0x11e2000, 0x62c, 0x100, 0x2, 0x2, 0x4, {0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x3, 0xfffffffb, 0x3, 0x1000, 0x1}}, &(0x7f00000007c0)=0xb0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000002a002902d9198a96ff0f00000a000000"], 0x14}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r4, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) syz_genetlink_get_family_id$smc(&(0x7f0000000800), r2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0xfffffffffffffcb4, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f742f5f62726964676500140001007767320000000000000000000000000014000100766574683069746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) close(0x3) sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="94000000000105060100000000000000020000003200018014000180080001007f000001080002007f0000011a0002800500010006000000060002003039000006000300001500003200028014000180080001007f000001080002007f0000011a0002800500010006000000060002000015000006000300303900000c0005800800010066747000080007"], 0x94}], 0x1}, 0x0) 43.616945583s ago: executing program 1 (id=3309): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d800000019000100000212ba0d8105040a600000ff0f040b067c55a1bc0009007d0006000000000015001500fe808178a80035fd00e4ff3f0200000901ac040000d67f6f94007100a007a290457f0189b316277ce06b9e9dfc487d5d32bace8017cbec4c2ee5a71602b2a10c11ce1b14d600741f795025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fec114c5d46a73290f9eaef6288b97192309a00000e000000000000000000000000000000000000000000000000000ab62800"/216, 0xd8}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r3) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYRES16=r4, @ANYBLOB="0100006fa1625a0a00f2318d01", @ANYBLOB="36a74df8e3e93ef3181058a2c1b9b8ea1c16198d4097e4a8a2ec1fe2aec3c3e2b8481a5628466a5b", @ANYRESHEX=r0], 0x14}, 0x1, 0x0, 0x0, 0x4001810}, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="89", 0x1}], 0x1, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000340)="4a84324eda", 0x5}], 0x1}}], 0x2, 0x0) close(r5) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00w', @ANYRES16=r6, @ANYBLOB="020026bd7000fbdbdf250d00000005001a008100000006000800ffff0000050017007f0000000500070007000000"], 0x34}, 0x1, 0x0, 0x0, 0x44005}, 0x20008080) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r7, &(0x7f0000004d00), 0x3fffffffffffe8f, 0x4000f50) 42.718494329s ago: executing program 1 (id=3310): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000000), 0x10) bind$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x28, 0x18, 0x35f32a6dfa748ddd, 0x0, 0xfffffffe, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_MULTIPATH={0xc, 0x9, {0x0, 0x1d}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040814}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x300, 0x0, 0x150}, [@IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="0503e5fdd3fc14f9fd004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000280)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r6, 0x800448d2, &(0x7f0000000580)={0x4, &(0x7f0000000300)=[{@fixed}, {@none}, {}, {}]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000007c0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000bc0)={0x0, 0x2, 0x3, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000fc0)={0x18, 0x2, {0x6, @usage=0x7, r5, 0x2, 0x7, 0x70, 0xffff, 0x6, 0x4, @usage=0x6, 0x2, 0xffff, [0xffffffff, 0x4, 0xffff, 0x84d0, 0x5, 0xd97]}, {0x7fffffff, @struct={0xe00}, r7, 0x4, 0x0, 0x0, 0x9, 0x6, 0x27, @usage=0x7, 0x1, 0xf7, [0x100000001, 0x200, 0x9, 0x7, 0x7, 0x5]}, {0x3, @struct={0x8, 0x4}, r8, 0xfffffffffffffff9, 0x10000, 0x5, 0x3, 0x1, 0x26, @struct={0x0, 0x2}, 0x800, 0x1ff, [0x4, 0x80000001, 0x9, 0x7, 0xa8de]}, {0x2, 0x7, 0x9}}) socket$l2tp(0x2, 0x2, 0x73) (async) bind$l2tp(r0, &(0x7f0000000000), 0x10) (async) bind$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x28, 0x18, 0x35f32a6dfa748ddd, 0x0, 0xfffffffe, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_MULTIPATH={0xc, 0x9, {0x0, 0x1d}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040814}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x300, 0x0, 0x150}, [@IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) (async) sendto$packet(r3, &(0x7f00000002c0)="0503e5fdd3fc14f9fd004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000280)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r6, 0x800448d2, &(0x7f0000000580)={0x4, &(0x7f0000000300)=[{@fixed}, {@none}, {}, {}]}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000007c0)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000bc0)={0x0, 0x2, 0x3, 0x1}) (async) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000fc0)={0x18, 0x2, {0x6, @usage=0x7, r5, 0x2, 0x7, 0x70, 0xffff, 0x6, 0x4, @usage=0x6, 0x2, 0xffff, [0xffffffff, 0x4, 0xffff, 0x84d0, 0x5, 0xd97]}, {0x7fffffff, @struct={0xe00}, r7, 0x4, 0x0, 0x0, 0x9, 0x6, 0x27, @usage=0x7, 0x1, 0xf7, [0x100000001, 0x200, 0x9, 0x7, 0x7, 0x5]}, {0x3, @struct={0x8, 0x4}, r8, 0xfffffffffffffff9, 0x10000, 0x5, 0x3, 0x1, 0x26, @struct={0x0, 0x2}, 0x800, 0x1ff, [0x4, 0x80000001, 0x9, 0x7, 0xa8de]}, {0x2, 0x7, 0x9}}) (async) 41.3404402s ago: executing program 1 (id=3315): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x40, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x4008000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x60, r5, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x44, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xc3a}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffff9}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x67}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000080}, 0x40d1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r6, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004004}, 0x24) sendmsg$NL802154_CMD_GET_SEC_DEV(r6, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, r7, 0xa, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x50, 0x10, 0x403, 0x70bd27, 0x3, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0880000008440000300012800b00010067656e65766500001e0002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r3, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 37.475307615s ago: executing program 2 (id=3331): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000f40)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1000000}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}]}, 0x38}}, 0x0) (fail_nth: 3) 37.114689485s ago: executing program 2 (id=3333): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmsg(r0, 0x0, 0x1) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000340), 0x4) bind$llc(r1, &(0x7f00000000c0)={0x1a, 0x303, 0x9, 0xff, 0x1, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0x9801, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x22}}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x54, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r2, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010102}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xd6}]}}}, @IFLA_ADDRESS={0xa, 0x1, @random="977774604b7e"}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) (async) recvmsg(r0, 0x0, 0x1) (async) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000340), 0x4) (async) bind$llc(r1, &(0x7f00000000c0)={0x1a, 0x303, 0x9, 0xff, 0x1, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0x9801, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x22}}]}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x54, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r2, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010102}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xd6}]}}}, @IFLA_ADDRESS={0xa, 0x1, @random="977774604b7e"}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) (async) 35.188026554s ago: executing program 5 (id=3340): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={r0}, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x2, 0x4}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r1) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async, rerun: 32) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r3, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x2}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000280)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "3c0200", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x1, {[@mss={0x2, 0x4, 0xffc0}]}}}}}}}}, 0x0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x14, r2, 0x703, 0x70bd26}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x20, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1) 34.295242823s ago: executing program 3 (id=3341): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000080)={0x2, 0x1, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x30, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e24, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000280)=@assoc_id=r2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0xffffffffffffff20) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r6, 0xff04, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0xe, 0xfff3}, {0xffff, 0x10}, {0xfff2, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) sendmmsg(r7, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000180)=@phonet={0x23, 0xf8, 0x1, 0x6}, 0x80, 0x0}}], 0x2, 0x9200000000000000) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_BOS={0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r8 = socket(0x5, 0x2, 0x0) getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x3, &(0x7f00000002c0)=""/15, &(0x7f0000000340)=0xf) 34.274386734s ago: executing program 5 (id=3343): socket$unix(0x1, 0x5, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="0f03000019002551075c0165ff0ffc02802000030011000500e1000cee0203001a000000", 0x33a) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8880}, 0x4880) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000400)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0xc0, 0x1d, "dea1d8981aa3a9c188aaf2269615123ca0a2894d756ec481f02e868817"}}) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000080)={'veth1\x00', 0x7ff}) 34.142741622s ago: executing program 0 (id=3344): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x2, 0x3}}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000400)="9bba40df9cfe3705b48671e1abbac40238f0b2977750a4f9257feac541ce8eeb56b685a3a57ea09c16ca060adda33b27000bdd74bed40cfef2cdfb648f45454ea5090c72f057d7762d4c1b433ba6ef2bfc42c6b305c63c8087e18381729fa3f6bdcdf0a158e4db51435eb5a93998d8c6fb0f66a63871f3278136eaa35e94e8dabee7c6d4559d14069d712edddd0b00882592920610406f54078b7e19e384254b22c7b801e7652560070fcd9326aed636c7a328a5e080ccd9bdcecf05350dabdc", 0xc0}, {&(0x7f00000004c0)="838feefa79e729a50d00939a776733183a471e34fbdf37e3b98eb535493a2998a9bd27d012dad8d7b0f805383ee991b602f3884dd797cf5ef11bfd2a47b81704eacc0bc52673e480d999caf59665d0685f9ea848b369b4a0756d2a2f745ef4cd0909b4bd16d19733356bc4fc3dab0caf976de7c878eaf678c8ba96d804cb8b912142749ea6282ef3a1c915dd342c5ef3038f9b265f4be8c336f514e1b0c387d9e971b147fdb96cbaeebd9655f9b8e22fbb59ed9715b60956cbb4482f0eae7346900c4f77a19096a7184d4986ea40a1c6f3408c769008ba97bce5fc5c", 0xdc}, {&(0x7f0000000700)="6ab06faa60165e6bad6be36cca947735971a83518dac96a0d6cdfa8f9a525aa704015b97717d827f448049aa3cdb6fdeecdb749ce0ebfecc43c113bc92e7a965acdfb00b7fe14761ce1c53f083966b87b6478365ff23f055382b63b3757c3b8c8c6f59fef1e1a1274258825f24e79a74d9cb01340e58aa31f28208fd330848011ac2c6ccce9eaf9c7a0c6a5ab7c8ab18bea54b9e2d8c0c33dc92603f7eb417da15b6662d5e74d8e8db6f2c5e443b13c4de6c47db541eaf882bb82175d579ee6d3e9001c6a0dae6bcca6ef0b9171aa1751e", 0xd1}, {&(0x7f0000000800)="aa6d7ca331fcbc4b81acaf3d85d539fa8aaee0bc13", 0x15}, {&(0x7f0000000840)="6f2f1a8be80564194e696e8bfb375d93972bf44c13b64b1803a3dd23fdd363d52759e5f1857076ab2ae8f7e1ed200a8662886168d7f0fe5fa3d00a4c491066d2569561c14d3c734fbff2b46c22a2153185fac335b3417889a27e5c2caa21cd1445b8793c6cbd20205f866cc67ab2a1783ca55e23899eaca8c60732bee95fd93ae93d2064316cf025d8afb0712c77652e3b4e0976f769bafbadf5814f3ff215a3759a3b603b62e0fac8aed6935609c29fa3f2f243c27ccd1cb10864e3e4d498987d6845cddd093fb405f64436d9f76d56a6fd5318afab770d02c8033061c582170b3b4956cddd394a7a098f8632379920", 0xf0}, {&(0x7f0000000940)="6e7f2806f72c7b04b0d89dc0b988", 0xe}, {&(0x7f0000000980)="d5f3bc017375a45884ceca48f43bbaabad2a7903c07697612dc44d3bc7c48ae750a35271774e8ca059f2e74585ebe0bfdbf621bea9e454b2d0aab760801b6a912331de96755ad96118fe5995e10509a8525a8ceaf14f895c8470eb9c1cc69b", 0x5f}], 0x7}, 0x0) r2 = socket$kcm(0x2, 0x3, 0x106) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000009500"/32], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, &(0x7f00000005c0)) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x4) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x60, 0x800) 33.947715679s ago: executing program 0 (id=3345): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendto(r0, &(0x7f00000000c0)="748a6ce5d3cd28f10c0396e0a619bf228ac61ff29a130d59bb00f2ba2c481e63506095cb3f95709a78880a21698bc15704fbe63091983c46ebf3b0a224d59310e4a02a7909682b7718ed7bf185aff199026c112d1ae458116c6d281646ae4acf91bc836e020080748d42d5a8d95d7b1b0bd9d586934e5cc915b66d6957b374938ee0497b4f9745f4ce9394906b0a7111c58926e614aad9bc510c62b3c6405f8e4323331b97744262", 0xa8, 0xc844, &(0x7f00000001c0)=@ieee802154={0x24, @long}, 0x80) (async) sendto(r0, &(0x7f00000000c0)="748a6ce5d3cd28f10c0396e0a619bf228ac61ff29a130d59bb00f2ba2c481e63506095cb3f95709a78880a21698bc15704fbe63091983c46ebf3b0a224d59310e4a02a7909682b7718ed7bf185aff199026c112d1ae458116c6d281646ae4acf91bc836e020080748d42d5a8d95d7b1b0bd9d586934e5cc915b66d6957b374938ee0497b4f9745f4ce9394906b0a7111c58926e614aad9bc510c62b3c6405f8e4323331b97744262", 0xa8, 0xc844, &(0x7f00000001c0)=@ieee802154={0x24, @long}, 0x80) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x41}, @in6=@mcast1, 0x0, 0xecdf, 0x0, 0x0, 0xa, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, {0x3bc7, 0x7, 0x80000007}, {0x2, 0x54, 0xffffffff}, 0x70bd2a, 0x800003, 0x2, 0x2, 0x0, 0x57}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2d}}, @sa_dir={0x5, 0x21, 0x2}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}}}]}, 0x160}}, 0x4004004) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 33.946957353s ago: executing program 2 (id=3346): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@abs={0x1}, 0x6e) bind$unix(r1, &(0x7f0000000140)=@file={0x1, './file1\x00'}, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000a000000000008000b"], 0x44}, 0x1, 0x2000000000000000}, 0x0) 33.804297903s ago: executing program 5 (id=3347): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0xfffb, 0x5, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000940), 0xfffe, r0}, 0x38) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="440000001f0001", @ANYRESDEC=r0], 0x44}], 0x1000000000000047, 0x0, 0x0, 0x880}, 0x20008840) syz_emit_ethernet(0x38, &(0x7f0000000080)={@empty, @random="2bff5bd4a92f", @void, {@arp={0x806, @generic={0x101, 0xd8f, 0x6, 0x8, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, "ad54abc8eed37087", @empty, "3ddae40738548c815c8c6f70d7d1"}}}}, &(0x7f00000000c0)={0x1, 0x1, [0x468, 0x2b6, 0xd64, 0x3fc]}) 33.752691056s ago: executing program 3 (id=3348): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711031000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) 33.622748703s ago: executing program 0 (id=3349): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f00000001c0)=r6) syz_extract_tcp_res(&(0x7f0000000100)={0x41424344, 0x41424344}, 0x4, 0x4) syz_emit_ethernet(0xffffffffffffff8c, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaacaaaaaaaaaaaaaacaaaa0800450000280000000000869078ac1414bbac14141e00004e1f", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="540e000090780000"], 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @broadcast, @val={@val={0x88a8, 0x1, 0x0, 0x4}, {0x8100, 0x4, 0x0, 0x3}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1, 0x0, 0x0, 0x6, 0x0, @remote, @empty}, {{0x0, 0x4e1c, r7, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x3}}}}}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c884}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x810, r3, 0x0) r10 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$cgroup_int(r10, 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}}, 0x20}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 33.517030986s ago: executing program 5 (id=3350): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=ANY=[@ANYRES16=r2], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0xffffffff, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000001c0)='cgroup.events\x00', 0x275a, 0xfffe) preadv(r7, &(0x7f0000000100), 0xa, 0x0, 0x0) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@generic={&(0x7f0000000600)='./file0\x00', 0x0, 0x30}, 0x18) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000680)={r0, 0x8, 0x4, 0x1}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0x1, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000800000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYRES16=r3], &(0x7f0000000500)='GPL\x00', 0x0, 0x9, &(0x7f0000000540)=""/9, 0x40f00, 0x42, '\x00', 0x0, 0x17, r3, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x8, 0x97d, 0x378}, 0x10, 0xe9b4, r7, 0x6, &(0x7f0000000780)=[r8, r9, r10], &(0x7f00000007c0)=[{0x1, 0x1, 0xc, 0x6}, {0x4, 0x1, 0x9, 0x1}, {0x0, 0x4, 0x9, 0x5}, {0x2, 0x4, 0x8, 0x5}, {0x0, 0x5, 0x1, 0x1}, {0x4, 0x4, 0xd, 0xc}], 0x10, 0x2}, 0x94) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) pread64(r11, 0x0, 0x0, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40005}, 0x840) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000410001000000080004000000010000000400cb8014000180100010800800010005000000040010800c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$igmp6(0xa, 0x3, 0x2) openat$cgroup_pressure(r9, &(0x7f00000002c0)='memory.pressure\x00', 0x2, 0x0) setsockopt$MRT6_INIT(r14, 0x29, 0xc8, &(0x7f0000000040), 0x4) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x30}}, 0x4) 33.430570566s ago: executing program 3 (id=3351): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000000010104000000000000000002000000240001040000000000000000ac1e000108000200e00000010c0002800500010000000000240002800c000280050001000000000014000180080001000000000008000200e00000020800074000000000080008400000000008001540000000001c001880080002400000000008000140000000000800034000000000"], 0x90}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x418, 0xa0, 0xa0, 0x1d8, 0xa0, 0x138, 0x270, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x0, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0xa0, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x5112], 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) 33.062765286s ago: executing program 2 (id=3352): bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x2b) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa14000700ff"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0x2900}], 0x1, 0xc0) 33.038358213s ago: executing program 0 (id=3353): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000f40)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1000000}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}]}, 0x38}}, 0x0) (fail_nth: 5) 32.751332042s ago: executing program 5 (id=3354): r0 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x8040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007"], 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002580)=@newtaction={0x490, 0x30, 0x12f, 0x0, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffc00, 0x8, 0x8, 0x2, 0x6, {0x1, 0x1, 0xf, 0x70, 0x5d5, 0x2}, {0x20, 0x0, 0x1, 0x5, 0x6}, 0x2, 0x5, 0x40}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x490}}, 0x0) syz_emit_ethernet(0xd2, &(0x7f0000000140)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x9c, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0xe22, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "8742fe4687d86e5da82e41ef2302058dc3b5674f7389ec494011ccec4f7d012c", "f2760709a418c2d54dfc3bcd6b0dc0f026e4dbbd0fc37c4cf9e05eebedd14ed77e5af90f021be4d1922cd5279600538f", "9cd204eeecae9a729ee1662af2f006faf435c215365df6e6c5db8235", {"aeb6eb691496126a2d28d73f1a738b14", "fc81aa717bf9ce692ed96249827491df"}}}}}}}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 32.262132284s ago: executing program 2 (id=3355): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040048) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000093f4af48308ae98361961245249bf7399be2f1d054222e021d3cd762314e98546dcff52df1535d17b3bc37e4de6e56cbaaf261b86ff651038e0d34a144d43f554d9bf3b5a4cfa10646cd47e10664e5b4ac6c1de3c17d03ed3409ad48a6ad06c67d4dcf256afc45d828c98c3c34674875beeb2d133b54147104eec99e6be1dc5c2cd5ec7085f0f243eaad28e85cd8f175d64ce143ad6a2d257e40e23f87a68570fa294490661ca35ae5c97d126b98d744cc1b0431629094f62eb99fc637766684905bf0803f87a317cc4f5e32277d6c269136af78a456d50b30f268fea0f7548e6398664ed435527a9e7db5d85ada48812d09611275c022b4c42b9cd697d838121d78bd5c25fb2e06f5e0d7880d", @ANYRES16=r4, @ANYBLOB="01002dbd7000fcdbdf255700000008000300", @ANYRES32=r5, @ANYBLOB="0600950006000000060095000400000006009500070000000600950000100000"], 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x4000800) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x12000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8001, 0x7d}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0xc045) 32.19422661s ago: executing program 0 (id=3356): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$xdp(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {0x0}, {&(0x7f0000000440)="5f68affb0e", 0x5}], 0x3, 0x0, 0x0, 0x10}, 0x200040c0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) 32.19355687s ago: executing program 3 (id=3357): r0 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) getsockopt$bt_hci(r0, 0x84, 0x7c, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x3) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0xe8}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x4, 0x0, 0x0, @fd}]}, 0x1c}}, 0x0) getsockopt(r2, 0xab7, 0x0, &(0x7f0000001140)=""/197, &(0x7f0000001240)=0xc5) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x24, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000010c0)={@random="434f1c75c802", @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote}]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@private}, {@broadcast}, {@dev}, {@empty}, {@empty}, {@broadcast}]}]}}}}}}}, 0x0) 31.852039318s ago: executing program 2 (id=3358): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01fffff0000000000000200100000c000280080002006c6f0000180003800400010008000200050000000800040076"], 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x20}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20018}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0xffffffffffffffff}]}}}]}, 0x40}}, 0x0) 31.825109131s ago: executing program 0 (id=3359): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, 0x41, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x33}}]}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x5, 0x8}]}, 0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async, rerun: 64) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) (rerun: 64) close(r5) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x6, 0x9}]}, 0x10) (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004c00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x90) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) (async) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 64) recvfrom$inet(r7, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) (async, rerun: 64) shutdown(r7, 0x1) (async, rerun: 64) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x4004032, 0xffffffffffffffff, 0xb06cb000) (async, rerun: 64) r8 = socket$alg(0x26, 0x5, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0x80087601, &(0x7f0000000300)) (async) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000f40)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}}, 0x0, 0x0, 0x23d, 0x0, "2dfedf4fe729e6da2c283c04b074205e1eefc56dbc4e3bbeef85e81f0118fc0f64326f290de80584bce41936f14cb7a820ac8e630e660da57c076a7cb4155c7f0efdcea917bd84db674f344208d682a5"}, 0xd8) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x98}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x12}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0xf2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x0) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3}]}}}]}, 0x50}}, 0x0) (rerun: 64) 31.734443827s ago: executing program 5 (id=3360): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000ffff0f000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x3e, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000440)=0x2, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad386dd", 0x4, 0x840, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) sendfile(r0, r1, &(0x7f00000000c0)=0x1, 0x7ff) 31.733824353s ago: executing program 3 (id=3361): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x4, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000015000100000000ec001fb6330d70000008000100", @ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x0) 26.896277036s ago: executing program 3 (id=3362): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, 0x3, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000084}, 0x84) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000000", @ANYRES32=0x0, @ANYBLOB="46060900040c01001c00128009000100626f6e64000000000c0002800800090003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x2404c050) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='H\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="140012800b000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x240440d1}, 0x40000) 0s ago: executing program 33 (id=3359): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, 0x41, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x33}}]}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x5, 0x8}]}, 0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async, rerun: 64) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) (rerun: 64) close(r5) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x6, 0x9}]}, 0x10) (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004c00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x90) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) (async) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 64) recvfrom$inet(r7, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) (async, rerun: 64) shutdown(r7, 0x1) (async, rerun: 64) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x4004032, 0xffffffffffffffff, 0xb06cb000) (async, rerun: 64) r8 = socket$alg(0x26, 0x5, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0x80087601, &(0x7f0000000300)) (async) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000f40)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}}, 0x0, 0x0, 0x23d, 0x0, "2dfedf4fe729e6da2c283c04b074205e1eefc56dbc4e3bbeef85e81f0118fc0f64326f290de80584bce41936f14cb7a820ac8e630e660da57c076a7cb4155c7f0efdcea917bd84db674f344208d682a5"}, 0xd8) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x98}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x12}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0xf2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x0) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3}]}}}]}, 0x50}}, 0x0) (rerun: 64) kernel console output (not intermixed with test programs): led while replacing table [ 296.146136][T13350] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2130'. [ 296.871291][T13369] xt_nfacct: accounting object `syz0' does not exist [ 296.924331][T13374] __nla_validate_parse: 1 callbacks suppressed [ 296.924349][T13374] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2140'. [ 297.153830][T13373] bond7 (unregistering): Released all slaves [ 297.198719][T13384] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2144'. [ 297.503144][T13387] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2145'. [ 297.503230][T13387] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2145'. [ 297.683160][T13404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.991686][T13416] netlink: 'syz.0.2150': attribute type 58 has an invalid length. [ 297.991709][T13416] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2150'. [ 298.032829][T13416] ip_tables: iptables: counters copy to user failed while replacing table [ 298.310755][T13429] netlink: 'syz.0.2152': attribute type 1 has an invalid length. [ 298.680503][T13429] bond7: entered promiscuous mode [ 298.692289][T13429] 8021q: adding VLAN 0 to HW filter on device bond7 [ 298.843002][T13430] macvtap1: entered allmulticast mode [ 299.129324][T13433] bond7: (slave bridge2): making interface the new active one [ 299.129349][T13433] bridge2: entered promiscuous mode [ 299.131307][T13433] bond7: (slave bridge2): Enslaving as an active interface with an up link [ 299.413232][T13460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2155'. [ 299.461851][T13460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2155'. [ 300.206018][T13483] can: request_module (can-proto-3) failed. [ 300.805992][T13505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2170'. [ 300.849927][T13509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2172'. [ 300.849949][T13509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2172'. [ 301.097025][T13505] macvtap1: entered promiscuous mode [ 301.097597][T13505] vlan0: entered promiscuous mode [ 301.098561][T13505] macvtap1: entered allmulticast mode [ 301.098638][T13505] vlan0: entered allmulticast mode [ 301.098650][T13505] veth0_vlan: entered allmulticast mode [ 301.100734][T13509] vlan0: entered promiscuous mode [ 301.186756][T13523] vlan2: entered promiscuous mode [ 301.186780][T13523] bridge0: entered promiscuous mode [ 301.780239][T13544] xfrm1: entered promiscuous mode [ 301.780261][T13544] xfrm1: entered allmulticast mode [ 301.934886][T13554] netlink: 'syz.1.2182': attribute type 64 has an invalid length. [ 302.085644][T13558] __nla_validate_parse: 4 callbacks suppressed [ 302.085665][T13558] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2182'. [ 302.616116][T13566] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 302.637789][T13567] netlink: 'syz.3.2187': attribute type 1 has an invalid length. [ 302.675835][T13569] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 302.690449][T13567] 8021q: adding VLAN 0 to HW filter on device bond3 [ 302.903757][T13578] ip_tables: iptables: counters copy to user failed while replacing table [ 302.941887][T13567] bond3: (slave geneve2): making interface the new active one [ 302.946132][T13567] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 303.370300][T13583] bond5: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 303.401064][T13583] bond5 (unregistering): Released all slaves [ 303.787708][T13599] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2194'. [ 303.787743][T13599] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2194'. [ 303.963869][T13608] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2196'. [ 304.158207][T13610] ip6gre6: entered promiscuous mode [ 304.158231][T13610] ip6gre6: entered allmulticast mode [ 304.203123][T13613] xt_LOG: level 8 >= 8 [ 304.269857][T13589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2192'. [ 304.358416][T13615] netlink: 'syz.1.2199': attribute type 1 has an invalid length. [ 305.155458][T13642] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 305.193540][T13643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2207'. [ 305.550335][T13645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2208'. [ 305.735141][T13656] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2212'. [ 306.190749][T13671] gretap0: entered promiscuous mode [ 306.190895][T13671] vlan5: entered promiscuous mode [ 306.562874][T13648] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 306.575942][T13647] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 307.296600][T13702] netlink: 'syz.4.2224': attribute type 8 has an invalid length. [ 307.365421][T13703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2220'. [ 307.646271][T13713] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2225'. [ 307.929349][T13711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2222'. [ 308.039258][T13730] nbd1: detected capacity change from 0 to 63 [ 308.040476][ T5624] block nbd1: Receive control failed (result -32) [ 308.111474][ T4944] block nbd1: Dead connection, failed to find a fallback [ 308.111499][ T4944] block nbd1: shutting down sockets [ 308.111512][ T4944] blk_print_req_error: 70 callbacks suppressed [ 308.111524][ T4944] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 308.111549][ T4944] buffer_io_error: 138 callbacks suppressed [ 308.111568][ T4944] Buffer I/O error on dev nbd1, logical block 0, async page read [ 308.113220][ T4944] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 308.113248][ T4944] Buffer I/O error on dev nbd1, logical block 1, async page read [ 308.115032][ T4944] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 308.115059][ T4944] Buffer I/O error on dev nbd1, logical block 2, async page read [ 308.115076][ T4944] Buffer I/O error on dev nbd1, logical block 3, async page read [ 308.115201][ T4944] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 308.115224][ T4944] Buffer I/O error on dev nbd1, logical block 0, async page read [ 308.115316][ T4944] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 308.115337][ T4944] Buffer I/O error on dev nbd1, logical block 1, async page read [ 308.115427][ T4944] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 308.115449][ T4944] Buffer I/O error on dev nbd1, logical block 2, async page read [ 308.115566][ T4944] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 308.115588][ T4944] Buffer I/O error on dev nbd1, logical block 3, async page read [ 308.116142][ T4944] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 308.116167][ T4944] Buffer I/O error on dev nbd1, logical block 0, async page read [ 308.116264][ T4944] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 308.116287][ T4944] Buffer I/O error on dev nbd1, logical block 1, async page read [ 308.116479][ T4944] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 308.214440][T13739] ldm_validate_partition_table(): Disk read failed. [ 308.322676][T13739] Dev nbd1: unable to read RDB block 0 [ 308.333066][T13739] nbd1: unable to read partition table [ 308.655999][T13739] ldm_validate_partition_table(): Disk read failed. [ 308.687824][T13739] Dev nbd1: unable to read RDB block 0 [ 308.695333][T13739] nbd1: unable to read partition table [ 308.909536][T13754] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2232'. [ 308.959231][T13754] ip6gre2: entered promiscuous mode [ 308.959256][T13754] ip6gre2: entered allmulticast mode [ 309.271074][T13772] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2237'. [ 309.303402][T13772] netlink: 'syz.2.2237': attribute type 21 has an invalid length. [ 309.949026][T13795] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2246'. [ 309.949059][T13795] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 310.024799][T13802] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2249'. [ 310.049945][T13802] ip6gre3: entered promiscuous mode [ 310.049973][T13802] ip6gre3: entered allmulticast mode [ 310.438491][T13820] netlink: 'syz.0.2251': attribute type 83 has an invalid length. [ 310.796476][T13828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2254'. [ 311.224314][T13844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.329062][T13842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2259'. [ 311.329106][T13842] ip6gretap0: entered promiscuous mode [ 311.335975][T13851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2261'. [ 311.399624][T13858] ip6gre2: entered promiscuous mode [ 311.399646][T13858] ip6gre2: entered allmulticast mode [ 311.542304][T13852] ovs-dp0: left promiscuous mode [ 311.696444][T13868] xt_addrtype: ipv6 does not support BROADCAST matching [ 311.714111][T13868] netlink: 'syz.4.2265': attribute type 10 has an invalid length. [ 311.763818][T13868] veth0_vlan: entered allmulticast mode [ 311.786140][T13868] team0: Device veth0_vlan failed to register rx_handler [ 311.848403][T13861] ovs-dp0: entered promiscuous mode [ 312.335303][T13887] netlink: 'syz.4.2271': attribute type 4 has an invalid length. [ 312.369372][T13886] __nla_validate_parse: 36 callbacks suppressed [ 312.369393][T13886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2269'. [ 312.416157][T13886] veth1_vlan: left promiscuous mode [ 312.440578][T13886] netlink: 'syz.3.2269': attribute type 1 has an invalid length. [ 312.440602][T13886] netlink: 'syz.3.2269': attribute type 2 has an invalid length. [ 312.601649][T13894] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2273'. [ 313.392834][T13920] netlink: 'syz.2.2279': attribute type 49 has an invalid length. [ 314.219467][T13944] ip6gre3: entered promiscuous mode [ 314.219489][T13944] ip6gre3: entered allmulticast mode [ 314.491619][T13952] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 314.637970][T13954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2290'. [ 314.638002][T13954] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 314.778564][T13959] netlink: zone id is out of range [ 314.778581][T13959] netlink: zone id is out of range [ 314.778589][T13959] netlink: zone id is out of range [ 314.778596][T13959] netlink: zone id is out of range [ 314.778604][T13959] netlink: zone id is out of range [ 314.778611][T13959] netlink: zone id is out of range [ 314.778618][T13959] netlink: set zone limit has 4 unknown bytes [ 315.157795][T13975] netlink: 'syz.2.2295': attribute type 4 has an invalid length. [ 315.157907][T13975] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2295'. [ 315.264946][T13975] .`: renamed from bond0 (while UP) [ 315.373742][T13981] netlink: 'syz.1.2298': attribute type 1 has an invalid length. [ 315.373764][T13981] netlink: 'syz.1.2298': attribute type 2 has an invalid length. [ 315.377070][T13981] netlink: 'syz.1.2298': attribute type 1 has an invalid length. [ 315.612337][T13985] validate_nla: 1 callbacks suppressed [ 315.612358][T13985] netlink: 'syz.1.2299': attribute type 6 has an invalid length. [ 315.823103][T13988] ip6gre3: entered promiscuous mode [ 315.823126][T13988] ip6gre3: entered allmulticast mode [ 316.654889][ T7427] IPVS: starting estimator thread 0... [ 316.737703][T14016] IPVS: using max 27 ests per chain, 64800 per kthread [ 317.077698][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.259134][T14026] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2309'. [ 317.433098][T14026] netlink: 'syz.1.2309': attribute type 4 has an invalid length. [ 317.433120][T14026] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2309'. [ 317.681396][T14034] netlink: 'syz.0.2313': attribute type 1 has an invalid length. [ 317.681422][T14034] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2313'. [ 317.872858][T14042] netlink: zone id is out of range [ 317.872876][T14042] netlink: del zone limit has 4 unknown bytes [ 318.454826][T14062] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2317'. [ 318.480646][T14066] bridge0: port 3(veth0) entered blocking state [ 318.480762][T14066] bridge0: port 3(veth0) entered disabled state [ 318.480925][T14066] veth0: entered allmulticast mode [ 318.509063][T14066] veth0: entered promiscuous mode [ 318.512461][T14066] bridge0: port 3(veth0) entered blocking state [ 318.512657][T14066] bridge0: port 3(veth0) entered forwarding state [ 318.567063][T14064] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2319'. [ 318.567086][T14064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2319'. [ 318.683422][T14069] netlink: 'syz.0.2324': attribute type 20 has an invalid length. [ 318.683443][T14069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2324'. [ 318.802603][T14064] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2319'. [ 318.802626][T14064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2319'. [ 318.803411][T14069] netlink: 'syz.0.2324': attribute type 20 has an invalid length. [ 318.803427][T14069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2324'. [ 318.819734][ T7423] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.819786][ T7423] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.819818][ T7423] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.819849][ T7423] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.931606][T14070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2317'. [ 319.263996][T14086] netlink: 'syz.0.2326': attribute type 1 has an invalid length. [ 319.392693][T14086] 8021q: adding VLAN 0 to HW filter on device bond8 [ 319.431013][T14090] ip6gre7: entered promiscuous mode [ 319.432267][T14090] ip6gre7: entered allmulticast mode [ 319.568514][T14092] bond8: (slave dummy0): Enslaving as a backup interface with an up link [ 319.615738][T10079] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 319.807889][T10079] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 319.823511][T14099] xt_hashlimit: size too large, truncated to 1048576 [ 320.581496][T14122] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 321.262985][T14146] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 321.487017][T14151] netlink: 'syz.3.2344': attribute type 1 has an invalid length. [ 321.866842][T14172] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 321.866865][T14172] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 321.891206][T14172] netlink: 'syz.4.2352': attribute type 2 has an invalid length. [ 322.096986][T14172] : entered promiscuous mode [ 322.692563][T14195] bond4 (unregistering): Released all slaves [ 322.724390][T14199] __nla_validate_parse: 27 callbacks suppressed [ 322.724408][T14199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2355'. [ 322.912316][T14205] xt_IDLETIMER: label is empty or not nul-terminated [ 323.185433][T14213] netlink: 'syz.4.2363': attribute type 16 has an invalid length. [ 323.185454][T14213] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2363'. [ 323.232249][T14210] IPVS: sh: FWM 3 0x00000003 - no destination available [ 323.382192][T14226] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2365'. [ 323.517000][T14219] syzkaller0: entered promiscuous mode [ 323.517029][T14219] syzkaller0: entered allmulticast mode [ 323.716119][T14230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2368'. [ 324.012163][T14237] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2369'. [ 324.051266][T14237] netlink: 'syz.2.2369': attribute type 4 has an invalid length. [ 324.051288][T14237] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2369'. [ 324.098366][T14244] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2370'. [ 324.155546][T14242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2369'. [ 324.155567][T14242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2369'. [ 324.375791][T14244] bond4 (unregistering): Released all slaves [ 325.393083][T14286] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2378'. [ 325.681761][T14292] bond6: option xmit_hash_policy: invalid value (64) [ 325.683591][T14292] bond6 (unregistering): Released all slaves [ 326.279230][ T31] audit: type=1107 audit(1790754032.224:5): pid=14307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O<5AÏÖÞ·“B™Ÿ|pU$˜) Þ×WWCÛ+scÞÖtéyÅäÂñN' [ 327.191272][T14346] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 327.191546][T14346] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 327.191813][T14346] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 327.192059][T14346] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 327.194605][T14346] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 327.245375][T14346] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 327.908826][T14373] netdevsim netdevsim0: Direct firmware load for ÿ failed with error -2 [ 327.908854][T14373] netdevsim netdevsim0: Falling back to sysfs fallback for: ÿ [ 328.201559][T14376] ip_tables: iptables: counters copy to user failed while replacing table [ 328.406626][T14381] __nla_validate_parse: 6 callbacks suppressed [ 328.406647][T14381] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2411'. [ 328.808730][T14388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2414'. [ 328.919628][T14388] bond0 (unregistering): Released all slaves [ 329.460053][T14412] netlink: 4912 bytes leftover after parsing attributes in process `syz.1.2419'. [ 329.726181][T14417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2420'. [ 329.836050][T14420] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2421'. [ 330.114241][T14427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2424'. [ 330.160136][T14430] netlink: 'syz.4.2426': attribute type 1 has an invalid length. [ 331.051228][T14457] ip6t_hbh: too many supported opts specified [ 331.181454][T14461] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 332.013380][T14478] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 332.013522][T14478] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 332.056846][T14481] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2440'. [ 332.491801][T14489] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2442'. [ 332.491827][T14489] nbd: illegal input index 65508 [ 332.515692][T14489] ieee802154 phy1 wpan1: encryption failed: -22 [ 334.413792][T14559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2455'. [ 334.520017][T14557] tipc: Enabled bearer , priority 0 [ 334.839325][T14563] netlink: 'syz.2.2458': attribute type 2 has an invalid length. [ 335.074166][T14568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2459'. [ 335.435405][T14584] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 335.435423][T14584] IPv6: NLM_F_CREATE should be set when creating new route [ 335.435461][T14584] IPv6: NLM_F_CREATE should be set when creating new route [ 335.435484][T14584] IPv6: NLM_F_CREATE should be set when creating new route [ 335.479365][T14584] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 335.646406][T14592] ip_tables: iptables: counters copy to user failed while replacing table [ 336.192820][T14604] virt_wifi0 speed is unknown, defaulting to 1000 [ 336.243724][T14604] wlan0 speed is unknown, defaulting to 1000 [ 336.518900][T14621] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 336.520783][T14625] netlink: 'syz.1.2474': attribute type 1 has an invalid length. [ 336.583308][T14616] bond6: entered allmulticast mode [ 336.585401][T14616] 8021q: adding VLAN 0 to HW filter on device bond6 [ 337.537626][ C1] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 339.543310][T14702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2492'. [ 339.586926][T14655] netlink: 'syz.1.2481': attribute type 2 has an invalid length. [ 340.055185][T14712] FAULT_INJECTION: forcing a failure. [ 340.055185][T14712] name failslab, interval 1, probability 0, space 0, times 0 [ 340.055218][T14712] CPU: 0 UID: 0 PID: 14712 Comm: syz.4.2496 Not tainted syzkaller #0 PREEMPT(full) [ 340.055239][T14712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 340.055262][T14712] Call Trace: [ 340.055270][T14712] [ 340.055278][T14712] dump_stack_lvl+0xe8/0x150 [ 340.055311][T14712] should_fail_ex+0x410/0x560 [ 340.055338][T14712] should_failslab+0xa8/0x100 [ 340.055362][T14712] ? skb_clone+0x212/0x3a0 [ 340.055389][T14712] kmem_cache_alloc_noprof+0xa1/0x600 [ 340.055419][T14712] ? skb_clone+0x212/0x3a0 [ 340.055452][T14712] skb_clone+0x212/0x3a0 [ 340.055481][T14712] bpf_clone_redirect+0x170/0x4b0 [ 340.055511][T14712] ? bpf_test_run+0x1d1/0x830 [ 340.055529][T14712] bpf_prog_7c64685fc60f7d44+0x5f/0x68 [ 340.055551][T14712] ? __kernel_text_address+0xd/0x30 [ 340.055573][T14712] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 340.055593][T14712] ? arch_stack_walk+0xfb/0x150 [ 340.055621][T14712] ? lock_acquire+0x115/0x350 [ 340.055647][T14712] ? ktime_get+0x45/0x220 [ 340.055669][T14712] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 340.055689][T14712] ? lockdep_hardirqs_on+0x7b/0x110 [ 340.055712][T14712] ? ktime_get+0x45/0x220 [ 340.055728][T14712] ? seqcount_lockdep_reader_access+0xea/0x100 [ 340.055747][T14712] ? bpf_test_run+0x1d1/0x830 [ 340.055767][T14712] ? bpf_test_timer_continue+0x10c/0x320 [ 340.055791][T14712] bpf_test_run+0x354/0x830 [ 340.055830][T14712] ? __pfx_bpf_test_run+0x10/0x10 [ 340.055864][T14712] ? __kasan_krealloc+0xec/0x110 [ 340.055902][T14712] ? skb_dst_set+0x72/0x140 [ 340.055922][T14712] bpf_prog_test_run_skb+0xe35/0x2230 [ 340.055974][T14712] ? __fget_files+0x3a2/0x420 [ 340.055998][T14712] ? __fget_files+0x2a/0x420 [ 340.056028][T14712] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 340.056057][T14712] bpf_prog_test_run+0x2c5/0x340 [ 340.056084][T14712] __sys_bpf+0xa22/0xd90 [ 340.056114][T14712] ? __pfx___sys_bpf+0x10/0x10 [ 340.056146][T14712] ? __fget_files+0x2a/0x420 [ 340.056189][T14712] ? ksys_write+0x242/0x270 [ 340.056218][T14712] ? __pfx_ksys_write+0x10/0x10 [ 340.056251][T14712] __x64_sys_bpf+0xba/0xd0 [ 340.056273][T14712] do_syscall_64+0x166/0x520 [ 340.056296][T14712] ? trace_irq_disable+0x3b/0x140 [ 340.056315][T14712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.056334][T14712] ? clear_bhb_loop+0x70/0xc0 [ 340.056358][T14712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.056376][T14712] RIP: 0033:0x7f369df9e159 [ 340.056393][T14712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.056408][T14712] RSP: 002b:00007f369edcd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 340.056429][T14712] RAX: ffffffffffffffda RBX: 00007f369e225fa0 RCX: 00007f369df9e159 [ 340.056442][T14712] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 340.056455][T14712] RBP: 00007f369edcd090 R08: 0000000000000000 R09: 0000000000000000 [ 340.056466][T14712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 340.056477][T14712] R13: 00007f369e226038 R14: 00007f369e225fa0 R15: 00007ffdfbf5f2f8 [ 340.056509][T14712] [ 340.514203][T14714] syzkaller1: entered promiscuous mode [ 340.514226][T14714] syzkaller1: entered allmulticast mode [ 340.729696][T14724] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2497'. [ 340.762217][T14724] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2497'. [ 341.268078][T14738] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2505'. [ 341.541581][T14753] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 342.034775][ T52] Bluetooth: hci2: unexpected event for opcode 0x0005 [ 342.048282][T14759] netlink: 'syz.4.2510': attribute type 29 has an invalid length. [ 342.066161][T14759] netlink: 'syz.4.2510': attribute type 29 has an invalid length. [ 343.641377][T14807] batman_adv: batadv0: Adding interface: syzkaller0 [ 343.641395][T14807] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.641422][T14807] batman_adv: batadv0: Interface activated: syzkaller0 [ 343.851198][T14804] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 343.913068][T14804] batman_adv: batadv0: Removing interface: syzkaller0 [ 344.500250][T14832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.710372][T14838] netlink: 'syz.4.2540': attribute type 9 has an invalid length. [ 344.710393][T14838] netlink: 'syz.4.2540': attribute type 4 has an invalid length. [ 345.164179][T14852] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2546'. [ 345.376713][T14863] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2548'. [ 346.054794][T14886] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2554'. [ 346.431696][T14889] tipc: Enabling of bearer rejected, already enabled [ 346.732885][T14917] xt_l2tp: invalid flags combination: 8 [ 346.786098][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.943603][T14924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.003494][T14924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.296093][T14932] openvswitch: netlink: Actions may not be safe on all matching packets [ 347.771958][T14939] netlink: 'syz.1.2567': attribute type 1 has an invalid length. [ 347.894630][T14944] netlink: 'syz.1.2567': attribute type 1 has an invalid length. [ 348.090959][T14947] openvswitch: netlink: Actions may not be safe on all matching packets [ 348.142976][T14950] nbd: must specify a device to reconfigure [ 348.467846][T14957] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2573'. [ 348.525212][T14958] ip_tables: iptables: counters copy to user failed while replacing table [ 348.720735][T14969] netlink: 'syz.4.2577': attribute type 20 has an invalid length. [ 348.720760][T14969] IPv6: NLM_F_CREATE should be specified when creating new route [ 349.227987][T14993] Cannot find add_set index 4 as target [ 349.228150][T14993] Cannot find add_set index 4 as target [ 349.228252][T14993] Cannot find add_set index 4 as target [ 349.230357][T14993] Cannot find add_set index 4 as target [ 349.230482][T14993] Cannot find add_set index 4 as target [ 349.230589][T14993] Cannot find add_set index 4 as target [ 349.230688][T14993] Cannot find add_set index 4 as target [ 349.230786][T14993] Cannot find add_set index 4 as target [ 349.230887][T14993] Cannot find add_set index 4 as target [ 349.230985][T14993] Cannot find add_set index 4 as target [ 349.600271][T14998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2587'. [ 349.690990][T15003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2587'. [ 349.844137][T15009] FAULT_INJECTION: forcing a failure. [ 349.844137][T15009] name failslab, interval 1, probability 0, space 0, times 0 [ 349.844172][T15009] CPU: 0 UID: 0 PID: 15009 Comm: syz.3.2586 Not tainted syzkaller #0 PREEMPT(full) [ 349.844195][T15009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 349.844206][T15009] Call Trace: [ 349.844213][T15009] [ 349.844222][T15009] dump_stack_lvl+0xe8/0x150 [ 349.844254][T15009] should_fail_ex+0x410/0x560 [ 349.844282][T15009] should_failslab+0xa8/0x100 [ 349.844305][T15009] ? skb_clone+0x212/0x3a0 [ 349.844332][T15009] kmem_cache_alloc_noprof+0xa1/0x600 [ 349.844362][T15009] ? skb_clone+0x212/0x3a0 [ 349.844393][T15009] skb_clone+0x212/0x3a0 [ 349.844422][T15009] bpf_clone_redirect+0x170/0x4b0 [ 349.844454][T15009] ? bpf_test_run+0x1d1/0x830 [ 349.844472][T15009] bpf_prog_7c64685fc60f7d44+0x5f/0x68 [ 349.844493][T15009] ? __kernel_text_address+0xd/0x30 [ 349.844517][T15009] ? arch_stack_walk+0xfb/0x150 [ 349.844544][T15009] ? __pfx___schedule+0x10/0x10 [ 349.844579][T15009] ? preempt_schedule_thunk+0x16/0x40 [ 349.844602][T15009] ? preempt_schedule_common+0x7f/0xd0 [ 349.844623][T15009] ? bpf_test_run+0x1d1/0x830 [ 349.844644][T15009] ? bpf_test_timer_continue+0x10c/0x320 [ 349.844668][T15009] bpf_test_run+0x354/0x830 [ 349.844707][T15009] ? __pfx_bpf_test_run+0x10/0x10 [ 349.844742][T15009] ? __kasan_krealloc+0xec/0x110 [ 349.844772][T15009] ? skb_dst_set+0x72/0x140 [ 349.844793][T15009] bpf_prog_test_run_skb+0xe35/0x2230 [ 349.844841][T15009] ? __fget_files+0x3a2/0x420 [ 349.844865][T15009] ? __fget_files+0x2a/0x420 [ 349.844895][T15009] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 349.844924][T15009] bpf_prog_test_run+0x2c5/0x340 [ 349.844951][T15009] __sys_bpf+0xa22/0xd90 [ 349.844980][T15009] ? __pfx___sys_bpf+0x10/0x10 [ 349.845019][T15009] ? __fget_files+0x2a/0x420 [ 349.845061][T15009] ? ksys_write+0x242/0x270 [ 349.845090][T15009] ? __pfx_ksys_write+0x10/0x10 [ 349.845123][T15009] __x64_sys_bpf+0xba/0xd0 [ 349.845146][T15009] do_syscall_64+0x166/0x520 [ 349.845168][T15009] ? trace_irq_disable+0x3b/0x140 [ 349.845187][T15009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.845205][T15009] ? clear_bhb_loop+0x70/0xc0 [ 349.845228][T15009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.845247][T15009] RIP: 0033:0x7f126919e159 [ 349.845264][T15009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.845279][T15009] RSP: 002b:00007f1269f85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 349.845299][T15009] RAX: ffffffffffffffda RBX: 00007f1269425fa0 RCX: 00007f126919e159 [ 349.845313][T15009] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 349.845324][T15009] RBP: 00007f1269f85090 R08: 0000000000000000 R09: 0000000000000000 [ 349.845336][T15009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 349.845347][T15009] R13: 00007f1269426038 R14: 00007f1269425fa0 R15: 00007ffff42ad258 [ 349.845378][T15009] [ 350.246494][T14999] syzkaller1: entered promiscuous mode [ 350.246517][T14999] syzkaller1: entered allmulticast mode [ 350.545533][T15023] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2592'. [ 350.648598][T15023] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2592'. [ 351.012011][T15034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2595'. [ 351.118383][T15044] netlink: 'syz.4.2597': attribute type 4 has an invalid length. [ 351.635912][T15059] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2602'. [ 351.732869][T15058] bridge3: entered promiscuous mode [ 351.732892][T15058] bridge3: entered allmulticast mode [ 351.805613][T15058] team0: Port device bridge3 added [ 351.835809][T15064] xt_addrtype: ipv6 does not support BROADCAST matching [ 352.405227][T15080] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2609'. [ 352.983818][T15092] FAULT_INJECTION: forcing a failure. [ 352.983818][T15092] name failslab, interval 1, probability 0, space 0, times 0 [ 352.983852][T15092] CPU: 0 UID: 0 PID: 15092 Comm: syz.0.2615 Not tainted syzkaller #0 PREEMPT(full) [ 352.983873][T15092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 352.983885][T15092] Call Trace: [ 352.983893][T15092] [ 352.983901][T15092] dump_stack_lvl+0xe8/0x150 [ 352.983933][T15092] should_fail_ex+0x410/0x560 [ 352.983960][T15092] should_failslab+0xa8/0x100 [ 352.983983][T15092] ? skb_clone+0x212/0x3a0 [ 352.984010][T15092] kmem_cache_alloc_noprof+0xa1/0x600 [ 352.984041][T15092] ? skb_clone+0x212/0x3a0 [ 352.984073][T15092] skb_clone+0x212/0x3a0 [ 352.984102][T15092] bpf_clone_redirect+0x170/0x4b0 [ 352.984135][T15092] ? bpf_test_run+0x1d1/0x830 [ 352.984154][T15092] bpf_prog_7c64685fc60f7d44+0x5f/0x68 [ 352.984175][T15092] ? __kernel_text_address+0xd/0x30 [ 352.984199][T15092] ? arch_stack_walk+0xfb/0x150 [ 352.984225][T15092] ? __pfx___schedule+0x10/0x10 [ 352.984268][T15092] ? preempt_schedule_thunk+0x16/0x40 [ 352.984292][T15092] ? preempt_schedule_common+0x7f/0xd0 [ 352.984313][T15092] ? bpf_test_run+0x1d1/0x830 [ 352.984334][T15092] ? bpf_test_timer_continue+0x10c/0x320 [ 352.984358][T15092] bpf_test_run+0x354/0x830 [ 352.984398][T15092] ? __pfx_bpf_test_run+0x10/0x10 [ 352.984432][T15092] ? __kasan_krealloc+0xec/0x110 [ 352.984463][T15092] ? skb_dst_set+0x72/0x140 [ 352.984484][T15092] bpf_prog_test_run_skb+0xe35/0x2230 [ 352.984533][T15092] ? __fget_files+0x3a2/0x420 [ 352.984558][T15092] ? __fget_files+0x2a/0x420 [ 352.984588][T15092] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 352.984616][T15092] bpf_prog_test_run+0x2c5/0x340 [ 352.984644][T15092] __sys_bpf+0xa22/0xd90 [ 352.984673][T15092] ? __pfx___sys_bpf+0x10/0x10 [ 352.984706][T15092] ? __fget_files+0x2a/0x420 [ 352.984749][T15092] ? ksys_write+0x242/0x270 [ 352.984778][T15092] ? __pfx_ksys_write+0x10/0x10 [ 352.984811][T15092] __x64_sys_bpf+0xba/0xd0 [ 352.984833][T15092] do_syscall_64+0x166/0x520 [ 352.984856][T15092] ? trace_irq_disable+0x3b/0x140 [ 352.984873][T15092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.984892][T15092] ? clear_bhb_loop+0x70/0xc0 [ 352.984915][T15092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.984934][T15092] RIP: 0033:0x7f9fe919e159 [ 352.984951][T15092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.984966][T15092] RSP: 002b:00007f9fea124028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 352.984986][T15092] RAX: ffffffffffffffda RBX: 00007f9fe9425fa0 RCX: 00007f9fe919e159 [ 352.984999][T15092] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 352.985011][T15092] RBP: 00007f9fea124090 R08: 0000000000000000 R09: 0000000000000000 [ 352.985022][T15092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 352.985033][T15092] R13: 00007f9fe9426038 R14: 00007f9fe9425fa0 R15: 00007ffc7bde5998 [ 352.985065][T15092] [ 353.342348][T15098] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 353.407038][T15095] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2614'. [ 353.407064][T15095] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2614'. [ 353.407079][T15095] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2614'. [ 353.637011][T15103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2616'. [ 354.215491][T15118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2622'. [ 354.252575][T15118] tcpmss_tg6_check: 55 callbacks suppressed [ 354.252596][T15118] xt_TCPMSS: Only works on TCP SYN packets [ 354.742321][T15133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.804314][T15128] bond0 (unregistering): Released all slaves [ 355.280984][T15143] netlink: 'syz.0.2627': attribute type 2 has an invalid length. [ 355.282745][T15142] netlink: 'syz.0.2627': attribute type 2 has an invalid length. [ 356.516506][T15168] virt_wifi0 speed is unknown, defaulting to 1000 [ 356.530144][T15168] wlan0 speed is unknown, defaulting to 1000 [ 356.681196][T15173] __nla_validate_parse: 5 callbacks suppressed [ 356.681217][T15173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2634'. [ 356.743541][T15173] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 356.763781][T15173] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2634'. [ 356.874187][T15185] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 357.201499][T15189] vlan3: entered allmulticast mode [ 357.201522][T15189] veth1_virt_wifi: entered allmulticast mode [ 357.540371][T15205] FAULT_INJECTION: forcing a failure. [ 357.540371][T15205] name failslab, interval 1, probability 0, space 0, times 0 [ 357.540405][T15205] CPU: 0 UID: 0 PID: 15205 Comm: syz.2.2640 Not tainted syzkaller #0 PREEMPT(full) [ 357.540426][T15205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 357.540438][T15205] Call Trace: [ 357.540446][T15205] [ 357.540454][T15205] dump_stack_lvl+0xe8/0x150 [ 357.540485][T15205] should_fail_ex+0x410/0x560 [ 357.540514][T15205] should_failslab+0xa8/0x100 [ 357.540537][T15205] ? skb_clone+0x212/0x3a0 [ 357.540563][T15205] kmem_cache_alloc_noprof+0xa1/0x600 [ 357.540594][T15205] ? skb_clone+0x212/0x3a0 [ 357.540626][T15205] skb_clone+0x212/0x3a0 [ 357.540655][T15205] bpf_clone_redirect+0x170/0x4b0 [ 357.540685][T15205] ? bpf_test_run+0x1d1/0x830 [ 357.540710][T15205] bpf_prog_7c64685fc60f7d44+0x5f/0x68 [ 357.540734][T15205] ? __kernel_text_address+0xd/0x30 [ 357.540757][T15205] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 357.540775][T15205] ? arch_stack_walk+0xfb/0x150 [ 357.540804][T15205] ? lock_acquire+0x115/0x350 [ 357.540829][T15205] ? ktime_get+0x45/0x220 [ 357.540850][T15205] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 357.540871][T15205] ? lockdep_hardirqs_on+0x7b/0x110 [ 357.540894][T15205] ? ktime_get+0x45/0x220 [ 357.540910][T15205] ? seqcount_lockdep_reader_access+0xea/0x100 [ 357.540929][T15205] ? bpf_test_run+0x1d1/0x830 [ 357.540950][T15205] ? bpf_test_timer_continue+0x10c/0x320 [ 357.540973][T15205] bpf_test_run+0x354/0x830 [ 357.541012][T15205] ? __pfx_bpf_test_run+0x10/0x10 [ 357.541046][T15205] ? __kasan_krealloc+0xec/0x110 [ 357.541078][T15205] ? skb_dst_set+0x72/0x140 [ 357.541099][T15205] bpf_prog_test_run_skb+0xe35/0x2230 [ 357.541147][T15205] ? __fget_files+0x3a2/0x420 [ 357.541171][T15205] ? __fget_files+0x2a/0x420 [ 357.541200][T15205] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 357.541229][T15205] bpf_prog_test_run+0x2c5/0x340 [ 357.541255][T15205] __sys_bpf+0xa22/0xd90 [ 357.541284][T15205] ? __pfx___sys_bpf+0x10/0x10 [ 357.541317][T15205] ? __fget_files+0x2a/0x420 [ 357.541360][T15205] ? ksys_write+0x242/0x270 [ 357.541389][T15205] ? __pfx_ksys_write+0x10/0x10 [ 357.541421][T15205] __x64_sys_bpf+0xba/0xd0 [ 357.541443][T15205] do_syscall_64+0x166/0x520 [ 357.541466][T15205] ? trace_irq_disable+0x3b/0x140 [ 357.541485][T15205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.541504][T15205] ? clear_bhb_loop+0x70/0xc0 [ 357.541527][T15205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.541545][T15205] RIP: 0033:0x7f174d59e159 [ 357.541562][T15205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.541576][T15205] RSP: 002b:00007f174e50c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 357.541596][T15205] RAX: ffffffffffffffda RBX: 00007f174d825fa0 RCX: 00007f174d59e159 [ 357.541609][T15205] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 357.541621][T15205] RBP: 00007f174e50c090 R08: 0000000000000000 R09: 0000000000000000 [ 357.541633][T15205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 357.541643][T15205] R13: 00007f174d826038 R14: 00007f174d825fa0 R15: 00007ffef61b6228 [ 357.541675][T15205] [ 358.716977][T15222] netlink: 'syz.0.2643': attribute type 1 has an invalid length. [ 359.051424][T15229] pim6reg527: entered allmulticast mode [ 359.669616][T15256] pimreg: entered allmulticast mode [ 359.854907][T15261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2657'. [ 359.870398][T15258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2654'. [ 359.870425][T15258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2654'. [ 359.870486][T15258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2654'. [ 360.128024][T15269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2656'. [ 360.971102][T15297] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2668'. [ 361.150495][T15297] 8021q: adding VLAN 0 to HW filter on device bond7 [ 361.172995][T15302] netlink: 524 bytes leftover after parsing attributes in process `syz.2.2669'. [ 361.481274][T15310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2673'. [ 361.564433][T15269] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 362.290296][T15325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2676'. [ 362.748886][T15336] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 362.870311][T15348] tipc: MTU too low for tipc bearer [ 363.269238][T15310] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2673'. [ 363.279742][T15310] lo: entered promiscuous mode [ 363.282412][T15310] tunl0: entered promiscuous mode [ 363.286256][T15310] gre0: entered promiscuous mode [ 363.289368][T15310] gretap0: entered promiscuous mode [ 363.289878][T15310] erspan0: entered promiscuous mode [ 363.292221][T15310] ip_vti0: entered promiscuous mode [ 363.305611][T15310] sit0: entered promiscuous mode [ 363.306322][T15310] ip6tnl0: entered promiscuous mode [ 363.309430][T15310] ip6gre0: entered promiscuous mode [ 363.311436][T15310] syz_tun: entered promiscuous mode [ 363.311999][T15310] ip6gretap0: entered promiscuous mode [ 363.315943][T15310] bridge0: entered promiscuous mode [ 363.316539][T15310] vcan0: entered promiscuous mode [ 363.322777][T15310] .`: entered promiscuous mode [ 363.322793][T15310] bond_slave_0: entered promiscuous mode [ 363.322924][T15310] bond_slave_1: entered promiscuous mode [ 363.323036][T15310] bond1: entered promiscuous mode [ 363.323279][T15310] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 363.330832][T15310] 8021q: adding VLAN 0 to HW filter on device .` [ 363.362624][T15310] nlmon0: entered promiscuous mode [ 363.363494][T15310] batadv0: entered promiscuous mode [ 363.375344][T15310] veth1: entered promiscuous mode [ 363.380694][T15310] wg0: entered promiscuous mode [ 363.386137][T15310] wg1: entered promiscuous mode [ 363.390886][T15310] wg2: entered promiscuous mode [ 363.394614][T15310] veth0_to_bridge: entered promiscuous mode [ 363.405879][T15310] veth1_to_bridge: entered promiscuous mode [ 363.420616][T15310] veth0_to_bond: entered promiscuous mode [ 363.431218][T15310] veth1_to_bond: entered promiscuous mode [ 363.442792][T15365] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2688'. [ 363.451758][T15310] veth0_to_team: entered promiscuous mode [ 363.456730][T15310] team_slave_0: entered promiscuous mode [ 363.470554][T15310] veth1_to_team: entered promiscuous mode [ 363.475565][T15310] team_slave_1: entered promiscuous mode [ 363.484833][T15310] veth1_to_batadv: entered promiscuous mode [ 363.485501][T15310] batadv_slave_1: entered promiscuous mode [ 363.486080][T15310] xfrm0: entered promiscuous mode [ 363.505339][T15310] veth0_to_hsr: entered promiscuous mode [ 363.525340][T15310] veth1_to_hsr: entered promiscuous mode [ 363.538791][T15310] hsr0: entered promiscuous mode [ 363.540486][T15310] veth1_virt_wifi: entered promiscuous mode [ 363.543236][T15310] veth0_virt_wifi: entered promiscuous mode [ 363.556966][T15310] virt_wifi0: entered promiscuous mode [ 363.567659][T15369] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2688'. [ 363.602516][T15310] vlan1: entered promiscuous mode [ 363.605272][T15310] macvlan0: entered promiscuous mode [ 363.610942][T15310] macvlan1: entered promiscuous mode [ 363.613326][T15310] ipvlan0: entered promiscuous mode [ 363.653986][T15310] ipvlan1: entered promiscuous mode [ 363.672529][T15310] macvtap0: entered promiscuous mode [ 363.675046][T15310] macsec0: entered promiscuous mode [ 363.683543][T15310] geneve0: entered promiscuous mode [ 363.684208][T15310] geneve1: entered promiscuous mode [ 363.711810][T15310] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 363.726469][T15310] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 363.735265][T15310] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 363.753233][T15310] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 363.753973][T15310] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 363.753992][T15310] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 363.954557][T15381] netlink: 'syz.3.2690': attribute type 34 has an invalid length. [ 363.954581][T15381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2690'. [ 364.338352][T15390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2692'. [ 364.997911][T15410] netlink: 'syz.4.2698': attribute type 10 has an invalid length. [ 364.998054][T15410] tipc: Resetting bearer [ 365.231668][T15410] tipc: Resetting bearer [ 365.233169][T15410] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.237021][T15410] bond0: (slave team0): Enslaving as an active interface with an up link [ 365.605665][T15430] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2700'. [ 365.662158][T15425] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2700'. [ 365.841610][T15441] netlink: 'syz.2.2704': attribute type 1 has an invalid length. [ 365.939854][T15445] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2704'. [ 365.981679][T15441] bond0: entered promiscuous mode [ 365.983329][T15441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.112658][T15449] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2704'. [ 366.253717][T15429] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 366.253743][T15429] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 366.425756][T15429] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 366.425780][T15429] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 366.469318][T15429] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 366.469341][T15429] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 366.569313][T15456] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:17 to non-existent VLAN 1303 [ 366.755826][ T5713] wlan0 speed is unknown, defaulting to 1000 [ 366.755888][ T5713] syz0: Port: 1 Link DOWN [ 367.714472][T15478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2711'. [ 367.793250][T15482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2711'. [ 367.870586][T15491] netlink: 'syz.1.2713': attribute type 3 has an invalid length. [ 368.024122][T15490] bridge0: port 1(syz_tun) entered disabled state [ 368.135645][T15490] syz_tun (unregistering): left allmulticast mode [ 368.135672][T15490] syz_tun (unregistering): left promiscuous mode [ 368.135843][T15490] bridge0: port 1(syz_tun) entered disabled state [ 368.174154][T15495] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2711'. [ 368.973187][T15516] syzkaller0: entered promiscuous mode [ 368.973207][T15516] syzkaller0: entered allmulticast mode [ 369.010790][T15516] netlink: 'syz.0.2719': attribute type 2 has an invalid length. [ 369.010811][T15516] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2719'. [ 369.516060][T15537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2724'. [ 370.341757][T15564] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 371.171266][T15579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.224078][T15579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.331818][T15584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.914643][T15604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2732'. [ 372.957402][T15631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2746'. [ 373.154291][T15631] netlink: 'syz.4.2746': attribute type 1 has an invalid length. [ 373.154313][T15631] netlink: 'syz.4.2746': attribute type 2 has an invalid length. [ 373.275065][T15648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2745'. [ 373.676898][T15657] netlink: 'syz.3.2750': attribute type 12 has an invalid length. [ 374.023065][T15669] x_tables: duplicate underflow at hook 2 [ 374.568626][T15682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2757'. [ 374.568652][T15682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2757'. [ 374.852628][T15688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2758'. [ 374.852665][T15688] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.897030][T15686] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2759'. [ 374.914854][T15686] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2759'. [ 375.060099][T15694] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2761'. [ 375.968945][T15716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2766'. [ 376.096455][T15721] tipc: Enabled bearer , priority 0 [ 376.184273][T15728] netlink: 'syz.0.2770': attribute type 10 has an invalid length. [ 376.287068][T15721] syzkaller0: entered promiscuous mode [ 376.290393][T15721] syzkaller0: entered allmulticast mode [ 376.295712][T15721] tipc: Resetting bearer [ 376.384862][T15720] tipc: Resetting bearer [ 376.722327][T15739] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2773'. [ 378.520041][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.923204][T15720] tipc: Disabling bearer [ 380.956734][T15743] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 381.014074][T15771] dvmrp1: entered allmulticast mode [ 381.392892][T15794] netlink: 'syz.4.2783': attribute type 10 has an invalid length. [ 381.459374][T15794] team0: Device veth0_macvtap failed to register rx_handler [ 381.875515][T15810] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.125190][T15810] netlink: 'syz.0.2784': attribute type 2 has an invalid length. [ 382.494259][T15834] __nla_validate_parse: 1 callbacks suppressed [ 382.494280][T15834] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2793'. [ 382.825496][T15837] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 382.955631][T15845] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2796'. [ 385.449834][T15904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2810'. [ 385.771464][T15918] netlink: 512 bytes leftover after parsing attributes in process `syz.2.2812'. [ 386.587285][T15930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2816'. [ 386.908412][T15937] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2819'. [ 386.908444][T15937] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 387.511467][T15956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2823'. [ 387.843879][T15966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2826'. [ 387.843913][T15966] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2826'. [ 387.983437][T15969] syzkaller1: entered promiscuous mode [ 387.983458][T15969] syzkaller1: entered allmulticast mode [ 388.302669][T15979] IPv6: NLM_F_REPLACE set, but no existing node found! [ 388.410206][T15985] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2831'. [ 389.212301][T16001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2835'. [ 389.305465][T16005] gtp0: entered promiscuous mode [ 389.305487][T16005] gtp0: entered allmulticast mode [ 389.935160][T16016] v: renamed from veth0_vlan [ 391.124008][T16045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2845'. [ 391.199413][T16046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2845'. [ 393.484023][T16069] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2849'. [ 393.522476][T16073] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2849'. [ 393.846279][T16081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2850'. [ 394.104791][T16084] sctp: [Deprecated]: syz.0.2851 (pid 16084) Use of int in max_burst socket option deprecated. [ 394.104791][T16084] Use struct sctp_assoc_value instead [ 394.144936][T16084] netlink: 'syz.0.2851': attribute type 83 has an invalid length. [ 394.252325][T16093] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2853'. [ 394.276981][T16092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2854'. [ 394.810568][ T5278] v: left promiscuous mode [ 394.902690][T16077] v: entered promiscuous mode [ 394.924281][T16105] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2858'. [ 395.364427][T16119] netlink: 'syz.0.2860': attribute type 1 has an invalid length. [ 395.364451][T16119] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2860'. [ 395.364478][T16119] netlink: 'syz.0.2860': attribute type 1 has an invalid length. [ 395.722774][T16134] netlink: 'syz.3.2863': attribute type 1 has an invalid length. [ 395.743347][T16135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2863'. [ 395.773256][T16134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2863'. [ 397.308114][T16170] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2868'. [ 397.333802][T16170] x_tables: unsorted underflow at hook 1 [ 397.511733][T16170] macvtap2: entered promiscuous mode [ 397.511754][T16170] bond_slave_0: entered promiscuous mode [ 397.511936][T16170] macvtap2: entered allmulticast mode [ 397.511949][T16170] bond_slave_0: entered allmulticast mode [ 397.901642][T16134] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 398.860708][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 398.868596][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 398.876553][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 398.878311][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 398.904501][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 399.314448][T16204] __nla_validate_parse: 3 callbacks suppressed [ 399.314468][T16204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2877'. [ 400.958652][T16237] tipc: Enabling of bearer rejected, failed to enable media [ 400.987614][ T5624] Bluetooth: hci5: command tx timeout [ 401.071768][T16077] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 401.071794][T16077] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 401.247639][T16249] netlink: 'syz.2.2882': attribute type 2 has an invalid length. [ 401.247668][T16249] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2882'. [ 401.567977][T16258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2883'. [ 401.960762][T16261] syzkaller0: entered promiscuous mode [ 401.960784][T16261] syzkaller0: entered allmulticast mode [ 402.375532][T16269] team0: left allmulticast mode [ 402.375569][T16269] team_slave_0: left allmulticast mode [ 402.375585][T16269] team_slave_1: left allmulticast mode [ 402.482474][T16269] team0: left promiscuous mode [ 402.482498][T16269] team_slave_0: left promiscuous mode [ 402.482719][T16269] team_slave_1: left promiscuous mode [ 402.483464][T16269] bridge0: port 1(team0) entered disabled state [ 402.516411][T16281] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2889'. [ 402.702150][T16269] bond4: (slave veth0_to_bond): Releasing backup interface [ 402.732971][T16286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2890'. [ 402.754246][T16269] bond0: (slave bond_slave_0): Releasing backup interface [ 402.780802][T16269] bond_slave_0: left promiscuous mode [ 402.780990][T16269] bond_slave_0: left allmulticast mode [ 402.843300][T16269] bond0: (slave bond_slave_1): Releasing backup interface [ 402.846589][T16269] bond_slave_1: left promiscuous mode [ 402.863506][T16269] bond_slave_1: left allmulticast mode [ 402.922705][T16269] team0: Port device team_slave_0 removed [ 402.975537][T16289] netlink: 'syz.0.2890': attribute type 17 has an invalid length. [ 402.975562][T16289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2890'. [ 402.975588][T16289] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2890'. [ 403.046681][T16269] team0: Port device team_slave_1 removed [ 403.058948][T16269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.058972][T16269] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.089301][T16269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.089325][T16269] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.121074][T16269] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 403.151629][T16271] team0: Device xfrm0 is of different type [ 403.172960][T16273] tipc: Enabled bearer , priority 0 [ 403.197834][T10079] tipc: Resetting bearer [ 403.263191][T16293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2890'. [ 404.097513][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 404.129050][T16197] virt_wifi0 speed is unknown, defaulting to 1000 [ 404.150444][T16197] wlan0 speed is unknown, defaulting to 1000 [ 405.233453][T16338] ip_tables: iptables: counters copy to user failed while replacing table [ 405.671309][T16349] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2901'. [ 406.049391][T16354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2902'. [ 406.774721][T16197] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.774839][T16197] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.775002][T16197] bridge_slave_0: entered allmulticast mode [ 406.813614][T16197] bridge_slave_0: entered promiscuous mode [ 406.983722][T16380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2906'. [ 406.983747][T16380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2906'. [ 406.983771][T16380] netlink: 'syz.3.2906': attribute type 15 has an invalid length. [ 407.051379][T16197] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.053781][T16197] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.053969][T16197] bridge_slave_1: entered allmulticast mode [ 407.091556][T16197] bridge_slave_1: entered promiscuous mode [ 407.160402][T16380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2906'. [ 407.160426][T16380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2906'. [ 407.160449][T16380] netlink: 'syz.3.2906': attribute type 15 has an invalid length. [ 407.238162][ T7435] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 407.239375][ T7423] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 407.239499][ T7423] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 407.239616][ T7423] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 407.409958][T16197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.445946][T16197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.683761][T16197] team0: Port device team_slave_0 added [ 407.807206][T16197] team0: Port device team_slave_1 added [ 408.049587][T16197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.049606][T16197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.049630][T16197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.107667][T16197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.107685][T16197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.107709][T16197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.480926][T16197] hsr_slave_0: entered promiscuous mode [ 408.496292][T16197] hsr_slave_1: entered promiscuous mode [ 409.023826][T16416] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 409.559217][T16420] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2916'. [ 410.619462][T16454] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2921'. [ 410.619488][T16454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2921'. [ 410.619708][T16454] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2921'. [ 410.720303][T16454] __nla_validate_parse: 11 callbacks suppressed [ 410.720324][T16454] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2921'. [ 410.720341][T16454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2921'. [ 410.720573][T16454] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2921'. [ 410.720587][T16454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2921'. [ 410.720797][T16454] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2921'. [ 410.720810][T16454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2921'. [ 410.721036][T16454] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2921'. [ 410.721052][T16454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2921'. [ 410.721280][T16454] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2921'. [ 410.721295][T16454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2921'. [ 411.408930][T16460] bond8: (slave dummy0): Removing an active aggregator [ 411.442604][T16460] bond8: (slave dummy0): Releasing backup interface [ 411.643935][T16197] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 411.681933][T16197] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 411.700035][T16197] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 411.744509][T16197] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 411.811538][T16197] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 411.860148][T16197] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 411.860986][T16197] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 411.925756][T16197] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 412.595776][T16197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.683077][T16197] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.784869][ T7435] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.784984][ T7435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.844925][T10079] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.845032][T10079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.086642][T16197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 414.593288][T16524] netlink: 'syz.1.2937': attribute type 83 has an invalid length. [ 415.509359][T16536] virt_wifi0 speed is unknown, defaulting to 1000 [ 415.657036][T16536] wlan0 speed is unknown, defaulting to 1000 [ 415.884748][T16542] virt_wifi0 speed is unknown, defaulting to 1000 [ 416.071390][T16542] wlan0 speed is unknown, defaulting to 1000 [ 416.368843][T16558] __nla_validate_parse: 113 callbacks suppressed [ 416.368866][T16558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2941'. [ 416.989384][T16197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.173020][T16584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2945'. [ 418.270226][T16587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2945'. [ 418.270254][T16587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2945'. [ 418.381860][T16585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2945'. [ 418.381888][T16585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2945'. [ 418.412442][T16588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2945'. [ 418.412467][T16588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2945'. [ 418.414027][T16587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2945'. [ 418.414048][T16587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2945'. [ 419.322858][T16197] veth0_vlan: entered promiscuous mode [ 419.364831][T16197] veth1_vlan: entered promiscuous mode [ 419.448404][T16601] sctp: [Deprecated]: syz.1.2948 (pid 16601) Use of int in maxseg socket option. [ 419.448404][T16601] Use struct sctp_assoc_value instead [ 419.457560][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 419.579418][T16197] veth0_macvtap: entered promiscuous mode [ 419.612289][T16197] veth1_macvtap: entered promiscuous mode [ 419.683872][T16197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.741433][T16197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.790275][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.790687][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.790721][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.790753][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.215733][T16609] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 420.618566][ T7435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.618587][ T7435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.325149][ T7435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.325170][ T7435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.504220][T16635] gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue [ 421.504301][T16635] gretap4: entered promiscuous mode [ 421.504316][T16635] gretap4: entered allmulticast mode [ 422.955368][T16680] __nla_validate_parse: 48 callbacks suppressed [ 422.955388][T16680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2964'. [ 422.982266][T16680] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 422.982779][T16680] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2964'. [ 423.398795][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 423.405583][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 423.406385][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 423.424404][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 423.444422][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 424.365211][T16696] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2968'. [ 424.402274][T16696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2968'. [ 424.540315][T16705] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2969'. [ 424.713222][T16709] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2968'. [ 424.715759][T16698] bond6: entered promiscuous mode [ 424.786344][ T5633] bridge0: port 2(syz_tun) entered disabled state [ 424.896056][ T5633] syz_tun (unregistering): left allmulticast mode [ 424.896104][ T5633] syz_tun (unregistering): left promiscuous mode [ 424.896191][ T5633] bridge0: port 2(syz_tun) entered disabled state [ 424.986176][T16713] openvswitch: netlink: Actions may not be safe on all matching packets [ 425.538355][ T52] Bluetooth: hci2: command tx timeout [ 425.655733][T16717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2972'. [ 425.770682][T16724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2973'. [ 426.586259][T16682] virt_wifi0 speed is unknown, defaulting to 1000 [ 426.601038][T16682] wlan0 speed is unknown, defaulting to 1000 [ 426.708860][T16734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2975'. [ 427.618423][ T52] Bluetooth: hci2: command tx timeout [ 428.243805][T16785] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2983'. [ 428.326633][T16785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2983'. [ 428.994511][T16682] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.994619][T16682] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.994750][T16682] bridge_slave_0: entered allmulticast mode [ 429.021565][T16682] bridge_slave_0: entered promiscuous mode [ 429.032658][T16682] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.034718][T16682] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.035163][T16682] bridge_slave_1: entered allmulticast mode [ 429.065719][T16682] bridge_slave_1: entered promiscuous mode [ 429.218371][T16682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.243730][T16682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.418161][T16682] team0: Port device team_slave_0 added [ 429.444962][T16682] team0: Port device team_slave_1 added [ 429.446387][T16815] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2989'. [ 429.705305][ T52] Bluetooth: hci2: command tx timeout [ 429.716618][T16682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.716634][T16682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.716658][T16682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.768926][T16682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.768942][T16682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.768966][T16682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.031377][T16682] hsr_slave_0: entered promiscuous mode [ 430.058586][T16682] hsr_slave_1: entered promiscuous mode [ 430.063402][T16682] debugfs: 'hsr0' already exists in 'hsr' [ 430.063425][T16682] Cannot create hsr debugfs directory [ 430.269144][T10097] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.620498][ T49] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.620808][ T49] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.620843][ T49] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.478967][T16854] sctp: [Deprecated]: syz.1.2998 (pid 16854) Use of struct sctp_assoc_value in delayed_ack socket option. [ 431.478967][T16854] Use struct sctp_sack_info instead [ 431.654169][T16682] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.654205][T16682] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 431.692941][T16682] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.778265][ T52] Bluetooth: hci2: command tx timeout [ 431.802918][T16853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2997'. [ 431.925973][T16863] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3000'. [ 431.970702][T16863] ip6gre4: entered promiscuous mode [ 431.970724][T16863] ip6gre4: entered allmulticast mode [ 432.025314][T16867] openvswitch: netlink: IPv4 tunnel dst address is zero [ 432.359262][T16682] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.376215][T16682] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 432.376248][T16682] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.501189][T16869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3001'. [ 432.759045][T16682] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.759100][T16682] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 432.759126][T16682] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.812245][T16878] netlink: 'syz.0.3004': attribute type 23 has an invalid length. [ 433.201926][T16682] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.201969][T16682] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 433.201994][T16682] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.289236][T16900] netlink: 13 bytes leftover after parsing attributes in process `syz.0.3008'. [ 433.325384][T16900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3008'. [ 434.501490][T16946] No such timeout policy "syz0" [ 434.669696][T16682] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 434.713515][T16682] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 434.728335][T16682] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 434.769871][T16682] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 434.773037][T16682] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 434.821549][T16682] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 434.826305][T16682] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 434.859882][T16682] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 434.916333][T16952] netlink: zone id is out of range [ 434.916358][T16952] netlink: zone id is out of range [ 434.916369][T16952] netlink: zone id is out of range [ 434.916394][T16952] netlink: zone id is out of range [ 434.916402][T16952] netlink: zone id is out of range [ 434.916409][T16952] netlink: zone id is out of range [ 434.916416][T16952] netlink: zone id is out of range [ 434.916425][T16952] netlink: zone id is out of range [ 434.916457][T16952] netlink: zone id is out of range [ 435.011441][T16962] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3021'. [ 435.079540][T16962] veth3: entered promiscuous mode [ 435.079562][T16962] veth3: entered allmulticast mode [ 435.509738][T16682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.546645][T16971] netlink: 'syz.5.3023': attribute type 1 has an invalid length. [ 435.639920][T16971] bond1: entered promiscuous mode [ 435.640515][T16971] 8021q: adding VLAN 0 to HW filter on device bond1 [ 435.737929][T16977] 8021q: adding VLAN 0 to HW filter on device bond1 [ 435.741285][T16977] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 435.741308][T16977] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 435.790146][T16977] bond1: (slave wireguard0): making interface the new active one [ 435.790171][T16977] wireguard0: entered promiscuous mode [ 435.825361][T16977] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 435.852009][T16682] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.853467][T16978] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3025'. [ 435.853491][T16978] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3025'. [ 435.853724][T16978] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3025'. [ 435.853740][T16978] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3025'. [ 435.932601][T10067] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.932715][T10067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.993933][T10079] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.994045][T10079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.111556][T17007] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3032'. [ 437.241346][T17003] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3031'. [ 437.712787][T10097] IPVS: starting estimator thread 0... [ 437.713660][T17015] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 437.860651][T17024] IPVS: using max 34 ests per chain, 81600 per kthread [ 438.790126][T17055] sctp: [Deprecated]: syz.2.3042 (pid 17055) Use of struct sctp_assoc_value in delayed_ack socket option. [ 438.790126][T17055] Use struct sctp_sack_info instead [ 438.881057][T16682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.951900][T17052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.007435][T17055] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3042'. [ 439.036771][T17061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.102858][T17052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.182648][T16682] veth0_vlan: entered promiscuous mode [ 439.357762][T16682] veth1_vlan: entered promiscuous mode [ 439.793742][T16682] veth0_macvtap: entered promiscuous mode [ 439.815072][T16682] veth1_macvtap: entered promiscuous mode [ 439.862803][T16682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.899142][T16682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.941166][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.961317][ T7434] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.961552][ T7434] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.962176][ T7434] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.962210][ T7434] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.351862][T10064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.351883][T10064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.601721][T17080] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 440.605936][T17080] batman_adv: batadv0: Adding interface: gretap1 [ 440.605951][T17080] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.605982][T17080] batman_adv: batadv0: Interface activated: gretap1 [ 440.734682][T10064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.734721][T10064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.485805][T17115] x_tables: unsorted underflow at hook 4 [ 441.573895][T17117] batman_adv: batadv0: Adding interface: macvtap1 [ 441.573912][T17117] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.573938][T17117] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 441.719619][ T5624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 441.735137][ T5624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 441.746707][ T5624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 441.755178][ T5624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 441.755771][ T5624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 441.924318][T17119] bridge0: port 4(vlan3) entered blocking state [ 441.924429][T17119] bridge0: port 4(vlan3) entered disabled state [ 441.924562][T17119] vlan3: entered allmulticast mode [ 441.924576][T17119] geneve0: entered allmulticast mode [ 441.972947][T17119] vlan3: entered promiscuous mode [ 442.154570][T17133] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3057'. [ 442.372404][T17134] netlink: 'syz.1.3061': attribute type 19 has an invalid length. [ 442.372427][T17134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3061'. [ 442.440529][T17134] netlink: 552 bytes leftover after parsing attributes in process `syz.1.3061'. [ 442.461128][T10064] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.473070][T10079] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.473132][T10079] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.473165][T10079] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.994536][T17149] ref_ctr_offset mismatch. inode: 0x82 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 443.279083][T17165] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3064'. [ 443.308661][ T3799] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.308695][ T3799] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.534731][T17159] syzkaller0: entered promiscuous mode [ 443.534756][T17159] syzkaller0: entered allmulticast mode [ 443.859427][ T5624] Bluetooth: hci4: command tx timeout [ 444.283341][T17190] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3069'. [ 444.426111][ C0] net_ratelimit: 41 callbacks suppressed [ 444.426134][ C0] TC_ACT_REPEAT abuse ? [ 445.940661][ T5624] Bluetooth: hci4: command tx timeout [ 447.063449][ T3799] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.063484][ T3799] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.131260][T17176] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3068'. [ 447.132449][T17176] netlink: 'syz.5.3068': attribute type 14 has an invalid length. [ 447.132734][T17176] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3068'. [ 447.181851][T17193] netlink: 666 bytes leftover after parsing attributes in process `syz.3.3070'. [ 447.305847][T17197] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3072'. [ 447.340644][T17176] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3068'. [ 447.340675][T17176] netlink: 'syz.5.3068': attribute type 14 has an invalid length. [ 447.340688][T17176] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3068'. [ 447.343372][T17182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3068'. [ 447.343400][T17182] netlink: 'syz.5.3068': attribute type 14 has an invalid length. [ 447.343413][T17182] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3068'. [ 447.344584][T17182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3068'. [ 447.344606][T17182] netlink: 'syz.5.3068': attribute type 14 has an invalid length. [ 447.736183][ T3799] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.736220][ T3799] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.884406][T17122] virt_wifi0 speed is unknown, defaulting to 1000 [ 447.886205][T17122] wlan0 speed is unknown, defaulting to 1000 [ 448.018337][ T5624] Bluetooth: hci4: command tx timeout [ 448.345509][ T3799] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.345544][ T3799] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.526923][T17217] veth0_to_team: mtu less than device minimum [ 448.536984][T17214] netlink: 'syz.3.3074': attribute type 2 has an invalid length. [ 448.569639][T17217] veth0_to_team: mtu less than device minimum [ 448.569755][T17217] veth0_to_team: mtu less than device minimum [ 448.569838][T17217] veth0_to_team: mtu less than device minimum [ 448.569922][T17217] veth0_to_team: mtu less than device minimum [ 448.570001][T17217] veth0_to_team: mtu less than device minimum [ 448.570102][T17217] veth0_to_team: mtu less than device minimum [ 448.570279][T17217] veth0_to_team: mtu less than device minimum [ 448.570362][T17217] veth0_to_team: mtu less than device minimum [ 449.302649][T17237] __nla_validate_parse: 2 callbacks suppressed [ 449.302669][T17237] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3082'. [ 449.493435][T17239] netlink: 'syz.1.3080': attribute type 1 has an invalid length. [ 449.493459][T17239] netlink: 'syz.1.3080': attribute type 2 has an invalid length. [ 449.923971][T17250] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3085'. [ 450.097521][ T5624] Bluetooth: hci4: command tx timeout [ 450.505644][T17122] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.505800][T17122] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.505958][T17122] bridge_slave_0: entered allmulticast mode [ 450.546450][T17122] bridge_slave_0: entered promiscuous mode [ 450.576735][T17122] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.576840][T17122] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.576997][T17122] bridge_slave_1: entered allmulticast mode [ 450.630179][T17122] bridge_slave_1: entered promiscuous mode [ 451.242668][T17272] SET target dimension over the limit! [ 452.585914][ T3799] bond0 (unregistering): (slave gretap1): Releasing backup interface [ 452.769845][ T3799] bond7 (unregistering): (slave bridge2): Releasing backup interface [ 452.769872][ T3799] bridge2 (unregistering): left promiscuous mode [ 452.862483][ T3799] bond1 (unregistering): Released all slaves [ 452.889305][ T3799] bond2 (unregistering): Released all slaves [ 452.918428][ T3799] bond3 (unregistering): Released all slaves [ 452.948355][ T3799] bond4 (unregistering): Released all slaves [ 452.979869][ T3799] bond5 (unregistering): Released all slaves [ 453.005772][ T3799] bond0 (unregistering): Released all slaves [ 453.035337][ T3799] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 453.036644][ T3799] bond6 (unregistering): Released all slaves [ 453.103311][ T3799] bond7 (unregistering): Released all slaves [ 453.126277][ T3799] bond8 (unregistering): Released all slaves [ 453.385326][T17276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3090'. [ 453.400298][T17122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.501230][T17280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3090'. [ 453.506387][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 453.545690][T17122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.616321][ T3799] ovs-dp0: left promiscuous mode [ 453.815686][T17304] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3095'. [ 453.930180][T17306] FAULT_INJECTION: forcing a failure. [ 453.930180][T17306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.930227][T17306] CPU: 0 UID: 0 PID: 17306 Comm: syz.5.3096 Not tainted syzkaller #0 PREEMPT(full) [ 453.930249][T17306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 453.930265][T17306] Call Trace: [ 453.930276][T17306] [ 453.930284][T17306] dump_stack_lvl+0xe8/0x150 [ 453.930315][T17306] should_fail_ex+0x410/0x560 [ 453.930341][T17306] _copy_from_user+0x2d/0xb0 [ 453.930367][T17306] __copy_msghdr+0x390/0x590 [ 453.930401][T17306] ___sys_sendmsg+0x213/0x360 [ 453.930426][T17306] ? __lock_acquire+0x747/0x2de0 [ 453.930450][T17306] ? __pfx____sys_sendmsg+0x10/0x10 [ 453.930480][T17306] ? kstrtouint+0x6e/0xe0 [ 453.930524][T17306] ? __fget_files+0x2a/0x420 [ 453.930549][T17306] ? __fget_files+0x3a2/0x420 [ 453.930583][T17306] __sys_sendmmsg+0x273/0x4d0 [ 453.930614][T17306] ? __pfx___sys_sendmmsg+0x10/0x10 [ 453.930648][T17306] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 453.930688][T17306] ? ksys_write+0x242/0x270 [ 453.930717][T17306] ? __pfx_ksys_write+0x10/0x10 [ 453.930751][T17306] __x64_sys_sendmmsg+0xa0/0xc0 [ 453.930778][T17306] do_syscall_64+0x166/0x520 [ 453.930801][T17306] ? trace_irq_disable+0x3b/0x140 [ 453.930820][T17306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.930839][T17306] ? clear_bhb_loop+0x70/0xc0 [ 453.930861][T17306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.930879][T17306] RIP: 0033:0x7f926619e159 [ 453.930897][T17306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.930913][T17306] RSP: 002b:00007f926702b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 453.930933][T17306] RAX: ffffffffffffffda RBX: 00007f9266426090 RCX: 00007f926619e159 [ 453.930947][T17306] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000003 [ 453.930959][T17306] RBP: 00007f926702b090 R08: 0000000000000000 R09: 0000000000000000 [ 453.930970][T17306] R10: 00000000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 453.930982][T17306] R13: 00007f9266426128 R14: 00007f9266426090 R15: 00007ffca1b15898 [ 453.931012][T17306] [ 454.300454][T17122] team0: Port device team_slave_0 added [ 454.334033][T17305] ip6gre1: entered promiscuous mode [ 454.334061][T17305] ip6gre1: entered allmulticast mode [ 454.369263][T17122] team0: Port device team_slave_1 added [ 454.471582][ T3799] tipc: Disabling bearer [ 454.471865][ T3799] tipc: Left network mode [ 454.626379][T17122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.626397][T17122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.626421][T17122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.629561][T17122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.629574][T17122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.629598][T17122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.220636][T17122] hsr_slave_0: entered promiscuous mode [ 455.251214][T17122] hsr_slave_1: entered promiscuous mode [ 455.256794][T17122] debugfs: 'hsr0' already exists in 'hsr' [ 455.256815][T17122] Cannot create hsr debugfs directory [ 455.297518][ C1] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 455.424939][T17328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3100'. [ 455.473758][ T3799] IPVS: stopping backup sync thread 12773 ... [ 455.799009][T17337] syzkaller0: entered promiscuous mode [ 455.799031][T17337] syzkaller0: entered allmulticast mode [ 455.925918][T17336] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 456.729658][T17326] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.232714][T17349] syzkaller0: entered promiscuous mode [ 457.232740][T17349] syzkaller0: entered allmulticast mode [ 457.324353][T17372] netlink: 'syz.5.3108': attribute type 1 has an invalid length. [ 457.630397][T17379] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 459.321931][T17392] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3115'. [ 461.061610][ C0] net_ratelimit: 24 callbacks suppressed [ 461.061633][ C0] TC_ACT_REPEAT abuse ? [ 461.409666][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 462.061911][T17412] openvswitch: netlink: Unknown key attributes 20 [ 462.350185][T17420] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 462.352905][T17420] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3120'. [ 462.609230][T17429] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 463.602999][ T3799] hsr_slave_0: left promiscuous mode [ 463.615883][ T3799] hsr_slave_1: left promiscuous mode [ 463.626677][ T3799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.626718][ T3799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.651121][ T3799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.651142][ T3799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.727278][ T3799] bond_slave_0: left allmulticast mode [ 463.727304][ T3799] bond_slave_0: left promiscuous mode [ 463.727624][ T3799] veth1_macvtap: left promiscuous mode [ 463.727661][ T3799] veth0_macvtap: left promiscuous mode [ 463.728095][ T3799] veth1_vlan: left promiscuous mode [ 465.045736][T17486] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3130'. [ 465.445636][ T3799] team0 (unregistering): Port device team_slave_1 removed [ 465.473655][ T3799] team0 (unregistering): Port device team_slave_0 removed [ 465.894165][T17486] bond0: (slave bond_slave_0): Releasing backup interface [ 465.983747][T17486] bond_slave_0: entered promiscuous mode [ 465.983778][T17486] bond_slave_0: entered allmulticast mode [ 466.778653][T17502] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3136'. [ 466.778679][T17502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3136'. [ 466.811442][ T3799] IPVS: stop unused estimator thread 0... [ 467.204672][T17522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3139'. [ 467.325106][T17522] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3139'. [ 467.686413][T17122] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 467.885984][T17122] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 467.909400][T17122] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 468.009789][T17122] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 468.016009][T17122] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 468.061528][T17122] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 468.062887][T17122] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 468.105889][T17122] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 468.461793][T17552] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3146'. [ 468.690735][T17122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.916163][T17122] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.966133][T10062] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.966253][T10062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.085090][ T3799] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.085214][ T3799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.965896][T17590] ip_tables: iptables: counters copy to user failed while replacing table [ 470.038927][T17595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3156'. [ 470.128960][T17595] IPv6: sit1: Disabled Multicast RS [ 470.204167][T17593] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3156'. [ 471.813145][T17653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3170'. [ 472.369299][T17662] 8021q: adding VLAN 0 to HW filter on device bond1 [ 472.633969][T17666] 8021q: adding VLAN 0 to HW filter on device bond2 [ 472.742952][T17122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.833405][T17680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3176'. [ 473.141998][T17122] veth0_vlan: entered promiscuous mode [ 473.195978][T17122] veth1_vlan: entered promiscuous mode [ 473.390813][T17122] veth0_macvtap: entered promiscuous mode [ 473.418686][T17122] veth1_macvtap: entered promiscuous mode [ 473.465888][T17696] netlink: 'syz.5.3180': attribute type 33 has an invalid length. [ 473.534254][T17122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.586642][T17122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.647920][T10097] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.647964][T10097] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.647996][T10097] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.648027][T10097] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.143450][T10067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.143472][T10067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.386877][T10062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.386898][T10062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.457423][T17720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3185'. [ 474.717755][T17729] veth5: entered allmulticast mode [ 475.128801][T17747] netlink: 'syz.3.3191': attribute type 4 has an invalid length. [ 475.260616][T17753] netlink: 'syz.3.3191': attribute type 4 has an invalid length. [ 475.405978][T17757] netlink: 'syz.0.3193': attribute type 2 has an invalid length. [ 475.420603][T17759] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3192'. [ 475.445639][T17757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3193'. [ 475.445669][T17757] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3193'. [ 475.760700][T17757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3193'. [ 475.760733][T17757] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3193'. [ 475.868388][ T49] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.869293][ T7434] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.869335][ T7434] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.869368][ T7434] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.927464][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 475.946809][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 475.958649][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 475.980570][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 475.985176][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 477.566365][T17808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3199'. [ 477.686802][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805943b800: rx timeout, send abort [ 477.711602][T17819] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3204'. [ 477.864758][T10067] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 477.864793][T10067] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.259384][ T52] Bluetooth: hci0: command tx timeout [ 478.546885][T10067] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 478.546920][T10067] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.693619][T17831] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3206'. [ 479.152197][T10067] .`: (slave netdevsim1): Releasing backup interface [ 479.173304][T10067] netdevsim netdevsim2 netdevsim1 (unregistering): left allmulticast mode [ 479.223349][T10067] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 479.223384][T10067] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.389255][T17773] virt_wifi0 speed is unknown, defaulting to 1000 [ 479.392723][T17773] wlan0 speed is unknown, defaulting to 1000 [ 479.650640][T17859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3213'. [ 479.845727][T17866] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3214'. [ 479.863459][T17859] bridge0: port 1(batadv1) entered blocking state [ 479.863633][T17859] bridge0: port 1(batadv1) entered disabled state [ 479.863792][T17859] batadv1: entered allmulticast mode [ 479.865801][T17859] batadv1: entered promiscuous mode [ 480.338964][ T52] Bluetooth: hci0: command tx timeout [ 480.349446][ T7434] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 480.349465][ T7434] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 481.648653][T10067] vlan3: left allmulticast mode [ 481.648675][T10067] geneve0: left allmulticast mode [ 481.648694][T10067] vlan3: left promiscuous mode [ 481.649967][T10067] bridge0: port 4(vlan3) entered disabled state [ 481.781594][T17898] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3222'. [ 481.917686][T10067] veth0: left allmulticast mode [ 481.917923][T10067] bridge0: port 3(veth0) entered disabled state [ 482.041566][T17905] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 482.064104][T10067] bridge_slave_1: left allmulticast mode [ 482.064328][T10067] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.096939][T10067] bridge_slave_0: left allmulticast mode [ 482.116304][T10067] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.139130][T17909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3221'. [ 482.139152][T17909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3221'. [ 482.280584][T10067] dvmrp1: left allmulticast mode [ 482.418551][ T52] Bluetooth: hci0: command tx timeout [ 482.443988][T17913] netlink: 'syz.0.3226': attribute type 2 has an invalid length. [ 482.444010][T17913] netlink: 'syz.0.3226': attribute type 8 has an invalid length. [ 482.444022][T17913] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3226'. [ 482.522655][T17919] netlink: 'syz.0.3226': attribute type 2 has an invalid length. [ 482.522677][T17919] netlink: 'syz.0.3226': attribute type 8 has an invalid length. [ 482.522695][T17919] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3226'. [ 483.080987][T17926] siw: device registration error -23 [ 483.511357][T17928] netlink: Failed to add %pB helper -22 [ 483.511414][T17928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 484.090704][T10067] bond3 (unregistering): (slave bridge1): Releasing active interface [ 484.243981][T10067] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.261813][T10067] bond_slave_0: left allmulticast mode [ 484.275218][T10067] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.294261][T10067] bond_slave_1: left allmulticast mode [ 484.306939][T10067] .` (unregistering): (slave bond1): Releasing backup interface [ 484.323653][T10067] bond1 (unregistering): left promiscuous mode [ 484.323698][T10067] bond1 (unregistering): left allmulticast mode [ 484.323932][T10067] .` (unregistering): Released all slaves [ 484.352999][T10067] bond1 (unregistering): Released all slaves [ 484.374589][T10067] bond2 (unregistering): Released all slaves [ 484.397923][T10067] bond3 (unregistering): Released all slaves [ 484.420086][T10067] bond4 (unregistering): Released all slaves [ 484.440557][T10067] bond5 (unregistering): Released all slaves [ 484.485356][T10067] bond6 (unregistering): Released all slaves [ 484.497734][ T52] Bluetooth: hci0: command tx timeout [ 484.506646][T10067] bond7 (unregistering): Released all slaves [ 484.533249][T10067] bond8 (unregistering): Released all slaves [ 484.552554][T10067] bond9 (unregistering): Released all slaves [ 484.573125][T10067] bond0 (unregistering): Released all slaves [ 484.622698][T10067] bond10 (unregistering): Released all slaves [ 484.746896][T17945] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3231'. [ 484.746921][T17945] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3231'. [ 485.017521][T17952] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3233'. [ 485.537415][T17952] bond1 (unregistering): Released all slaves [ 485.749188][T10067] : left promiscuous mode [ 485.954481][T17773] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.954614][T17773] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.954771][T17773] bridge_slave_0: entered allmulticast mode [ 485.970611][T17773] bridge_slave_0: entered promiscuous mode [ 485.977021][T17773] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.979080][T17773] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.979231][T17773] bridge_slave_1: entered allmulticast mode [ 485.982800][T17773] bridge_slave_1: entered promiscuous mode [ 486.196580][T10067] tipc: Left network mode [ 486.278465][T17973] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3236'. [ 486.316845][T17773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.353589][T17773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.598656][T17773] team0: Port device team_slave_0 added [ 486.615925][T17773] team0: Port device team_slave_1 added [ 486.635883][T10067] IPVS: stopping backup sync thread 8216 ... [ 486.811415][T17773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.811432][T17773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.811452][T17773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.821585][T17773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.821601][T17773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.821619][T17773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.302225][T18008] Bluetooth: MGMT ver 1.23 [ 487.437006][T18012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3243'. [ 487.506968][T18014] batman_adv: batadv0: Adding interface: veth0 [ 487.506987][T18014] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.509840][T18014] batman_adv: batadv0: Interface activated: veth0 [ 487.673345][T18014] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3243'. [ 487.807308][T17773] hsr_slave_0: entered promiscuous mode [ 487.812966][T17773] hsr_slave_1: entered promiscuous mode [ 487.816736][T17773] debugfs: 'hsr0' already exists in 'hsr' [ 487.816758][T17773] Cannot create hsr debugfs directory [ 488.211931][T18031] netlink: 'syz.3.3247': attribute type 1 has an invalid length. [ 488.354145][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 489.132441][T18053] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3255'. [ 489.132481][T18053] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3255'. [ 489.377539][ T5624] Bluetooth: hci0: command 0x0c24 tx timeout [ 489.378399][ T52] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 489.517671][T18053] syzkaller0: entered promiscuous mode [ 489.517693][T18053] syzkaller0: entered allmulticast mode [ 489.707369][T18060] netlink: 'syz.0.3256': attribute type 1 has an invalid length. [ 489.707390][T18060] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3256'. [ 489.787674][T18070] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3256'. [ 489.819222][T18072] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3258'. [ 489.982120][T10067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.982144][T10067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.084242][T10067] vlan0: left allmulticast mode [ 490.084266][T10067] veth0_vlan: left allmulticast mode [ 492.185616][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 492.845868][T18106] netlink: 'syz.0.3265': attribute type 12 has an invalid length. [ 493.106857][T18109] netlink: 'syz.0.3265': attribute type 2 has an invalid length. [ 493.151866][T18116] sctp: [Deprecated]: syz.5.3268 (pid 18116) Use of int in max_burst socket option. [ 493.151866][T18116] Use struct sctp_assoc_value instead [ 493.243058][T18126] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 493.455184][T18119] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3268'. [ 493.481501][T18106] bond1: option primary_reselect: invalid value (255) [ 493.502151][T18106] bond1 (unregistering): Released all slaves [ 493.700289][T10067] IPVS: stop unused estimator thread 0... [ 493.785924][T18134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3270'. [ 494.121820][T18144] netlink: 3080 bytes leftover after parsing attributes in process `syz.0.3272'. [ 494.121843][T18144] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.3272'. [ 494.254888][T18147] netlink: 3080 bytes leftover after parsing attributes in process `syz.0.3272'. [ 494.254911][T18147] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.3272'. [ 494.729356][T18160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3274'. [ 494.861576][T18166] netlink: 244 bytes leftover after parsing attributes in process `syz.5.3275'. [ 494.862502][T18166] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3275'. [ 495.045110][T18169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3277'. [ 495.161950][T18164] ip6gre1: entered promiscuous mode [ 495.161980][T18164] ip6gre1: entered allmulticast mode [ 495.731814][T17773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 495.796371][T17773] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 495.819053][T17773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 495.846352][T17773] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 495.865306][T17773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 495.900542][T17773] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 495.901555][T17773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 495.963293][T17773] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 496.018880][T18191] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3284'. [ 496.044453][T18191] syz_tun: entered promiscuous mode [ 496.203607][T18199] macsec1: entered promiscuous mode [ 496.332902][T18208] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3287'. [ 496.372641][T18201] openvswitch: netlink: Invalid VLAN frame [ 496.434471][T18212] netlink: 'syz.0.3287': attribute type 3 has an invalid length. [ 496.434493][T18212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3287'. [ 496.472095][T18208] netlink: 'syz.0.3287': attribute type 26 has an invalid length. [ 496.863804][T17773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.965039][T17773] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.033831][T10067] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.033952][T10067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.106187][ T7423] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.106305][ T7423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.876018][T18239] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3296'. [ 498.602058][T18243] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 498.873794][T18266] tap0: tun_chr_ioctl cmd 1074025672 [ 498.873817][T18266] tap0: ignored: set checksum disabled [ 498.906282][T18266] IPv6: NLM_F_CREATE should be specified when creating new route [ 499.192031][T18265] netlink: 199784 bytes leftover after parsing attributes in process `syz.3.3301'. [ 499.192071][T18265] netlink: 'syz.3.3301': attribute type 1 has an invalid length. [ 499.894403][T17773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.146236][T17773] veth0_vlan: entered promiscuous mode [ 500.190305][T17773] veth1_vlan: entered promiscuous mode [ 500.242356][T18305] netlink: 'syz.3.3308': attribute type 1 has an invalid length. [ 500.315632][T17773] veth0_macvtap: entered promiscuous mode [ 500.495592][T18305] 8021q: adding VLAN 0 to HW filter on device bond4 [ 500.566940][T17773] veth1_macvtap: entered promiscuous mode [ 500.720492][T17773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.784152][T17773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 501.246992][T18316] lo: entered promiscuous mode [ 501.256438][T18316] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 501.273436][T10062] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.273873][T10062] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.273908][T10062] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.273943][T10062] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.848968][T10064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.848989][T10064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.216545][T10064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.216566][T10064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.649667][T18351] netlink: 'syz.1.3315': attribute type 1 has an invalid length. [ 502.792474][T18351] 8021q: adding VLAN 0 to HW filter on device bond7 [ 502.815168][T18359] pim6reg: entered allmulticast mode [ 502.963795][T18367] netlink: set zone limit has 4 unknown bytes [ 503.052879][T18369] pim6reg: left allmulticast mode [ 503.267330][T18371] pim6reg: entered allmulticast mode [ 503.271981][T18379] pim6reg: left allmulticast mode [ 503.769957][T18390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3322'. [ 503.770285][T18390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3322'. [ 504.237411][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 504.283824][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 504.292041][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 504.316696][ T5624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 504.338257][ T5624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 506.500039][ T5624] Bluetooth: hci1: command tx timeout [ 506.590139][T18452] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3332'. [ 506.590173][T18452] netlink: 'syz.5.3332': attribute type 13 has an invalid length. [ 506.590186][T18452] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3332'. [ 506.590842][T18452] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3332'. [ 506.590864][T18452] netlink: 'syz.5.3332': attribute type 13 has an invalid length. [ 506.590876][T18452] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3332'. [ 506.803146][T18452] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3332'. [ 507.272189][T18400] virt_wifi0 speed is unknown, defaulting to 1000 [ 507.290332][T18400] wlan0 speed is unknown, defaulting to 1000 [ 507.652630][T18481] Bluetooth: MGMT ver 1.23 [ 507.740388][T18485] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3336'. [ 508.577299][ T5624] Bluetooth: hci1: command tx timeout [ 509.034713][T18510] FAULT_INJECTION: forcing a failure. [ 509.034713][T18510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 509.034745][T18510] CPU: 0 UID: 0 PID: 18510 Comm: syz.0.3342 Not tainted syzkaller #0 PREEMPT(full) [ 509.034765][T18510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 509.034778][T18510] Call Trace: [ 509.034795][T18510] [ 509.034803][T18510] dump_stack_lvl+0xe8/0x150 [ 509.034836][T18510] should_fail_ex+0x410/0x560 [ 509.034866][T18510] _copy_from_iter+0x1d3/0x1660 [ 509.034889][T18510] ? __alloc_skb+0x27a/0x7a0 [ 509.034911][T18510] ? __alloc_skb+0x27a/0x7a0 [ 509.034937][T18510] ? __alloc_skb+0x27a/0x7a0 [ 509.034960][T18510] ? __pfx__copy_from_iter+0x10/0x10 [ 509.034980][T18510] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 509.035008][T18510] ? __alloc_skb+0x27a/0x7a0 [ 509.035030][T18510] ? __alloc_skb+0x27a/0x7a0 [ 509.035058][T18510] ? netlink_sendmsg+0x650/0xb40 [ 509.035077][T18510] ? skb_put+0x112/0x210 [ 509.035104][T18510] netlink_sendmsg+0x6c0/0xb40 [ 509.035140][T18510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 509.035167][T18510] ? apparmor_socket_sendmsg+0x98/0x360 [ 509.035192][T18510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 509.035210][T18510] sock_sendmsg_nosec+0x13a/0x180 [ 509.035233][T18510] ____sys_sendmsg+0x54e/0x850 [ 509.035264][T18510] ? __pfx_____sys_sendmsg+0x10/0x10 [ 509.035302][T18510] ? import_iovec+0x73/0xa0 [ 509.035329][T18510] ___sys_sendmsg+0x2a5/0x360 [ 509.035355][T18510] ? __lock_acquire+0x747/0x2de0 [ 509.035379][T18510] ? __pfx____sys_sendmsg+0x10/0x10 [ 509.035439][T18510] ? __fget_files+0x2a/0x420 [ 509.035465][T18510] ? __fget_files+0x3a2/0x420 [ 509.035500][T18510] __x64_sys_sendmsg+0x1b1/0x290 [ 509.035529][T18510] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 509.035573][T18510] do_syscall_64+0x166/0x520 [ 509.035597][T18510] ? trace_irq_disable+0x3b/0x140 [ 509.035616][T18510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.035635][T18510] ? clear_bhb_loop+0x70/0xc0 [ 509.035658][T18510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.035678][T18510] RIP: 0033:0x7f3120b9e159 [ 509.035696][T18510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.035712][T18510] RSP: 002b:00007f3121a66028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 509.035733][T18510] RAX: ffffffffffffffda RBX: 00007f3120e25fa0 RCX: 00007f3120b9e159 [ 509.035748][T18510] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 509.035761][T18510] RBP: 00007f3121a66090 R08: 0000000000000000 R09: 0000000000000000 [ 509.035773][T18510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.035785][T18510] R13: 00007f3120e26038 R14: 00007f3120e25fa0 R15: 00007ffe9d7db2c8 [ 509.035817][T18510] [ 509.409061][T18514] netlink: 'syz.5.3343': attribute type 3 has an invalid length. [ 509.409082][T18514] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3343'. [ 509.489597][T18518] ip_tables: iptables: counters copy to user failed while replacing table [ 509.917222][T18400] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.920242][T18400] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.920397][T18400] bridge_slave_0: entered allmulticast mode [ 509.952242][T18400] bridge_slave_0: entered promiscuous mode [ 510.090409][T18526] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 510.127279][T18526] bond1 (unregistering): Released all slaves [ 510.275057][T18400] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.275165][T18400] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.275359][T18400] bridge_slave_1: entered allmulticast mode [ 510.310568][T18400] bridge_slave_1: entered promiscuous mode [ 510.500059][T18400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.506311][T18535] openvswitch: netlink: IPv4 tun info is not correct [ 510.536546][T18400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.573257][T18535] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3350'. [ 510.660851][ T5624] Bluetooth: hci1: command tx timeout [ 510.738353][T18400] team0: Port device team_slave_0 added [ 510.760682][T18400] team0: Port device team_slave_1 added [ 510.836919][T18544] FAULT_INJECTION: forcing a failure. [ 510.836919][T18544] name failslab, interval 1, probability 0, space 0, times 0 [ 510.836951][T18544] CPU: 0 UID: 0 PID: 18544 Comm: syz.0.3353 Not tainted syzkaller #0 PREEMPT(full) [ 510.836972][T18544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 510.836983][T18544] Call Trace: [ 510.836991][T18544] [ 510.836999][T18544] dump_stack_lvl+0xe8/0x150 [ 510.837031][T18544] should_fail_ex+0x410/0x560 [ 510.837058][T18544] ? __alloc_skb+0x1db/0x7a0 [ 510.837079][T18544] should_failslab+0xa8/0x100 [ 510.837103][T18544] ? __alloc_skb+0x1db/0x7a0 [ 510.837123][T18544] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 510.837150][T18544] ? __alloc_skb+0x18d/0x7a0 [ 510.837172][T18544] ? __alloc_skb+0x1db/0x7a0 [ 510.837201][T18544] __alloc_skb+0x1db/0x7a0 [ 510.837227][T18544] netlink_ack+0x136/0xb30 [ 510.837259][T18544] ? __pfx___up_read+0x10/0x10 [ 510.837294][T18544] rdma_nl_rcv+0x40a/0xa40 [ 510.837332][T18544] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 510.837380][T18544] ? netlink_deliver_tap+0x2e/0x1b0 [ 510.837398][T18544] ? netlink_deliver_tap+0x2e/0x1b0 [ 510.837422][T18544] netlink_unicast+0x7bd/0x940 [ 510.837459][T18544] netlink_sendmsg+0x813/0xb40 [ 510.837486][T18544] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.837513][T18544] ? apparmor_socket_sendmsg+0x98/0x360 [ 510.837538][T18544] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.837556][T18544] sock_sendmsg_nosec+0x13a/0x180 [ 510.837579][T18544] ____sys_sendmsg+0x54e/0x850 [ 510.837610][T18544] ? __pfx_____sys_sendmsg+0x10/0x10 [ 510.837656][T18544] ? import_iovec+0x73/0xa0 [ 510.837684][T18544] ___sys_sendmsg+0x2a5/0x360 [ 510.837708][T18544] ? __lock_acquire+0x747/0x2de0 [ 510.837731][T18544] ? __pfx____sys_sendmsg+0x10/0x10 [ 510.837791][T18544] ? __fget_files+0x2a/0x420 [ 510.837815][T18544] ? __fget_files+0x3a2/0x420 [ 510.837850][T18544] __x64_sys_sendmsg+0x1b1/0x290 [ 510.837878][T18544] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 510.837925][T18544] do_syscall_64+0x166/0x520 [ 510.837947][T18544] ? trace_irq_disable+0x3b/0x140 [ 510.837966][T18544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.837986][T18544] ? clear_bhb_loop+0x70/0xc0 [ 510.838009][T18544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.838027][T18544] RIP: 0033:0x7f3120b9e159 [ 510.838045][T18544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.838060][T18544] RSP: 002b:00007f3121a66028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.838081][T18544] RAX: ffffffffffffffda RBX: 00007f3120e25fa0 RCX: 00007f3120b9e159 [ 510.838094][T18544] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 510.838106][T18544] RBP: 00007f3121a66090 R08: 0000000000000000 R09: 0000000000000000 [ 510.838118][T18544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.838128][T18544] R13: 00007f3120e26038 R14: 00007f3120e25fa0 R15: 00007ffe9d7db2c8 [ 510.838158][T18544] [ 511.275163][T18400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.275179][T18400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.275215][T18400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.430506][T18400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.430524][T18400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.430547][T18400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.596282][T18400] hsr_slave_0: entered promiscuous mode [ 511.609116][T18400] hsr_slave_1: entered promiscuous mode [ 511.611901][T18400] debugfs: 'hsr0' already exists in 'hsr' [ 511.611920][T18400] Cannot create hsr debugfs directory [ 512.792256][ T5624] Bluetooth: hci1: command tx timeout [ 516.337086][ C0] sched: DL replenish lagged too much [ 634.502063][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 666.878418][ T32] INFO: task syz-executor:18400 blocked for more than 144 seconds. [ 666.878452][ T32] Not tainted syzkaller #0 [ 666.878462][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 666.878471][ T32] task:syz-executor state:D stack:22760 pid:18400 tgid:18400 ppid:18384 task_flags:0x400140 flags:0x00080000 [ 666.878521][ T32] Call Trace: [ 666.878528][ T32] [ 666.878541][ T32] __schedule+0x17db/0x58f0 [ 666.878586][ T32] ? stack_depot_save_flags+0x33/0x7f0 [ 666.878621][ T32] ? __pfx___schedule+0x10/0x10 [ 666.878652][ T32] ? schedule+0x90/0x2b0 [ 666.878677][ T32] schedule+0x164/0x2b0 [ 666.878701][ T32] schedule_preempt_disabled+0x13/0x30 [ 666.878723][ T32] __mutex_lock+0x7c1/0x1550 [ 666.878752][ T32] ? __mutex_lock+0x5d4/0x1550 [ 666.878779][ T32] ? rtnl_newlink+0xc10/0x1c30 [ 666.878805][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 666.878839][ T32] ? ns_capable+0x89/0xe0 [ 666.878864][ T32] ? rtnl_nets_add+0x16c/0x300 [ 666.878888][ T32] ? refcount_inc+0x46/0x70 [ 666.878911][ T32] rtnl_newlink+0xc10/0x1c30 [ 666.878947][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 666.878972][ T32] ? __lock_acquire+0x747/0x2de0 [ 666.878999][ T32] ? __lock_acquire+0x747/0x2de0 [ 666.879028][ T32] ? __lock_acquire+0x747/0x2de0 [ 666.879051][ T32] ? lock_acquire+0x115/0x350 [ 666.879077][ T32] ? lock_acquire+0x115/0x350 [ 666.879105][ T32] ? is_bpf_text_address+0x26/0x2b0 [ 666.879135][ T32] ? __lock_acquire+0x747/0x2de0 [ 666.879160][ T32] ? __kernel_text_address+0xd/0x30 [ 666.879180][ T32] ? unwind_get_return_address+0x4d/0x90 [ 666.879202][ T32] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 666.879221][ T32] ? arch_stack_walk+0xfb/0x150 [ 666.879253][ T32] ? lock_acquire+0x115/0x350 [ 666.879287][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 666.879310][ T32] rtnetlink_rcv_msg+0x802/0xc00 [ 666.879332][ T32] ? netlink_sendmsg+0x5d4/0xb40 [ 666.879354][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 666.879376][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 666.879401][ T32] ? __lock_acquire+0x747/0x2de0 [ 666.879434][ T32] netlink_rcv_skb+0x226/0x4a0 [ 666.879471][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 666.879496][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 666.879538][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 666.879556][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 666.879580][ T32] netlink_unicast+0x7bd/0x940 [ 666.879617][ T32] netlink_sendmsg+0x813/0xb40 [ 666.879646][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 666.879673][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 666.879697][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 666.879715][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 666.879739][ T32] __sys_sendto+0x408/0x5a0 [ 666.879768][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 666.879789][ T32] ? lockdep_hardirqs_on+0x7b/0x110 [ 666.879824][ T32] ? fput_close_sync+0x11f/0x240 [ 666.879847][ T32] ? kmem_cache_free+0x471/0x650 [ 666.879876][ T32] ? __pfx_fput_close_sync+0x10/0x10 [ 666.879910][ T32] __x64_sys_sendto+0xde/0x100 [ 666.879937][ T32] do_syscall_64+0x166/0x520 [ 666.879960][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.879981][ T32] ? clear_bhb_loop+0x70/0xc0 [ 666.880003][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.880023][ T32] RIP: 0033:0x7f2eed35e98e [ 666.880040][ T32] RSP: 002b:00007fffb3566ed8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 666.880060][ T32] RAX: ffffffffffffffda RBX: 0000555576373500 RCX: 00007f2eed35e98e