last executing test programs: 3m7.105111111s ago: executing program 3 (id=3002): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'bond0\x00'}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'sit0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x401, 0xfffffffe, 0x4, {0x0, 0x0, 0x0, 0x0, 0x40000, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0xfc}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4840) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000340)={r2, &(0x7f0000000080)='\x00', 0x140, &(0x7f00000000c0)={@_ha_fsid={[0x7fffffff, 0x399]}, {0x4, 0x8, 0x0, 0x48}}, 0x9, &(0x7f00000001c0), &(0x7f0000000200)=0x8}) getsockopt$bt_sco_SCO_OPTIONS(r5, 0x11, 0x1, &(0x7f0000000380)=""/131, &(0x7f0000000440)=0x83) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000b1"], 0x0, 0x8000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2400000020000100000000000007000000000500130001000000"], 0x24}}, 0x0) 3m6.391934465s ago: executing program 3 (id=3010): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000003080101000000000000000000000000050003000600000006000240000000002400048008000440000000000800054000000000040007"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x34, r4, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xb, 0x1, [0xffffffff, 0xfffffffd]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8000}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc01}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r6, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r5) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) 3m5.296385456s ago: executing program 3 (id=3016): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000080)={'hsr0\x00', {0x2, 0x4e24, @empty}}) (async) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0x1242f}, {}, {0xfff2, 0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x4, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240448d0}, 0x0) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000cc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01003f4240bc0000000010000000100000000900000006009198e94f085cdffc0000030000000000000000fa5e2e00e3f2485c3ce10b9deb92a419137451d1655e5c5b93e1688ae89eeddae54310fe1a4857142248c0c7164fd2b15ff94d26e85569efd0e25da189d49fa59afa15f96ab628385d810654c82371718f0d06e55198639c42b3ff7c943e9cb3ead0788df4d6e756eaab542031c93449217c9b11960b23dca9c90dc3f2d9da1aff959e984ac8fb5e260673719cab1c0dc71831faa08d13149f77e7acf094b7ae47ef213b40"], 0x0, 0x31}, 0x20) (rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0xa, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x7fff, 0x2, 0x6}, {0xfff, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x2008c054) r8 = accept4$phonet_pipe(r5, &(0x7f00000001c0), &(0x7f0000000280)=0x10, 0x800) ioctl$SIOCPNADDRESOURCE(r8, 0x89e0, &(0x7f00000002c0)=0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000d0ff0000000000003e00000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180100002028782500000000002020207b1bf0fd00000000bfa100000000000007010000f8fffeffb702000008000000b50afbff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0xc}, 0x94) 3m4.549233534s ago: executing program 3 (id=3021): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0xe) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x7, 0x4, 0xa, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0xbd}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc015}, 0x884) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001a000100000000000000cf0080202000000000000000000008000200ffffffff080001"], 0x2c}}, 0x0) 2m34.69012096s ago: executing program 0 (id=3122): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x1c, 0x80000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0xf000}}], 0x48}, 0x0) r2 = accept4(r0, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f0000000340)=0x80, 0x800) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@loopback, @in6=@private2}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x32) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6202c4ff00000000712041003b0f00009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x7}, 0x90) 2m33.341372773s ago: executing program 0 (id=3124): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r2, 0x100e86bf25c579a7, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004060}, 0x4000004) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async, rerun: 64) r4 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 64) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) (async, rerun: 64) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) (async, rerun: 64) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r4, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) (async, rerun: 64) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) (async, rerun: 64) bind$tipc(r3, 0x0, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xfce) 2m25.9551304s ago: executing program 0 (id=3130): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240048e4}, 0x448d0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2m23.826204533s ago: executing program 0 (id=3135): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x7ffffffe, 0x600, 0x1}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xd, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="850000008e00000095"], &(0x7f0000000400)='GPL\x00'}, 0x94) 2m22.801993061s ago: executing program 0 (id=3138): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f00000002c0)={{r1}, "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"}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000140)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x5b}}, &(0x7f0000000480)='GPL\x00'}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r3, 0x215eb000) socket$netlink(0x10, 0x3, 0x12) r4 = socket(0x2b, 0x80801, 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f00000007c0)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) socketpair(0x3, 0x80000, 0x6, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x4, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x1050) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f0000001300), &(0x7f0000001340)=0x4) 2m19.338963813s ago: executing program 0 (id=3153): unshare(0x68040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x50, 0xffffffffffffffff, 0xfdffa000) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f00000002c0)=0x5f53, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @local, 0x9508}, 0x1c) (async, rerun: 64) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000340)) (rerun: 64) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) recvfrom$x25(r0, &(0x7f0000000180)=""/226, 0xe2, 0x10100, 0x0, 0x0) (async, rerun: 64) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000003140)={'bond_slave_1\x00', &(0x7f00000030c0)=@ethtool_perm_addr={0x20, 0x6, "12a70e6ddb0a"}}) (async, rerun: 64) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00', 0x0, [0x113d, 0x2, 0x0, 0xc, 0x4]}, &(0x7f0000000140)=0x54) 2m4.143918807s ago: executing program 32 (id=3153): unshare(0x68040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x50, 0xffffffffffffffff, 0xfdffa000) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f00000002c0)=0x5f53, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @local, 0x9508}, 0x1c) (async, rerun: 64) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000340)) (rerun: 64) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) recvfrom$x25(r0, &(0x7f0000000180)=""/226, 0xe2, 0x10100, 0x0, 0x0) (async, rerun: 64) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000003140)={'bond_slave_1\x00', &(0x7f00000030c0)=@ethtool_perm_addr={0x20, 0x6, "12a70e6ddb0a"}}) (async, rerun: 64) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00', 0x0, [0x113d, 0x2, 0x0, 0xc, 0x4]}, &(0x7f0000000140)=0x54) 1m11.288770863s ago: executing program 3 (id=3033): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20991, 0x11c05}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xc}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 1m11.138145192s ago: executing program 3 (id=3243): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000000280)) r1 = socket(0x1, 0xa, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'veth1_vlan\x00', 0x3}, 0x18) ioctl$OCFS2_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x2, 0x2, 0x1ff, 0x7fff, 0x7f}) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r5 = socket$netlink(0x10, 0x3, 0x4) epoll_pwait(r3, &(0x7f0000000680)=[{}], 0x1, 0x4857, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0xe0000016}) connect$inet(r1, &(0x7f0000000200)={0x2, 0xde20, @local}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYRESOCT], 0x60}, 0x1, 0x0, 0x0, 0x200040c0}, 0x4000054) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 55.9881614s ago: executing program 33 (id=3243): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000000280)) r1 = socket(0x1, 0xa, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'veth1_vlan\x00', 0x3}, 0x18) ioctl$OCFS2_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x2, 0x2, 0x1ff, 0x7fff, 0x7f}) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r5 = socket$netlink(0x10, 0x3, 0x4) epoll_pwait(r3, &(0x7f0000000680)=[{}], 0x1, 0x4857, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0xe0000016}) connect$inet(r1, &(0x7f0000000200)={0x2, 0xde20, @local}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYRESOCT], 0x60}, 0x1, 0x0, 0x0, 0x200040c0}, 0x4000054) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23.564076512s ago: executing program 2 (id=3393): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2900}, 0x94) 23.41192604s ago: executing program 2 (id=3394): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) (async) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x7d4165c9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x7d4165c9) listen(r4, 0x0) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100000000000c0004400000000000000013140000001100010000000000000000000100000a"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000000fff00", 0x58}], 0x1) (async) r11 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r11, &(0x7f0000000580)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000300)="a905000000407464000100000000000000e5c0d8af7a6417e436a106993e1e5ad8311dab", 0x24}], 0x1}}, {{&(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004'], 0x28}}], 0x2, 0x800) 22.944088745s ago: executing program 2 (id=3397): r0 = socket$kcm(0x21, 0x2, 0xa) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001580)=@raw={'raw\x00', 0x9, 0x3, 0x308, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x238, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@local, @mcast2, [0xff], [0xffffff00, 0x0, 0x0, 0xff], 'veth1_to_batadv\x00', 'tunl0\x00', {0xff}, {0xff}, 0x8, 0xa, 0x0, 0x8}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xfe1, 0x80, 0xfffffffe, 'snmp_trap\x00', {0x80}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, [0x0, 0x0, 0xffffff00, 0xff], [0xffffffff, 0xffffffff, 0xffffff00], '\x00', 'rose0\x00', {0xff}, {0xff}, 0x6, 0x40, 0x5, 0x47}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x0, 0x4}, {0x9, 0x7}, {0x8, 0x5000000000000}, 0x800}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@RTM_DELMDB={0x18, 0x55, 0x701}, 0x18}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000080}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, '\x00'}, {0x18, 0x110, 0xc, "aa"}], 0x30}, 0x0) 22.265791053s ago: executing program 2 (id=3399): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') syz_emit_ethernet(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 21.501363741s ago: executing program 2 (id=3403): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000044000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000000100"/28], 0x48) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffefd, &(0x7f0000001080)={&(0x7f0000000280)=ANY=[@ANYRES64=r0, @ANYRES32=r2, @ANYBLOB="03000000ff0061be4d1d8cc49f300100677265"], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x2200c800) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x2, &(0x7f0000000300)=@raw=[@exit, @exit], &(0x7f0000000100)='GPL\x00', 0x8, 0xf6, &(0x7f0000000180)=""/246}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r1}, 0x48) 20.898549791s ago: executing program 2 (id=3405): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b004e"], 0x24}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x4000, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000002f00090027bd7000000000000400000004000d"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 12.683702886s ago: executing program 4 (id=3435): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000}, 0x94) 12.226332331s ago: executing program 4 (id=3437): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050003000000585e6ad18c13202b08000300", @ANYRES32=r4], 0x28}}, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) (async) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) getsockopt$inet_mptcp_buf(r5, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) (async) getsockopt$inet_mptcp_buf(r5, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) close(r6) r9 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) 12.145871235s ago: executing program 5 (id=3438): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000ad8000000060a010400000000000000000a0000010900010073797a3100000000ac0004802000018007000100637400001400028008000240000000040800014000000009540001800a00010072656469720000084400028008f101400000001108000240000000170800034000000061080003400000000608000140000000000800024000000008080002400000000f08000340000000303400018011000100666c6f775f6f66666c6f616400ffff001c0002800900010057797a32000000000900010073797a31000000000900020073797a32"], 0x100}, 0x1, 0x0, 0x0, 0x8001}, 0x24004804) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) sendto$inet6(r0, &(0x7f00000000c0)="4acf74ada243e22a51b05efb2fd224d41078f8c30b7415eb8bfa976b33d346393dfe0c55dd743aefc2a1beae151f5ad586a7b344659b5271ee973e425a6e50d550cb6b13020db9f13a192c8d0887534ae7a4731cadc7a8606f694fe892a0d0be4d0c0e379e7d2aed7e87fcc1363059ed7c4be51bc536b4e630c6c9910ce78b79d102b5cf94a59cd1e2aaecdb07cefbf22a42952cf540bfb14fa708de529ec7a0367037b33e866acb06c70ee810c278ca025b56dedb1ce416d9", 0xb9, 0x4004000, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6000}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2b}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xbc, 0x0, 0x1, 0x401, 0x0, 0x0, {0x7}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x2}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xac}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3c}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8001}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xd8e3}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x80000000}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7c2f}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_SEQ_ADJ_ORIG={0x2c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x26c8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7fff}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40801}, 0x48095) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @local}}, 0x2, 0xb, 0x7, 0x5, 0x4, 0x4, 0x7}, 0x9c) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), r5) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000b00)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x310040}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x8c, r9, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffff7f}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x614}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1a}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000000}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000500)=r7, 0x4) 11.133282547s ago: executing program 1 (id=3441): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x7c, r1, 0x1, 0x70bd0b, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x54, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2373}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7ff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x10}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x62}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xd}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x96}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 11.0098633s ago: executing program 6 (id=3442): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) ioctl$sock_bt_hci(r3, 0x400448e0, &(0x7f0000000140)="d363b782780dca986e33e9098b50242989f583f8cfd5d07acdf7100e949914caec02f0a89ea02a1761164eed45bc748324bf4cc3c8e5c3e1b447993e56b02adf5cd8c2446802") sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x70bd28, 0x25dfd402, {0x0, 0x0, 0x0, r2, 0x64e98, 0x2ac1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_ISOLATED={0x5, 0x21, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) 10.769252438s ago: executing program 5 (id=3443): syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000092c03cb697a653e336f000000500000000000ff02000000000000000000000000000111000003"], 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000640)={0x35ae9b17, 0x8, 0xd88c037580273a2f, 0x1ff, 0x6, 0x0, [{0x8, 0x8, 0x0, '\x00', 0x220c}, {0x6, 0x0, 0x6, '\x00', 0x8}, {0x1, 0x40000000, 0x7, '\x00', 0x3}, {0xd, 0x4, 0x1, '\x00', 0x400}, {0xba6, 0xfffffffffffff801, 0x8, '\x00', 0x1000}, {0xa, 0x3a27, 0x5, '\x00', 0x843}]}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000c00)={{r0, &(0x7f0000000540)=',/!},%\\#\x00', 0x100, &(0x7f0000000840)={@align=0x4, {0x6, 0x2, 0x80000001, 0x45a0}}, 0x6, &(0x7f0000000880)={@_ha_fsid}, &(0x7f00000008c0)=0x7}, 0x3, &(0x7f0000000b80)=[{0x3, 0x6, &(0x7f0000000900)='&[\x00', &(0x7f0000000940)="f4bd8787ad11fd49bc1b2b76c88f83005b778a4fd5ec2a51d296b8d09ba657d8419c3c69481c13562167bf8a2784128911aaa188cbbfbdc59cc1f966f5e055b00cb0042bdac9fd91fd9d4711cafd58b213637025a2e0", 0x56, 0x10}, {0x2, 0x401, &(0x7f00000009c0)='aegis128-generic\x00', &(0x7f0000000a00)="ce6cb2ef91b2258cc327a16ca7c50924d28b191c5b59e39b28577889d9488539c352bdf7fa1e98d80aa4257a66533c11d04a2edc", 0x34}, {0x1, 0xb7c1, &(0x7f0000000a40)='\x00', &(0x7f0000000a80)="2e05016a9e7c317ce150ee7561a87ee1e38f5d6b70ceff589005cebfef8b330311a430cc35998d9c9784cf402453b8c9b2826b101ec6f36c108a53f82f63d1444bd8e2eea5dd518fe697c156dbad1322780dc9659fca139a65d45fc3968895c2cb98dcd76086039d4070e13cb3d33d5d776258063ee66cfb460cb9bcc5de31b6ca82b004c333a099e3d1fb9b10bb4dd12fa0ef38a6a949ba59053e79d246f1aa27c39d40390e1fa025e4e2d76cec5799b55460ddf43b2f572ddcdc488211e732cbefe28d02ee5591b7d108da6a9a0508e2cbfe94b5d825134b4e75e000fc80161f0e741741a409ea4b01e55b43c549a51c5fbaab", 0xf4, 0x22}]}) recvmsg$can_bcm(r2, &(0x7f0000001440)={&(0x7f0000001240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001300)=[{&(0x7f00000012c0)=""/3, 0x3}], 0x1, &(0x7f0000001340)=""/244, 0xf4}, 0x43) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000016c0)={0x0, 0x1}, &(0x7f0000001700)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)=""/230, 0xe6}], 0x15}, 0x2000000}], 0x2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$inet6(0xa, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0xa, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0xc040}, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES8=0x0, @ANYRES32=r5], 0x30}}, 0x4010) r9 = gettid() sendmsg$nl_generic(r7, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000cc0)={0x580, 0x1d, 0x200, 0x70bd25, 0x25dfdbfe, {0x11}, [@typed={0x8, 0x11a, 0x0, 0x0, @u32=0x4}, @typed={0x11, 0x148, 0x0, 0x0, @str='hash:net,net\x00'}, @generic="33fcc68e6e7fbdcd89cf2895e3ce4b9c7381bb2f096d4b940e460eff", @typed={0x14, 0x38, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @generic="a5745e8596fe862ef9b15d20647b41001e5b600e25ad4bc2b401bc07fe7f721f92e77d441311b4204a319ee4adf46f63ba4f55fddaf72389ea03d343a722a9540fa9da099e35e5e001cc346c34a6dd3ceaf0ba4c3c99e3f35ba434a5b4b88825dc575c5478c4130fcc785d704e699dce8fdb54b52b027435e77810117f4c25d503db7efdaaafc143719dde47b6feb73c43bab60d1c6793cd9c8d1c7b8c048299cfa20819ade043c955e016c58475e7dcfafe70bd0f4c45690dde3a43a8b924b90d74d3635d44a14b4802894e0c070d27eb9e21ce5fa7578131d23aa4afe481a6ed4d920cfbde35d3c32ab04a3cbd2a66995fa4", @nested={0x10, 0x160, 0x0, 0x1, [@typed={0x9, 0x5c, 0x0, 0x0, @str=']$4$\x00'}]}, @generic="3d013306373f5a54a11a326e0a714acb39178ce2cf4e10d8c3999fe3c1229a5b4ddf0aaa8b6c44f402627537d51e1aeb652b2e583e027f12274e61de011afa03a6a5ae77e1744b13055514494b942fae49839da2c007e53f2d778c1e87824839b3fb6233227ced4e0788e79770c6eefaf5d984fef42f264ef07a39a51e04c7ec465b618beac7f7d74afc6f8e63d1cc3a3638cf4d26b53abc72355681dcde6982d87f1777a73a1e0f05a17082f1356eeb7d77", @nested={0x365, 0x6, 0x0, 0x1, [@typed={0x4, 0x118}, @generic="efa5164dd525f493184dd59f7edd5b78a2355e14c5106b3c62ddaa9eee0c25f4b3922bd85c423a53754ddaa391323008010b25e122b5db2de683bf3de416ff1d7545ef73d07212d3c0d801758adc8d9f3c13540ac869cc39353126cede19957b5f62ad8169f2903b3bb4d35546e5570acd8d37fee220383a6b96241217bef67c21b0b5779b564a234da497d82ddacbb440bcf4731b466f36c63ef972babfd8f3f5f9b23c99ffd127f1e20f19d42e45739f79e9cd541ea39432f120ff8529642910fc7e49898f1f0f98463d3f3ccecedcd0", @nested={0x289, 0x29, 0x0, 0x1, [@nested={0x4, 0x91}, @typed={0xce, 0x7b, 0x0, 0x0, @binary="fb46b420bbb98bc58a761fa93a347a98f252b68d1533d297e5ad575e5d504ca8301e5f318c48875324787188e8d100ed00bbf5124b3f64edbffd0f19300d445014a05186a805ee553154d8230452c2f07e4f39f2d7d5265f84676c325379b96ccb43c96bf4fcfdd6931ba89833309d49161cf340ae4acd05699d5a75bb557f6b1aafea1a4ce5ebe06f59880dcf0a346229e2b0c2f63005b2c907727cb58d86577566e079108c319b5db6172453afcf90beb99e23dd89e1d3a486b07171fb1badab06cea42dcd6db50d5d"}, @typed={0x8, 0x11, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x4, 0x13}, @typed={0x8, 0xe4, 0x0, 0x0, @pid=r9}, @nested={0x4, 0x12a}, @typed={0x8, 0x131, 0x0, 0x0, @u32=0x8}, @generic="ced93d462f7dc4f9401a5afff61ffc98242af4bcabad6b59b565a6615157f4f16866694480b9885e8de52265572690d442842861fe7ebcdb5f141ddb57cc7cfb70480722e33d7ec59b8e95ea38608225685e831818ee5f88144bab339986f3abd2d3a82be203aceaadaaaf088b669bb0091297f30b2c54a05b38ba12ebbb3dd70c3f880b05659e2417887207eb887bd202cb46e936538be34c099cd240f3b2f3", @nested={0x4, 0x12f}, @generic="5a7e5b2c6fc1346908218963a481756196a24ea576b7e6d15490995bce646be92810ddf855e3e0f245d285abb8bfc415c79845175d8aa2ebb7af2de079eb013391d28b3abe4bd8801925677ed1b2f43c3bc2712a5c6037ebc16fd6745add41feb1ca5886cfbf9dd39287579a3cc4eed9690211e2d051d69d3d2584c893c6452fccbd52c84628cb0e89e5b9edac4d82ca9f3dcadc82b93747a1ea8a3d859101f694629bbeaff971515d813cec4896b0cfcd987de24aa536e6db39c31dbb8258f498d38e9d3d2e4310d86da8bf22bc74df001db3e879b43243f58c8d9335ef0dffc88a8fc1fedc3bc4839bf0de3a"]}]}]}, 0x580}, 0x1, 0x0, 0x0, 0x20008004}, 0x40) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000000)="3e615d1bd9f1b6bcf28d09f1aa32feb910acc3b8d53ff152da1d8ddf8c9d5dd1c7b821f1c762", 0x26}, {&(0x7f0000000040)="02a371d63e56ad13c75badee8c5d78dbc24fd79be4f66cf61e9416e754769fd121a47aa2019ccf657f5b8a6191e6be16651c2174290704", 0x37}, {&(0x7f00000000c0)="4ef25a60bdff843e63c37700a329f46f577d165ab303711f396585fbe19e016df0d5b05fc3d1bcf16d7bd0e150f6d01739870a5bd1dd9903b30334c77b21f545c38f60dd0382e13e79193e655c674f8bf730464f73146037e42fbff9b4a000a908946718", 0x64}, {&(0x7f0000000140)="85099110977ca108c0b3c6b67e76d4095325e793da8b44c74c26511d1f7e834419bb9ef66db98afdeabd0c647bfd26bbbeb6a8a3d523d92fe530a581503acf4940f4150541e3c736737903c2d4e6c78907edec6c61dc20886028e02769d3fdbd835c5d581f80217afca93dfb94dd1cb93a2e31e135590fc4c98aa3515371e8323f9e9847a6f205b9065afc066f361e7b4bfbebe9fbd6744b12dc07590040a7d4588f692a9321a69370472eae8ae9498de8a1f0b8ddfd9b9ba0f8c7ee6fc5ddac4c3184325f3af1b0dbf8159d8ed6e5ab332b2b0037d3b3fc812bec2b4f581d85e8e5f1bdc55a990e45ffe8103a", 0xed}, {&(0x7f0000000240)="80462790e9b35eb99dbcba149895cdff9711975c241cbea4a7e2aeabc5bc8e1dc9d29e29a3db07a8d4c3800d640b85dafdd467bbf75b9e22ab01d6f778ce84cca06cf58bee122c49510f055918827c33b0bfdbd9b2a79e58c82d72de2c9a676e90d6ff519f228418f412e7c0fcc32897af8f3986a81ac4a8b110a27d66b20874810ad41af10cf5e4a93bb68c2d9f35ab7fdd8a740d6241fe968483683370b544b1e77d676de55362d4df4cb3c362c4276cf52deaa30b833704e81cf9acda5d35", 0xc0}, {&(0x7f0000000300)="c7fc5bdac78438aaee53c1ecedffbfe04766f0c5f7498e8424664b882c83e8167a9f565886c7c24c8c3c5ff8", 0x2c}, {&(0x7f0000000340)="2dc8d09d530e87e2bcd2e965bd39a75d0ef8c20da5fe5d385949ce3a43c42343bd273412a7cd101ad214c79b06ed38fd97923ec31e2c947c930d6e97787f8b45a280799aac1ee15ccddbdf41a5898d00082e361950e4e63a61b3fbfbafc346baab5be85561b741825655cd2ce2b317df7ed48d53a748605d948a7a4787ed7721e696ce402b44ccbbc86637d1cd7bbd96231312ede210ce032ec2fceaf62130200141d37c09e0a2b69f3289535af36128815f98e691272f3b05d4a203baf539c6ecbf4a351bc6dbd8a220998aebcc1459628fc6c393", 0xd5}], 0x7) 10.192239492s ago: executing program 1 (id=3444): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="160000001000010000000000000000000000000a20000000000a05000000000000000000050000000000000000797a300000000040000000030a010100000000000000000d0000000900010073797a30000000000900030073797a300000000014000480080001400000000008000240521deb0b6c000000060a01040000000500000008000b4000000000440004801c0001800a00010071756575650000000c00028006000140000e0000240001800b00010072656a656374000014000280080001400000000005000200810000000900010073797a3000937e00140000001100010000000000000000000000000a"], 0xf4}}, 0x0) 10.094989489s ago: executing program 5 (id=3445): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x10, &(0x7f0000000040), 0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x2d, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40091}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000440)=[@in6={0xa, 0x4e24, 0x6, @private2, 0x40}], 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x7, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r8, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x47a2, 0x44}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4840}, 0x44080) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x30, r8, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20004080) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r11 = socket(0x2a, 0x2, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000090000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) getsockname$packet(r11, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000480)={0x2, 'veth0_macvtap\x00', {0x2}, 0x13e3}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="0bb25e00", @ANYRES16=r10, @ANYBLOB="01002abd7000fbdbdf25040000002000018008000100", @ANYRES32=r13, @ANYBLOB="140002006272696467655f736c6176655f310000"], 0x34}, 0x1, 0x0, 0x0, 0x10008890}, 0x4044800) 10.09445401s ago: executing program 6 (id=3446): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg1\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89b0, &(0x7f0000000540)={'macvlan0\x00', @random="00009e0c1100"}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r3, {0x5, 0x10}, {0x1, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48000}, 0x840) 10.089957954s ago: executing program 4 (id=3447): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b00}, 0x94) 9.508248149s ago: executing program 4 (id=3448): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @local}]}, &(0x7f0000000440)=0x10) (rerun: 64) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r1, 0x0, 0x1008, 0xb, 0x14d7a36c, 0x9}, 0x14) (async) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x13, 0x16, 0x8, 0x7f}, 0x50) (async) r3 = socket(0x10, 0x80002, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@remote, @in6=@loopback}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (async, rerun: 64) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (rerun: 64) setsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, 0x0, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000952805004c0012800c0001006d6163766c616e003c0002800800010010000000280005800a000400aaaaaaaaaa3b00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb0000080003000300000008000500", @ANYRES32=r11], 0x74}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={0x20, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x4810) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0xac, 0x21, 0x1, 0x0, 0x0, {{@in, @in6=@remote}}, [@migrate={0x50, 0x11, [{@in=@multicast1, @in=@local, @in=@local, @in=@broadcast}]}, @policy_type={0xa}]}, 0xac}}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r13, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) (async) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="edcaf499"}]}, 0x1c}}, 0x0) (async) sendmmsg$alg(r3, &(0x7f00000017c0)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="ed60af8a59c5", 0x6}], 0x1, 0x0, 0x0, 0x20000081}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20088800}], 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x14, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @alu={0x7, 0x1, 0x0, 0x0, 0x8, 0x58}, @initr0, @jmp={0x5, 0x0, 0x2, 0x7, 0xf, 0xffffffffffffffe0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) 9.345245077s ago: executing program 1 (id=3449): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000880), 0x4) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r4 = accept4(r2, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x1c, 0x37, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) 9.189037605s ago: executing program 4 (id=3450): r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000001100)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000d584000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000880), 0x8e5b, r2}, 0x38) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) close(r4) 8.481433859s ago: executing program 1 (id=3451): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'erspan0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x40, 0x7, 0x0, 0xe, {{0xf, 0x4, 0x1, 0x1, 0x3c, 0x67, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @multicast1, {[@cipso={0x86, 0x18, 0x1, [{0x1, 0x4, "fe34"}, {0x2, 0xe, "24783d3b67c1c43201deed8f"}]}, @ssrr={0x89, 0xf, 0x77, [@dev={0xac, 0x14, 0x14, 0x27}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@ipv6_getaddr={0x34, 0x16, 0x4, 0x70bd29, 0x25dfdbfd, {0xa, 0x1f, 0x80, 0xfe, r1}, [@IFA_FLAGS={0x8, 0x8, 0xc}, @IFA_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x1) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) bind$802154_raw(r2, &(0x7f0000000100)={0x24, @none={0x0, 0x1}}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0xf}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r3, 0xee01}}]}, 0x28}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x40) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0xff00, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071104d000000000063012d00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 7.867176631s ago: executing program 5 (id=3452): syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2400040}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)={0x2a8, r0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x253, 0x2a, [@fast_bss_trans={0x37, 0x95, {0x1, 0x2, "fb95c3e4255b482fec401f41ac210e34", "fa90e28e2a8a0fe38b0aa2564a76e6ee8064655a3a73879ed2770126834c3589", "a8763c05848572dc28ed779bfe34eb14e2f0726db969fb6a3e8bdd981667222e", [{0x2, 0x1e, "c745d67add509cd6bc9ddafe08bb5f908ad6b4c711408977a033d0f33dd3"}, {0x4, 0x21, "e1a9bec6fe76330fde1d659588c624d72788b96b37c08e0a94eac9cae4b3ab72ef"}]}}, @supported_rates={0x1, 0x5, [{0x2}, {0xb}, {0x2}, {0x36, 0x1}, {0x6c, 0x1}]}, @random_vendor={0xdd, 0x53, "b7fe2437afe25bbcbdefe088f9f836c293b27dd103667b344c39aee80a53b96a66ff13083e9265131d51f8e2878489d168e7e2acbcc7b58420543994c9ed10f35a8cdff760f6ba56a898a18e84f501544a3cdf"}, @cf={0x4, 0x6, {0x7f, 0x4d, 0x1ff, 0x2}}, @tim={0x5, 0x3e, {0x3, 0xec, 0x9, "ab33b1e7cc26034373e5b3a88b4901696ad304a73ea9c87a90c6a6b5460d1122bac9f07e8cb4ccccee2a97a91a39ef6d825e70a14286f67e1d7466"}}, @random_vendor={0xdd, 0xf3, "36c327843ea63f630ee184f28fffd969f40a451d931188f39f2526ada69e4b6aa6c45cf3b3b35d74d82eb6bcde1b075e05fa9671679acc18bdc8c4042eb4e8d87b67a9e1b60f0f6990be0adc4b874a12aea7fb0f1eb1e4af933715e26b6b822c6fa43430872150dc6c078fa504d47f51f7cc3743ee6a3091542c8da6a5ee74b3abfef34748b8fb574e2405606ef671c6836a43c0e865af553a94338d6a518d7847245fec978eff77e19cecceccc6d71bb0f6df5798cdadc27db60066ea47636639f48a906bb80ff45739d6d050abedf19659152f1b2558039c59db08e1fea9e6ce4812414359febce742d59d219396aae7df57"}, @ssid={0x0, 0x1d, @random="5d56c4de5fbb5ac2670eb62f64df16097561b6efc8696b8607e081ed82"}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7}, @NL80211_ATTR_IE={0x1c, 0x2a, [@peer_mgmt={0x75, 0x16, {0x0, 0x4, @void, @val=0x7, @val="cf71d2e985d6063b191a142bd485b413"}}]}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_IE={0xc, 0x2a, [@mesh_chsw={0x76, 0x6, {0xb, 0x15, 0x8, 0x10}}]}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000008c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xe0, r4, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7, @private1, 0xed2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x0, @mcast1, 0xfd6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x100, @mcast1, 0x10000}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xe}}}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="38010000100033062cbd700000000000fc020000000000000000000000000000ac1e0001000000000000000000000000003a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000100000000000002000000000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r8, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x24048880) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x60, r9, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40801}, 0x40) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x3fffffffd}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) (async) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x3fffffffd}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, 0x0}, 0x0) (async) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, 0x0}, 0x0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={0x1c, r0, 0x20, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x880) 7.380262663s ago: executing program 6 (id=3453): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="120000005400012c000000000000000007"], 0x18}}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @empty}, 0x10) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000002c0)={'broute\x00', 0x0, 0x0, 0x0, [0x6, 0x7, 0x400, 0xff, 0x1000, 0x800]}, &(0x7f0000000340)=0x78) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb4, r2, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfff9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x898}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x3}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xb}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x20}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x4000090) shutdown(r0, 0x1) 6.617381939s ago: executing program 1 (id=3454): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x40, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x0, '\x00', {0x9, 0x6, 'EAC', 0x8000, 0x0, 0x0, @private2, @private2, [@hopopts={0x89}], "98efd03a7e60b623"}}}}}}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0xa, 0x9}}) unshare(0x22020400) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000d00000095"], &(0x7f0000000700)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r2, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a85009a10d943a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff81, 0x14, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21b4b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x3b}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 5.776526049s ago: executing program 4 (id=3455): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB="184200000500000000000000000000009500000000000000180000000000000000000000000000009500000000000000851000003bd8880155fcffffff9500000000000000fda99bc743bef757832a70143a0f3e8ab3a75d858af67b0a88f6f85fa1f380b81a2f65141287ea1fb9fc04"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x200080) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000300)="80fd0fa67941", 0x6}], 0x1, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448ca, &(0x7f0000000840)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x530, 0x3c8, 0x228, 0xffffffff, 0x3c8, 0x3c8, 0x498, 0x498, 0xffffffff, 0x498, 0x498, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @multicast2, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16, 0x0, 0x1}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'fsm\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x69, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@multicast1, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e26, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @local, @local, @icmp_id=0x64}}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0xe3, 0x0, 0x4}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0xffffffffffffffff, 0x2, 0x1}}}, @common=@ttl={{0x28}, {0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @rand_addr=0x64010101, @empty, @gre_key=0x4, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x29}, @icmp_id=0x65, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x590) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_int(r3, 0x29, 0xcf, &(0x7f00000005c0), &(0x7f0000000600)=0x4) socketpair$tipc(0x1e, 0xaf5993c606ee2ae5, 0x0, &(0x7f0000000640)) 5.684571582s ago: executing program 6 (id=3456): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x1a, 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) (async) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r2 = socket(0x11, 0xa, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000000013"], 0x24}}, 0x0) (async) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x64, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000}, 0x4000000) 4.231275299s ago: executing program 5 (id=3457): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYRES8=r0], 0x7c}}, 0x40040) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000e9aac685398f3393000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000008000340000000610800024000000002080006400000000208000740000000080900010073797a30000000000900020073797a3200000000140000001100010000000000000000000300000a"], 0x9c}}, 0x4) 3.673972667s ago: executing program 5 (id=3458): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x0, 0x2b, 0x0, 0x7}, 0x28) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="020700000b00000027bd7000ffdbdf2505000500332000000a004e230000000afe8000000040000000000000000000bb9c550129a892afcf0000000002000100000004d6040951000100004002000b005c07000007000000"], 0x58}}, 0x20000084) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x44) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x38, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x18002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'hsr0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, &(0x7f0000003580)) 1.272176825s ago: executing program 6 (id=3459): r0 = socket(0x840000000002, 0x3, 0x9) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x98, 0x0, 0x168, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 'pim6reg0\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'veth1_macvtap\x00', 'tunl0\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x60010000}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0x9, [0x16, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2, 0xfffe, 0x0, 0x28, 0x0, 0x100]}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x3d}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x65, &(0x7f0000000000)=0x9, 0x4) sendmmsg$inet6(r3, &(0x7f00000027c0)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x0, @mcast2, 0x41}, 0x1c, 0x0}}], 0x1, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="08002abd7000fedbdf250300000008000100", @ANYRES32=r5, @ANYBLOB="0afa77aa9c2fe631210b788d58a39464ac88e254658b9b42d35f47ee9a1d5ea8", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4000) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0xc080}, 0x4004000) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x4d}, 0x8, 0x3000000000002, 0x0, 0x11}, 0x8) 1.254220543s ago: executing program 1 (id=3460): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="57010000000000000000000000000800080000000000080002000100000008000100", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240048e4}, 0x448d0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x1c, r12, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) write$nci(r7, &(0x7f00000001c0)=@NCI_OP_CORE_GENERIC_ERROR_NTF={0x0, 0x0, 0x3, 0x7, 0x4, 0x1}, 0x4) 0s ago: executing program 6 (id=3461): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$kcm(0x23, 0x5, 0x0) sendmsg$sock(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f00000000c0)=0xfffffff7, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_MEMORY={0x8}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x58}}, 0x0) kernel console output (not intermixed with test programs): parsing attributes in process `syz.4.2124'. [ 397.009502][T13698] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 397.032901][T13698] Node 0 DMA32 free:1094116kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35656kB inactive_anon:0kB active_file:0kB inactive_file:171296kB unevictable:1536kB writepending:120kB zspages:0kB present:3129332kB managed:2551440kB mlocked:0kB bounce:0kB free_pcp:78328kB local_pcp:41132kB free_cma:0kB [ 397.080109][T13698] lowmem_reserve[]: 0 0 0 0 0 [ 397.085016][T13698] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:624kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 397.127819][T13698] lowmem_reserve[]: 0 0 0 0 0 [ 397.132661][T13698] Node 1 Normal free:3940740kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1760kB local_pcp:1760kB free_cma:0kB [ 397.193233][T13698] lowmem_reserve[]: 0 0 0 0 0 [ 397.200685][T13698] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 397.234022][T13698] Node 0 DMA32: 2378*4kB (U) 1603*8kB (U) 2378*16kB (UME) 121*32kB (UME) 77*64kB (UME) 188*128kB (UME) 40*256kB (UM) 9*512kB (UME) 3*1024kB (UM) 6*2048kB (UME) 238*4096kB (UM) = 1098304kB [ 397.295746][T13698] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 397.325970][T13698] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 1*16kB (M) 1*32kB (M) 1*64kB (M) 2*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 961*4096kB (UM) = 3940740kB [ 397.342659][T13698] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 397.352667][T13698] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 397.374371][T13698] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 397.391577][T13698] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 397.404793][T13698] 47087 total pagecache pages [ 397.426200][T13698] 0 pages in swap cache [ 397.447527][T13698] Free swap = 124996kB [ 397.454088][T13698] Total swap = 124996kB [ 397.458664][T13698] 2097051 pages RAM [ 397.463045][T13698] 0 pages HighMem/MovableOnly [ 397.468851][T13698] 427420 pages reserved [ 397.473141][T13698] 0 pages cma reserved [ 397.643257][T13738] netlink: 'syz.3.2127': attribute type 11 has an invalid length. [ 397.734236][T13741] ieee802154 phy1 wpan1: encryption failed: -22 [ 398.633041][T13771] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 401.764972][T13774] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 401.812076][T13795] debugfs: '1ùà^!' already exists in 'ieee80211' [ 402.004446][T13817] __nla_validate_parse: 2 callbacks suppressed [ 402.004469][T13817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2151'. [ 402.171428][T13823] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2154'. [ 402.278615][T13838] Unsupported ieee802154 address type: 0 [ 402.303779][T13840] xt_TPROXY: Can be used only with -p tcp or -p udp [ 402.324395][T13840] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 402.525352][T13853] syzkaller0: entered promiscuous mode [ 402.537199][T13853] syzkaller0: entered allmulticast mode [ 402.577936][T13853] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2161'. [ 402.688207][T13862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2163'. [ 402.863280][T13868] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 403.174476][T13894] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2171'. [ 403.252710][T13894] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.260379][T13894] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.277568][T13885] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2169'. [ 403.292604][T13895] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2171'. [ 403.303821][T13885] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2169'. [ 403.564897][T13906] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2173'. [ 403.584192][T13906] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2173'. [ 403.872662][T13928] openvswitch: netlink: IPv4 tunnel dst address is zero [ 404.136422][T13945] netlink: 'syz.1.2182': attribute type 11 has an invalid length. [ 404.708093][T13971] syzkaller1: entered promiscuous mode [ 404.724612][T13971] syzkaller1: entered allmulticast mode [ 404.741128][T13972] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.471229][T13969] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 405.738505][T14011] syzkaller0: entered promiscuous mode [ 405.745136][T14011] syzkaller0: entered allmulticast mode [ 408.611920][T14056] __nla_validate_parse: 10 callbacks suppressed [ 408.611948][T14056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2214'. [ 408.636439][T14061] netlink: 'syz.2.2216': attribute type 4 has an invalid length. [ 408.668625][T14061] netlink: 'syz.2.2216': attribute type 4 has an invalid length. [ 408.727821][ T5742] C speed is unknown, defaulting to 1000 [ 408.736782][T14056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2214'. [ 408.741845][ T5742] syú2: Port: 1 Link ACTIVE [ 408.792666][T14056] team0 (unregistering): Port device team_slave_0 removed [ 408.827126][T14056] team0 (unregistering): Port device team_slave_1 removed [ 408.953669][T14082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2221'. [ 409.154500][T14075] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2220'. [ 409.233482][T14082] team0 (unregistering): Port device team_slave_0 removed [ 409.284506][T14082] team0 (unregistering): Port device team_slave_1 removed [ 409.375551][T14078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.820900][T14102] bond8: entered promiscuous mode [ 409.829853][T14102] bond8: entered allmulticast mode [ 409.838812][T14102] 8021q: adding VLAN 0 to HW filter on device bond8 [ 410.008045][T14112] openvswitch: netlink: IP tunnel dst address not specified [ 410.149643][T14114] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2227'. [ 410.565169][T14055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.009993][T14122] netlink: 'syz.4.2229': attribute type 1 has an invalid length. [ 411.048543][T14122] bond4: (slave bridge6): making interface the new active one [ 411.057065][T14122] bond4: (slave bridge6): Enslaving as an active interface with an up link [ 411.351190][T14136] Unsupported ieee802154 address type: 0 [ 412.303903][T14089] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 412.526678][T14148] netlink: 'syz.3.2236': attribute type 2 has an invalid length. [ 412.538618][T14149] ip6t_srh: unknown srh match flags 4000 [ 412.568025][T14148] syzkaller1: entered promiscuous mode [ 412.596320][T14148] syzkaller1: entered allmulticast mode [ 412.630709][ T5645] block nbd1: Receive control failed (result -32) [ 412.906033][T14167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2244'. [ 412.926682][T14168] sch_tbf: burst 2 is lower than device syzkaller0 mtu (313) ! [ 412.979741][T14157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2241'. [ 412.989866][T14167] vxcan0: entered promiscuous mode [ 413.446294][T14181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2249'. [ 413.618852][T14188] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2250'. [ 413.842981][T14200] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2256'. [ 413.890815][T14202] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2255'. [ 413.928661][T14199] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2256'. [ 413.958137][T14199] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2256'. [ 413.989725][T14206] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2259'. [ 413.999579][T14206] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2259'. [ 414.022947][T14204] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2257'. [ 414.052682][T14204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2257'. [ 414.074216][T14204] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2257'. [ 414.338083][T14225] tipc: Invalid UDP bearer configuration [ 414.338150][T14225] tipc: Enabling of bearer rejected, failed to enable media [ 414.787333][T14252] netlink: 'syz.3.2272': attribute type 1 has an invalid length. [ 415.147442][T14268] syzkaller0: entered promiscuous mode [ 415.162347][T14268] syzkaller0: entered allmulticast mode [ 415.470668][T14290] bond9: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 415.505056][T14290] bond9 (unregistering): Released all slaves [ 416.739733][T14378] mac80211_hwsim hwsim11 syzkaller0: Caught tx_queue_len zero misconfig [ 417.011605][T14405] wg2: Caught tx_queue_len zero misconfig [ 417.021499][T14407] xt_NFQUEUE: number of total queues is 0 [ 417.068866][T14396] sock: sock_set_timeout: `syz.0.2313' (pid 14396) tries to set negative timeout [ 417.470761][T14433] netlink: 'syz.4.2322': attribute type 1 has an invalid length. [ 417.867334][T14459] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 418.157027][T14479] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR [ 418.563546][T14505] ip6tnl0: Caught tx_queue_len zero misconfig [ 418.660117][T14514] netlink: 'syz.4.2344': attribute type 3 has an invalid length. [ 418.688593][T14514] __nla_validate_parse: 92 callbacks suppressed [ 418.688614][T14514] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2344'. [ 418.747001][T14515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2344'. [ 418.792973][T14515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2344'. [ 418.839797][T14519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.847211][T14515] vlan0: entered promiscuous mode [ 418.965733][T14524] netlink: 'syz.1.2347': attribute type 1 has an invalid length. [ 418.989913][T14524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2347'. [ 419.127604][T14539] veth0: entered promiscuous mode [ 419.447707][T14559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2358'. [ 419.472152][T14559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2358'. [ 419.546572][T14559] bond9: option xmit_hash_policy: invalid value (64) [ 419.574649][T14559] bond9 (unregistering): Released all slaves [ 419.676076][T14533] veth0: left promiscuous mode [ 419.811140][T14570] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2361'. [ 420.050964][T14590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2365'. [ 420.080268][T14595] netlink: 'syz.0.2367': attribute type 4 has an invalid length. [ 420.114731][T14596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2365'. [ 420.179431][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.213287][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.233302][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.260775][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.961991][T14645] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2382'. [ 421.039578][T14645] bond9 (unregistering): Released all slaves [ 421.250945][T14658] sctp: [Deprecated]: syz.1.2386 (pid 14658) Use of struct sctp_assoc_value in delayed_ack socket option. [ 421.250945][T14658] Use struct sctp_sack_info instead [ 421.781524][T14679] bond6: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 421.849016][T14688] netlink: 'syz.0.2398': attribute type 1 has an invalid length. [ 421.861576][T14679] bond6 (unregistering): Released all slaves [ 422.061405][T14688] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 422.083249][T14689] bridge5: entered promiscuous mode [ 422.114923][T14689] bridge5: entered allmulticast mode [ 422.589724][T14719] netlink: 'syz.2.2405': attribute type 4 has an invalid length. [ 422.641767][T14723] netlink: 'syz.2.2405': attribute type 4 has an invalid length. [ 422.766953][ T5824] C speed is unknown, defaulting to 1000 [ 422.766982][ T8489] C speed is unknown, defaulting to 1000 [ 422.990784][T14742] syzkaller1: entered promiscuous mode [ 422.997026][T14742] syzkaller1: entered allmulticast mode [ 423.152109][T14749] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 423.178152][T14748] veth0_to_team: Caught tx_queue_len zero misconfig [ 423.202074][T14748] veth0: entered promiscuous mode [ 423.229371][T14749] xt_hashlimit: size too large, truncated to 1048576 [ 423.438326][T14755] veth0: left promiscuous mode [ 423.661906][T14778] FAULT_INJECTION: forcing a failure. [ 423.661906][T14778] name failslab, interval 1, probability 0, space 0, times 1 [ 423.686784][T14749] xt_hashlimit: size too large, truncated to 1048576 [ 423.702507][T14778] CPU: 0 UID: 0 PID: 14778 Comm: syz.0.2422 Not tainted syzkaller #0 PREEMPT(full) [ 423.702537][T14778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 423.702550][T14778] Call Trace: [ 423.702558][T14778] [ 423.702567][T14778] dump_stack_lvl+0xe8/0x150 [ 423.702600][T14778] should_fail_ex+0x40c/0x560 [ 423.702636][T14778] should_failslab+0xa8/0x100 [ 423.702663][T14778] __kmalloc_noprof+0xfe/0x720 [ 423.702696][T14778] ? rcu_is_watching+0x15/0xb0 [ 423.702726][T14778] ? tomoyo_realpath_from_path+0xef/0x640 [ 423.702754][T14778] ? tomoyo_realpath_from_path+0xef/0x640 [ 423.702789][T14778] tomoyo_realpath_from_path+0xef/0x640 [ 423.702829][T14778] ? tomoyo_path_number_perm+0x219/0x5f0 [ 423.702853][T14778] tomoyo_path_number_perm+0x246/0x5f0 [ 423.702881][T14778] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 423.702905][T14778] ? __lock_acquire+0x683/0x2cf0 [ 423.702945][T14778] ? hook_file_ioctl+0x1f0/0x5f0 [ 423.702991][T14778] ? __fget_files+0x2a/0x420 [ 423.703016][T14778] ? __fget_files+0x2a/0x420 [ 423.703036][T14778] ? __fget_files+0x3a2/0x420 [ 423.703056][T14778] ? __fget_files+0x2a/0x420 [ 423.703082][T14778] security_file_ioctl+0xc3/0x2a0 [ 423.703108][T14778] __se_sys_ioctl+0x47/0x170 [ 423.703136][T14778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.703160][T14778] do_syscall_64+0x174/0x580 [ 423.703187][T14778] ? trace_irq_disable+0x3b/0x140 [ 423.703208][T14778] ? clear_bhb_loop+0x40/0x90 [ 423.703235][T14778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.703255][T14778] RIP: 0033:0x7f8bfe19ce59 [ 423.703276][T14778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.703294][T14778] RSP: 002b:00007f8bff03d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 423.703316][T14778] RAX: ffffffffffffffda RBX: 00007f8bfe415fa0 RCX: 00007f8bfe19ce59 [ 423.703332][T14778] RDX: 00002000000000c0 RSI: 0000000000008931 RDI: 0000000000000003 [ 423.703345][T14778] RBP: 00007f8bff03d090 R08: 0000000000000000 R09: 0000000000000000 [ 423.703357][T14778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.703369][T14778] R13: 00007f8bfe416038 R14: 00007f8bfe415fa0 R15: 00007ffce8e7c2f8 [ 423.703403][T14778] [ 423.756238][T14778] ERROR: Out of memory at tomoyo_realpath_from_path. [ 424.250799][T14803] netlink: 'syz.4.2430': attribute type 17 has an invalid length. [ 424.384544][T14811] netlink: 'syz.2.2431': attribute type 1 has an invalid length. [ 424.468822][T14818] netlink: 'syz.4.2433': attribute type 8 has an invalid length. [ 424.479507][T14809] syzkaller0: entered promiscuous mode [ 424.490832][T14809] syzkaller0: entered allmulticast mode [ 424.558947][T14811] 8021q: adding VLAN 0 to HW filter on device bond7 [ 424.628605][T14823] bond7: (slave geneve2): making interface the new active one [ 424.640286][T14823] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 424.744327][T14836] FAULT_INJECTION: forcing a failure. [ 424.744327][T14836] name failslab, interval 1, probability 0, space 0, times 0 [ 424.802647][T14836] CPU: 1 UID: 0 PID: 14836 Comm: syz.0.2438 Not tainted syzkaller #0 PREEMPT(full) [ 424.802679][T14836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 424.802691][T14836] Call Trace: [ 424.802701][T14836] [ 424.802718][T14836] dump_stack_lvl+0xe8/0x150 [ 424.802751][T14836] should_fail_ex+0x40c/0x560 [ 424.802787][T14836] should_failslab+0xa8/0x100 [ 424.802815][T14836] __kmalloc_noprof+0xfe/0x720 [ 424.802850][T14836] ? tomoyo_encode+0x2ad/0x570 [ 424.802877][T14836] ? tomoyo_encode+0x2ad/0x570 [ 424.802910][T14836] tomoyo_encode+0x2ad/0x570 [ 424.802944][T14836] tomoyo_realpath_from_path+0x5fa/0x640 [ 424.802983][T14836] ? tomoyo_path_number_perm+0x219/0x5f0 [ 424.803007][T14836] tomoyo_path_number_perm+0x246/0x5f0 [ 424.803034][T14836] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 424.803057][T14836] ? __lock_acquire+0x683/0x2cf0 [ 424.803095][T14836] ? hook_file_ioctl+0x1f0/0x5f0 [ 424.803139][T14836] ? __fget_files+0x2a/0x420 [ 424.803164][T14836] ? __fget_files+0x2a/0x420 [ 424.803184][T14836] ? __fget_files+0x3a2/0x420 [ 424.803204][T14836] ? __fget_files+0x2a/0x420 [ 424.803230][T14836] security_file_ioctl+0xc3/0x2a0 [ 424.803255][T14836] __se_sys_ioctl+0x47/0x170 [ 424.803283][T14836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.803312][T14836] do_syscall_64+0x174/0x580 [ 424.803332][T14836] ? trace_irq_disable+0x3b/0x140 [ 424.803353][T14836] ? clear_bhb_loop+0x40/0x90 [ 424.803378][T14836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.803399][T14836] RIP: 0033:0x7f8bfe19ce59 [ 424.803418][T14836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.803437][T14836] RSP: 002b:00007f8bff03d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 424.803461][T14836] RAX: ffffffffffffffda RBX: 00007f8bfe415fa0 RCX: 00007f8bfe19ce59 [ 424.803477][T14836] RDX: 00002000000000c0 RSI: 0000000000008931 RDI: 0000000000000003 [ 424.803490][T14836] RBP: 00007f8bff03d090 R08: 0000000000000000 R09: 0000000000000000 [ 424.803504][T14836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.803516][T14836] R13: 00007f8bfe416038 R14: 00007f8bfe415fa0 R15: 00007ffce8e7c2f8 [ 424.803550][T14836] [ 425.027434][T14836] ERROR: Out of memory at tomoyo_realpath_from_path. [ 425.179693][T14847] netlink: 'syz.2.2439': attribute type 1 has an invalid length. [ 425.198760][T14847] netlink: 'syz.2.2439': attribute type 4 has an invalid length. [ 425.224040][T14847] __nla_validate_parse: 7 callbacks suppressed [ 425.224060][T14847] netlink: 9422 bytes leftover after parsing attributes in process `syz.2.2439'. [ 425.453636][T14861] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 425.707579][T14870] netlink: 'syz.0.2448': attribute type 1 has an invalid length. [ 427.547130][T14861] veth0: entered promiscuous mode [ 427.557885][T14865] veth0: left promiscuous mode [ 427.580001][T14870] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 427.733408][T14885] IPVS: stopping backup sync thread 10647 ... [ 427.838115][T14890] FAULT_INJECTION: forcing a failure. [ 427.838115][T14890] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 427.864276][T14890] CPU: 1 UID: 0 PID: 14890 Comm: syz.4.2453 Not tainted syzkaller #0 PREEMPT(full) [ 427.864307][T14890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 427.864320][T14890] Call Trace: [ 427.864329][T14890] [ 427.864338][T14890] dump_stack_lvl+0xe8/0x150 [ 427.864370][T14890] should_fail_ex+0x40c/0x560 [ 427.864406][T14890] _copy_from_user+0x2d/0xb0 [ 427.864431][T14890] sock_do_ioctl+0x195/0x320 [ 427.864464][T14890] ? __pfx_sock_do_ioctl+0x10/0x10 [ 427.864490][T14890] ? hook_file_ioctl+0x1f0/0x5f0 [ 427.864531][T14890] sock_ioctl+0x57a/0x7e0 [ 427.864559][T14890] ? __pfx_sock_ioctl+0x10/0x10 [ 427.864587][T14890] ? __fget_files+0x2a/0x420 [ 427.864616][T14890] ? __fget_files+0x3a2/0x420 [ 427.864636][T14890] ? __fget_files+0x2a/0x420 [ 427.864661][T14890] ? bpf_lsm_file_ioctl+0x9/0x20 [ 427.864692][T14890] ? __pfx_sock_ioctl+0x10/0x10 [ 427.864719][T14890] __se_sys_ioctl+0xfc/0x170 [ 427.864746][T14890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.864771][T14890] do_syscall_64+0x174/0x580 [ 427.864791][T14890] ? trace_irq_disable+0x3b/0x140 [ 427.864811][T14890] ? clear_bhb_loop+0x40/0x90 [ 427.864838][T14890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.864860][T14890] RIP: 0033:0x7fb40379ce59 [ 427.864880][T14890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.864899][T14890] RSP: 002b:00007fb404653028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 427.864922][T14890] RAX: ffffffffffffffda RBX: 00007fb403a15fa0 RCX: 00007fb40379ce59 [ 427.864938][T14890] RDX: 00002000000000c0 RSI: 0000000000008931 RDI: 0000000000000003 [ 427.864952][T14890] RBP: 00007fb404653090 R08: 0000000000000000 R09: 0000000000000000 [ 427.864965][T14890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.864977][T14890] R13: 00007fb403a16038 R14: 00007fb403a15fa0 R15: 00007ffc56245b78 [ 427.865011][T14890] [ 428.083566][T14893] netlink: 'syz.3.2452': attribute type 1 has an invalid length. [ 428.091821][T14893] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2452'. [ 428.148760][T14901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2456'. [ 428.387615][T14899] syzkaller0: entered promiscuous mode [ 428.393315][T14899] syzkaller0: entered allmulticast mode [ 428.439456][T14915] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2459'. [ 428.623031][T14924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2463'. [ 428.647639][T14925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2462'. [ 428.673609][T14925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2462'. [ 429.093071][T14947] netlink: 'syz.1.2466': attribute type 1 has an invalid length. [ 429.108694][T14947] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2466'. [ 429.258940][T14953] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2467'. [ 431.043257][T14920] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 431.045288][T14921] syzkaller1: entered promiscuous mode [ 431.076908][T14921] syzkaller1: entered allmulticast mode [ 431.200906][T14960] openvswitch: netlink: IP tunnel dst address not specified [ 431.210158][T14958] netlink: 'syz.0.2468': attribute type 1 has an invalid length. [ 431.226080][T14958] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2468'. [ 431.471250][T14970] syzkaller1: entered promiscuous mode [ 431.477423][T14969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2474'. [ 431.486841][T14970] syzkaller1: entered allmulticast mode [ 431.494531][T14969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2474'. [ 431.612945][T14979] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2476'. [ 431.709931][T14983] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2477'. [ 431.742214][T14970] xt_CT: No such helper "snmp" [ 431.800322][T14989] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2477'. [ 431.813048][T14987] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2479'. [ 432.053554][T15005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2483'. [ 432.257155][T15005] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2483'. [ 432.300017][T15005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.342001][T15025] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2487'. [ 433.430031][T15086] bridge7: entered promiscuous mode [ 433.453936][T15086] bridge7: entered allmulticast mode [ 433.490664][T15094] ip6t_srh: unknown srh invflags 4000 [ 433.510707][T15094] netlink: 'syz.1.2503': attribute type 10 has an invalid length. [ 433.554685][T15094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.599650][T15094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.764298][T15211] dvmrp0: entered allmulticast mode [ 435.798394][T15212] bond7: entered allmulticast mode [ 435.817824][T15212] ip6gre3: entered allmulticast mode [ 435.900261][T15222] syzkaller0: entered promiscuous mode [ 435.917215][T15222] syzkaller0: entered allmulticast mode [ 436.040905][T15232] netlink: 'syz.0.2540': attribute type 1 has an invalid length. [ 436.051002][T15232] netlink: 'syz.0.2540': attribute type 4 has an invalid length. [ 436.066561][T15232] xt_ipcomp: unknown flags 1D [ 436.269989][T15237] __nla_validate_parse: 9 callbacks suppressed [ 436.270010][T15237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2542'. [ 437.059724][T15291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2555'. [ 437.077389][T15291] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2555'. [ 437.087272][T15291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2555'. [ 437.096634][T15291] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2555'. [ 437.106298][T15291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2555'. [ 437.115612][T15291] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2555'. [ 437.133031][T15291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2555'. [ 437.142871][T15291] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2555'. [ 437.176196][T15291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2555'. [ 437.264732][T15288] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 437.829426][ T30] audit: type=1800 audit(1782773944.989:12): pid=15324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2565" name="memory.events" dev="tmpfs" ino=2496 res=0 errno=0 [ 437.881806][ T30] audit: type=1804 audit(1782773945.009:13): pid=15324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2565" name="/newroot/486/memory.events" dev="tmpfs" ino=2496 res=1 errno=0 [ 437.931888][ T30] audit: type=1107 audit(1782773945.089:14): pid=15339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 437.969642][ T30] audit: type=1107 audit(1782773945.109:15): pid=15339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 438.344086][T15361] xt_hashlimit: overflow, rate too high: 0 [ 438.351091][T15362] netlink: 'syz.0.2574': attribute type 7 has an invalid length. [ 438.503142][T15376] netlink: 'syz.1.2577': attribute type 1 has an invalid length. [ 438.528442][T15374] syzkaller0: entered promiscuous mode [ 438.571072][T15374] syzkaller0: entered allmulticast mode [ 438.792704][T15389] netlink: 'syz.0.2580': attribute type 21 has an invalid length. [ 439.047646][T15409] macvlan4: entered promiscuous mode [ 439.053024][T15409] macvlan4: entered allmulticast mode [ 439.119833][T15408] netlink: 'syz.0.2586': attribute type 22 has an invalid length. [ 439.133982][T15408] netlink: 'syz.0.2586': attribute type 22 has an invalid length. [ 439.915114][T15456] netlink: 'syz.1.2600': attribute type 4 has an invalid length. [ 440.102450][T15471] sock: sock_timestamping_bind_phc: sock not bind to device [ 440.361505][T15491] netlink: 'syz.4.2608': attribute type 10 has an invalid length. [ 440.398225][T15491] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 440.834378][T15458] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 440.942821][T15523] netlink: 'syz.0.2621': attribute type 8 has an invalid length. [ 441.402394][T15550] __nla_validate_parse: 144 callbacks suppressed [ 441.402416][T15550] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2627'. [ 441.437712][T15547] C speed is unknown, defaulting to 1000 [ 441.438968][T15552] syz_tun: entered allmulticast mode [ 441.464957][T15547] xfrm0 speed is unknown, defaulting to 1000 [ 441.612159][T15562] Cannot find add_set index 2 as target [ 441.875175][T15577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2636'. [ 442.319848][T15603] netlink: 'syz.4.2641': attribute type 1 has an invalid length. [ 442.522454][T15587] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2637'. [ 442.623778][T15613] netlink: 'syz.3.2642': attribute type 11 has an invalid length. [ 442.660084][T15613] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2642'. [ 442.729915][T15615] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 442.931145][T15637] netlink: 'syz.1.2646': attribute type 1 has an invalid length. [ 443.009549][T15638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2646'. [ 443.039815][T15638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.144763][T15637] 8021q: adding VLAN 0 to HW filter on device bond10 [ 443.315414][T15655] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 443.404934][T15660] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2651'. [ 443.423310][T15661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2653'. [ 443.437467][T15660] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2651'. [ 443.593702][T15664] tipc: Enabling of bearer rejected, already enabled [ 443.604184][T15664] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 443.838347][T15684] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2658'. [ 444.341864][T15704] syzkaller0: entered promiscuous mode [ 444.363794][T15704] syzkaller0: entered allmulticast mode [ 444.387879][T15710] bond0: (slave bond_slave_1): Releasing backup interface [ 444.657206][T15724] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2669'. [ 444.704870][T15717] 8021q: adding VLAN 0 to HW filter on device bond11 [ 444.721373][T15730] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 3, id = 0 [ 445.103135][T15735] C speed is unknown, defaulting to 1000 [ 445.138421][T15735] xfrm0 speed is unknown, defaulting to 1000 [ 445.295936][T15757] 8021q: VLANs not supported on ipvlan0 [ 445.326444][T15757] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 446.682704][T15822] __nla_validate_parse: 5 callbacks suppressed [ 446.682728][T15822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2701'. [ 446.786100][T15827] xt_addrtype: ipv6 does not support BROADCAST matching [ 446.835144][T15828] digital: digital_start_poll: Unknown protocol [ 446.852175][T15830] xt_ecn: cannot match TCP bits for non-tcp packets [ 446.930369][T15832] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20002 [ 447.481951][T15855] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 448.303380][T15880] bond8: Unable to set peer notification delay as MII monitoring is disabled [ 448.327640][T15880] bond8 (unregistering): Released all slaves [ 448.393956][T15896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2723'. [ 448.529910][T15898] netlink: 'syz.4.2724': attribute type 7 has an invalid length. [ 448.547439][T15898] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2724'. [ 448.622226][T15901] geneve2: entered promiscuous mode [ 448.676094][T15903] syzkaller1: entered promiscuous mode [ 448.693215][T15903] syzkaller1: entered allmulticast mode [ 448.707706][T15901] syzkaller0: entered promiscuous mode [ 448.726258][T15901] syzkaller0: entered allmulticast mode [ 449.004303][T15922] netlink: 'syz.4.2724': attribute type 7 has an invalid length. [ 449.027333][T15922] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2724'. [ 449.329278][T15933] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 3, id = 0 [ 449.739284][T15951] syzkaller0: entered promiscuous mode [ 449.753218][T15951] syzkaller0: entered allmulticast mode [ 449.798105][T15955] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2738'. [ 450.113753][T15972] netlink: 'syz.4.2743': attribute type 4 has an invalid length. [ 450.164790][T15980] netlink: 'syz.4.2743': attribute type 4 has an invalid length. [ 450.365599][T15981] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.372964][T15981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.380662][T15981] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.387951][T15981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.499223][ T5734] xfrm0 speed is unknown, defaulting to 1000 [ 450.521142][ T5734] syz2: Port: 1 Link ACTIVE [ 450.636636][T15999] netlink: 'syz.3.2749': attribute type 7 has an invalid length. [ 450.704195][T15999] netlink: 'syz.3.2749': attribute type 7 has an invalid length. [ 450.712512][T13437] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.742613][T13437] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.762367][T13437] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.774663][T13437] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.883346][T16013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2752'. [ 450.922317][T16010] tipc: Enabling of bearer rejected, failed to enable media [ 450.935180][T16013] openvswitch: netlink: Flow actions attr not present in new flow. [ 451.044327][T16017] netlink: 'syz.3.2753': attribute type 4 has an invalid length. [ 451.139245][T16023] bridge0: port 3(gretap0) entered blocking state [ 451.165035][T16023] bridge0: port 3(gretap0) entered disabled state [ 451.183708][T16023] gretap0: entered allmulticast mode [ 451.204131][T16023] gretap0: entered promiscuous mode [ 451.470584][T16043] netlink: 'syz.4.2760': attribute type 1 has an invalid length. [ 451.493405][T16043] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2760'. [ 451.531972][T16043] netlink: 'syz.4.2760': attribute type 1 has an invalid length. [ 451.844131][T16064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2765'. [ 451.855051][T16064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2765'. [ 451.992439][T16067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2766'. [ 452.012985][T16069] netlink: 'syz.1.2767': attribute type 1 has an invalid length. [ 452.094247][T16069] 8021q: adding VLAN 0 to HW filter on device bond12 [ 452.123629][T16082] bond5: (slave veth0_to_bond): Releasing active interface [ 452.160978][T16082] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 452.181530][T16069] macvlan5: entered promiscuous mode [ 452.187052][T16069] macvlan5: entered allmulticast mode [ 452.193564][T16069] bond12: entered promiscuous mode [ 452.199553][T16069] veth0_to_bond: entered promiscuous mode [ 452.209993][T16069] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 452.256088][T16084] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2768'. [ 452.365161][T16069] bond12: left promiscuous mode [ 452.379925][T16069] veth0_to_bond: left promiscuous mode [ 452.516992][T16094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2774'. [ 453.671086][T16130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2785'. [ 453.691308][T16118] bond9 (unregistering): Released all slaves [ 454.323877][T16129] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 454.407366][T16129] bond6 (unregistering): Released all slaves [ 455.127724][T16173] netlink: 'syz.1.2795': attribute type 2 has an invalid length. [ 456.212169][T16173] : entered promiscuous mode [ 457.671075][T16156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2790'. [ 457.689855][T16156] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2790'. [ 457.705205][T16156] netlink: 'syz.3.2790': attribute type 5 has an invalid length. [ 458.251033][T16202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2801'. [ 459.242993][T16232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2807'. [ 459.377106][T16238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2808'. [ 459.425225][T16238] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2808'. [ 463.741410][T16262] xt_l2tp: missing protocol rule (udp|l2tpip) [ 464.777969][T16281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2821'. [ 464.873602][T16281] openvswitch: netlink: Missing key (keys=40, expected=80) [ 464.962292][T16284] netlink: 'syz.3.2822': attribute type 21 has an invalid length. [ 465.170246][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 465.203726][ T5633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 465.212346][T16292] syz.0.2824: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 465.242290][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 465.266386][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 465.327466][T16292] CPU: 1 UID: 0 PID: 16292 Comm: syz.0.2824 Not tainted syzkaller #0 PREEMPT(full) [ 465.327497][T16292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 465.327512][T16292] Call Trace: [ 465.327521][T16292] [ 465.327530][T16292] dump_stack_lvl+0xe8/0x150 [ 465.327565][T16292] warn_alloc+0x24c/0x270 [ 465.327603][T16292] ? stack_depot_save_flags+0x33/0x800 [ 465.327638][T16292] ? __pfx_warn_alloc+0x10/0x10 [ 465.327681][T16292] ? kasan_save_track+0x3e/0x80 [ 465.327701][T16292] ? __kasan_kmalloc+0x93/0xb0 [ 465.327725][T16292] ? xsk_setsockopt+0x52a/0x960 [ 465.327753][T16292] ? do_sock_setsockopt+0x17c/0x1b0 [ 465.327784][T16292] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 465.327807][T16292] ? do_syscall_64+0x174/0x580 [ 465.327827][T16292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.327861][T16292] __vmalloc_node_range_noprof+0x12c/0x1730 [ 465.327927][T16292] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 465.327966][T16292] ? __kasan_kmalloc+0x93/0xb0 [ 465.327991][T16292] ? __kmalloc_cache_noprof+0x32d/0x660 [ 465.328026][T16292] ? __kmalloc_cache_noprof+0x150/0x660 [ 465.328064][T16292] vmalloc_user_noprof+0xad/0xe0 [ 465.328099][T16292] ? xskq_create+0xbf/0x170 [ 465.328132][T16292] xskq_create+0xbf/0x170 [ 465.328168][T16292] xsk_init_queue+0x8a/0xe0 [ 465.328202][T16292] xsk_setsockopt+0x52a/0x960 [ 465.328232][T16292] ? __fget_files+0x2a/0x420 [ 465.328255][T16292] ? __pfx_xsk_setsockopt+0x10/0x10 [ 465.328286][T16292] ? __pfx_aa_sk_perm+0x10/0x10 [ 465.328316][T16292] ? aa_sock_opt_perm+0xff/0x1a0 [ 465.328347][T16292] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 465.328376][T16292] ? __pfx_xsk_setsockopt+0x10/0x10 [ 465.328408][T16292] do_sock_setsockopt+0x17c/0x1b0 [ 465.328437][T16292] __x64_sys_setsockopt+0x13d/0x1b0 [ 465.328464][T16292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.328489][T16292] do_syscall_64+0x174/0x580 [ 465.328509][T16292] ? trace_irq_disable+0x3b/0x140 [ 465.328531][T16292] ? clear_bhb_loop+0x40/0x90 [ 465.328559][T16292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.328582][T16292] RIP: 0033:0x7f8bfe19ce59 [ 465.328605][T16292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.328624][T16292] RSP: 002b:00007f8bff03d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 465.328648][T16292] RAX: ffffffffffffffda RBX: 00007f8bfe415fa0 RCX: 00007f8bfe19ce59 [ 465.328664][T16292] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 465.328677][T16292] RBP: 00007f8bfe232e6f R08: 0000000000000004 R09: 0000000000000000 [ 465.328690][T16292] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.328704][T16292] R13: 00007f8bfe416038 R14: 00007f8bfe415fa0 R15: 00007ffce8e7c2f8 [ 465.328740][T16292] [ 465.328780][T16292] Mem-Info: [ 465.651350][ T5633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 466.058586][T16292] active_anon:5815 inactive_anon:0 isolated_anon:0 [ 466.058586][T16292] active_file:0 inactive_file:43156 isolated_file:0 [ 466.058586][T16292] unevictable:768 dirty:38 writeback:0 [ 466.058586][T16292] slab_reclaimable:11124 slab_unreclaimable:117113 [ 466.058586][T16292] mapped:29246 shmem:1295 pagetables:1218 [ 466.058586][T16292] sec_pagetables:0 bounce:0 [ 466.058586][T16292] kernel_misc_reclaimable:0 [ 466.058586][T16292] free:1305800 free_pcp:11330 free_cma:0 [ 466.109779][T16292] Node 0 active_anon:23260kB inactive_anon:0kB active_file:0kB inactive_file:172428kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116984kB dirty:152kB writeback:0kB shmem:3644kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14504kB pagetables:4732kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 466.148608][T16292] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 466.227079][T16292] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 466.318609][T16292] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 466.324738][T16292] Node 0 DMA32 free:1264368kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23360kB inactive_anon:0kB active_file:0kB inactive_file:172428kB unevictable:1536kB writepending:152kB zspages:0kB present:3129332kB managed:2551440kB mlocked:0kB bounce:0kB free_pcp:46516kB local_pcp:31260kB free_cma:0kB [ 466.371881][T16292] lowmem_reserve[]: 0 0 0 0 0 [ 466.378874][T16292] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:624kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 466.413763][T16292] lowmem_reserve[]: 0 0 0 0 0 [ 466.422352][T16292] Node 1 Normal free:3942500kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 466.460680][T16292] lowmem_reserve[]: 0 0 0 0 0 [ 466.465526][T16292] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 466.482574][T16292] Node 0 DMA32: 368*4kB (ME) 526*8kB (UME) 293*16kB (UME) 1342*32kB (UME) 487*64kB (UME) 230*128kB (UME) 42*256kB (UM) 11*512kB (UME) 3*1024kB (UE) 0*2048kB 276*4096kB (UM) = 1263872kB [ 466.507408][T16292] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 466.519646][T16292] Node 1 Normal: 3*4kB (UM) 11*8kB (UM) 12*16kB (UM) 6*32kB (UM) 4*64kB (UM) 5*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 961*4096kB (UM) = 3942500kB [ 466.537825][T16292] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 466.548006][T16292] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 466.558125][T16292] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 466.569018][T16292] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 466.579947][T16292] 44449 total pagecache pages [ 466.584727][T16292] 0 pages in swap cache [ 466.591578][T16292] Free swap = 124996kB [ 466.596368][T16292] Total swap = 124996kB [ 466.600697][T16292] 2097051 pages RAM [ 466.604646][T16292] 0 pages HighMem/MovableOnly [ 466.609970][T16292] 427420 pages reserved [ 466.614203][T16292] 0 pages cma reserved [ 466.942086][T16291] C speed is unknown, defaulting to 1000 [ 466.952831][T16291] xfrm0 speed is unknown, defaulting to 1000 [ 467.774160][T16291] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.781809][T16291] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.791258][T16291] bridge_slave_0: entered allmulticast mode [ 467.802224][T16291] bridge_slave_0: entered promiscuous mode [ 467.814085][T16291] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.822382][T16291] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.830286][T16291] bridge_slave_1: entered allmulticast mode [ 467.839099][T16291] bridge_slave_1: entered promiscuous mode [ 467.892989][T16291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.905434][ T50] Bluetooth: hci5: command tx timeout [ 467.914137][T16291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.955606][T16291] team0: Port device team_slave_0 added [ 467.969185][T16291] team0: Port device team_slave_1 added [ 468.013782][T16291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.023300][T16291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.050167][T16291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.066932][T16291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.073979][T16291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.100959][T16291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.174883][T16291] hsr_slave_0: entered promiscuous mode [ 468.182361][T16291] hsr_slave_1: entered promiscuous mode [ 468.409591][T16291] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.420943][T16291] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 468.431292][T16291] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 468.514982][T16291] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.525292][T16291] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 468.536989][T16291] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 468.632872][T16291] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.643474][T16291] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 468.654171][T16291] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 468.744270][T16291] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.754319][T16291] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 468.764814][T16291] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 469.012661][T16291] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 469.053034][T16291] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 469.062139][T16291] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 469.079857][T16291] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 469.090099][T16291] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 469.109035][T16291] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 469.118128][T16291] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 469.131084][T16291] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 469.263601][T16291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.292194][T16291] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.308529][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.315786][ T3295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.349268][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.356522][ T3295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.991515][ T50] Bluetooth: hci5: command tx timeout [ 470.100433][T16291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.469740][T16291] veth0_vlan: entered promiscuous mode [ 470.491023][T16291] veth1_vlan: entered promiscuous mode [ 470.540861][T16291] veth0_macvtap: entered promiscuous mode [ 470.553113][T16291] veth1_macvtap: entered promiscuous mode [ 470.583574][T16291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.610391][T16291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.634479][T11283] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.653684][T11283] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.683088][T11283] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.715186][T11283] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.918879][ T3295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.941331][ T3295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.008240][ T3295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.023698][ T3295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.059836][ T50] Bluetooth: hci5: command tx timeout [ 474.136193][ T50] Bluetooth: hci5: command tx timeout [ 489.678878][T16361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2828'. [ 490.431009][T16370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2832'. [ 490.610140][ T5645] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 490.635078][ T5645] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 490.681747][ T5645] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 490.690074][ T5645] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 490.700973][ T5645] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 491.081210][T16389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2835'. [ 491.520004][T16393] bond13: option packets_per_slave: invalid value (18446744073709551615) [ 491.528839][T16393] bond13: option packets_per_slave: allowed values 0 - 65535 [ 491.706801][T16393] bond13 (unregistering): Released all slaves [ 491.833724][T16405] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2836'. [ 492.406367][T16420] syzkaller0: entered promiscuous mode [ 492.445302][T16420] syzkaller0: entered allmulticast mode [ 492.508726][T16415] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2839'. [ 492.666985][T16425] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2843'. [ 492.777255][ T50] Bluetooth: hci1: command tx timeout [ 493.018683][T16371] C speed is unknown, defaulting to 1000 [ 493.046584][T16371] xfrm0 speed is unknown, defaulting to 1000 [ 493.263735][T16436] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2845'. [ 493.534063][T16441] netlink: 'syz.2.2847': attribute type 1 has an invalid length. [ 493.616959][T16441] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 494.069420][T16426] x_tables: duplicate underflow at hook 3 [ 494.760304][T16464] netlink: 'syz.3.2853': attribute type 1 has an invalid length. [ 494.855904][ T50] Bluetooth: hci1: command tx timeout [ 495.229821][T16464] 8021q: adding VLAN 0 to HW filter on device bond19 [ 495.253460][T16476] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.2855'. [ 495.277750][T16476] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.2855'. [ 495.312327][T16479] IPv6: NLM_F_CREATE should be specified when creating new route [ 496.407361][T16498] C speed is unknown, defaulting to 1000 [ 496.493290][T16498] xfrm0 speed is unknown, defaulting to 1000 [ 496.807041][T16516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2866'. [ 496.936008][ T50] Bluetooth: hci1: command tx timeout [ 497.255570][T16535] hsr0: entered promiscuous mode [ 497.608018][T16371] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.643116][T16371] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.669454][T16371] bridge_slave_0: entered allmulticast mode [ 497.697378][T16371] bridge_slave_0: entered promiscuous mode [ 497.727245][T16371] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.757375][T16371] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.780811][T16371] bridge_slave_1: entered allmulticast mode [ 497.807890][T16371] bridge_slave_1: entered promiscuous mode [ 498.019055][T16371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.072893][T16371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.232708][T16544] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2872'. [ 498.280707][T16544] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 498.334735][T16371] team0: Port device team_slave_0 added [ 498.401841][T16371] team0: Port device team_slave_1 added [ 498.467908][T16547] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2873'. [ 498.512930][T16548] netlink: 'syz.3.2874': attribute type 3 has an invalid length. [ 498.553415][T16548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2874'. [ 498.579893][T16371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.597492][T16371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.688515][T16371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.731042][T16549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2874'. [ 498.775305][T16371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.807668][T16371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.854477][T16371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.891070][T16548] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2874'. [ 498.974363][T16556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 499.017977][ T50] Bluetooth: hci1: command tx timeout [ 499.142485][T16371] hsr_slave_0: entered promiscuous mode [ 499.167432][T16371] hsr_slave_1: entered promiscuous mode [ 499.183596][T16371] debugfs: 'hsr0' already exists in 'hsr' [ 499.198421][T16371] Cannot create hsr debugfs directory [ 499.261994][T16560] bond0: (slave bond16): Error -95 calling ndo_bpf [ 499.529022][T16569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2880'. [ 499.563749][T16565] SET target dimension over the limit! [ 499.572260][T16569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2880'. [ 500.998124][T16596] netlink: 'syz.3.2887': attribute type 10 has an invalid length. [ 501.066872][T16596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 501.129389][T16596] bond0: (slave netdevsim1): Enslaving as an active interface with a down link [ 501.144088][T16598] netlink: 'syz.4.2888': attribute type 1 has an invalid length. [ 501.187535][T16600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2889'. [ 501.679232][T16609] netlink: 'syz.4.2892': attribute type 7 has an invalid length. [ 501.740774][T16612] netlink: 'syz.4.2892': attribute type 1 has an invalid length. [ 501.787509][T16608] syzkaller0: entered promiscuous mode [ 501.811862][T16608] syzkaller0: entered allmulticast mode [ 501.978500][ T1338] wlan0: Trigger new scan to find an IBSS to join [ 502.356883][T16371] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.407664][T16371] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.457507][T16623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2895'. [ 502.871607][T16626] pimreg: entered allmulticast mode [ 503.163644][T16371] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.221793][T16371] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.811481][T16639] syzkaller0: entered promiscuous mode [ 503.843341][T16655] netlink: 'syz.1.2900': attribute type 4 has an invalid length. [ 503.860705][T16639] syzkaller0: entered allmulticast mode [ 503.913823][T16655] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2900'. [ 503.961787][T16658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2901'. [ 504.018237][T16371] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.075204][T16371] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.946665][ T3295] wlan0: Trigger new scan to find an IBSS to join [ 504.967947][T16679] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2905'. [ 505.000012][T16679] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2905'. [ 507.990462][ T3295] wlan0: Trigger new scan to find an IBSS to join [ 508.959040][T11283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.074285][T16658] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 510.093505][T16658] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2901'. [ 510.448436][T16691] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2908'. [ 510.739394][T16371] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.751760][T16371] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.022718][T16707] netlink: 'syz.4.2911': attribute type 4 has an invalid length. [ 511.542097][T16722] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 512.220854][T16734] sch_fq: defrate 0 ignored. [ 512.528997][T16748] netlink: 'syz.3.2921': attribute type 11 has an invalid length. [ 513.031956][T16371] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 513.074878][T16371] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 513.115465][T16371] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 513.186776][T16371] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 513.240643][T16371] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 513.421733][T16371] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 513.471129][T16371] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 513.586299][T16371] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 513.923578][T16782] tipc: Failed to remove unknown binding: 66,0,0/0:573757686/573757687 [ 513.973774][T16782] tipc: Failed to remove unknown binding: 66,0,0/0:573757686/573757687 [ 514.238479][T16371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.315898][T16794] x_tables: duplicate underflow at hook 2 [ 514.514959][T16371] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.674080][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.681448][ T3295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.820464][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.827852][ T3295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.479988][T16813] syzkaller0: entered promiscuous mode [ 515.550912][T16813] syzkaller0: entered allmulticast mode [ 515.699130][T16819] netlink: 'syz.1.2938': attribute type 1 has an invalid length. [ 515.893430][T16819] bond13: entered promiscuous mode [ 515.900230][T16819] 8021q: adding VLAN 0 to HW filter on device bond13 [ 515.935281][T16826] netlink: 'syz.2.2939': attribute type 1 has an invalid length. [ 515.944690][T16826] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2939'. [ 515.955346][T16826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2939'. [ 516.071837][T16824] 8021q: adding VLAN 0 to HW filter on device bond13 [ 516.125177][T16824] bond13: (slave vti0): The slave device specified does not support setting the MAC address [ 516.163564][T16824] bond13: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 516.272081][T16824] bond13: (slave vti0): making interface the new active one [ 516.320378][T16824] vti0: entered promiscuous mode [ 516.335269][T16824] bond13: (slave vti0): Enslaving as an active interface with an up link [ 516.822493][T16855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2944'. [ 516.862617][T16856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2944'. [ 517.049135][T16860] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 517.355798][T16868] netlink: 'syz.1.2947': attribute type 8 has an invalid length. [ 517.746798][T16879] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2950'. [ 517.845502][T16879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2950'. [ 518.021703][T16889] netlink: 'syz.1.2953': attribute type 8 has an invalid length. [ 518.279014][T16889] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 518.628169][T16895] syzkaller1: entered promiscuous mode [ 518.649045][T16895] syzkaller1: entered allmulticast mode [ 518.923309][T16907] netlink: 1196 bytes leftover after parsing attributes in process `syz.1.2958'. [ 519.365151][T16371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.792448][T16929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2963'. [ 520.132743][T16928] tipc: Enabled bearer , priority 0 [ 520.151567][T16931] syzkaller0: entered promiscuous mode [ 520.162759][T16931] syzkaller0: entered allmulticast mode [ 520.180742][T16935] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 520.329287][T16948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2967'. [ 520.341700][T16941] tipc: Resetting bearer [ 520.479594][T16926] tipc: Resetting bearer [ 520.596446][T16926] tipc: Disabling bearer [ 521.053481][T16371] veth0_vlan: entered promiscuous mode [ 521.172323][T16371] veth1_vlan: entered promiscuous mode [ 521.703027][T16985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2976'. [ 521.770888][T16371] veth0_macvtap: entered promiscuous mode [ 521.833736][T16371] veth1_macvtap: entered promiscuous mode [ 522.128629][T16371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.162299][T16993] veth0_to_bridge: entered promiscuous mode [ 522.238771][T16993] netlink: 312 bytes leftover after parsing attributes in process `syz.1.2978'. [ 522.252256][T16371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.278232][T11283] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.301044][T11283] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.368807][ T3295] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.422149][ T3295] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.604755][T16993] veth0_to_bridge: left promiscuous mode [ 523.005286][T17007] atomic_op ffff8880536b3198 conn xmit_atomic 0000000000000000 [ 523.121474][T11283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.178754][T11283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.112138][T17043] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2987'. [ 524.803616][T17051] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2989'. [ 525.410130][T17059] tipc: Started in network mode [ 525.439240][T17059] tipc: Node identity 4a6ab1745a08, cluster identity 4711 [ 525.493868][T17059] tipc: Enabled bearer , priority 0 [ 525.568361][T17062] syzkaller0: entered promiscuous mode [ 525.624446][T17062] syzkaller0: entered allmulticast mode [ 525.698266][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.722031][T17053] tipc: Resetting bearer [ 525.754663][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.821139][T17050] tipc: Resetting bearer [ 525.932206][T17050] tipc: Disabling bearer [ 526.469379][T17095] bridge8: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 526.574564][T17101] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2998'. [ 527.014794][T17110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3000'. [ 527.113755][T17113] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3000'. [ 527.470855][T17119] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3003'. [ 527.517564][T17110] 8021q: adding VLAN 0 to HW filter on device bond8 [ 528.073563][T17141] netlink: 'syz.3.3010': attribute type 7 has an invalid length. [ 528.134730][T17141] netlink: 'syz.3.3010': attribute type 11 has an invalid length. [ 528.143694][T17139] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3008'. [ 528.177507][T17141] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3010'. [ 528.316125][T17150] netlink: 'syz.3.3010': attribute type 10 has an invalid length. [ 528.382187][T17144] bond1: (slave ip_vti0): Device is not bonding slave [ 528.429487][T17144] bond1: option active_slave: invalid value (ip_vti0) [ 528.513677][T17144] bond1 (unregistering): Released all slaves [ 528.754430][T17150] bond0: (slave ): Enslaving as an active interface with an up link [ 528.839772][T17162] tunl0: Caught tx_queue_len zero misconfig [ 529.968091][T17197] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 530.186115][T17200] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3022'. [ 530.252870][T17200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3022'. [ 530.401946][T17200] bridge0: port 3(macsec1) entered blocking state [ 530.442156][T17200] bridge0: port 3(macsec1) entered disabled state [ 530.457663][T17211] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3025'. [ 530.471569][T17200] macsec1: entered allmulticast mode [ 530.496380][T17200] macsec1: left allmulticast mode [ 531.210556][T17240] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3029'. [ 531.359714][T17242] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 531.790897][T17250] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3034'. [ 531.845353][T17250] ip6tnl2: entered promiscuous mode [ 531.880987][T17250] ip6tnl2: entered allmulticast mode [ 532.261748][T17258] netlink: 'syz.2.3037': attribute type 10 has an invalid length. [ 532.312898][T17258] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3037'. [ 532.338053][T17263] netlink: 'syz.1.3039': attribute type 1 has an invalid length. [ 532.374372][T17258] team0: entered allmulticast mode [ 532.403507][T17258] team_slave_0: entered allmulticast mode [ 532.440990][T17258] team_slave_1: entered allmulticast mode [ 532.522332][T17258] bond0: (slave team0): Releasing backup interface [ 532.543160][ T5645] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 532.581380][ T5645] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 532.614357][ T5645] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 532.625756][T17258] bridge0: port 3(team0) entered blocking state [ 532.646133][T17258] bridge0: port 3(team0) entered disabled state [ 532.675416][ T5645] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 532.684071][ T5645] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 532.807780][T17258] team0: entered promiscuous mode [ 532.829505][T17258] team_slave_0: entered promiscuous mode [ 532.843095][T17258] team_slave_1: entered promiscuous mode [ 532.981869][T17263] 8021q: adding VLAN 0 to HW filter on device bond14 [ 533.023534][T17267] tipc: Enabled bearer , priority 10 [ 533.169091][ T5629] syz_tun (unregistering): left allmulticast mode [ 533.253057][ T5629] syz_tun (unregistering): left promiscuous mode [ 533.493581][T17283] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3043'. [ 533.945538][T17304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3047'. [ 534.047507][ T3284] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.105329][ T3284] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.419705][ T11] tipc: Node number set to 274903412 [ 534.806131][ T5645] Bluetooth: hci3: command tx timeout [ 534.891594][ T3284] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.974187][ T3284] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.313736][ T11] IPVS: starting estimator thread 0... [ 535.321373][T17326] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 535.431658][T17326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3051'. [ 535.466430][T17337] IPVS: using max 27 ests per chain, 64800 per kthread [ 535.653184][ T3284] bond0: (slave netdevsim1): Releasing backup interface [ 535.973621][ T3284] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.988002][ T3284] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.370288][ T3284] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.437827][ T3284] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.623866][T17368] netlink: 'syz.0.3061': attribute type 1 has an invalid length. [ 536.860310][ T5645] Bluetooth: hci3: command tx timeout [ 537.555399][T17265] C speed is unknown, defaulting to 1000 [ 537.564126][T17265] xfrm0 speed is unknown, defaulting to 1000 [ 538.936895][ T5645] Bluetooth: hci3: command tx timeout [ 539.459197][T17394] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3067'. [ 539.581829][ T5645] Bluetooth: hci4: command 0x0406 tx timeout [ 541.000011][T17418] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3073'. [ 541.036738][ T50] Bluetooth: hci3: command tx timeout [ 541.274936][ T36] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 542.674661][T17426] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 543.175769][ T3284] pim6reg: left allmulticast mode [ 543.282749][T17432] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3076'. [ 544.165555][T17447] sctp: [Deprecated]: syz.4.3081 (pid 17447) Use of int in maxseg socket option. [ 544.165555][T17447] Use struct sctp_assoc_value instead [ 545.248240][T17459] netlink: 'syz.2.3082': attribute type 1 has an invalid length. [ 545.308419][T17462] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3082'. [ 545.329427][T17463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3084'. [ 545.375007][T17463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3084'. [ 545.625205][ T3284] erspan0 (unregistering): left promiscuous mode [ 545.967783][ T3284] bond4 (unregistering): (slave gretap1): Releasing active interface [ 546.101256][ T3284] bond13 (unregistering): (slave geneve3): Releasing active interface [ 546.250471][ T3284] bond7 (unregistering): (slave bridge2): Releasing backup interface [ 546.265988][ T3284] bridge2 (unregistering): left promiscuous mode [ 546.483866][ T3284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 546.513119][ T3284] bond0 (unregistering): (slave bond2): Releasing backup interface [ 546.541639][ T3284] bond0 (unregistering): (slave bond16): Releasing backup interface [ 546.576909][ T3284] bond0 (unregistering): (slave ): Releasing backup interface [ 546.601480][ T3284] bond0 (unregistering): Released all slaves [ 546.621361][ T3284] bond1 (unregistering): Released all slaves [ 546.648015][ T3284] bond2 (unregistering): Released all slaves [ 546.673946][ T3284] bond3 (unregistering): Released all slaves [ 546.702985][ T3284] bond4 (unregistering): Released all slaves [ 546.727611][ T3284] bond5 (unregistering): Released all slaves [ 546.754910][ T3284] bond6 (unregistering): Released all slaves [ 546.781084][ T3284] bond7 (unregistering): Released all slaves [ 546.807064][ T3284] bond8 (unregistering): Released all slaves [ 546.833200][ T3284] bond9 (unregistering): Released all slaves [ 546.865079][ T3284] bond10 (unregistering): Released all slaves [ 546.952332][ T3284] bond11 (unregistering): Released all slaves [ 546.975153][ T3284] bond12 (unregistering): Released all slaves [ 547.033562][ T3284] bond13 (unregistering): Released all slaves [ 547.061337][ T3284] bond14 (unregistering): Released all slaves [ 547.084251][ T3284] bond15 (unregistering): Released all slaves [ 547.111058][ T3284] bond16 (unregistering): Released all slaves [ 547.138128][ T3284] bond17 (unregistering): Released all slaves [ 547.164641][ T3284] bond18 (unregistering): Released all slaves [ 547.189283][ T3284] bond19 (unregistering): Released all slaves [ 552.592269][T17483] netlink: 'syz.0.3092': attribute type 10 has an invalid length. [ 552.701594][T17485] netlink: 'syz.0.3092': attribute type 10 has an invalid length. [ 552.768876][T17483] team0: Port device dummy0 added [ 552.800156][ T3284] tipc: Left network mode [ 552.876954][T17487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3093'. [ 553.015382][T17485] team0: Port device dummy0 removed [ 553.422767][ T3284] IPVS: stopping backup sync thread 11059 ... [ 556.112855][T17561] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3110'. [ 556.976244][T17575] veth0: Caught tx_queue_len zero misconfig [ 557.364798][T17585] syzkaller0: entered promiscuous mode [ 557.381744][T17585] syzkaller0: entered allmulticast mode [ 557.421421][ T5291] 8021q: adding VLAN 0 to HW filter on device eth1 [ 557.502291][T17596] netlink: 'syz.4.3116': attribute type 1 has an invalid length. [ 557.563500][T17596] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3116'. [ 557.667838][T17598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3116'. [ 557.730675][T17596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3116'. [ 557.802832][T17265] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.836898][T17265] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.872556][T17265] bridge_slave_0: entered allmulticast mode [ 558.003297][T17265] bridge_slave_0: entered promiscuous mode [ 558.423627][T17598] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3116'. [ 558.778624][T17265] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.865091][T17265] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.950484][T17265] bridge_slave_1: entered allmulticast mode [ 559.067307][T17265] bridge_slave_1: entered promiscuous mode [ 560.834021][T17631] syzkaller0: entered promiscuous mode [ 561.079426][T17631] syzkaller0: entered allmulticast mode [ 561.532201][T17636] netlink: 'syz.2.3123': attribute type 1 has an invalid length. [ 561.732056][T17265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.551284][ T3284] hsr_slave_0: left promiscuous mode [ 562.604232][ T3284] hsr_slave_1: left promiscuous mode [ 567.929076][T17265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.352373][ T5291] 8021q: adding VLAN 0 to HW filter on device eth2 [ 568.762407][T17265] team0: Port device team_slave_0 added [ 569.302377][T17265] team0: Port device team_slave_1 added [ 570.151588][T17708] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 570.198753][T17707] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 570.222374][T17265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.300560][T17265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.499172][T17265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.540027][T17712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3134'. [ 570.634406][T17712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3134'. [ 570.680252][T17265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.736150][T17265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.839046][T17265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.868469][T17712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3134'. [ 570.880437][T17712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3134'. [ 571.729637][ T3284] IPVS: stop unused estimator thread 0... [ 572.164844][T17265] hsr_slave_0: entered promiscuous mode [ 572.214783][T17265] hsr_slave_1: entered promiscuous mode [ 572.270177][T17265] debugfs: 'hsr0' already exists in 'hsr' [ 572.311648][T17265] Cannot create hsr debugfs directory [ 573.044045][T17746] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3143'. [ 573.271610][ T1342] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 573.541191][T17753] syzkaller0: entered promiscuous mode [ 573.579796][T17753] syzkaller0: entered allmulticast mode [ 574.495265][T17774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3149'. [ 575.603796][T17792] C speed is unknown, defaulting to 1000 [ 575.643163][T17792] xfrm0 speed is unknown, defaulting to 1000 [ 576.106912][T17817] Bluetooth: MGMT ver 1.23 [ 576.220546][T17812] tipc: Enabled bearer , priority 0 [ 576.656010][T17813] syzkaller0: entered promiscuous mode [ 576.677610][T17813] syzkaller0: entered allmulticast mode [ 576.697202][T17813] tipc: Resetting bearer [ 577.269044][T11283] tipc: Resetting bearer [ 577.307546][T17807] tipc: Resetting bearer [ 583.399807][T17807] tipc: Disabling bearer [ 583.464504][T17822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3157'. [ 584.043125][T17833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3158'. [ 585.435112][T17865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3162'. [ 585.493614][T17864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3162'. [ 585.551773][T17864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3162'. [ 585.824699][T17868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3164'. [ 586.103437][T17878] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 586.222379][T17872] bond15: entered promiscuous mode [ 586.234597][T17872] bond15: entered allmulticast mode [ 586.893034][T17265] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 587.035110][T17265] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 587.085425][T17265] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 587.233893][T17265] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 587.399376][T17265] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 587.418042][T17900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3171'. [ 587.534991][T17265] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 588.775062][T17935] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3178'. [ 589.761760][T17265] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 589.784910][T17265] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 590.699568][ T5645] Bluetooth: hci5: command 0x0406 tx timeout [ 590.973173][ T5645] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 590.994902][ T5645] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 591.008862][ T5645] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 591.025268][ T5645] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 591.038176][ T5645] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 591.226182][T17972] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 591.456201][T17265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.709764][T17265] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.835067][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.842342][ T3295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.689486][T18001] gtp0: entered promiscuous mode [ 592.746449][T18004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3190'. [ 592.833005][T18001] gtp0: entered allmulticast mode [ 593.097240][ T5645] Bluetooth: hci2: command tx timeout [ 593.173200][T18001] C: Caught tx_queue_len zero misconfig [ 593.228036][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 593.242717][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 593.254660][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 593.272787][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 593.281365][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 594.194616][T18026] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3192'. [ 594.564754][T17967] C speed is unknown, defaulting to 1000 [ 594.641742][T17967] xfrm0 speed is unknown, defaulting to 1000 [ 595.024656][T18047] IPv6: NLM_F_CREATE should be specified when creating new route [ 595.077212][T18047] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3197'. [ 595.176186][ T5645] Bluetooth: hci2: command tx timeout [ 595.285914][T18046] C speed is unknown, defaulting to 1000 [ 595.329739][T18046] xfrm0 speed is unknown, defaulting to 1000 [ 595.416870][ T5645] Bluetooth: hci6: command tx timeout [ 595.813892][T18014] C speed is unknown, defaulting to 1000 [ 595.866843][T18014] xfrm0 speed is unknown, defaulting to 1000 [ 597.255875][ T5645] Bluetooth: hci2: command tx timeout [ 597.496808][ T5645] Bluetooth: hci6: command tx timeout [ 598.357043][T18083] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 598.572450][T18087] tipc: Enabled bearer , priority 0 [ 598.656005][T17967] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.674357][T17967] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.689427][T17967] bridge_slave_0: entered allmulticast mode [ 598.700127][T17967] bridge_slave_0: entered promiscuous mode [ 598.721815][T18084] tipc: Resetting bearer [ 598.729683][T17967] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.743868][T17967] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.751755][T17967] bridge_slave_1: entered allmulticast mode [ 598.760512][T17967] bridge_slave_1: entered promiscuous mode [ 599.335810][ T5645] Bluetooth: hci2: command tx timeout [ 599.575774][ T5645] Bluetooth: hci6: command tx timeout [ 600.987464][T18079] tipc: Disabling bearer [ 601.234906][T17967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.353668][T17967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.655963][ T5645] Bluetooth: hci6: command tx timeout [ 601.892550][T18109] netlink: 198788 bytes leftover after parsing attributes in process `syz.1.3208'. [ 601.922770][T18109] netlink: 'syz.1.3208': attribute type 2 has an invalid length. [ 602.020268][T17967] team0: Port device team_slave_0 added [ 602.086379][T17967] team0: Port device team_slave_1 added [ 602.241074][T18106] syzkaller0: entered promiscuous mode [ 602.263806][T18106] syzkaller0: entered allmulticast mode [ 602.392148][T18115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3210'. [ 605.257863][T11283] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 606.492455][T17967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 606.499946][T17967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.526753][T17967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.620578][T17967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.627871][T17967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.654716][T17967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.842317][T18124] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.3211'. [ 606.871933][T18124] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.3211'. [ 606.999577][T17967] hsr_slave_0: entered promiscuous mode [ 607.031476][T17967] hsr_slave_1: entered promiscuous mode [ 607.064380][T17967] debugfs: 'hsr0' already exists in 'hsr' [ 607.094798][T17967] Cannot create hsr debugfs directory [ 607.163995][T18131] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3213'. [ 608.679045][ T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.819120][ T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.013515][T18014] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.144512][T18014] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.253490][T18014] bridge_slave_0: entered allmulticast mode [ 610.390437][T18014] bridge_slave_0: entered promiscuous mode [ 610.863170][T18014] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.881555][T18014] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.900247][T18014] bridge_slave_1: entered allmulticast mode [ 610.924622][T18014] bridge_slave_1: entered promiscuous mode [ 616.590806][ T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.760604][T18240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3232'. [ 616.838427][T18014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.924655][T18014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.126377][T18257] netlink: 576 bytes leftover after parsing attributes in process `syz.2.3233'. [ 617.216630][ T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.586054][T18268] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3237'. [ 617.645140][T18270] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3237'. [ 617.838454][T11278] smbdirect: ib_dev[syz2] removed [ 618.000760][T18014] team0: Port device team_slave_0 added [ 618.019181][ T5631] xfrm0 speed is unknown, defaulting to 1000 [ 618.028067][ T5631] infiniband syz2: ib_query_port failed (-19) [ 618.259362][T18014] team0: Port device team_slave_1 added [ 618.488791][T18014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 618.497886][T18014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.530034][T18014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 618.576835][T18014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 618.584252][T18014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.611356][T18014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 618.721533][T17967] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 618.753923][T17967] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 618.784888][T17967] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 618.830163][T17967] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 618.901795][T17967] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 618.938828][T17967] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 618.957791][T17967] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 618.997096][T17967] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 619.080657][T18014] hsr_slave_0: entered promiscuous mode [ 619.100930][T18014] hsr_slave_1: entered promiscuous mode [ 619.116442][T18014] debugfs: 'hsr0' already exists in 'hsr' [ 619.137579][T18014] Cannot create hsr debugfs directory [ 619.338683][ T61] bridge_slave_1: left allmulticast mode [ 619.348302][ T61] bridge_slave_1: left promiscuous mode [ 619.365458][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.418709][ T61] bridge_slave_0: left allmulticast mode [ 619.436954][ T61] bridge_slave_0: left promiscuous mode [ 619.446311][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.158801][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 620.189027][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.219789][ T61] bond0 (unregistering): Released all slaves [ 620.270640][ T5291] 8021q: adding VLAN 0 to HW filter on device eth1 [ 621.800711][ T5291] 8021q: adding VLAN 0 to HW filter on device eth2 [ 621.871357][T17967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.936359][T17967] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.023518][T13437] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.030820][T13437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.079006][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.086262][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.619181][ T61] hsr_slave_0: left promiscuous mode [ 622.660702][ T61] hsr_slave_1: left promiscuous mode [ 622.677360][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 622.690345][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 622.714278][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 622.728560][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 622.764737][ T61] veth1_macvtap: left promiscuous mode [ 622.782962][ T61] veth0_macvtap: left promiscuous mode [ 622.829296][ T61] veth1_vlan: left promiscuous mode [ 622.861989][ T61] veth0_vlan: left promiscuous mode [ 623.649346][ T61] team0 (unregistering): Port device team_slave_1 removed [ 623.680732][ T61] team0 (unregistering): Port device team_slave_0 removed [ 623.858734][ T5291] 8021q: adding VLAN 0 to HW filter on device eth3 [ 625.517518][ T5291] 8021q: adding VLAN 0 to HW filter on device eth4 [ 626.399923][T18014] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 626.466661][T18014] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 626.486981][T18014] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 626.513962][T18014] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 626.572366][T18014] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 626.634351][T18014] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 626.665302][T17967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.699985][T18014] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 626.828052][T18014] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 627.160912][T18014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 627.229834][T18014] 8021q: adding VLAN 0 to HW filter on device team0 [ 627.265425][ T8895] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.272689][ T8895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.319329][ T8895] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.326593][ T8895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.489202][T17967] veth0_vlan: entered promiscuous mode [ 627.547770][T17967] veth1_vlan: entered promiscuous mode [ 627.653765][T17967] veth0_macvtap: entered promiscuous mode [ 627.692819][T17967] veth1_macvtap: entered promiscuous mode [ 627.755303][T17967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.804628][T17967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 627.871340][ T145] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.895081][ T145] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.936938][ T145] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.956606][ T145] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.283557][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.349904][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.453106][ T8895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.472105][ T8895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.772938][T18014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 628.828273][T18386] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3179'. [ 628.927407][T18014] veth0_vlan: entered promiscuous mode [ 628.953226][T18387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.001109][T18386] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3179'. [ 629.062542][T18387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.103770][T18386] ip6gre0: entered promiscuous mode [ 629.116534][T18386] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3179'. [ 629.137423][T18014] veth1_vlan: entered promiscuous mode [ 629.199835][T18014] veth0_macvtap: entered promiscuous mode [ 629.229288][T18014] veth1_macvtap: entered promiscuous mode [ 629.269843][T18014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 629.288798][T18014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 629.310826][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.335069][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.238349][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.273931][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.806176][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.831628][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.967491][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.991409][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.866187][T18398] erspan0: entered promiscuous mode [ 636.157531][ T61] IPVS: stop unused estimator thread 0... [ 636.385086][T13437] bridge_slave_1: left allmulticast mode [ 636.401824][T13437] bridge_slave_1: left promiscuous mode [ 636.416695][T13437] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.451705][T13437] bridge_slave_0: left allmulticast mode [ 636.460457][T13437] bridge_slave_0: left promiscuous mode [ 636.477681][T13437] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.283733][T15675] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 637.492471][T13437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 637.564268][T13437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 637.592949][T13437] bond0 (unregistering): Released all slaves [ 640.337986][T13437] hsr_slave_0: left promiscuous mode [ 640.353491][T13437] hsr_slave_1: left promiscuous mode [ 640.359997][T13437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 640.378349][T13437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 640.731202][T13437] team0 (unregistering): Port device team_slave_1 removed [ 640.775415][T13437] team0 (unregistering): Port device team_slave_0 removed [ 643.402146][T18470] netlink: 'syz.5.3240': attribute type 4 has an invalid length. [ 643.874272][T18482] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 3, id = 0 [ 644.028860][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 644.045782][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 644.063081][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 644.087507][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 644.095467][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 645.083600][T18501] ip6gre0: Master is either lo or non-ether device [ 646.216559][ T50] Bluetooth: hci1: command tx timeout [ 646.496237][T18483] C speed is unknown, defaulting to 1000 [ 646.618884][T18523] netlink: 'syz.4.3254': attribute type 12 has an invalid length. [ 646.706650][T18523] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3254'. [ 647.197532][T18534] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 648.296037][ T50] Bluetooth: hci1: command tx timeout [ 648.412567][T18544] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3259'. [ 648.974255][T18563] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3265'. [ 649.030171][T18565] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3265'. [ 649.441177][T18574] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3269'. [ 649.718633][T18577] syzkaller0: entered promiscuous mode [ 649.734684][T18577] syzkaller0: entered allmulticast mode [ 650.376220][ T50] Bluetooth: hci1: command tx timeout [ 650.710702][T18483] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.728516][T18483] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.813656][T18483] bridge_slave_0: entered allmulticast mode [ 650.841773][T18483] bridge_slave_0: entered promiscuous mode [ 651.086337][T18483] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.114836][T18483] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.151541][T18483] bridge_slave_1: entered allmulticast mode [ 651.190599][T18483] bridge_slave_1: entered promiscuous mode [ 651.232153][T18606] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3277'. [ 651.513703][T18607] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3277'. [ 651.544267][T18483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.580306][T18611] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3278'. [ 651.613133][T18483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.704181][T18607] vlan2: entered allmulticast mode [ 651.732419][T18607] gretap0: entered allmulticast mode [ 652.085395][T18483] team0: Port device team_slave_0 added [ 652.120323][T18483] team0: Port device team_slave_1 added [ 652.456167][ T50] Bluetooth: hci1: command tx timeout [ 652.490517][T18483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 652.506064][T18483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 652.567022][T18483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 652.612414][T18483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 652.627194][T18483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 652.657538][T18483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 652.834727][T18631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3282'. [ 652.845857][T18483] hsr_slave_0: entered promiscuous mode [ 652.853250][T18483] hsr_slave_1: entered promiscuous mode [ 652.862604][T18631] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3282'. [ 652.874066][T18483] debugfs: 'hsr0' already exists in 'hsr' [ 652.882067][T18483] Cannot create hsr debugfs directory [ 653.519437][T18636] smbdirect: ib_dev[syú2] renamed to [syz2] [ 653.589585][T18638] netlink: 'syz.2.3284': attribute type 1 has an invalid length. [ 653.773991][T18638] 8021q: adding VLAN 0 to HW filter on device bond9 [ 653.972469][T18602] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 654.010389][T18483] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.155231][T18660] syzkaller0: entered promiscuous mode [ 655.190093][T18660] syzkaller0: entered allmulticast mode [ 655.397244][T18672] netlink: 'syz.5.3290': attribute type 17 has an invalid length. [ 655.405427][T18672] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3290'. [ 655.415124][T18672] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3290'. [ 655.432815][T18483] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.591678][T18672] gretap0: entered promiscuous mode [ 655.640296][T18672] gretap0: left promiscuous mode [ 655.800469][T18483] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.868070][T18678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3292'. [ 656.057843][T18683] tipc: Invalid UDP bearer configuration [ 656.057902][T18683] tipc: Enabling of bearer rejected, failed to enable media [ 656.218728][T18483] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 656.251465][T18687] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3295'. [ 656.643899][T18693] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3297'. [ 656.922285][T18704] xt_CT: You must specify a L4 protocol and not use inversions on it [ 657.288721][T18709] syzkaller0: entered promiscuous mode [ 657.294441][T18709] syzkaller0: entered allmulticast mode [ 657.562941][T18716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3304'. [ 657.573292][T18716] netlink: 'syz.2.3304': attribute type 29 has an invalid length. [ 657.581833][T18716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3304'. [ 658.373299][T18483] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 658.481493][T18483] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 658.556975][T18483] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 658.652202][T18483] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 658.670151][T18735] Bluetooth: MGMT ver 1.23 [ 658.698414][T18735] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 658.721410][T18483] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 658.794247][T18483] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 658.872463][T18742] pimreg3: entered allmulticast mode [ 658.897954][T18483] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 659.008763][T18483] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 659.204369][ T5645] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 659.220125][ T5645] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 659.234682][ T5645] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 659.246052][ T5645] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 659.256747][ T5645] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 659.517809][T18762] netlink: 'syz.4.3313': attribute type 1 has an invalid length. [ 659.797020][T18771] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3313'. [ 659.894242][T18764] bond3 (unregistering): Released all slaves [ 660.317373][T18767] bond3: (slave gretap1): making interface the new active one [ 660.331615][T18767] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 660.346528][T18771] 8021q: adding VLAN 0 to HW filter on device bond3 [ 660.635088][T18483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.813164][T18483] 8021q: adding VLAN 0 to HW filter on device team0 [ 660.900003][T18787] syzkaller0: entered promiscuous mode [ 660.927812][T18787] syzkaller0: entered allmulticast mode [ 660.982245][ T1338] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.989544][ T1338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.334995][ T1338] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.342251][ T1338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 661.352344][ T5645] Bluetooth: hci0: command tx timeout [ 661.815438][T18807] lo speed is unknown, defaulting to 1000 [ 661.855346][T18807] lo speed is unknown, defaulting to 1000 [ 661.917776][T18807] lo speed is unknown, defaulting to 1000 [ 662.018598][T18747] C speed is unknown, defaulting to 1000 [ 662.030287][T18809] ±ÿª¨úrBº“: renamed from lo [ 663.344010][T18821] sctp: [Deprecated]: syz.5.3324 (pid 18821) Use of int in max_burst socket option deprecated. [ 663.344010][T18821] Use struct sctp_assoc_value instead [ 663.360566][T18807] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 663.417490][ T5645] Bluetooth: hci0: command tx timeout [ 663.444993][T18807] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 663.473121][T18821] sctp: [Deprecated]: syz.5.3324 (pid 18821) Use of int in max_burst socket option deprecated. [ 663.473121][T18821] Use struct sctp_assoc_value instead [ 663.551056][T18807] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 663.568921][T18821] sctp: [Deprecated]: syz.5.3324 (pid 18821) Use of int in max_burst socket option deprecated. [ 663.568921][T18821] Use struct sctp_assoc_value instead [ 663.620727][T18483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.671683][T18821] sctp: [Deprecated]: syz.5.3324 (pid 18821) Use of int in max_burst socket option deprecated. [ 663.671683][T18821] Use struct sctp_assoc_value instead [ 663.740051][T18807] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 663.777394][T18821] sctp: [Deprecated]: syz.5.3324 (pid 18821) Use of int in max_burst socket option deprecated. [ 663.777394][T18821] Use struct sctp_assoc_value instead [ 663.837472][T18828] team_slave_1: Caught tx_queue_len zero misconfig [ 663.864194][T18821] sctp: [Deprecated]: syz.5.3324 (pid 18821) Use of int in max_burst socket option deprecated. [ 663.864194][T18821] Use struct sctp_assoc_value instead [ 663.897164][T18828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3325'. [ 663.957120][T18807] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 663.973516][T18821] sctp: [Deprecated]: syz.5.3324 (pid 18821) Use of int in max_burst socket option deprecated. [ 663.973516][T18821] Use struct sctp_assoc_value instead [ 664.015045][T18807] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 664.066956][T18821] sctp: [Deprecated]: syz.5.3324 (pid 18821) Use of int in max_burst socket option deprecated. [ 664.066956][T18821] Use struct sctp_assoc_value instead [ 664.101683][T18807] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 664.168127][T18807] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 664.231559][T18807] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 664.292125][T18483] veth0_vlan: entered promiscuous mode [ 664.317385][T18807] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 664.431538][T18807] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 664.468547][T18483] veth1_vlan: entered promiscuous mode [ 664.524056][T18807] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 664.589129][T18807] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 664.604615][T18837] 8021q: VLANs not supported on ip_vti0 [ 664.851984][T18483] veth0_macvtap: entered promiscuous mode [ 664.974445][T18483] veth1_macvtap: entered promiscuous mode [ 665.104497][T18840] netlink: 'syz.5.3328': attribute type 4 has an invalid length. [ 665.300478][T18844] syzkaller0: entered promiscuous mode [ 665.313395][T18844] syzkaller0: entered allmulticast mode [ 665.342614][T18851] netlink: 'syz.4.3331': attribute type 23 has an invalid length. [ 665.427886][T18853] veth5: entered allmulticast mode [ 665.496637][ T5645] Bluetooth: hci0: command tx timeout [ 666.093236][T18483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 666.642127][T18863] syzkaller0: entered promiscuous mode [ 666.670314][T18883] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3334'. [ 666.680872][T18863] syzkaller0: entered allmulticast mode [ 666.720086][T18883] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3334'. [ 667.575867][ T5645] Bluetooth: hci0: command tx timeout [ 669.258916][ T61] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 673.043631][T18747] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.054799][T18747] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.063145][T18747] bridge_slave_0: entered allmulticast mode [ 673.071801][T18747] bridge_slave_0: entered promiscuous mode [ 673.113887][T18483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 673.137714][T18747] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.161874][T18747] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.194399][T18747] bridge_slave_1: entered allmulticast mode [ 673.231498][T18747] bridge_slave_1: entered promiscuous mode [ 673.566749][ T1338] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.605033][ T1338] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.670391][T18747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.714236][T18747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.806986][ T1338] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.885112][ T1338] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.051154][T18747] team0: Port device team_slave_0 added [ 674.095099][T18747] team0: Port device team_slave_1 added [ 674.191407][T18909] netlink: 'syz.4.3341': attribute type 1 has an invalid length. [ 674.276686][T18912] netlink: 'syz.2.3340': attribute type 2 has an invalid length. [ 674.500769][T18909] bond4: entered promiscuous mode [ 674.513991][T18909] 8021q: adding VLAN 0 to HW filter on device bond4 [ 674.543499][T18747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 674.561054][T18747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 674.604890][T18747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 674.651050][T18912] : entered promiscuous mode [ 674.678255][T18747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 674.685510][T18747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 674.717303][T18747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 675.010960][T18747] hsr_slave_0: entered promiscuous mode [ 675.027475][T18747] hsr_slave_1: entered promiscuous mode [ 675.034383][T18747] debugfs: 'hsr0' already exists in 'hsr' [ 675.043114][T18747] Cannot create hsr debugfs directory [ 675.104122][T18921] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3342'. [ 675.557213][T18923] syzkaller0: entered promiscuous mode [ 675.564949][T18923] syzkaller0: entered allmulticast mode [ 676.342673][T18890] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 676.370798][T18747] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 676.508084][T18747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 676.572920][T18747] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 676.733698][T18747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 676.813440][T18747] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 676.973735][T18747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 677.014110][T18747] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 677.086128][T18945] netlink: 'syz.4.3346': attribute type 2 has an invalid length. [ 677.152132][T18945] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3346'. [ 677.182613][T18747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 677.421659][T11276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.479568][T11276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.780750][T18947] C speed is unknown, defaulting to 1000 [ 677.807183][T11276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.860282][T11276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.233187][T18958] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 678.452364][T18747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.727713][T18747] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.989430][ T1338] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.996708][ T1338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.285100][ T1338] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.292442][ T1338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.360011][T18974] syzkaller0: entered promiscuous mode [ 679.385480][T18974] syzkaller0: entered allmulticast mode [ 680.257563][T19000] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3358'. [ 681.051821][T19013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3361'. [ 681.455415][T18947] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 682.050834][T18747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 683.181767][T19042] netlink: 'syz.4.3365': attribute type 12 has an invalid length. [ 683.245497][T19042] netlink: 'syz.4.3365': attribute type 29 has an invalid length. [ 683.341377][T19042] netlink: 'syz.4.3365': attribute type 2 has an invalid length. [ 683.423763][T19042] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3365'. [ 684.255347][T18747] veth0_vlan: entered promiscuous mode [ 684.354687][T18747] veth1_vlan: entered promiscuous mode [ 684.595120][T18747] veth0_macvtap: entered promiscuous mode [ 684.737797][T18747] veth1_macvtap: entered promiscuous mode [ 684.882623][T18747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 685.096292][T18747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 685.480611][ T48] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.530389][T19084] sctp: [Deprecated]: syz.1.3370 (pid 19084) Use of int in max_burst socket option. [ 685.530389][T19084] Use struct sctp_assoc_value instead [ 685.655339][ T48] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.793801][ T48] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.845513][ T48] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.939943][T19095] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3371'. [ 686.637594][T19111] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3375'. [ 686.738602][T19115] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3374'. [ 687.132587][T19118] tipc: Started in network mode [ 687.157792][T19118] tipc: Node identity e613ec3fd657, cluster identity 4711 [ 687.212913][T19118] tipc: Enabled bearer , priority 0 [ 687.257450][T19109] syzkaller0: entered promiscuous mode [ 687.269838][T19124] openvswitch: netlink: Message has 8 unknown bytes. [ 687.298973][T19109] syzkaller0: entered allmulticast mode [ 687.579853][T19137] netlink: 'syz.4.3379': attribute type 1 has an invalid length. [ 688.196640][T11283] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.282769][T19109] tipc: Resetting bearer [ 688.331280][T19107] tipc: Resetting bearer [ 688.514698][T19107] tipc: Disabling bearer [ 688.621448][T19137] 8021q: adding VLAN 0 to HW filter on device bond5 [ 688.646605][T19140] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 688.670420][T19142] macvlan2: entered promiscuous mode [ 688.676145][T19142] macvlan2: entered allmulticast mode [ 688.682865][T19142] bond5: entered promiscuous mode [ 688.688937][T19142] veth0_to_bond: entered promiscuous mode [ 688.701717][T19142] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 688.730017][T19142] bond5: left promiscuous mode [ 688.735094][T19142] veth0_to_bond: left promiscuous mode [ 689.152589][T19161] netlink: 'syz.5.3384': attribute type 4 has an invalid length. [ 689.264342][ T5734] tipc: Node number set to 809823295 [ 689.636172][T11283] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.660458][T11283] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.849325][T15675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.930176][T15675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.424152][T19205] x_tables: duplicate underflow at hook 3 [ 691.562247][T11283] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.913990][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.963270][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.738928][T19234] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3402'. [ 693.154376][T19221] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3400'. [ 693.269731][T19226] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 694.408333][T11283] bridge_slave_1: left allmulticast mode [ 694.468971][T11283] bridge_slave_1: left promiscuous mode [ 694.520737][T11283] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.721073][T11283] bridge_slave_0: left allmulticast mode [ 694.798064][T11283] bridge_slave_0: left promiscuous mode [ 694.855436][T11283] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.109187][T19282] xt_ipcomp: unknown flags 1D [ 695.593728][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 695.621039][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 695.633705][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 695.648265][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 695.660500][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 696.229829][T11283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 696.261607][T11283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 696.309406][T11283] bond0 (unregistering): Released all slaves [ 697.757814][ T5645] Bluetooth: hci3: command tx timeout [ 698.298308][T19324] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3416'. [ 698.481108][T19324] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd [ 698.675415][ T5631] IPVS: starting estimator thread 0... [ 698.861286][T19342] IPVS: using max 25 ests per chain, 60000 per kthread [ 698.961601][T11283] IPVS: stopping backup sync thread 18482 ... [ 699.423224][T19356] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3423'. [ 699.583315][ T5291] 8021q: adding VLAN 0 to HW filter on device eth5 [ 699.816138][ T5645] Bluetooth: hci3: command tx timeout [ 699.871379][T19285] C speed is unknown, defaulting to 1000 [ 700.723348][T19391] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3430'. [ 700.742907][T19391] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 700.750294][T19391] IPv6: NLM_F_CREATE should be set when creating new route [ 700.757638][T19391] IPv6: NLM_F_CREATE should be set when creating new route [ 700.774740][T19394] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3431'. [ 701.266973][T11278] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 701.694024][T19406] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3433'. [ 701.898152][ T5645] Bluetooth: hci3: command tx timeout [ 702.169553][T19418] xt_nat: multiple ranges no longer supported [ 702.334246][T19428] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3436'. [ 702.353307][T19421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3437'. [ 702.364972][T19426] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3438'. [ 703.900266][T19447] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.976706][ T5645] Bluetooth: hci3: command tx timeout [ 704.283297][T19458] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3444'. [ 704.628206][T19465] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3446'. [ 704.795502][T19285] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 705.413676][ T5291] 8021q: adding VLAN 0 to HW filter on device eth6 [ 708.642791][T19496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3454'. [ 709.642149][T19496] macsec1: entered promiscuous mode [ 709.714006][T19496] bridge0: entered promiscuous mode [ 709.770825][T19496] macsec1: entered allmulticast mode [ 709.827817][T19496] bridge0: entered allmulticast mode [ 709.952991][T19496] bridge0: port 3(macsec1) entered blocking state [ 710.022820][T19496] bridge0: port 3(macsec1) entered disabled state [ 710.944940][T19496] bridge0: left allmulticast mode [ 712.701880][ T9] bridge0: left promiscuous mode [ 712.819101][T11283] hsr_slave_0: left promiscuous mode [ 712.881162][T11283] hsr_slave_1: left promiscuous mode [ 712.917963][T11283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 712.983666][T11283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.291477][T11283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 713.370605][T11283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.657620][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 714.306941][T11283] veth1_macvtap: left promiscuous mode [ 714.368312][T11283] veth0_macvtap: left promiscuous mode [ 714.453021][T11283] veth1_vlan: left promiscuous mode [ 714.532126][T11283] veth0_vlan: left promiscuous mode [ 715.598501][T11283] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000012: 0000 [#1] SMP KASAN PTI [ 715.610467][T11283] KASAN: null-ptr-deref in range [0x0000000000000090-0x0000000000000097] [ 715.618960][T11283] CPU: 0 UID: 0 PID: 11283 Comm: kworker/u8:21 Not tainted syzkaller #0 PREEMPT(full) [ 715.628635][T11283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 715.638726][T11283] Workqueue: netns cleanup_net [ 715.643537][T11283] RIP: 0010:__fib6_drop_pcpu_from+0x1f0/0x3b0 [ 715.649764][T11283] Code: 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ef e8 07 f4 cf f7 49 8b 6d 00 48 85 ed 74 2f 48 81 c5 90 00 00 00 48 89 e8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 ef e8 e1 f3 cf f7 48 8b 45 00 48 3b 44 [ 715.669418][T11283] RSP: 0018:ffffc9000336ed10 EFLAGS: 00010206 [ 715.675536][T11283] RAX: 0000000000000012 RBX: ffffffff8e2a27d8 RCX: ffff888028859f00 [ 715.683540][T11283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 715.691558][T11283] RBP: 0000000000000091 R08: ffffffff8a640dc6 R09: 0000000000000000 [ 715.699586][T11283] R10: 0000000000000000 R11: ffffffff8e959c20 R12: 0000000000000001 [ 715.707610][T11283] R13: ffffe8ffffdd0220 R14: dffffc0000000000 R15: ffff88807faeb120 [ 715.715626][T11283] FS: 0000000000000000(0000) GS:ffff888125226000(0000) knlGS:0000000000000000 [ 715.724799][T11283] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 715.731427][T11283] CR2: 000000110c2c4cdb CR3: 000000005ed42000 CR4: 00000000003526f0 [ 715.739458][T11283] Call Trace: [ 715.742773][T11283] [ 715.745738][T11283] ? __fib6_drop_pcpu_from+0x56/0x3b0 [ 715.751173][T11283] fib6_purge_rt+0x104/0x8f0 [ 715.755820][T11283] fib6_del+0xf44/0x15f0 [ 715.760107][T11283] ? fib6_del+0x6a1/0x15f0 [ 715.764567][T11283] ? ktime_expiry_to_cycles+0x4e/0x1e0 [ 715.770080][T11283] ? __pfx_fib6_del+0x10/0x10 [ 715.774803][T11283] ? clockevents_program_event+0x1a6/0x630 [ 715.780645][T11283] ? __hrtimer_rearm_deferred+0x99/0x420 [ 715.786375][T11283] ? fib6_ifdown+0x2c2/0x4c0 [ 715.791017][T11283] fib6_clean_node+0x295/0x580 [ 715.795827][T11283] ? irqentry_exit+0x218/0x8f0 [ 715.800639][T11283] ? __pfx_fib6_clean_node+0x10/0x10 [ 715.805983][T11283] fib6_walk_continue+0x688/0x8e0 [ 715.811057][T11283] __fib6_clean_all+0x34c/0x580 [ 715.815951][T11283] ? __fib6_clean_all+0xac/0x580 [ 715.820928][T11283] ? __pfx_fib6_ifdown+0x10/0x10 [ 715.825907][T11283] ? __pfx___fib6_clean_all+0x10/0x10 [ 715.831344][T11283] ? __pfx_fib6_clean_node+0x10/0x10 [ 715.836678][T11283] ? __pfx_fib6_ifdown+0x10/0x10 [ 715.841662][T11283] ? __mutex_trylock_common+0x15f/0x270 [ 715.847251][T11283] rt6_disable_ip+0x128/0x740 [ 715.852061][T11283] ? rcu_is_watching+0x15/0xb0 [ 715.856858][T11283] ? trace_contention_end+0x3d/0x140 [ 715.862181][T11283] ? __pfx_rt6_disable_ip+0x10/0x10 [ 715.867426][T11283] addrconf_ifdown+0x155/0x1a30 [ 715.872310][T11283] ? __mutex_unlock_slowpath+0x731/0x900 [ 715.877994][T11283] ? net_generic+0x1e/0x240 [ 715.882531][T11283] ? __pfx_addrconf_ifdown+0x10/0x10 [ 715.887854][T11283] ? net_generic+0x1e/0x240 [ 715.892480][T11283] addrconf_notify+0x1bc/0x1050 [ 715.897467][T11283] notifier_call_chain+0x1a5/0x3d0 [ 715.902820][T11283] netif_close_many+0x2ab/0x410 [ 715.907717][T11283] ? __pfx_netif_close_many+0x10/0x10 [ 715.913569][T11283] unregister_netdevice_many_notify+0xb76/0x2150 [ 715.919951][T11283] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 715.926761][T11283] ? unregister_netdevice_queue+0x17d/0x340 [ 715.932720][T11283] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 715.939050][T11283] ? batadv_meshif_destroy_vlan+0x16f/0x210 [ 715.945010][T11283] default_device_exit_batch+0x961/0x9e0 [ 715.950703][T11283] ? __pfx_default_device_exit_batch+0x10/0x10 [ 715.956912][T11283] ? __pfx_default_device_exit_batch+0x10/0x10 [ 715.963120][T11283] ops_undo_list+0x4b4/0x8d0 [ 715.967748][T11283] ? __pfx_ops_undo_list+0x10/0x10 [ 715.972909][T11283] ? idr_destroy+0x218/0x290 [ 715.977549][T11283] ? do_raw_spin_unlock+0xf5/0x210 [ 715.982798][T11283] cleanup_net+0x572/0x810 [ 715.987248][T11283] ? __pfx_cleanup_net+0x10/0x10 [ 715.992233][T11283] ? rcu_is_watching+0x15/0xb0 [ 715.997037][T11283] ? process_scheduled_works+0xa20/0x14e0 [ 716.002796][T11283] process_scheduled_works+0xa8e/0x14e0 [ 716.008491][T11283] ? __pfx_process_scheduled_works+0x10/0x10 [ 716.014553][T11283] ? assign_work+0x3cf/0x5d0 [ 716.019187][T11283] worker_thread+0xa47/0xfb0 [ 716.023832][T11283] ? __kthread_parkme+0x71/0x1f0 [ 716.028822][T11283] kthread+0x388/0x470 [ 716.032930][T11283] ? __pfx_worker_thread+0x10/0x10 [ 716.038109][T11283] ? __pfx_kthread+0x10/0x10 [ 716.042735][T11283] ret_from_fork+0x514/0xb70 [ 716.047362][T11283] ? __pfx_ret_from_fork+0x10/0x10 [ 716.052511][T11283] ? __switch_to+0xc89/0x1420 [ 716.057230][T11283] ? __pfx_kthread+0x10/0x10 [ 716.061863][T11283] ret_from_fork_asm+0x1a/0x30 [ 716.066671][T11283] [ 716.069732][T11283] Modules linked in: [ 716.106050][T11283] ---[ end trace 0000000000000000 ]--- [ 716.111575][T11283] RIP: 0010:__fib6_drop_pcpu_from+0x1f0/0x3b0 [ 716.117738][T11283] Code: 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ef e8 07 f4 cf f7 49 8b 6d 00 48 85 ed 74 2f 48 81 c5 90 00 00 00 48 89 e8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 ef e8 e1 f3 cf f7 48 8b 45 00 48 3b 44 [ 716.137386][T11283] RSP: 0018:ffffc9000336ed10 EFLAGS: 00010206 [ 716.146068][T11283] RAX: 0000000000000012 RBX: ffffffff8e2a27d8 RCX: ffff888028859f00 [ 716.154090][T11283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 716.162092][T11283] RBP: 0000000000000091 R08: ffffffff8a640dc6 R09: 0000000000000000 [ 716.170110][T11283] R10: 0000000000000000 R11: ffffffff8e959c20 R12: 0000000000000001 [ 716.178144][T11283] R13: ffffe8ffffdd0220 R14: dffffc0000000000 R15: ffff88807faeb120 [ 716.188859][T11283] FS: 0000000000000000(0000) GS:ffff888125226000(0000) knlGS:0000000000000000 [ 716.197837][T11283] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 716.204457][T11283] CR2: 000000110c2c4cdb CR3: 000000005ed42000 CR4: 00000000003526f0 [ 716.212496][T11283] Kernel panic - not syncing: Fatal exception in interrupt [ 716.220338][T11283] Kernel Offset: disabled [ 716.224789][T11283] Rebooting in 86400 seconds..