last executing test programs: 5m50.176088364s ago: executing program 3 (id=2897): syz_emit_ethernet(0x7a, &(0x7f0000000300)={@broadcast, @dev, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cea", 0x40, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@hopopts={0x0, 0x4, '\x00', [@hao={0xc9, 0x10, @private1}, @hao={0xc9, 0x10, @private1}]}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x100}}}}}}}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r1, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x10, 0x84, 0xffffff44}], 0x10}}], 0x2, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x200400c4}, 0x20000005) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100), r0) 5m50.00286953s ago: executing program 3 (id=2901): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x3, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x8084}, 0x10) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x18, r1, 0x1, 0x0, 0xffffffff, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) (async) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x18, r1, 0x1, 0x0, 0xffffffff, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 5m49.654980792s ago: executing program 3 (id=2905): r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000000c0)=0x80) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r2, 0x235, 0x70bd28, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x4}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x8010) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x9, 0x3}]}}}]}, 0x3c}}, 0x0) 5m49.276941918s ago: executing program 3 (id=2911): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3264}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x13}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r2, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000004c0)="b9fe030768045c8c989a14f088a865f986dd", 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000440)={{r1, &(0x7f0000000000)='syzkaller\x00', 0x82000, &(0x7f0000000180)={@align=0x3, {0x426, 0x1000, 0x0, 0x2d0}}, 0xfffffff9, &(0x7f0000000280), &(0x7f00000002c0)=0x6}, {[0x96, 0xffffffff, 0xc, 0x4e972da2]}, 0x2, 0x84, &(0x7f0000000300)=""/132}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) recvfrom$packet(r3, &(0x7f0000000640)=""/190, 0xbe, 0x40, &(0x7f00000007c0)={0x11, 0xf4, r4, 0x1, 0xf, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 5m48.884901362s ago: executing program 3 (id=2916): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x50}}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xa6}]}}]}, 0x3c}}, 0x44080) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r5, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 5m48.75651862s ago: executing program 3 (id=2920): syz_emit_ethernet(0x79, &(0x7f00000004c0)={@link_local, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x6b, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0, 0xfffd]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x3]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "57a197f243aa2abb5f831e11b1"}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}}}}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8000f27, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYRES16=r0], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2, r5}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendto$packet(r6, &(0x7f00000000c0)="ea3d8100", 0x4, 0xb01, &(0x7f0000000080)={0x11, 0x8100, r7}, 0x14) sendmsg$nl_route(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@bridge_newvlan={0x24, 0x70, 0x800, 0x70bd2c, 0x25dfdbfc, {0x7, 0x0, 0x0, r7}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x1e, 0x1}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048814}, 0x4000004) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) syz_emit_ethernet(0x79, &(0x7f00000004c0)={@link_local, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x6b, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0, 0xfffd]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x3]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "57a197f243aa2abb5f831e11b1"}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}}}}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) pipe(&(0x7f0000000200)) (async) splice(r2, 0x0, r4, 0x0, 0x8000f27, 0x0) (async) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYRES16=r0], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2, r5}, 0x94) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000280)) (async) sendto$packet(r6, &(0x7f00000000c0)="ea3d8100", 0x4, 0xb01, &(0x7f0000000080)={0x11, 0x8100, r7}, 0x14) (async) sendmsg$nl_route(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@bridge_newvlan={0x24, 0x70, 0x800, 0x70bd2c, 0x25dfdbfc, {0x7, 0x0, 0x0, r7}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x1e, 0x1}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048814}, 0x4000004) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async) 5m33.697999751s ago: executing program 32 (id=2920): syz_emit_ethernet(0x79, &(0x7f00000004c0)={@link_local, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x6b, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0, 0xfffd]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x3]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "57a197f243aa2abb5f831e11b1"}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}}}}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8000f27, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYRES16=r0], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2, r5}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendto$packet(r6, &(0x7f00000000c0)="ea3d8100", 0x4, 0xb01, &(0x7f0000000080)={0x11, 0x8100, r7}, 0x14) sendmsg$nl_route(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@bridge_newvlan={0x24, 0x70, 0x800, 0x70bd2c, 0x25dfdbfc, {0x7, 0x0, 0x0, r7}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x1e, 0x1}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048814}, 0x4000004) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) syz_emit_ethernet(0x79, &(0x7f00000004c0)={@link_local, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x6b, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0, 0xfffd]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x3]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "57a197f243aa2abb5f831e11b1"}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}}}}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) pipe(&(0x7f0000000200)) (async) splice(r2, 0x0, r4, 0x0, 0x8000f27, 0x0) (async) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYRES16=r0], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2, r5}, 0x94) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000280)) (async) sendto$packet(r6, &(0x7f00000000c0)="ea3d8100", 0x4, 0xb01, &(0x7f0000000080)={0x11, 0x8100, r7}, 0x14) (async) sendmsg$nl_route(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@bridge_newvlan={0x24, 0x70, 0x800, 0x70bd2c, 0x25dfdbfc, {0x7, 0x0, 0x0, r7}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x1e, 0x1}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048814}, 0x4000004) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async) 2m34.332349747s ago: executing program 5 (id=5242): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x15) (async) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) connect$inet6(r2, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000300), 0xfdb3) (async) setsockopt$inet6_tcp_int(r2, 0x11a, 0x3, 0x0, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYRESOCT=r3], 0x7c}, 0x1, 0x0, 0x0, 0x240008d4}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000ffdaef862b", 0x48}], 0x1) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x8090}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xc}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$unix(0x1, 0x1, 0x0) (async) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff8a0a43cdec590806000108"], 0x0) (async) sendto$packet(r12, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x80) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=@newqdisc={0x74, 0x28, 0x100, 0x5005, 0xfffffdfb, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x44, 0x2, [@TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x3}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0xf}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x1b}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6d83}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x6}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x2}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0x16, &(0x7f0000000f40)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0x10}, 0x94) 2m34.155504514s ago: executing program 5 (id=5244): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a00010000000000000000000a8000000000000000000000080001"], 0x24}}, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pread64(r1, 0x0, 0x0, 0x7) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x50, r5, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c081}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 2m33.872806009s ago: executing program 5 (id=5250): r0 = socket$unix(0x1, 0x1, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000340)={0x9c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'pim6reg1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1ff, @remote, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}]}]}, 0x9c}}, 0x4048814) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002380)={'hsr0\x00', 0x0}) (async) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000000)="28080000000000000000000081003143b153", 0x12, 0x80800, &(0x7f0000000240)={0x11, 0x17, r3, 0x1, 0x5}, 0x14) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4002f0bb64d0000791048007fe3c0d2b10000000071043d00000000"], &(0x7f0000003ff6)='GPL\x00', 0x80000002, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r3, @sk_msg}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) (async) ioctl$BTRFS_IOC_SNAP_CREATE(r5, 0x50009401, &(0x7f0000001100)={{r4}, "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"}) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r7, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005000200030000000500020008"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) (async) socket(0x23, 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32=r7, @ANYBLOB="00000000000000206608000000000000180000000000010000000000000000019500000000000000180100002020782500000000002020207b1af8ff00000000bfa1000000000000070100000aa8ffffb702000008000000b50afdff00000000850000000600000095", @ANYBLOB="45470bb242a7c4c11af299b0d05bde1da0c1c0bf1be6d761285be05ec9579e0941", @ANYRESDEC=r7], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x44}, 0x94) 2m33.662283107s ago: executing program 5 (id=5253): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000018c0)="580000001500add427323b472545b456a180784de1c8261d62ee231ecf00450a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffc1", 0x59}], 0x1) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2m33.488266887s ago: executing program 5 (id=5255): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061116c00000000049500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) socket(0x2a, 0x2, 0x0) (async) r0 = socket(0x2a, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000390000000800030077a374c835e4f4ccc598c3ac7d2b1f5b211eab5ee99e95e2a6cb4a5b7f8be648aa147236fe7876ddd1aaa548996bd98ca035ca23d8dac39dff0083606342662efba4c1beeb3aa39cb66d3e8fa6607568f92acda042ed0dddb6acc272da9915018b4a16152fe44d093e1028b8c3ec393e94c6a858222c0bc82625d314cc6ed65092405b0049ffc122f043a6175e5f54bf94b23516caac81c65111b1010000009e92e4a7bdd3dbee36094e", @ANYRES32=r6, @ANYBLOB="10005a800c0001800500060000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24040005}, 0x20008840) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000390000000800030077a374c835e4f4ccc598c3ac7d2b1f5b211eab5ee99e95e2a6cb4a5b7f8be648aa147236fe7876ddd1aaa548996bd98ca035ca23d8dac39dff0083606342662efba4c1beeb3aa39cb66d3e8fa6607568f92acda042ed0dddb6acc272da9915018b4a16152fe44d093e1028b8c3ec393e94c6a858222c0bc82625d314cc6ed65092405b0049ffc122f043a6175e5f54bf94b23516caac81c65111b1010000009e92e4a7bdd3dbee36094e", @ANYRES32=r6, @ANYBLOB="10005a800c0001800500060000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24040005}, 0x20008840) splice(r1, 0x0, r3, 0x0, 0x100000000, 0x4) r7 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r7, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000400), 0x0, &(0x7f0000000580)}, 0x4000004) socket$inet_udp(0x2, 0x2, 0x0) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) (async) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) socket(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) vmsplice(r2, &(0x7f00000003c0)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, 0x3) socket(0x10, 0x3, 0x2) (async) r9 = socket(0x10, 0x3, 0x2) bind$netlink(r9, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e20, @multicast1}], 0x30) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e20, @multicast1}], 0x30) close(0x3) r10 = socket(0x0, 0xa, 0x7) ioctl$sock_inet_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000200)={'wlan0\x00', {0x2, 0x4e24, @empty}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3a, 0xffffffffffffffff}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2m31.238407519s ago: executing program 5 (id=5260): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd23, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x204c84c}, 0x20040000) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={0x0}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x6, 0x200, 0x3374, 0x6, r4}, &(0x7f0000000300)=0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x20b7ee}) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r5, 0x7ca8e000) (async, rerun: 64) writev(r6, &(0x7f0000000080)=[{0x0}], 0x1) r7 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async, rerun: 32) getsockname$packet(r7, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xffe0}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket(0x2a, 0x2, 0x0) (async, rerun: 32) r9 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r9, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1, r11}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async, rerun: 64) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) 2m16.153719763s ago: executing program 33 (id=5260): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd23, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x204c84c}, 0x20040000) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={0x0}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x6, 0x200, 0x3374, 0x6, r4}, &(0x7f0000000300)=0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x20b7ee}) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r5, 0x7ca8e000) (async, rerun: 64) writev(r6, &(0x7f0000000080)=[{0x0}], 0x1) r7 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async, rerun: 32) getsockname$packet(r7, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xffe0}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket(0x2a, 0x2, 0x0) (async, rerun: 32) r9 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r9, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1, r11}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async, rerun: 64) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) 5.575366659s ago: executing program 6 (id=6823): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000008c0)=0x14) syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYRES16=r2], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x8, 0x70bd25, 0x25dfdbfd, {}, ["", ""]}, 0x1c}}, 0x4840) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket(0x3, 0x800, 0x0) r9 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r9, 0x891a, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}}}}}]}, 0x50}}, 0x0) 5.159514785s ago: executing program 6 (id=6830): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) shutdown(r2, 0x2) sendto$inet6(r2, &(0x7f0000000000)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1, @empty, 0x2}, 0x1c) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x8000) 5.056939275s ago: executing program 6 (id=6833): openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close(r0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/cgroup\x00') r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000000c0)={0x9, {{0x2, 0x4e21, @broadcast}}}, 0x88) (async) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000000c0)={0x9, {{0x2, 0x4e21, @broadcast}}}, 0x88) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x8}, &(0x7f00000001c0)=0x8) (async) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x8}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000200)={r4, 0x5b, "546aa8cdf718fdc8af91cb597f80b13a2cb9c9c1bba2816427de4cc44d28704b71aff6734ce02f615ea0ce47209606a3ab36e61a7b86e15f171c2751801866a6d49ccb59f6ae21d224c567a462348fdb9450d4b98dfef6baf9162a"}, &(0x7f0000000280)=0x63) (async) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000200)={r4, 0x5b, "546aa8cdf718fdc8af91cb597f80b13a2cb9c9c1bba2816427de4cc44d28704b71aff6734ce02f615ea0ce47209606a3ab36e61a7b86e15f171c2751801866a6d49ccb59f6ae21d224c567a462348fdb9450d4b98dfef6baf9162a"}, &(0x7f0000000280)=0x63) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f00000003c0)={r0, &(0x7f00000002c0)='ns/cgroup\x00', 0x42a040, &(0x7f0000000300)={@_ha_fsid={[0x3, 0x10000]}, {0x9, 0x1, 0xc, 0x9}}, 0x0, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0x9}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000400)={r5, 0x6}, &(0x7f0000000440)=0x8) syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r6) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r6) sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x140, r7, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x4}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x140}, 0x1, 0x0, 0x0, 0x82}, 0x4801) (async) sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x140, r7, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x4}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x140}, 0x1, 0x0, 0x0, 0x82}, 0x4801) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000006c0)={r4, 0x40}, &(0x7f0000000700)=0xc) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000006c0)={r4, 0x40}, &(0x7f0000000700)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000740)={r8, 0x40, 0x10}, &(0x7f0000000780)=0xc) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r6, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xac, r7, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x100}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x401}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001a40)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x1f, 0x16, &(0x7f0000000940)=@raw=[@generic={0x80, 0x3, 0x5, 0x81, 0x7}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x4}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_fd={0x18, 0x3, 0x1, 0x0, r6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @generic={0xf6, 0x2, 0xf, 0x4, 0x3}], &(0x7f0000000a00)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x0, '\x00', r9, @fallback=0x10, r6, 0x8, &(0x7f0000001a80)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000001ac0)={0x5, 0x3, 0xb73, 0xfffffff9}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000001b00)=[r6], &(0x7f0000001b40)=[{0x1, 0x3, 0x10, 0xa}], 0x10, 0xc}, 0x94) syz_genetlink_get_family_id$team(&(0x7f0000001c40), r6) (async) syz_genetlink_get_family_id$team(&(0x7f0000001c40), r6) ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x4) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000001c80)={0x6, {{0x2, 0x4e20, @private=0xa010100}}, 0x1, 0x6, [{{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e22, @private=0xa010102}}, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x3, @loopback}}]}, 0x390) close(r6) (async) close(r6) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002080), r6) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000002140)={&(0x7f0000002040), 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x28, r10, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x50}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x4000090) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000021c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000022c0)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)=@ipv6_getnetconf={0x5c, 0x52, 0x12, 0x70bd2c, 0x25dfdbfe, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r11}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x1ff}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x3}, @NETCONFA_IFINDEX={0x8, 0x1, r9}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x6}, @NETCONFA_IFINDEX={0x8, 0x1, r9}, @NETCONFA_RP_FILTER={0x8, 0x3, 0xfffffffe}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x4}, @NETCONFA_FORWARDING={0x8, 0x2, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40004}, 0x14) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r12, &(0x7f0000002400)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002340)={0x4c, r10, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x5de5}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x81}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x5}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x395}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x91f}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x800) sendmsg$NL80211_CMD_PROBE_CLIENT(r12, &(0x7f0000002540)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002500)={&(0x7f0000002480)={0x58, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x35}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x20040040) 4.897301979s ago: executing program 6 (id=6836): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0xffff}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) shutdown(r1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32, @ANYBLOB="0000000000000000665000000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50200005000f100850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d0009"], 0x328}}, 0x84) 3.927414049s ago: executing program 6 (id=6853): socket$packet(0x11, 0x3, 0x300) getuid() socket$packet(0x11, 0x2, 0x300) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000180)=@ethtool_modinfo={0x42, 0xf62f, 0xfffffffe}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) sendmmsg(r1, &(0x7f0000001f00)=[{{&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @private=0xa010100}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000300)="78c1029a88f67849c07711c86948bc075052722123d91e2dba97bfde9eceff117064b4934da1f04239544876187a8b48142fdeaa3eeb9dcf2b1628a249636bb73a94a5e47662247f6294755004708599aa8a45675fc9ab6626a4c5bd06ee1a463d685350b89a8968ba3ca2aedd8dca43c7f09668a0b543ef974df579394b05ca33ef", 0x82}, {&(0x7f00000003c0)="e1e57e0a44166c991075bf8dcad44219654cdebc59a649f5dce82988785ca03a1b8cd417262a668347039436df517f74c435777f3f31a14cef5e5d2ecb9502c8cf6f950344732b14595bd68fa19339f5e316dec2793abf7701be0ede86d70fe8e0d7958aa0f4e5cf8af1bc120a99f6ada6b15b0ab1cf37edf129a6a80baebfdb13b595f3fe7c71820600e302c2701e68b9afd5", 0x93}, {&(0x7f0000000480)="5837a0bd52c4037624978e2adbde947e84cfc362fe8d9be9d419e935e18829729e55b9cabcefe6b3004a9df3fc3616", 0x2f}, {&(0x7f00000004c0)="720c418f928d62345b4e0b0219d17d91f5fd4db8f00882b3398d0d7990ef1cda0c84eb5e5835", 0x26}, {&(0x7f0000000500)="4955752d53ed29e676ac4f4b89a108e7099188d436920498649099b9de71ecd72168dc43a0777f5add8f184a85ae542210c2bd9197f2a6537752f6d5d52111268dc6d52efb9731f7af5d4f293a46f88f078914b04a477589ceddbcb8996e2cc2b387f1adab021add9ad0668ac91539bc9d4e1b6f015ae2d2181ab1ade357ee3098e41fdf45be3363b3cb9a700c71e7ceced16ff0a01d6877a4cc62ddd794d41d1623916c3bfe13ce6282a28c20728466d6bbaeb7a70521814f7845e3901004c6a2aa50c6deee647b530f6743af9c78f0a29ed276d4211dfbd6c7c1e872460cce6c0de28b88755b91f4", 0xe9}], 0x5, &(0x7f0000000a40)=[{0x1010, 0x103, 0x6, "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"}], 0x1010}}, {{&(0x7f0000001a80)=@rc={0x1f, @none, 0x8}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001b00)="bfb828c0d19642c1bc08324e81678c086178828a118d34fd221e567b8c272d0b8455f86b93e4e2b65dd4d7a7df5bb1751443c87b", 0x34}, {&(0x7f0000001b40)="e67664fa21fb4fffac006682db0cfc57ff87b70833927b669601ccf2b96f36ee", 0x20}, {&(0x7f0000001b80)="f5587e1896b4540cd4760044dc226b9d5ca6", 0x12}, {&(0x7f0000001bc0)="afc82269260aa802a5661e19adf5ba90f48a7863655d78bb80a19823e5e4e51fc80922f1ca63eb1f3c716ec5311389ed76229b3f7c09d0ea34f0fdc9c38f6c83e4f148f116d8ab0017fb7b48f0b09e3e1e80fc056e1aed4d5f87570371d21683d8906b8d983382335c4c240d82c70d2b43e882005c2680f77aacb6db9f4ebab8cb93cefd0872138ba89d5c27ce7b38da2f8793c871058f2bca7a07273038c4669448835e7b23e03ec8ac8f98046d59578a4ed8dda07077c104056ebde4c6617ac76c2475da6a69bac0f62f69c7e98096b808d42c4eccfce750c44d68f2392633d24cff03c736e0", 0xe7}], 0x4, &(0x7f0000001d00)=[{0xb8, 0x116, 0x9, "5fafcd79ee02cc145da4d42170ad0be5dc8a52e3858fb8ddd2bb74989604fc14baef316a5a37586f90d796ea672bc23fbc7c9b34172e1569089d6cef818ad39e790705968e32e06c44723b5c6383a31fdb1d60eac858250c91bbc36dea4e771704c5e4b28fb68f6abe6b0bc7fc2f032d6688d8ed2a703f1bd2144b746efb7c033be826e4c931f7e41ef6d1cab59f3ad9f3ee11321f74fd94250d80645867760e9bbdea"}, {0x38, 0x1, 0x3, "9e904080de56053ee1a2f069766d97f9027fb6522f93cce7a96056da181aaf4ea03e7d"}, {0xf0, 0x10a, 0x4, "47be93021ac77ba93adbabfe83a98a4ded36649bd3b25aaaa4f959beb6c0a1bf205bf28a75c0d55d78a103cf100be21a97a7e6def3f7b5ede3cb9b0c5947a084d1e0a5c6a67678c16d09405a665fbd2e6de9acd9cd78d4e20f17e0be31796ae0d742ebceae9e4bb9d39bbccf3649fb830303f04d7d8c0db0f572fba12739ea5d09efb16f57191f20f9825666b4cce75aa273350db89d21acc78918add03c5f79fbff517592688ade43598fc39424ffb734137e90ec46662608635637f629f8a8e448ec51deb6e2c4d845221c3ec12392916556a1588ce746bd02"}], 0x1e0}}], 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES64], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1c00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="085f66ea27038328561c0596d1181acd9415a9d6d758f9bd4fe4ebe782b73d0741f08dc71f457e3d4cd9c373164b7b08e9e10c84990a9f47544e983de99d8a5e198acf86ee1d904340825d385c6113c0cd1958bcbad91109aa75dfd53e4c5c5d9b6acc4c5cc571eb71390016d46dca746759baf35af4791a42549d310b15d43ddf7f5e89ced829f9e4185caa668fefc9417490fb2882ffc7ba373dad8820225a175ba2ce5d7fdf48b70c8954a4c94e9329dadd5e01d8f020271f14e6ef4d308ab3a3bc34cce61541026efb783d82a14b5c82bf895d0166fd1d0cd90ec9d5c849aebaf31f8d", @ANYRES64=0x0], 0x20) r3 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, 0x0, &(0x7f0000000300)) syz_emit_ethernet(0x8e, &(0x7f0000000680)={@random="87875bf33877", @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @empty}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @local, {[@timestamp_addr={0x44, 0x1c, 0xfd, 0x1, 0x0, [{@rand_addr, 0x4e210000}, {@remote, 0x2}, {@local, 0x3ff}]}, @timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x1, [{@multicast1}, {}, {@dev={0xac, 0x14, 0x14, 0x1}}, {@private=0xffffffff, 0x3}, {@broadcast}]}]}}, "f96625b4a376e9f1"}}}}}, 0x0) 2.811256797s ago: executing program 0 (id=6865): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) close(r0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOWNER(r2, 0x400454cc, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x0, 0x168, 0x9, 0x140, 0xb, 0x368, 0x250, 0x250, 0x368, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0x0, 0xffffffff], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0xf8, 0x141, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x8, 0x8727aef2dab6f0c4}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x228, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@private0, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, [0xffffffff, 0xffffff00], @ipv4=@multicast2, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) (async) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000440)="f2435f010008800000000085080042cdeeba00a0e03eadadf5017ad69e81fb9d3b30", 0x22, 0x1, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, 0x14) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000180)=0x3) (async) ioctl$PPPIOCGFLAGS1(r6, 0x8004745a, &(0x7f0000000040)) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a80)=@newtaction={0x3f8, 0x30, 0x1, 0x0, 0x0, {}, [{0x44, 0x1, [@m_skbedit={0x40, 0x1, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}]}, {0x4}, {0xc}, {0xc}}}]}, {0x4}, {0x270, 0x1, [@m_nat={0x13c, 0x5, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffeffff, 0x5, 0x1, 0x3, 0x7fff}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x2, 0x20000000, 0x7f}, @private=0xa010101, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3ff, 0x0, 0x3, 0x7, 0x94b}, @dev={0xac, 0x14, 0x14, 0x1a}, @private=0xa010100, 0xff, 0x1}}]}, {0x99, 0x6, "1f1ef66c1ee0cfcaa0a3dc84114aca37c885f267328c4f7226c918a12223b77c721f32021d563e152873b388ec62897cda746c964057b4b59c14a530c70a484cc5918f1c18bafc57cb32eb8423c2b929bac7294fe0bdc0e4327bde360173f07ea48cf61e00c487d6d8b5f6cdc018bd9bbefec10b48687ccd57ecd0d127f143d90f4e6040575bacf86011f85026b75e621623f2651c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_gact={0x130, 0xd, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1000, 0x4, 0x10000000, 0x0, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x6, 0x4, 0x2, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0xec30, 0x400, 0x2, 0x6, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x8000, 0x20000000, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1837, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xde4, 0x10000000}}]}, {0x89, 0x6, "5bef99d2c2c943cf502970e77fd7bea2e5b3f3efe3deb3a1969a651c7b6617311dc734f226edf201491d919dba0420ea997bc68bcd4a36cf761cb78aa04f788ebba94edcb3823d42f56b483cd6ad732486a0413bd152214eaf263a2fb1b2391ea26b9934d9166f4f3c8001331eaaa239baada2510592d0a68585c1691b048a49d96756cb5c"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, {0x12c, 0x1, [@m_mirred={0x128, 0xa, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x25, 0x3ff, 0x0, 0x1, 0x3a11}, 0x2, r5}}]}, {0xdb, 0x6, "b21640a0c791f6f7c00f9e5c1074de14f01d2031d594af94bb3c542a249172b4cffee0240b5040c410a9136b0cf2f5cc61268e3f985a335faa056e30ce634f75f3f94b5002312097de3c6513f984b5090bbc46755cd0a58844ac53a48152f79a178c3701ea057f857901ab27f369aaa03e067c4120f2cc7b343c443cff3a935d6ab62bf4911c82836110e545a9823956c6aae878624417fac9f0190fb974f8f7eccdf23a817676f1ae7d2ecffa59df5d221de998f00395f51f487da7ad8d7bce666c868ec5bbc88c243fb25c21dc57907e2f9f6118d6a3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x3f8}}, 0x0) 2.49254331s ago: executing program 1 (id=6870): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x29, 0x6, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000240)={0x3ffd}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c040000160000010001040200000a8000000000", @ANYRES32=0x0, @ANYBLOB="14000200fc0100"/20], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @remote}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x18, 0x43, 0x107, 0xfffffffd, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0xc000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000080), 0x0, 0x3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = socket(0x11, 0xa, 0x0) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0xffffe000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES16=r8, @ANYBLOB="010000000000010000f80700000018000180140002006970766c616e31000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0x40) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000004c0)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000580)={'sit0\x00', 0x0}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r10, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r11, 0x0, 0x4040) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x2c, &(0x7f0000000240)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x0) 2.291331405s ago: executing program 0 (id=6872): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc}, @NFTA_LIMIT_BURST={0x8}]}}}]}]}], {0x14}}, 0x74}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="ac010000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf250a000000a000048054000780080001000600000008000400050000000800010015000000080002000200001008000400ff01000008000400000000000800010017000000080004000900ffffffffffffff7f000008000300030000001300010062726f6164636173fd6def9e6e6b"], 0x1ac}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x25a5, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0x120, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x64010101, @empty, 0xffffffff, 0xff000000, 'veth1_vlan\x00', 'dvmrp1\x00', {0xff}, {}, 0x32, 0x2, 0x14}, 0x6, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0xa, 0x0, 0x5, 0x0, 0x4], 0x5, 0x1}, {0xffffffffffffffff, [0x2, 0x4, 0x5, 0x0, 0x1], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x9, 0x3, 0x194c, 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_EXPECT_MASK={0x14, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x8}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3a}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48084}, 0x20000041) 2.171816636s ago: executing program 4 (id=6874): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0xc6e9f000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, r0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r1, 0x100000000) r2 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x10448) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r2, 0x0) 2.045966238s ago: executing program 1 (id=6875): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ALPHA={0x8, 0x4, 0x20}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004c084}, 0xd0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x20, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 1.871614877s ago: executing program 1 (id=6877): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='lp', 0x2) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x10000, 0xffffff87}]}}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) close(0x3) 1.723886804s ago: executing program 2 (id=6879): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@dellink={0x28, 0x11, 0x101, 0x0, 0xfffffffe, {}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x20, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1ffc2, 0xc}, {0x5, 0xd}, {0xffe0, 0x3}}}, 0x24}}, 0x40000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x118, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xf3, 0x2, {{}, [@TCA_NETEM_RATE64={0xc}, @TCA_NETEM_DELAY_DIST={0xa, 0x2, "58d5c080bbdd"}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x8}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0xe}}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_LOSS={0x60, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x4}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_REORDER={0xc}]}}}]}, 0x118}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}, @IFLA_GROUP={0x8}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) 1.296682876s ago: executing program 0 (id=6880): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x1, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1, 0x1, 0x27}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x4, 0x0, 0x4, 0x80}}, 0x44) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r2, 0x235, 0x70bd28, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xbf}]}, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x53}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0b1600000000000000f6490000000800b8"], 0x3c}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000002240)=@nat={'nat\x00', 0x19, 0x1, 0x20e, [0x200000002000, 0x0, 0x0, 0x2000000021ae, 0x2000000021de], 0x0, &(0x7f00000004c0), &(0x7f0000002000)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x9, 0x70, 0x8906, 'virt_wifi0\x00', 'bond0\x00', 'pimreg1\x00', 'veth0_to_bond\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], @local, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], 0xde, 0x146, 0x17e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x6, {0x5, 0x7, 0x8, @link_local, [0xff, 0x0, 0xff, 0xff, 0x0, 0xf7c9e781b8cb1ea5], 0x3, 0x70, 0x7, 0x5, @multicast, [0xff, 0x0, 0x0, 0xff], 0x4e20, 0x4e24, 0x8, 0x5, 0x6, 0x100, 0x2e, 0x9, 0x5, 0x3}, 0xc0b}}}], [@arpreply={'arpreply\x00', 0x10, {{@broadcast, 0xffffffffffffffff}}}, @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}], @arpreply={'arpreply\x00', 0x10, {{@empty, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x286) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000001fc0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001f80)={&(0x7f0000001ec0)={0xb4, r3, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0xfffffff7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0xb6}, {0x8, 0xb, 0x3}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x40080) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) recvmmsg(r5, &(0x7f0000004300)=[{{&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/28, 0x1c}, {&(0x7f0000000300)=""/142, 0x8e}, {&(0x7f0000000580)=""/160, 0xa0}], 0x3, &(0x7f00000006c0)=""/28, 0x1c}, 0x8}, {{&(0x7f0000000700)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000780)=""/5, 0x5}, {&(0x7f00000007c0)}, {&(0x7f0000000800)=""/243, 0xf3}, {&(0x7f0000000900)=""/98, 0x62}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000a00)=""/40, 0x28}, {&(0x7f0000000a40)=""/231, 0xe7}], 0x7, &(0x7f0000000bc0)=""/174, 0xae}, 0x40}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f0000001280)=[{&(0x7f0000000ec0)=""/229, 0xe5}, {&(0x7f0000000fc0)=""/181, 0xb5}, {&(0x7f0000001080)=""/133, 0x85}, {&(0x7f0000001140)=""/38, 0x26}, {&(0x7f0000001180)=""/249, 0xf9}], 0x5}, 0xff}, {{&(0x7f0000001300)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001380)=""/213, 0xd5}, {&(0x7f0000001480)=""/208, 0xd0}, {&(0x7f0000001580)=""/5, 0x5}, {&(0x7f00000015c0)=""/176, 0xb0}], 0x4, &(0x7f00000016c0)=""/97, 0x61}, 0x5}, {{&(0x7f0000001740)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001b40)=[{&(0x7f00000017c0)=""/123, 0x7b}, {&(0x7f0000001840)=""/31, 0x1f}, {&(0x7f0000001880)=""/254, 0xfe}, {&(0x7f0000001980)=""/244, 0xf4}, {&(0x7f0000001a80)=""/64, 0x40}, {&(0x7f0000001ac0)=""/128, 0x80}], 0x6, &(0x7f0000001bc0)=""/213, 0xd5}, 0x8}, {{&(0x7f0000001cc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000003500)=[{&(0x7f0000001d40)=""/162, 0xa2}, {&(0x7f0000001e00)=""/160, 0xa0}, {&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/65, 0x41}], 0x4, &(0x7f0000003540)=""/112, 0x70}, 0x3ff}, {{&(0x7f00000035c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000003640)=""/189, 0xbd}, {&(0x7f0000003700)=""/253, 0xfd}, {&(0x7f0000003800)=""/242, 0xf2}, {&(0x7f0000003900)=""/92, 0x5c}, {&(0x7f0000003980)=""/119, 0x77}, {&(0x7f0000003a00)=""/110, 0x6e}, {&(0x7f0000003a80)=""/81, 0x51}, {&(0x7f0000003b00)=""/54, 0x36}, {&(0x7f0000003b40)=""/245, 0xf5}, {&(0x7f0000003c40)=""/125, 0x7d}], 0xa, &(0x7f0000003d80)=""/31, 0x1f}, 0x4}, {{&(0x7f0000003dc0)=@caif=@dbg, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003e40)=""/166, 0xa6}], 0x1, &(0x7f0000003f40)=""/120, 0x78}, 0x4}, {{&(0x7f0000003fc0)=@un=@abs, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004040)=""/91, 0x5b}, {&(0x7f00000040c0)=""/240, 0xf0}], 0x2, &(0x7f0000004200)=""/246, 0xf6}, 0x8}], 0x9, 0x20, &(0x7f0000004540)) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r6, 0x5, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0x6, 0x34, @random="7de8"}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x4}]]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r6, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000001}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CSA_IES={0x10, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0xfffc, 0x23, 0x1, 0x7ff]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=@newsa={0x140, 0x10, 0x1, 0x0, 0x25dfdbfd, {{@in=@local, @in6=@empty, 0x4000, 0x0, 0x3, 0x3}, {@in=@broadcast, 0x0, 0x33}, @in6=@mcast2, {0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@tfcpad={0x8, 0x23, 0xd19}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x140}}, 0x20000000) 1.29606615s ago: executing program 4 (id=6881): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 1.028031689s ago: executing program 4 (id=6882): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) close(0x3) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x98, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x6c, 0x3, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0xe0, 0x10, 0x1, 0x20002, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40021}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0xb8, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb2, 0x2, '-j-\x00g5\xb4\xb3\xa4\xa6\xa0\xee?W\xca\"\x10\x9eU\x81\xaf\x10\x98\xe4,:!T\x87\xa4\t\x83\x8aZ7\xfa\x10^N\x16_\xae\x80\xe7\x12\xd4\x9fO\xca\xdc\x17n\xcc:\xe7j\x1fE\xebi\x86\xaa\x81\xb0\xed\xe6p\xd1\fG\xbfd\xe7\xf8\x9b\x10\xdbf\x8f\xc9\xd0\xc8\xa8\x8a\xa3uN1\x04\xa8Ew\xe0Yh\x8f\x01\xef7\xe7\x95\x1c\xc4\xa9\xff\x92|\x1f&DU\x90\xdb\xcb4^\xe0$Z\x89\xb0\xc7\xca;\x8c\x92\xb5/\xda\x7fV\x15\xea<\xc4\xcbnZ\xa2\xc0\x16\x93\xc6sn\x8b7\xd3z\x8c\'\xf1h\\\xdc'}]}]}, 0xe0}}, 0x4080) 1.014076484s ago: executing program 2 (id=6883): syz_emit_ethernet(0x262, &(0x7f0000000f40)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb8100220086dd6a8c3f54022811ff00000000000000000000ffff0a010100fc0200000000000000000000000000003b2600000000000007500000000212087f000600000000000000000000020800000005000000000000000100010000000000800000000000000002000000000000000002000000000000f8ffffffffffffff0600000000000000c2040000000307380000c200000c0f8100c8c60000000000000100000000000000040000000000000002000000000000000200000000000000070000000000000004010a07180000000104030600f6ffffffffffffff09000000000000000386594c884e6965eb688174171366fc302d1dd61989ee8f47fb6494b3a3195bfe98091b937eaed265e0382abacb05449d8e6d9bf1da5b35f4e445cf32915da8c17d829231d844eab41da4b9eb577e36d2b1072875dee9c771bf6982f22988a0791bff3acd6e8d4840859337831e8f65e432990221c98bd520951c8511bcf75456545ebfc3d17ecd000c0a010700000000fe800000000000000000000000000034fe8000000000000000000000000000bbfe8000000000000000000000000000bbfe880000000000000000000000000101fc0100000000000000000000000000013308040400200000fe80000000000000000000000000000e00000000000000000000ffffac1e0101ff020000000000000000000000000001fe8000000000000000000000000000bb4e205e2100489078030000e0773e0de7a27da640bda88e54cda0ec4bc9dc8ad032bcad63d33649c0ad4bfa236149db9f5747f586832bd03dbd25e67f78c95a939a00ee1f92740dec385d4ccf0e9dbd6932ae62cf6bbf08932f30ff2b0c"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000480)={0x28, r1, 0xf21, 0x0, 0x25d7dbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xb, 0x31}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x6814}, 0x44004) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060100fc0821ee7dec5dd25f7645f238", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x238, 0x258, 0x258, 0x238, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x20}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x368) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x17, &(0x7f0000000a80)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5c0b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x80, 0x30, 0xb, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8}, @TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae535af2f0a70ddeb37f"}, @TCA_CT_MARK_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB='Fcpu'], 0x5) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES64=r3, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa14000623e4b7556164e58b223408445283e5de74b6fa12766a368c8045fc1cbfd11e04ffbfcd96908878985a4fbdf9528feac006464e0f1f"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x50}}, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000005c0)={@dev, 0x0}, &(0x7f0000000600)=0x14) r10 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x4}}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x12, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000070000000000000007000000182b0000", @ANYRES32, @ANYBLOB="000000000500000018240000", @ANYRES32=r3, @ANYBLOB="000000000700000087701000fcffffff1837000002000000000000000000001812030000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018350000010000000000000000000000041b09006cfc00009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x8, 0xe9, &(0x7f00000004c0)=""/233, 0x41100, 0x6e, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0xc, 0xd, 0xcdbd}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000006c0)=[r3, r3, r3], &(0x7f0000000700)=[{0x2, 0x3, 0x3, 0x7}, {0x2, 0x2, 0x8, 0x6}, {0x0, 0x2, 0x2, 0x4}, {0x2, 0x4, 0x4, 0xa}, {0x1, 0x2, 0xa, 0xa}, {0x5, 0x3, 0xf, 0x2}, {0x2, 0x3, 0x0, 0xa}, {0x5, 0x2, 0x6, 0x4}], 0x10, 0x6}, 0x94) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r11, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) close(0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 975.936703ms ago: executing program 0 (id=6884): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001300c000b"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610) close(r1) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c0002"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netpci0\x00'}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x14, r3, 0x329, 0x70bd28, 0x25dffbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) 916.084367ms ago: executing program 1 (id=6885): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}}, 0x0, 0x3a}, 0x20) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x884) 604.195165ms ago: executing program 4 (id=6886): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f00000007c0)=@ethtool_per_queue_op={0x4b, 0xe, [0x8, 0x483f, 0x200, 0x8, 0xfae5, 0x9, 0x9, 0x8, 0x43, 0x3, 0x1, 0x9de, 0x8de, 0x8000, 0x54, 0x81, 0xd80, 0x9, 0x8, 0x6, 0x8, 0x6e20, 0x2, 0x6, 0xb99, 0x3, 0x3, 0x1, 0xc, 0x9, 0x5, 0x100, 0x3, 0x800, 0xfffffff9, 0x9, 0x8, 0x2, 0x7ffd, 0x60000, 0x0, 0x5104, 0x3, 0xcb1, 0x9, 0x80000001, 0x5, 0x7932, 0x7, 0x2, 0x8, 0x401, 0x5, 0x800, 0x6, 0x1, 0x3, 0x8, 0x0, 0xf8000000, 0x40, 0xaa1, 0x4, 0x3, 0x4b, 0x1, 0x9, 0x8, 0x2, 0x8, 0xf8, 0x6, 0x2, 0xd1d1, 0x10001, 0x5, 0x800, 0x0, 0x7, 0x2, 0x0, 0x8, 0x389, 0x100, 0x6, 0xdc, 0x10001, 0xff, 0x5b, 0x7, 0x406, 0x10000, 0x0, 0x4, 0x40, 0x58d7, 0x6, 0x3, 0x49c4, 0x0, 0x9, 0xa4c, 0xfffffffc, 0x3, 0x88f, 0x7, 0xfffffdd1, 0x3, 0xc, 0x81, 0x3ff, 0x5, 0x0, 0x7, 0xfd2, 0x0, 0x9, 0x3, 0xf0, 0x7, 0x800, 0x80000001, 0xf383, 0x47db4311, 0xb, 0x3, 0x1ff, 0x5]}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000300)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r7, &(0x7f0000000280)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000080)=0x1b0, 0x4) sendmmsg$inet(r7, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000000000000000ed"], 0x10}}], 0x1, 0x0) recvmsg(r7, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40002100) sendmsg$nl_xfrm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=r1, @ANYRESHEX=r7, @ANYBLOB="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"], 0xf8}}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) setsockopt$bt_BT_RCVMTU(r10, 0x112, 0xd, &(0x7f0000000000)=0x2, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r11) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0xfffffffffffffd69, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x200, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x4000000) 509.863181ms ago: executing program 2 (id=6887): r0 = socket(0x8000000010, 0x2, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x81, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x44, r5, 0x1, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x7}}, 0x14}}, 0x0) sendmsg$inet6(r3, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000029000000040000000200000000080000200000000000000029000000370000000c0000000000000004010f0401080000280000000000000029000000050000000002020100"], 0x60}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e50102000000fdffffff07000000", @ANYRES32=r7, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010000007f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) write(r0, &(0x7f0000000000)="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", 0x212) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000000bc0)={{r6, &(0x7f0000000240)='bridge0\x00', 0x10d282, &(0x7f0000000280)={@_ha_fsid={[0x8, 0x4]}, {0x2, 0x6, 0x2, 0xd392}}, 0x9cba, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0xfffffffc}, 0x8, &(0x7f0000000ac0)=[{0x2, 0x2, &(0x7f0000000340)='\xda(}]\x00', &(0x7f0000000380)="f2734cc73987cf20345d10a2d86ac717f64313c249412ba7e1f703f70bbc1eacd0", 0x21, 0x2}, {0x1, 0x7ff, &(0x7f00000003c0)='netdevsim\x00', &(0x7f0000000500)="5ee7efbcde12f677845d487d44152fae02a1458983b5fbceaf2ff8ec882e2b2c48fa3b88cf3f81db506204e108a66c7ebf51191c881c69c74813a632da001ddab5c0148bbd0111d0ee0d7d1e06057c3a46d3195ddbb1bf63325f04d7aba0d27228a3ab4f90be2b457910210aea911b5c9639b1969a0145a4fa323dcf0b5add737f54e3b8b09b7f08051271da9acee076fbb6d04aee6cc27a8c6d8d32b952c3a96383e7495bc7770445e37f8120021b2ca61cf812ca2318e8ece01081313e7957ac2509e22def0f99e40a3140b4ef9e3415e4e2088ce7a85e8a", 0xd9}, {0x2, 0x77, &(0x7f0000000600)='&-\x00', &(0x7f0000000640)="3784aa0ef7a200af2c4219495fbb00f263516db2ec4aad176a676438faa6d2f40aa11f018d112863edb90f6d109454afa071d89b942a3886dd2c65afd1f779a87923f99eee363a04f15c012ca9286a9e24dd8b9acb7fb93d61", 0x59, 0x12}, {0x1, 0x1000, &(0x7f00000006c0)='\x00', &(0x7f0000000700)="df15bf103efd546174d6e86768c3a3e45b4d8dcdafe8f79df36f02337405da13e6b446a916e55f9d3c5202a6590dbbcc66dc0933831d3eb60f5920acc2ff8a78f11b0b2327966787b7f03563fabaefcd55d03f", 0x53, 0x8}, {0x3, 0xc2, &(0x7f0000000780)='bridge0\x00', &(0x7f00000007c0)="8035e643ad3a2854a410ff0517de268b320c9a4b59826874f12861b7bc5851a27f5aae3fe893fb25a684c8e8b4562c889e4f1bba36725a71b92208a26c7729290bcd10b0fb2488da555c44fb303f2d1540bb1ae2", 0x54, 0x1a}, {0x2, 0x9, &(0x7f0000000840)='.&\x00', &(0x7f0000000880)="f359b1c2e45a88592b0841cdeb6503ef96a319b79b0a2d808d89b4ae131681455403480f04d1b958964a7add62cbbbdfee2c4d4efc051393b1bedf6d2b8c0fa9ff4afc7ffc156eb13457f4306fd1af715ff805d0165320810fced05723dd1a03712bbcd4155e9de709d3a4d6cccdca875af56b5e639008d6225d9a1ce58e6bfa666243d43e17fced0460f383d76b767e11ff7f19a081b1c1d4d4199ef449b9315ab681d9a0e5bf9d86e8dde43ac645e2015eb594700f1cfb060342f79ab00b006b89034909b671582ebb482d845a8b435d993389d3aaf080d530d6f2ddeb3421be608e84b01fdd612b259d236e62cad377a33b850fa4575a39", 0xf9, 0x28}, {0x2, 0x2, &(0x7f0000000980)='\x00', &(0x7f00000009c0)}, {0x1, 0x9, &(0x7f0000000a00)='@\x06\\)\\&\'@\x00', &(0x7f0000000a40)="0d0736bc5378f6f5f466cb59b2fdcefc8d3c2ae2d90c19c349adf1a6feaba53ed94f593580ca3b5069aec1494013bc81c1450103d4e1f2adbf0303ea785ebff2451c5cb2b995dc0bc8dcbb6a4247caf9cb7a07b8e7a9b33e53f10456b2d6718c02c71847a8c9", 0x66, 0x38}]}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000400), 0xc, &(0x7f00000009c0)={&(0x7f0000000480)={0x1c, r9, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40c8000) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000c40)={r8, 0xffffffffffffffff, 0x3, 0x0, @void}, 0x10) 350.844949ms ago: executing program 4 (id=6888): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='+]+\xb1)\x00', 0x101040, &(0x7f0000000040)={@align=0xfffffffffffffffa, {0x2, 0xfeff, 0x80000001, 0x1}}, 0x9, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)}) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f0000000340)='\x00', 0xa0000, &(0x7f0000000380)={@align=0x1000, {0x0, 0x7, 0x7, 0x100000000000000}}, 0x6, &(0x7f00000003c0), &(0x7f0000000400)=0xfffffffc}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9c, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x31, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) (async, rerun: 64) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x50) (async, rerun: 64) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) (async) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@o_path={&(0x7f00000008c0)='./file0\x00', 0x0, 0x4008}, 0x18) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)='%pB \x00'}, 0x20) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@bloom_filter={0x1e, 0x80, 0xe, 0xfffffe39, 0xc48d, 0xffffffffffffffff, 0xc85, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4, 0x3}, 0x50) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x20, 0x15, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc9}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7fff}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @exit]}, &(0x7f0000000200)='syzkaller\x00', 0x5, 0xf8, &(0x7f0000000240)=""/248, 0x41000, 0x20, '\x00', 0x0, @fallback=0x28, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x2, 0x5, 0x101, 0x7}, 0x10, r3, 0xffffffffffffffff, 0x2, &(0x7f0000000b00)=[r4, r5, r6, 0x1, r7, r8, r9], &(0x7f0000000b40)=[{0x5, 0x3, 0x0, 0x6}, {0x1, 0x5, 0xc, 0x1}], 0x10, 0x2}, 0x94) connect$pptp(r10, &(0x7f0000000c40)={0x18, 0x2, {0x2, @loopback}}, 0x1e) (async) write$cgroup_subtree(r7, &(0x7f0000000c80)={[{0x2b, 'cpuset'}, {0x2b, 'blkio'}]}, 0xf) (async) sendmsg$nl_route(r0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)=@ipv4_newaddr={0x7c, 0x14, 0x500, 0x70bd25, 0x25dfdbff, {0x2, 0x38, 0x0, 0xfd, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x4, 0x54, 0x7, 0x5}}, @IFA_LABEL={0x14, 0x3, 'veth1_to_batadv\x00'}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010101}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}, @IFA_LABEL={0x14, 0x3, 'tunl0\x00'}, @IFA_BROADCAST={0x8, 0x4, @private=0xa010101}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x240420c0) (async, rerun: 32) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4041) (async, rerun: 32) accept$alg(r1, 0x0, 0x0) (async) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f40), r1) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001240)={r1, 0xe0, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000fc0)=[0x0, 0x0, 0x0], &(0x7f0000001000)=[0x0, 0x0, 0x0], 0x0, 0x2e, &(0x7f0000001040)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001080), &(0x7f00000010c0), 0x8, 0x3a, 0x8, 0x8, &(0x7f0000001100)}}, 0x10) (rerun: 64) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000001480)={&(0x7f0000000f00), 0xc, &(0x7f0000001440)={&(0x7f0000001280)={0x1b4, r11, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6b1ad8f4980b0820}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x48000}, 0x884) (async) socket$xdp(0x2c, 0x3, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r13, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x2c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}]}, 0x2c}}, 0x4000040) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000016c0)={'syztnl0\x00', &(0x7f00000015c0)={'sit0\x00', r2, 0x20, 0x40, 0x100, 0x5, {{0x30, 0x4, 0x2, 0x21, 0xc0, 0x65, 0x0, 0x5b, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote, {[@timestamp_addr={0x44, 0x3c, 0xae, 0x1, 0x7, [{@multicast2, 0x2}, {@local, 0xa}, {@broadcast, 0xea3}, {@rand_addr=0x64010101, 0x3}, {@multicast2, 0xee}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xb}, {@private=0xa010100, 0x7f}]}, @lsrr={0x83, 0x1b, 0x4d, [@multicast2, @local, @remote, @remote, @empty, @multicast1]}, @cipso={0x86, 0x52, 0x3, [{0x1, 0xa, "2a305a5f18bcda62"}, {0x5, 0x7, "bba30d1552"}, {0x1, 0x6, "d26e3995"}, {0x5, 0x2}, {0x7, 0xa, "e6ad89f4cb295a10"}, {0x7, 0xe, "f2cd939e9bb2bec2e78c8a5a"}, {0x1, 0xb, "221eb9e0a6ec63bd05"}, {0x2, 0x10, "718e6d39708f4fa89cb1d1b53fb5"}]}, @noop]}}}}}) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x50, r0, 0x80000000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route(r1, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)=@ipv4_getroute={0x1c, 0x1a, 0x800, 0x70bd27, 0x25dfdbfb, {0x2, 0x0, 0x14, 0x2, 0xfd, 0x4, 0xc8, 0xb, 0x200}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000011) r14 = socket$unix(0x1, 0x5, 0x0) accept4(r14, &(0x7f0000001800)=@nfc, &(0x7f0000001880)=0x80, 0x80800) (async) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xbc, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0xc010}, 0x40) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a80), r1) sendmsg$NL80211_CMD_STOP_NAN(r13, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x14, r15, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20004844) 350.119541ms ago: executing program 0 (id=6889): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16=r2, @ANYRES64=r5, @ANYRES16=r5, @ANYRES16=r4, @ANYRES64=r7, @ANYRES64=r5, @ANYRES16=r1, @ANYRESHEX, @ANYRESOCT=r3], 0x134}, 0x1, 0x0, 0x0, 0x20008001}, 0x4048014) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x11, 0xffffffffffffffff, 0x75fb3000) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r10, 0x0, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0xd, &(0x7f00000000c0), 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbb634285b200000700000008004554001c0000000000119078ac1414aae0000001c9284e20000890784b6cad8c18614e3ab4d7bc971d3412236bffe0a006b50452e658baffe747cb08a3188a175bb3912a05e1db1f004b8f137380ee48de1bde4523fae854e2979db8421b69b188a3d24f6b922ff6dbbfdb8944fbea3430ee908ec1a06c31c63bb55bc3842aaad72393c6e78ebe03d876ac9cd3a418e860ca32e4b02b94bd7722fb9d31ead410f7692e5c654adb13d2d651571398b0aa7c06b67c700d706912edbbdfb3aff5857f60e8528269e5657d3d79548f36ba661640e8dd40f4c31be72e7cd5ab30c02c5737d23fbdd614b6ac"], 0x0) socket$xdp(0x2c, 0x3, 0x0) socketpair(0x15, 0x800, 0x2004, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x5) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWSET={0x9c, 0x9, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3e}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8000000000000001}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_DESC={0x4}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x8000000000000000}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x1}]}}}]}]}, @NFT_MSG_NEWCHAIN={0x6c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xc1f8c0c}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x13c, 0xe, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x104, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_KEY_END={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6a6b}]}, {0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x20, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, {0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4}]}, {0xb8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xd, 0x1, 'CONNMARK\x00'}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}]}}}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @meta={{0x9}, @void}}, @NFTA_SET_ELEM_DATA={0x54, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x201, 0x0, 0x0, {0xb, 0x0, 0xa}}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x2e0}, 0x1, 0x0, 0x0, 0x4080}, 0x40) 315.82941ms ago: executing program 2 (id=6890): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc) (async) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc) (async) r7 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r8, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x400}, 0xc) (async) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc) (async) r10 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) (async) r11 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) r12 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r12, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r13 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r13, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x80020000}, 0x48) (async) socket$netlink(0x10, 0x3, 0x4) 299.203027ms ago: executing program 1 (id=6891): ioctl$XFS_IOC_BULKSTAT(0xffffffffffffffff, 0x8040587f, &(0x7f0000000800)={{0x0, 0x4, 0xfffffb9a, 0x1, 0x40}, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}]}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x25, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {@in6=@local, 0x1, 0x2b}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14}]}, 0x104}}, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000040)={0x0, 0x9}) 245.464082ms ago: executing program 2 (id=6892): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0xf, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @alu={0x7, 0x0, 0x5, 0x8, 0x6, 0x20, 0xfffffffffffffffc}, @alu={0x7, 0x0, 0x7, 0x7, 0x8, 0xfffffffffffffffc, 0xffffffffffffffff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xfe, &(0x7f0000000100)=""/254, 0x1080, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x0, 0xf8, 0x9}, 0x10, 0x1d270, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000280)=[{0x3, 0x5, 0xb, 0x8}, {0x1, 0x2, 0x8, 0xc}, {0x1, 0x2, 0xa, 0x2}, {0x4, 0x1, 0xf, 0xc}], 0x10, 0x2}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000380)={r1, r2}) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) 176.414527ms ago: executing program 6 (id=6893): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x4c, r0, 0x1, 0x2, 0x25dfdbfb, {0x41}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x87}}]}, 0x4c}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000100003052abd70000400000000000000", @ANYRES32=0x0, @ANYBLOB="18800300a0010200140012800b0001006d616373656300000400028008000500", @ANYRES32=r3, @ANYBLOB="080003"], 0x44}}, 0x800) 175.704669ms ago: executing program 4 (id=6894): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x54) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x31}, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000200)) 113.325665ms ago: executing program 1 (id=6895): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e24, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_256={{0x304, 0x3a}, "08db7a9d27f81000", "acef0d00330723599e69856bf21ad6caf77c9a99b7bbebfa4dc371090d0e3808", "33681901"}, 0x38) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x82e}}}, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040)={r5, 0x5, 0x7, 0x922, 0x3, 0xffffffff}, 0x14) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$inet6_udp_int(r8, 0x11, 0x66, &(0x7f0000000000)=0x7, 0x4) syz_emit_ethernet(0x9a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6a6bfe4d0064110000000000000000000000ffffac1414aaff0200000000000000000000000000014e204e20"], 0x0) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)={0x14, 0x25, 0x301, 0x70bd25, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r6}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b70800000000ff907b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bridge_slave_1\x00', 0x200}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f088a8", 0x0, 0xfe8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 52.438995ms ago: executing program 2 (id=6896): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in, 0x0, 0x6c}, @in=@remote, {0x0, 0xfffffffffffffffd}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @short={0x2, 0xffff}}, 0x14) sendto(r0, &(0x7f0000000080), 0x0, 0x40, 0x0, 0x0) 0s ago: executing program 0 (id=6897): socket$unix(0x1, 0x5, 0x0) (async) r0 = socket$unix(0x1, 0x5, 0x0) syz_emit_ethernet(0x34e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1c86dd6000ed0403183afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000050aa78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269740ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af050200010000050000000000260004000018fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978001d06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f64fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212ba4b0a00004e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000000b17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f00e07b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a027440000000000000000000000000c5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180600027628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"], 0x0) (async) syz_emit_ethernet(0x34e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1c86dd6000ed0403183afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000050aa78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269740ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af050200010000050000000000260004000018fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978001d06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f64fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212ba4b0a00004e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000000b17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f00e07b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a027440000000000000000000000000c5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180600027628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'dummy0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000180000003d030100000000009500f000000000007126000000000000bf67000000000000360602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad03000000000000720400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x74a849580afd22a, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdc9}, 0x48) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) write(r3, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d0000050000000008000900ecffffff", 0x24) (async) write(r3, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d0000050000000008000900ecffffff", 0x24) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c0000040042800c00018006000600800a000014000280100014800c0009000800b600884700"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c0000040042800c00018006000600800a000014000280100014800c0009000800b600884700"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newpolicy={0xb8, 0x13, 0x101, 0x0, 0x0, {{@in6=@loopback, @in=@private=0xa010102, 0x0, 0x2d, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0xffffffffffffffff}, {0x0, 0x1, 0x6, 0x100}, 0xfffffffe, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x5) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f00000000c0)={r7, 0x6, 0x7, 0x6b}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f00000000c0)={r7, 0x6, 0x7, 0x6b}) recvmsg$unix(r9, &(0x7f0000000900)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000580)=""/174, 0xae}, {&(0x7f0000000640)=""/48, 0x30}, {&(0x7f0000000680)=""/255, 0xff}, {&(0x7f0000000780)=""/101, 0x65}], 0x4, &(0x7f0000000880)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}, 0x10002) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x20000000) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x20000000) kernel console output (not intermixed with test programs): o sysfs fallback for:  [ 533.669986][T25958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5376'. [ 534.451856][T25974] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5383'. [ 534.576913][T25981] netlink: 'syz.0.5386': attribute type 28 has an invalid length. [ 534.587996][T25977] syzkaller0: entered promiscuous mode [ 534.590748][T25980] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5384'. [ 534.596468][T25977] syzkaller0: entered allmulticast mode [ 534.612733][T25981] netlink: 'syz.0.5386': attribute type 3 has an invalid length. [ 534.632884][T25981] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5386'. [ 534.866611][T25993] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5390'. [ 535.030302][T26000] x_tables: duplicate underflow at hook 1 [ 535.087625][T26003] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 535.668635][T26034] syzkaller1: entered promiscuous mode [ 535.680777][T26034] syzkaller1: entered allmulticast mode [ 536.096321][T26038] validate_nla: 2 callbacks suppressed [ 536.096338][T26038] netlink: 'syz.2.5403': attribute type 3 has an invalid length. [ 536.260487][T26047] bridge0: port 1(1¾x9ÿ) entered disabled state [ 536.291693][T26047] ¾x9ÿ (unregistering): left allmulticast mode [ 536.299046][T26047] ¾x9ÿ (unregistering): left promiscuous mode [ 536.305570][T26047] bridge0: port 1(1¾x9ÿ) entered disabled state [ 536.711946][T26071] netlink: 'syz.0.5410': attribute type 1 has an invalid length. [ 536.745037][T26071] netlink: 'syz.0.5410': attribute type 2 has an invalid length. [ 536.763656][T26071] netlink: 'syz.0.5410': attribute type 1 has an invalid length. [ 537.194362][T26094] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.307230][T26102] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 537.403833][T26114] netlink: 'syz.0.5423': attribute type 4 has an invalid length. [ 537.649538][T26124] bond8: (slave bond_slave_1): Device is not bonding slave [ 537.679525][T26124] bond8: option active_slave: invalid value (bond_slave_1) [ 537.715661][T26124] bond8 (unregistering): Released all slaves [ 538.066508][T26154] __nla_validate_parse: 10 callbacks suppressed [ 538.066527][T26154] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.5436'. [ 538.089710][T26153] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0x2 [ 538.159625][T26160] syzkaller0: entered promiscuous mode [ 538.165475][T26160] syzkaller0: entered allmulticast mode [ 538.381193][T26170] ip6_vti0: entered promiscuous mode [ 538.405751][T26170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5438'. [ 538.460309][T26179] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5441'. [ 538.694802][T26187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5443'. [ 538.695064][T26194] x_tables: duplicate underflow at hook 2 [ 538.723348][T26194] netlink: 'syz.4.5445': attribute type 1 has an invalid length. [ 538.850302][T26204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5449'. [ 538.861963][T26204] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 538.898959][T26209] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 538.934440][T26209] syzkaller0: entered promiscuous mode [ 538.943102][T26209] syzkaller0: entered allmulticast mode [ 539.081882][T26223] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 539.156094][T26225] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 539.165746][T26225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 539.237125][T26231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5457'. [ 539.317948][T26235] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 539.339230][T26235] xt_hashlimit: size too large, truncated to 1048576 [ 539.399081][T26237] netem: change failed [ 539.571900][T26242] netlink: 'syz.2.5460': attribute type 62 has an invalid length. [ 539.589581][T26244] netlink: 'syz.2.5460': attribute type 62 has an invalid length. [ 539.721429][T26251] vcan0: tx address claim with dest, not broadcast [ 539.836613][T26256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5463'. [ 539.928910][T26259] netlink: 'syz.2.5464': attribute type 29 has an invalid length. [ 539.980479][T26259] netlink: 'syz.2.5464': attribute type 29 has an invalid length. [ 540.022359][T26259] netlink: 500 bytes leftover after parsing attributes in process `syz.2.5464'. [ 540.040185][T26264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5467'. [ 540.097080][T26264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5467'. [ 540.157753][ T5639] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 540.168987][ T5639] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 540.182186][ T5639] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 540.190356][ T5639] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 540.201400][ T5639] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 540.256288][ T5643] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 540.267554][ T5643] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 540.277145][ T5643] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 540.288539][ T5643] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 540.300793][ T5643] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 540.481813][T26286] xt_cluster: node mask cannot exceed total number of nodes [ 540.968025][T26270] xfrm0 speed is unknown, defaulting to 1000 [ 541.401928][T26270] lo speed is unknown, defaulting to 1000 [ 541.445084][T26270] syzkaller0 speed is unknown, defaulting to 1000 [ 541.521863][T26352] validate_nla: 2 callbacks suppressed [ 541.521882][T26352] netlink: 'syz.2.5489': attribute type 29 has an invalid length. [ 541.551947][T26352] netlink: 'syz.2.5489': attribute type 29 has an invalid length. [ 541.571789][T26352] netlink: 'syz.2.5489': attribute type 32 has an invalid length. [ 541.598212][T26354] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 541.608468][T26357] tipc: Started in network mode [ 541.626241][T26357] tipc: Node identity , cluster identity 4711 [ 541.639814][T26357] tipc: Failed to set node id, please configure manually [ 541.664762][T26357] tipc: Enabling of bearer rejected, failed to enable media [ 541.831969][T26364] netlink: 'syz.0.5491': attribute type 11 has an invalid length. [ 541.878065][T26379] netlink: 'syz.2.5497': attribute type 3 has an invalid length. [ 541.886145][T26379] netlink: 'syz.2.5497': attribute type 3 has an invalid length. [ 542.030132][T26384] netlink: 'syz.4.5500': attribute type 29 has an invalid length. [ 542.048623][T26384] netlink: 'syz.4.5500': attribute type 29 has an invalid length. [ 542.209628][T26270] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.217827][T26270] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.226280][T26270] bridge_slave_0: entered allmulticast mode [ 542.234926][T26270] bridge_slave_0: entered promiscuous mode [ 542.245082][T26270] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.253069][T26270] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.260843][T26270] bridge_slave_1: entered allmulticast mode [ 542.269708][T26270] bridge_slave_1: entered promiscuous mode [ 542.318572][T26270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.348190][T26270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.385508][ T5639] Bluetooth: hci3: command tx timeout [ 542.437815][T26270] team0: Port device team_slave_0 added [ 542.447088][T26270] team0: Port device team_slave_1 added [ 542.485041][T26270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.492097][T26270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.525145][T26270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.538395][T26270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.556601][T26270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.610452][T26270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.721708][T26270] hsr_slave_0: entered promiscuous mode [ 542.729150][T26270] hsr_slave_1: entered promiscuous mode [ 542.736368][T26270] debugfs: 'hsr0' already exists in 'hsr' [ 542.752018][T26270] Cannot create hsr debugfs directory [ 542.893007][T26424] xt_hashlimit: size too large, truncated to 1048576 [ 543.138030][T26437] sctp: [Deprecated]: syz.2.5511 (pid 26437) Use of int in maxseg socket option. [ 543.138030][T26437] Use struct sctp_assoc_value instead [ 543.166163][T26435] netlink: 'syz.1.5510': attribute type 29 has an invalid length. [ 543.177833][T26438] netlink: 'syz.1.5510': attribute type 29 has an invalid length. [ 543.178624][T26437] sctp: [Deprecated]: syz.2.5511 (pid 26437) Use of int in maxseg socket option. [ 543.178624][T26437] Use struct sctp_assoc_value instead [ 543.204384][T26435] FAULT_INJECTION: forcing a failure. [ 543.204384][T26435] name failslab, interval 1, probability 0, space 0, times 0 [ 543.235452][T26435] CPU: 0 UID: 0 PID: 26435 Comm: syz.1.5510 Not tainted syzkaller #0 PREEMPT(full) [ 543.235494][T26435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 543.235516][T26435] Call Trace: [ 543.235523][T26435] [ 543.235531][T26435] dump_stack_lvl+0xe8/0x150 [ 543.235557][T26435] should_fail_ex+0x412/0x560 [ 543.235585][T26435] should_failslab+0xa8/0x100 [ 543.235611][T26435] ? skb_clone+0x212/0x3a0 [ 543.235635][T26435] kmem_cache_alloc_noprof+0x87/0x650 [ 543.235658][T26435] ? __netlink_lookup+0xc6/0x8b0 [ 543.235687][T26435] skb_clone+0x212/0x3a0 [ 543.235724][T26435] __netlink_deliver_tap+0x404/0x850 [ 543.235758][T26435] ? netlink_deliver_tap+0x2e/0x1b0 [ 543.235782][T26435] netlink_deliver_tap+0x19c/0x1b0 [ 543.235804][T26435] netlink_unicast+0x730/0x8e0 [ 543.235834][T26435] netlink_sendmsg+0x813/0xb40 [ 543.235864][T26435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 543.235890][T26435] ? aa_sock_msg_perm+0xf1/0x1b0 [ 543.235915][T26435] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 543.235942][T26435] ____sys_sendmsg+0x972/0x9f0 [ 543.235964][T26435] ? __might_fault+0xaf/0x130 [ 543.235993][T26435] ? __pfx_____sys_sendmsg+0x10/0x10 [ 543.236023][T26435] ? import_iovec+0x73/0xa0 [ 543.236049][T26435] ___sys_sendmsg+0x2a5/0x360 [ 543.236068][T26435] ? __lock_acquire+0x6b5/0x2cf0 [ 543.236090][T26435] ? __pfx____sys_sendmsg+0x10/0x10 [ 543.236147][T26435] ? __fget_files+0x2a/0x420 [ 543.236166][T26435] ? __fget_files+0x3a0/0x420 [ 543.236203][T26435] __x64_sys_sendmsg+0x1bd/0x2a0 [ 543.236230][T26435] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 543.236262][T26435] ? __pfx_ksys_write+0x10/0x10 [ 543.236295][T26435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.236314][T26435] do_syscall_64+0x15f/0xf80 [ 543.236336][T26435] ? trace_irq_disable+0x3b/0x140 [ 543.236359][T26435] ? clear_bhb_loop+0x40/0x90 [ 543.236381][T26435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.236398][T26435] RIP: 0033:0x7f4cbe19cdd9 [ 543.236415][T26435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.236430][T26435] RSP: 002b:00007f4cbef90028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 543.236448][T26435] RAX: ffffffffffffffda RBX: 00007f4cbe415fa0 RCX: 00007f4cbe19cdd9 [ 543.236461][T26435] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000000000000004 [ 543.236472][T26435] RBP: 00007f4cbef90090 R08: 0000000000000000 R09: 0000000000000000 [ 543.236482][T26435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.236493][T26435] R13: 00007f4cbe416038 R14: 00007f4cbe415fa0 R15: 00007ffe19c974d8 [ 543.236524][T26435] [ 543.237783][T26435] __nla_validate_parse: 8 callbacks suppressed [ 543.237796][T26435] netlink: 500 bytes leftover after parsing attributes in process `syz.1.5510'. [ 543.248363][T26270] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 543.418773][T26442] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5513'. [ 543.444217][T26443] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5513'. [ 543.558737][T26270] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 543.573007][T26270] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 543.598673][T26270] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 543.661596][T26270] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 543.672282][T26456] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5516'. [ 543.684588][T26270] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 543.694360][T26270] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 543.701389][T26454] netlink: 500 bytes leftover after parsing attributes in process `syz.4.5517'. [ 543.733071][T26270] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 543.811413][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880a5622c00: rx timeout, send abort [ 543.846148][T26469] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5519'. [ 543.887371][T26474] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 543.932663][T26270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.958058][T26474] syzkaller0: entered promiscuous mode [ 543.969036][T26474] syzkaller0: entered allmulticast mode [ 543.982428][T26478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5521'. [ 544.034501][T26478] 8021q: adding VLAN 0 to HW filter on device bond10 [ 544.093701][T26270] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.159951][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.167164][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.229403][ T7018] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.236622][ T7018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.311527][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880a5622800: rx timeout, send abort [ 544.321979][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880a5622c00: abort rx timeout. Force session deactivation [ 544.453790][ T5639] Bluetooth: hci3: command tx timeout [ 544.559211][T26504] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 544.649675][T26509] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5523'. [ 544.680065][T26510] syzkaller0: entered promiscuous mode [ 544.702810][T26510] syzkaller0: entered allmulticast mode [ 544.729296][T26515] veth0_to_bond: Caught tx_queue_len zero misconfig [ 544.801149][T26519] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5528'. [ 544.819792][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880a5622800: abort rx timeout. Force session deactivation [ 544.876603][T26521] netlink: 500 bytes leftover after parsing attributes in process `syz.1.5529'. [ 545.088881][T26535] openvswitch: netlink: Flow key attribute not present in set flow. [ 545.163133][T26526] FAULT_INJECTION: forcing a failure. [ 545.163133][T26526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.291738][T26526] CPU: 1 UID: 0 PID: 26526 Comm: syz.2.5530 Not tainted syzkaller #0 PREEMPT(full) [ 545.291770][T26526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 545.291781][T26526] Call Trace: [ 545.291788][T26526] [ 545.291796][T26526] dump_stack_lvl+0xe8/0x150 [ 545.291822][T26526] should_fail_ex+0x412/0x560 [ 545.291849][T26526] _copy_from_user+0x2d/0xb0 [ 545.291874][T26526] ___sys_sendmsg+0x1c6/0x360 [ 545.291897][T26526] ? __lock_acquire+0x6b5/0x2cf0 [ 545.291920][T26526] ? __pfx____sys_sendmsg+0x10/0x10 [ 545.291948][T26526] ? kstrtouint+0x6e/0xe0 [ 545.291990][T26526] ? __fget_files+0x2a/0x420 [ 545.292011][T26526] ? __fget_files+0x3a0/0x420 [ 545.292041][T26526] __sys_sendmmsg+0x27c/0x4e0 [ 545.292067][T26526] ? __pfx___sys_sendmmsg+0x10/0x10 [ 545.292086][T26526] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 545.292132][T26526] ? ksys_write+0x242/0x270 [ 545.292158][T26526] ? __pfx_ksys_write+0x10/0x10 [ 545.292189][T26526] __x64_sys_sendmmsg+0xa0/0xc0 [ 545.292212][T26526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.292231][T26526] do_syscall_64+0x15f/0xf80 [ 545.292252][T26526] ? trace_irq_disable+0x3b/0x140 [ 545.292277][T26526] ? clear_bhb_loop+0x40/0x90 [ 545.292299][T26526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.292317][T26526] RIP: 0033:0x7fba0539cdd9 [ 545.292333][T26526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.292348][T26526] RSP: 002b:00007fba035f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 545.292367][T26526] RAX: ffffffffffffffda RBX: 00007fba05615fa0 RCX: 00007fba0539cdd9 [ 545.292380][T26526] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000008 [ 545.292393][T26526] RBP: 00007fba035f6090 R08: 0000000000000000 R09: 0000000000000000 [ 545.292404][T26526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.292414][T26526] R13: 00007fba05616038 R14: 00007fba05615fa0 R15: 00007fff0dd543c8 [ 545.292444][T26526] [ 545.938921][T26270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.534233][ T5639] Bluetooth: hci3: command tx timeout [ 546.775919][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.783198][ C1] bridge0: topology change detected, propagating [ 546.897549][T26270] veth0_vlan: entered promiscuous mode [ 546.962589][T26648] validate_nla: 13 callbacks suppressed [ 546.962616][T26648] netlink: 'syz.2.5555': attribute type 29 has an invalid length. [ 547.049850][T26654] netlink: 'syz.2.5555': attribute type 29 has an invalid length. [ 547.073866][T26648] netlink: 'syz.2.5555': attribute type 32 has an invalid length. [ 547.099626][T26270] veth1_vlan: entered promiscuous mode [ 547.207883][T26270] veth0_macvtap: entered promiscuous mode [ 547.249359][T26270] veth1_macvtap: entered promiscuous mode [ 547.338007][T26270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.381270][T26664] syzkaller0: mtu less than device minimum [ 547.399896][T26270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.429073][T26664] syzkaller0: entered allmulticast mode [ 547.451193][T12888] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.476978][T12888] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.620076][T26672] FAULT_INJECTION: forcing a failure. [ 547.620076][T26672] name failslab, interval 1, probability 0, space 0, times 0 [ 547.698655][T26672] CPU: 0 UID: 0 PID: 26672 Comm: syz.0.5554 Not tainted syzkaller #0 PREEMPT(full) [ 547.698681][T26672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 547.698693][T26672] Call Trace: [ 547.698700][T26672] [ 547.698709][T26672] dump_stack_lvl+0xe8/0x150 [ 547.698736][T26672] should_fail_ex+0x412/0x560 [ 547.698762][T26672] should_failslab+0xa8/0x100 [ 547.698791][T26672] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 547.698816][T26672] ? __alloc_skb+0x186/0x7d0 [ 547.698835][T26672] ? __alloc_skb+0x1d0/0x7d0 [ 547.698852][T26672] ? __local_bh_enable_ip+0xd0/0x130 [ 547.698876][T26672] __alloc_skb+0x1d0/0x7d0 [ 547.698901][T26672] netlink_sendmsg+0x5d4/0xb40 [ 547.698933][T26672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 547.698959][T26672] ? aa_sock_msg_perm+0xf1/0x1b0 [ 547.698984][T26672] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 547.699010][T26672] ____sys_sendmsg+0x972/0x9f0 [ 547.699032][T26672] ? __might_fault+0xaf/0x130 [ 547.699059][T26672] ? __pfx_____sys_sendmsg+0x10/0x10 [ 547.699090][T26672] ? import_iovec+0x73/0xa0 [ 547.699117][T26672] ___sys_sendmsg+0x2a5/0x360 [ 547.699139][T26672] ? __lock_acquire+0x6b5/0x2cf0 [ 547.699161][T26672] ? __pfx____sys_sendmsg+0x10/0x10 [ 547.699187][T26672] ? kstrtouint+0x6e/0xe0 [ 547.699230][T26672] ? __fget_files+0x2a/0x420 [ 547.699250][T26672] ? __fget_files+0x3a0/0x420 [ 547.699285][T26672] __sys_sendmmsg+0x27c/0x4e0 [ 547.699314][T26672] ? __pfx___sys_sendmmsg+0x10/0x10 [ 547.699334][T26672] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 547.699380][T26672] ? ksys_write+0x242/0x270 [ 547.699406][T26672] ? __pfx_ksys_write+0x10/0x10 [ 547.699437][T26672] __x64_sys_sendmmsg+0xa0/0xc0 [ 547.699460][T26672] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.699478][T26672] do_syscall_64+0x15f/0xf80 [ 547.699498][T26672] ? trace_irq_disable+0x3b/0x140 [ 547.699523][T26672] ? clear_bhb_loop+0x40/0x90 [ 547.699545][T26672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.699562][T26672] RIP: 0033:0x7f7b05b9cdd9 [ 547.699580][T26672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.699594][T26672] RSP: 002b:00007f7b06a66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 547.699614][T26672] RAX: ffffffffffffffda RBX: 00007f7b05e16180 RCX: 00007f7b05b9cdd9 [ 547.699627][T26672] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000008 [ 547.699639][T26672] RBP: 00007f7b06a66090 R08: 0000000000000000 R09: 0000000000000000 [ 547.699651][T26672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.699661][T26672] R13: 00007f7b05e16218 R14: 00007f7b05e16180 R15: 00007ffc30782d98 [ 547.699689][T26672] [ 548.009364][T12888] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.018176][T12888] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.286899][T26691] __nla_validate_parse: 5 callbacks suppressed [ 548.286918][T26691] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5561'. [ 548.614172][ T5639] Bluetooth: hci3: command tx timeout [ 548.915257][T26699] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5563'. [ 548.925133][T26698] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5563'. [ 548.937140][T26699] netlink: 6116 bytes leftover after parsing attributes in process `syz.2.5563'. [ 548.937166][T26698] netlink: 6116 bytes leftover after parsing attributes in process `syz.2.5563'. [ 549.317367][T26708] netlink: 'syz.2.5566': attribute type 29 has an invalid length. [ 549.327274][T26708] netlink: 'syz.2.5566': attribute type 29 has an invalid length. [ 549.337565][T26708] netlink: 'syz.2.5566': attribute type 32 has an invalid length. [ 549.345703][T26708] netlink: 500 bytes leftover after parsing attributes in process `syz.2.5566'. [ 549.432901][T26711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5567'. [ 549.614914][T26629] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 549.717556][ T7023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.761506][ T7023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.853250][ T7023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.879264][ T7023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.156964][T26744] netlink: 'syz.0.5576': attribute type 29 has an invalid length. [ 550.230875][T26744] netlink: 'syz.0.5576': attribute type 29 has an invalid length. [ 550.300551][T26744] netlink: 792 bytes leftover after parsing attributes in process `syz.0.5576'. [ 550.565313][T26772] netlink: 'syz.6.5581': attribute type 1 has an invalid length. [ 550.589046][T26772] netlink: 280 bytes leftover after parsing attributes in process `syz.6.5581'. [ 550.632706][T26776] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5582'. [ 550.669301][T26776] --map-set only usable from mangle table [ 550.770566][T26792] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 550.821407][T26791] No such timeout policy "syz1" [ 550.827495][T26779] bond1 (unregistering): Released all slaves [ 551.078827][T26805] netlink: 'syz.6.5588': attribute type 1 has an invalid length. [ 551.120726][ T30] audit: type=1804 audit(1778106449.970:17): pid=26806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5587" name="/newroot/533/cgroup.controllers" dev="tmpfs" ino=2734 res=1 errno=0 [ 551.166772][T26810] Bluetooth: MGMT ver 1.23 [ 551.186349][ T30] audit: type=1800 audit(1778106449.970:18): pid=26806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5587" name="cgroup.controllers" dev="tmpfs" ino=2734 res=0 errno=0 [ 551.255272][ T2335] block nbd3: Possible stuck request ffff888027367000: control (read@0,1024B). Runtime 240 seconds [ 551.266950][ T2335] block nbd3: Possible stuck request ffff8880273671c0: control (read@1024,1024B). Runtime 240 seconds [ 551.278471][ T2335] block nbd3: Possible stuck request ffff888027367380: control (read@2048,1024B). Runtime 240 seconds [ 551.289561][ T2335] block nbd3: Possible stuck request ffff888027367540: control (read@3072,1024B). Runtime 240 seconds [ 551.539193][T26831] x_tables: duplicate underflow at hook 2 [ 551.559473][T26821] bond0: entered promiscuous mode [ 551.585271][T26821] bond_slave_0: entered promiscuous mode [ 551.594315][T26821] bond_slave_1: entered promiscuous mode [ 551.617758][T26821] gretap0: entered promiscuous mode [ 551.624415][T26821] debugfs: 'hsr0' already exists in 'hsr' [ 551.636105][T26821] Cannot create hsr debugfs directory [ 551.642558][T26821] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 551.659873][T26821] hsr0: entered promiscuous mode [ 552.170952][T26866] validate_nla: 7 callbacks suppressed [ 552.170970][T26866] netlink: 'syz.4.5609': attribute type 24 has an invalid length. [ 552.460144][T26891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 552.536694][T26893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 552.575986][T26891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 552.656676][T26891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 552.872983][T26911] openvswitch: netlink: Key type 132 is out of range max 32 [ 553.086073][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.104389][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.128036][T26918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 553.130287][T26917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 553.442368][T26938] __nla_validate_parse: 13 callbacks suppressed [ 553.442386][T26938] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5629'. [ 553.556997][T26946] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5634'. [ 553.612432][T26940] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5631'. [ 553.626870][T26951] ipt_ECN: cannot use operation on non-tcp rule [ 553.691138][T26953] netlink: 'syz.6.5635': attribute type 29 has an invalid length. [ 553.701189][T26953] netlink: 'syz.6.5635': attribute type 29 has an invalid length. [ 553.786263][T26960] netlink: 'syz.6.5635': attribute type 32 has an invalid length. [ 553.799688][T26960] netlink: 500 bytes leftover after parsing attributes in process `syz.6.5635'. [ 554.447122][T27007] openvswitch: netlink: Actions may not be safe on all matching packets [ 554.465625][T27010] netlink: 'syz.4.5650': attribute type 29 has an invalid length. [ 554.488794][T27010] netlink: 'syz.4.5650': attribute type 29 has an invalid length. [ 554.561863][T27019] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5650'. [ 554.765983][T27027] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 554.845516][T27034] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5659'. [ 554.861766][T27034] netlink: 'syz.2.5659': attribute type 7 has an invalid length. [ 554.869983][T27034] netlink: 'syz.2.5659': attribute type 8 has an invalid length. [ 554.877245][T27037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.879262][T27034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5659'. [ 555.508843][T27074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5673'. [ 555.610316][T27081] tipc: Trying to set illegal importance in message [ 555.624228][T27076] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5674'. [ 555.635604][T27081] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5673'. [ 555.944475][T27095] sctp: [Deprecated]: syz.2.5679 (pid 27095) Use of int in max_burst socket option. [ 555.944475][T27095] Use struct sctp_assoc_value instead [ 555.963052][T27095] netlink: 'syz.2.5679': attribute type 9 has an invalid length. [ 556.114517][T27098] pim6reg527: entered allmulticast mode [ 556.153017][T27102] veth0: entered promiscuous mode [ 556.176168][T27101] veth0: left promiscuous mode [ 556.274833][T27108] netlink: 'syz.2.5682': attribute type 29 has an invalid length. [ 557.080284][T27153] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 557.117195][T27153] syzkaller0: entered promiscuous mode [ 557.138760][T27153] syzkaller0: entered allmulticast mode [ 557.348433][T27171] sctp: [Deprecated]: syz.0.5700 (pid 27171) Use of int in max_burst socket option deprecated. [ 557.348433][T27171] Use struct sctp_assoc_value instead [ 557.418900][T27175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 557.581290][T27190] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 2, id = 0 [ 557.742219][T27196] validate_nla: 3 callbacks suppressed [ 557.742232][T27196] netlink: 'syz.2.5708': attribute type 29 has an invalid length. [ 557.760234][T27196] netlink: 'syz.2.5708': attribute type 29 has an invalid length. [ 557.769395][T27147] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 557.779932][T27196] netlink: 'syz.2.5708': attribute type 32 has an invalid length. [ 557.780248][T27147] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 558.137326][T27217] xt_bpf: check failed: parse error [ 558.156484][T27217] xt_bpf: check failed: parse error [ 558.530359][T27230] netlink: 'syz.0.5716': attribute type 8 has an invalid length. [ 558.688642][T27242] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 558.700717][T27244] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 558.862910][T27248] __nla_validate_parse: 6 callbacks suppressed [ 558.862929][T27248] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5722'. [ 558.919789][T27250] netlink: 'syz.0.5723': attribute type 23 has an invalid length. [ 558.946272][T27252] netlink: 'syz.0.5723': attribute type 23 has an invalid length. [ 559.102599][T27254] veth0_to_bond: mtu less than device minimum [ 559.160577][T27260] netlink: 'syz.0.5727': attribute type 1 has an invalid length. [ 559.321185][T27268] bridge5: entered promiscuous mode [ 559.339223][T27268] bridge5: entered allmulticast mode [ 559.367354][T27270] netlink: 'syz.1.5730': attribute type 4 has an invalid length. [ 559.601973][T27289] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5732'. [ 559.629849][T27289] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5732'. [ 560.066861][T27326] netlink: 51 bytes leftover after parsing attributes in process `syz.1.5740'. [ 560.114413][T27326] netlink: 'syz.1.5740': attribute type 58 has an invalid length. [ 560.122502][T27326] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5740'. [ 561.067440][T27380] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5752'. [ 561.393254][T27393] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5755'. [ 561.808296][T27413] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5757'. [ 561.820271][T27413] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5757'. [ 561.919385][T27417] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5758'. [ 562.135376][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.145692][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.777004][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.920804][T27367] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 564.053961][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.128275][T27428] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5762'. [ 564.253385][T27434] syzkaller0: entered promiscuous mode [ 564.266856][T27434] syzkaller0: entered allmulticast mode [ 564.429302][T27449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 564.571064][T27457] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5769'. [ 564.745306][T27468] lo: entered promiscuous mode [ 564.756821][T27471] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5773'. [ 564.778937][T27468] netlink: 'syz.4.5772': attribute type 2 has an invalid length. [ 564.801385][T27473] netlink: 'syz.4.5772': attribute type 1 has an invalid length. [ 564.805953][T27468] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 564.829175][T27473] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5772'. [ 565.317623][ T5643] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 565.337039][ T5643] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 565.352150][ T5643] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 565.361786][ T5643] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 565.371717][T27492] netlink: 'syz.0.5779': attribute type 29 has an invalid length. [ 565.384480][ T5643] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 565.405543][T27487] netlink: 'syz.2.5778': attribute type 9 has an invalid length. [ 565.451330][T27496] netlink: 'syz.0.5779': attribute type 29 has an invalid length. [ 565.529936][T27492] netlink: 'syz.0.5779': attribute type 1 has an invalid length. [ 565.626485][T27499] IPv6: NLM_F_CREATE should be specified when creating new route [ 565.953405][T27505] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5783'. [ 566.211753][T27513] netlink: 124 bytes leftover after parsing attributes in process `syz.1.5785'. [ 566.346987][T27524] netlink: 'syz.1.5788': attribute type 1 has an invalid length. [ 566.564535][T27489] xfrm0 speed is unknown, defaulting to 1000 [ 566.593035][ T7023] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.612298][ T7023] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.637265][ T7023] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.656124][ T7023] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.694140][T12881] wlan1: Trigger new scan to find an IBSS to join [ 566.714357][T27545] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5793'. [ 566.725390][T27546] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 566.746434][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032343400: rx timeout, send abort [ 566.763959][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888032343400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 566.830935][T27550] tipc: Enabled bearer , priority 0 [ 566.966163][T27550] syzkaller0: entered promiscuous mode [ 566.980383][T27550] syzkaller0: entered allmulticast mode [ 566.988166][T27550] tipc: Resetting bearer [ 566.996106][T27489] lo speed is unknown, defaulting to 1000 [ 567.018250][T27549] tipc: Resetting bearer [ 567.506350][ T5643] Bluetooth: hci7: command tx timeout [ 567.895599][ T1121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.908019][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.385677][T27549] tipc: Disabling bearer [ 569.395790][T27489] syzkaller0 speed is unknown, defaulting to 1000 [ 569.574495][ T5643] Bluetooth: hci7: command tx timeout [ 569.633338][T27569] bond12: entered promiscuous mode [ 569.683167][T27569] bond12: entered allmulticast mode [ 569.702480][T27584] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5800'. [ 569.714104][T27569] 8021q: adding VLAN 0 to HW filter on device bond12 [ 569.750228][ T57] wlan1: Trigger new scan to find an IBSS to join [ 570.116763][T27602] xfrm0 speed is unknown, defaulting to 1000 [ 570.766371][T27623] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5810'. [ 570.789285][T27602] lo speed is unknown, defaulting to 1000 [ 570.795333][T27489] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.826602][T27489] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.840501][T27489] bridge_slave_0: entered allmulticast mode [ 570.866023][T27489] bridge_slave_0: entered promiscuous mode [ 570.886382][T27602] syzkaller0 speed is unknown, defaulting to 1000 [ 570.898705][T27489] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.926873][T27489] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.947907][T27489] bridge_slave_1: entered allmulticast mode [ 570.966402][T27489] bridge_slave_1: entered promiscuous mode [ 571.157832][T27489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.190609][T27489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.356370][T27489] team0: Port device team_slave_0 added [ 571.369108][T27489] team0: Port device team_slave_1 added [ 571.377179][T27660] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5818'. [ 571.482350][T27489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.489864][T27489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.490190][T27666] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input7 [ 571.538185][T27489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.559062][T27489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.568755][T27489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.611035][T27489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.655984][ T5643] Bluetooth: hci7: command tx timeout [ 571.764115][T27671] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.872244][T27489] hsr_slave_0: entered promiscuous mode [ 571.880323][T27489] hsr_slave_1: entered promiscuous mode [ 571.889765][T27489] debugfs: 'hsr0' already exists in 'hsr' [ 571.898157][T27489] Cannot create hsr debugfs directory [ 571.930495][T27681] sctp: [Deprecated]: syz.1.5824 (pid 27681) Use of struct sctp_assoc_value in delayed_ack socket option. [ 571.930495][T27681] Use struct sctp_sack_info instead [ 572.024430][T27686] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5825'. [ 572.048948][T27686] netlink: 'syz.1.5825': attribute type 11 has an invalid length. [ 572.070846][T27686] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5825'. [ 572.148381][T27688] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5826'. [ 572.418735][T27489] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.431697][T27489] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.471633][T27696] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5829'. [ 572.489735][T27704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5828'. [ 572.694802][ T153] wlan1: Trigger new scan to find an IBSS to join [ 572.698559][T27489] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.717346][T27489] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.735031][T27715] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 572.779824][T27703] syzkaller1: entered promiscuous mode [ 572.794090][T27703] syzkaller1: entered allmulticast mode [ 572.889771][T27724] openvswitch: netlink: IPv4 tun info is not correct [ 572.943163][T27489] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.987778][T27489] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.051451][T27732] bridge1: entered promiscuous mode [ 573.064327][T27732] bridge1: entered allmulticast mode [ 573.127805][T27489] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.153891][T27489] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.507854][T27753] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.5844'. [ 573.548875][T27757] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5846'. [ 573.601256][T27763] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 573.644780][ T1121] wlan1: Creating new IBSS network, BSSID 66:c8:21:2b:c4:17 [ 573.663835][T12888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.672114][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.735092][ T5643] Bluetooth: hci7: command tx timeout [ 573.811855][T27774] erspan0: entered allmulticast mode [ 573.971179][T27489] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 573.980834][T27785] netlink: 'syz.0.5853': attribute type 64 has an invalid length. [ 573.999707][T27489] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 574.009007][T27489] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 574.020499][T27489] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 574.139935][T27489] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 574.155664][T23971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.177440][T27489] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 574.192696][T27489] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 574.203880][T27489] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 574.219083][T27791] syzkaller1: entered promiscuous mode [ 574.226274][T27791] syzkaller1: entered allmulticast mode [ 574.236298][T27785] erspan0: left promiscuous mode [ 574.390503][T27810] Can't find ip_set type bitmap:ip,mac [ 574.392515][T27809] Can't find ip_set type bitmap:ip,mac [ 574.620943][T27828] netlink: 'syz.6.5860': attribute type 4 has an invalid length. [ 574.692491][T27489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.758791][T27489] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.787696][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.794908][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.822190][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.829400][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.950131][T27846] netlink: 'syz.6.5867': attribute type 1 has an invalid length. [ 575.015049][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.035303][T27852] nbd: socks must be embedded in a SOCK_ITEM attr [ 575.042611][T27846] 8021q: adding VLAN 0 to HW filter on device bond1 [ 575.069769][T27850] vlan2: entered promiscuous mode [ 575.075884][T27850] hsr0: entered promiscuous mode [ 575.080962][T27850] vlan2: entered allmulticast mode [ 575.087735][T27850] hsr0: entered allmulticast mode [ 575.092801][T27850] hsr_slave_0: entered allmulticast mode [ 575.100558][T27850] hsr_slave_1: entered allmulticast mode [ 575.126191][T27851] bond1: (slave geneve2): making interface the new active one [ 575.135745][T27851] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 575.146158][ T7015] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 575.170378][ T7015] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 575.211796][ T7015] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 575.239729][ T7015] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 575.648519][T27888] __nla_validate_parse: 1 callbacks suppressed [ 575.648536][T27888] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5875'. [ 576.065363][T27489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.109928][T27916] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5882'. [ 576.311754][T27923] netlink: 9 bytes leftover after parsing attributes in process `syz.6.5883'. [ 576.331987][T27923] vlan0: entered promiscuous mode [ 576.370998][T27925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5885'. [ 576.605446][T27935] netlink: 'syz.0.5886': attribute type 29 has an invalid length. [ 576.646754][T27935] netlink: 'syz.0.5886': attribute type 29 has an invalid length. [ 576.664664][T27935] netlink: 'syz.0.5886': attribute type 32 has an invalid length. [ 576.684670][T27935] netlink: 500 bytes leftover after parsing attributes in process `syz.0.5886'. [ 576.736653][T27489] veth0_vlan: entered promiscuous mode [ 576.766494][T27489] veth1_vlan: entered promiscuous mode [ 576.866869][T27489] veth0_macvtap: entered promiscuous mode [ 576.892393][T27489] veth1_macvtap: entered promiscuous mode [ 576.959609][T27489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 577.005191][T27489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 577.041945][T27949] netlink: 'syz.0.5890': attribute type 2 has an invalid length. [ 577.064766][T27949] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 577.149293][ T153] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.201655][ T153] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.236401][ T153] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.262335][ T153] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.375671][T27957] syzkaller0: entered promiscuous mode [ 577.389791][T27957] syzkaller0: entered allmulticast mode [ 577.961455][T27991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5898'. [ 580.180377][T27995] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 580.226664][T27997] netlink: 'syz.0.5900': attribute type 5 has an invalid length. [ 580.239072][T27997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5900'. [ 580.251030][T12885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.261104][T12885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.349576][T28003] xt_bpf: check failed: parse error [ 580.394507][T28001] netlink: 'syz.2.5901': attribute type 21 has an invalid length. [ 580.406419][T28001] netlink: 'syz.2.5901': attribute type 22 has an invalid length. [ 580.407605][T12886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.450134][T28001] netlink: 'syz.2.5901': attribute type 23 has an invalid length. [ 580.469194][T12886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.502073][T28001] netlink: 'syz.2.5901': attribute type 25 has an invalid length. [ 580.527677][T28001] netlink: 'syz.2.5901': attribute type 26 has an invalid length. [ 580.561480][T28001] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5901'. [ 580.619037][T28016] netlink: 164 bytes leftover after parsing attributes in process `syz.6.5904'. [ 581.237080][ T5639] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 581.256983][ T5639] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 581.271970][ T5639] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 581.288374][ T5639] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 581.296613][ T5639] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 581.339014][ T2335] block nbd3: Possible stuck request ffff888027367000: control (read@0,1024B). Runtime 270 seconds [ 581.350018][ T2335] block nbd3: Possible stuck request ffff8880273671c0: control (read@1024,1024B). Runtime 270 seconds [ 581.361282][ T2335] block nbd3: Possible stuck request ffff888027367380: control (read@2048,1024B). Runtime 270 seconds [ 581.375084][ T2335] block nbd3: Possible stuck request ffff888027367540: control (read@3072,1024B). Runtime 270 seconds [ 581.786932][T28083] ip6t_REJECT: ECHOREPLY is not supported [ 582.211306][T28100] Cannot find add_set index 2 as target [ 582.328829][T28052] xfrm0 speed is unknown, defaulting to 1000 [ 582.741201][T28119] netlink: 240 bytes leftover after parsing attributes in process `syz.0.5926'. [ 582.765442][T28122] netlink: 'syz.6.5925': attribute type 3 has an invalid length. [ 582.901421][T28052] lo speed is unknown, defaulting to 1000 [ 582.932894][T28052] syzkaller0 speed is unknown, defaulting to 1000 [ 583.148549][T28143] IPVS: length: 4096 != 8 [ 583.414588][ T5639] Bluetooth: hci1: command tx timeout [ 583.839537][T28177] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 583.950813][T28052] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.966456][T28052] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.975464][T28052] bridge_slave_0: entered allmulticast mode [ 583.983245][T28052] bridge_slave_0: entered promiscuous mode [ 584.010288][T28052] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.035922][T28052] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.069013][T28052] bridge_slave_1: entered allmulticast mode [ 584.096552][T28052] bridge_slave_1: entered promiscuous mode [ 584.109607][T28191] netlink: 'syz.6.5939': attribute type 3 has an invalid length. [ 584.120272][T28199] netlink: 'syz.0.5940': attribute type 1 has an invalid length. [ 584.192291][T28195] syzkaller0: entered promiscuous mode [ 584.209321][T28195] syzkaller0: entered allmulticast mode [ 584.532027][T28217] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5941'. [ 584.562937][T28201] bond7: (slave geneve4): making interface the new active one [ 584.582035][T28201] bond7: (slave geneve4): Enslaving as an active interface with an up link [ 585.496268][ T5639] Bluetooth: hci1: command tx timeout [ 586.705005][ T7024] wlan1: Trigger new scan to find an IBSS to join [ 587.038183][ T7015] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 587.047889][ T7015] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 587.063235][T28052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.137126][ T7015] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 587.162579][ T7015] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 587.189837][T28052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.413242][T28052] team0: Port device team_slave_0 added [ 587.432675][T28260] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5953'. [ 587.446640][T28052] team0: Port device team_slave_1 added [ 587.571138][T28052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.586281][ T5639] Bluetooth: hci1: command tx timeout [ 587.607916][T28052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.645715][T28052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.659418][T28052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.669467][T28052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.708145][T28052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.758681][T28276] netlink: 240 bytes leftover after parsing attributes in process `syz.1.5957'. [ 587.882338][T28052] hsr_slave_0: entered promiscuous mode [ 587.895368][T28052] hsr_slave_1: entered promiscuous mode [ 587.905847][T28052] debugfs: 'hsr0' already exists in 'hsr' [ 587.911617][T28052] Cannot create hsr debugfs directory [ 587.922597][T28280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5958'. [ 587.935140][T28280] netem: invalid attributes len -5 [ 587.940301][T28280] netem: change failed [ 588.561042][T28328] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5969'. [ 588.757997][T28341] netlink: 'syz.4.5971': attribute type 1 has an invalid length. [ 588.759325][T28052] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.779357][T28052] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.791153][T28052] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 588.801628][T28052] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 588.842053][T28339] netlink: 272 bytes leftover after parsing attributes in process `syz.0.5973'. [ 588.958475][T28350] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5974'. [ 589.012501][T28353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5976'. [ 589.041249][T28052] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.046124][T28356] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 589.052314][T28052] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.070177][T28052] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 589.081787][T28052] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 589.109562][T28354] ip6gre1: entered allmulticast mode [ 589.211858][T28052] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.239960][T28052] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.293022][T28052] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 589.310259][T28052] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 589.336452][T28363] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.5974'. [ 589.406368][T28367] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.455680][T28052] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.476167][T28052] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.488485][T28052] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 589.508893][T28052] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 589.554653][T28367] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 589.656910][ T5643] Bluetooth: hci1: command tx timeout [ 589.719991][T28377] xfrm0 speed is unknown, defaulting to 1000 [ 589.747689][ T136] wlan1: Trigger new scan to find an IBSS to join [ 589.874282][T28391] netlink: 1204 bytes leftover after parsing attributes in process `syz.0.5985'. [ 589.956487][T28394] netlink: 180 bytes leftover after parsing attributes in process `syz.4.5987'. [ 590.244458][ T5639] block nbd9: Receive control failed (result -32) [ 590.356033][T28052] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 590.380071][T28052] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 590.396147][T28377] lo speed is unknown, defaulting to 1000 [ 590.402786][T28052] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 590.456066][T28052] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 590.473121][T28377] syzkaller0 speed is unknown, defaulting to 1000 [ 590.481411][T28052] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 590.517003][T28052] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 590.560816][T28052] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 590.591124][T28052] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 590.687246][ T7021] wlan1: Creating new IBSS network, BSSID 62:93:9f:5c:88:9d [ 590.734657][T28420] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5994'. [ 590.904416][T28423] tipc: Started in network mode [ 590.925592][T28423] tipc: Node identity ac1414aa, cluster identity 4711 [ 590.954525][T28423] tipc: Enabled bearer , priority 10 [ 591.040303][T28052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.132510][T28423] : entered promiscuous mode [ 591.199920][T28052] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.252932][T12886] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.260086][T12886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 591.296224][ T7021] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.303492][ T7021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 591.607909][T28454] netlink: 'syz.1.6001': attribute type 10 has an invalid length. [ 591.642580][T28460] netlink: 'syz.1.6001': attribute type 10 has an invalid length. [ 592.077535][T28486] syzkaller0: entered promiscuous mode [ 592.091728][T28486] syzkaller0: entered allmulticast mode [ 592.110587][ T7629] tipc: Node number set to 2886997162 [ 592.305796][T28052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 592.333979][T28497] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 592.341254][T28497] IPv6: NLM_F_CREATE should be set when creating new route [ 592.429283][T28052] veth0_vlan: entered promiscuous mode [ 592.468934][T28052] veth1_vlan: entered promiscuous mode [ 592.521432][T28502] Can't find ip_set type [ 592.546568][T28503] Can't find ip_set type [ 592.591822][T28052] veth0_macvtap: entered promiscuous mode [ 592.639887][T28052] veth1_macvtap: entered promiscuous mode [ 592.685223][T28052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 592.762195][T28510] ip6erspan0: entered allmulticast mode [ 592.806607][T28052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 592.847036][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.861718][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.965238][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.974976][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.247008][ T7015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.277654][ T7015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.360271][T28527] syzkaller0: entered promiscuous mode [ 593.375593][T28527] syzkaller0: entered allmulticast mode [ 593.396386][T12886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.419055][T12886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.522662][T28538] __nla_validate_parse: 3 callbacks suppressed [ 593.522680][T28538] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6018'. [ 594.092016][ T5643] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 594.107944][T28563] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6020'. [ 594.118348][ T5643] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 594.129227][ T5643] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 594.149380][ T5643] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 594.159009][ T5643] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 594.590660][T28583] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6027'. [ 594.614739][T28584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6026'. [ 594.630164][T28583] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6027'. [ 594.689779][T28583] bridge2: port 1(vlan1) entered blocking state [ 594.694389][T28587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6026'. [ 594.698718][T28583] bridge2: port 1(vlan1) entered disabled state [ 594.712900][T28583] vlan1: entered allmulticast mode [ 594.718847][T28583] bridge2: entered allmulticast mode [ 594.737651][T28583] vlan1: left allmulticast mode [ 594.742658][T28583] bridge2: left allmulticast mode [ 595.053122][T28595] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 595.060432][T28595] IPv6: NLM_F_CREATE should be set when creating new route [ 595.079270][T28560] xfrm0 speed is unknown, defaulting to 1000 [ 595.208087][T28603] sctp: [Deprecated]: syz.4.6028 (pid 28603) Use of struct sctp_assoc_value in delayed_ack socket option. [ 595.208087][T28603] Use struct sctp_sack_info instead [ 595.397743][T28608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6032'. [ 595.506810][T28610] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6033'. [ 595.530494][T28610] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6033'. [ 595.716604][T28560] lo speed is unknown, defaulting to 1000 [ 595.751281][T28560] syzkaller0 speed is unknown, defaulting to 1000 [ 595.860395][T28624] syzkaller0: entered promiscuous mode [ 595.869949][T28624] syzkaller0: entered allmulticast mode [ 595.898318][T28624] netlink: 88 bytes leftover after parsing attributes in process `syz.6.6036'. [ 596.066472][T28632] netlink: 'syz.2.6038': attribute type 3 has an invalid length. [ 596.215821][ T5643] Bluetooth: hci2: command tx timeout [ 596.530033][T28560] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.543517][T28560] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.551001][T28560] bridge_slave_0: entered allmulticast mode [ 596.560997][T28560] bridge_slave_0: entered promiscuous mode [ 596.600851][T28560] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.622506][T28560] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.644604][T28560] bridge_slave_1: entered allmulticast mode [ 596.662264][T28560] bridge_slave_1: entered promiscuous mode [ 596.751305][T28560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.806866][T28560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 596.963398][T28560] team0: Port device team_slave_0 added [ 597.002381][T28560] team0: Port device team_slave_1 added [ 597.142798][T28670] netlink: 'syz.4.6049': attribute type 3 has an invalid length. [ 597.187417][T28560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.217652][T28560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 597.259046][T28560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.319793][T28560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.348961][T28560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 597.410470][T28560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.616306][T28560] hsr_slave_0: entered promiscuous mode [ 597.626448][T28560] hsr_slave_1: entered promiscuous mode [ 597.633079][T28560] debugfs: 'hsr0' already exists in 'hsr' [ 597.639549][T28560] Cannot create hsr debugfs directory [ 597.898873][T28701] syzkaller0: entered promiscuous mode [ 597.905106][T28701] syzkaller0: entered allmulticast mode [ 598.118472][T28714] netlink: 'syz.0.6066': attribute type 1 has an invalid length. [ 598.165316][T28560] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 598.178312][T28560] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.192464][T28718] openvswitch: netlink: Flow key attr not present in new flow. [ 598.241500][T28718] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component [ 598.306140][ T5643] Bluetooth: hci2: command tx timeout [ 598.327679][T28560] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 598.339583][T28560] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.342669][T28725] IPv6: NLM_F_CREATE should be specified when creating new route [ 598.361831][T28724] IPv6: NLM_F_CREATE should be specified when creating new route [ 598.499813][T28560] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 598.511799][T28560] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.766109][T28560] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 598.796817][T28560] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.982379][T28756] __nla_validate_parse: 14 callbacks suppressed [ 598.982399][T28756] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.6079'. [ 599.235535][T28560] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 599.246844][T28560] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 599.255843][T28560] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 599.266837][T28560] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 599.280341][T28560] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 599.292110][T28560] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 599.300288][T28560] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 599.314169][T28560] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 599.388086][T28774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6082'. [ 599.421677][T28774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6082'. [ 599.434909][ T57] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.456318][ T57] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.475627][ T57] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.501365][ T57] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.530775][T28560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.553917][T28560] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.581791][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.588999][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.632080][ T1016] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.639289][ T1016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.721379][T28781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6086'. [ 599.737450][T28560] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 599.779136][T28560] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 600.071108][T28801] netlink: 'syz.2.6089': attribute type 1 has an invalid length. [ 600.089847][T28800] netlink: 'syz.2.6089': attribute type 1 has an invalid length. [ 600.116492][T28801] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6089'. [ 600.375654][ T5643] Bluetooth: hci2: command tx timeout [ 600.622837][T28560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.702300][T28560] veth0_vlan: entered promiscuous mode [ 600.717566][T28838] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6097'. [ 600.731726][T28560] veth1_vlan: entered promiscuous mode [ 600.747232][T28838] netlink: 'syz.4.6097': attribute type 26 has an invalid length. [ 600.772113][T28837] netlink: 'syz.6.6096': attribute type 1 has an invalid length. [ 600.780584][T28838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6097'. [ 600.798530][T28837] netlink: 'syz.6.6096': attribute type 3 has an invalid length. [ 600.810016][T28560] veth0_macvtap: entered promiscuous mode [ 600.819426][T28837] netlink: 224 bytes leftover after parsing attributes in process `syz.6.6096'. [ 600.838143][T28560] veth1_macvtap: entered promiscuous mode [ 600.857979][T28844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6099'. [ 600.871169][T28844] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6099'. [ 600.877890][T28560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 600.907274][T28560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 600.947478][ T7015] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.967712][ T7015] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.011359][ T7015] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.045615][ T7015] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.080199][T28851] tipc: Enabling of bearer rejected, failed to enable media [ 601.121866][T28851] bridge0: entered allmulticast mode [ 601.141717][T28851] netlink: 'syz.0.6101': attribute type 6 has an invalid length. [ 601.342043][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.368415][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.504989][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.513236][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.811706][T28885] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 602.029275][T28896] syzkaller0: entered promiscuous mode [ 602.037389][T28896] syzkaller0: entered allmulticast mode [ 602.331133][T28918] syzkaller0: entered promiscuous mode [ 602.365968][T28918] syzkaller0: entered allmulticast mode [ 602.454378][ T5643] Bluetooth: hci2: command tx timeout [ 602.535553][T28907] syzkaller1: entered promiscuous mode [ 602.564485][T28907] syzkaller1: entered allmulticast mode [ 603.049244][T28952] netlink: 'syz.1.6123': attribute type 7 has an invalid length. [ 603.291398][T28974] netlink: 'syz.1.6130': attribute type 2 has an invalid length. [ 603.493028][T28983] xfrm0 speed is unknown, defaulting to 1000 [ 603.696744][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 604.187897][T29014] __nla_validate_parse: 11 callbacks suppressed [ 604.187916][T29014] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6141'. [ 604.528926][T29025] netlink: 'syz.2.6143': attribute type 1 has an invalid length. [ 604.606916][T29022] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 604.696270][T29038] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6147'. [ 605.083645][T29059] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6152'. [ 605.116024][T29059] netlink: 'syz.6.6152': attribute type 1 has an invalid length. [ 605.159370][T29061] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6153'. [ 605.387900][T29077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6158'. [ 605.401509][T29076] netlink: 'syz.6.6159': attribute type 1 has an invalid length. [ 605.415787][T29076] netlink: 224 bytes leftover after parsing attributes in process `syz.6.6159'. [ 605.472484][T29080] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6160'. [ 605.858960][T29104] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 606.026939][T29111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6169'. [ 606.042235][T29115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6172'. [ 606.055226][T29111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6169'. [ 606.119181][ T57] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 606.158315][ T57] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 606.196260][T12886] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 606.249218][T12886] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 606.729378][T29155] syzkaller1: entered promiscuous mode [ 606.747143][T29155] syzkaller1: entered allmulticast mode [ 607.345930][T29188] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 607.440610][T29188] team1: entered promiscuous mode [ 607.460901][T29188] team1: entered allmulticast mode [ 607.856796][T29211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 608.025611][T29229] vlan1: entered allmulticast mode [ 608.042929][T29229] veth0_vlan: entered allmulticast mode [ 608.070573][T29229] vlan1 (unregistering): left allmulticast mode [ 608.080990][T29229] veth0_vlan: left allmulticast mode [ 608.770208][T29276] netlink: 'syz.6.6221': attribute type 64 has an invalid length. [ 608.888047][T29287] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 608.935200][ T5639] Bluetooth: hci2: command 0x0405 tx timeout [ 608.939364][ T13] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x94 [ 608.991966][T29291] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 609.050737][T29286] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 609.436940][T29315] syzkaller0: entered promiscuous mode [ 609.444984][T29317] __nla_validate_parse: 18 callbacks suppressed [ 609.445002][T29317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6230'. [ 609.460632][T29315] syzkaller0: entered allmulticast mode [ 611.415808][ T2335] block nbd3: Possible stuck request ffff888027367000: control (read@0,1024B). Runtime 300 seconds [ 611.427600][ T2335] block nbd3: Possible stuck request ffff8880273671c0: control (read@1024,1024B). Runtime 300 seconds [ 611.439386][ T2335] block nbd3: Possible stuck request ffff888027367380: control (read@2048,1024B). Runtime 300 seconds [ 611.451145][ T2335] block nbd3: Possible stuck request ffff888027367540: control (read@3072,1024B). Runtime 300 seconds [ 611.748634][T29273] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 611.971474][T29344] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6237'. [ 611.992786][T29350] netlink: 'syz.2.6238': attribute type 11 has an invalid length. [ 612.014333][T29352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6239'. [ 612.024965][T29347] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6236'. [ 612.036616][T29350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6238'. [ 612.055594][T29350] bridge0: port 3(gretap0) entered blocking state [ 612.084657][T29350] bridge0: port 3(gretap0) entered disabled state [ 612.107958][T29350] gretap0: entered allmulticast mode [ 612.117216][T29350] gretap0: entered promiscuous mode [ 612.123106][T29350] bridge0: port 3(gretap0) entered blocking state [ 612.129696][T29350] bridge0: port 3(gretap0) entered forwarding state [ 612.235497][T29360] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6243'. [ 612.389905][T29373] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6248'. [ 612.676077][T29395] ieee802154 phy1 wpan1: encryption failed: -22 [ 612.708080][T29395] netlink: 'syz.0.6252': attribute type 1 has an invalid length. [ 612.807506][T29395] bond9: entered promiscuous mode [ 612.826164][T29395] 8021q: adding VLAN 0 to HW filter on device bond9 [ 612.860263][T29408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6258'. [ 612.874845][T29395] bond9: (slave bridge8): making interface the new active one [ 612.882606][T29395] bridge8: entered promiscuous mode [ 612.890507][T29395] bond9: (slave bridge8): Enslaving as an active interface with an up link [ 613.040377][T29415] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6261'. [ 613.064485][T29415] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6261'. [ 613.451881][T29441] syz_tun: entered allmulticast mode [ 613.470768][T29441] dvmrp8: entered allmulticast mode [ 613.652084][T29451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 613.659125][T29449] syzkaller0: entered promiscuous mode [ 613.668719][T29449] syzkaller0: entered allmulticast mode [ 613.738117][T29462] netlink: 'syz.1.6274': attribute type 2 has an invalid length. [ 613.760858][T29440] syz_tun: left allmulticast mode [ 616.357538][T29479] __nla_validate_parse: 5 callbacks suppressed [ 616.357566][T29479] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6279'. [ 616.376947][T29479] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6279'. [ 617.346996][T29518] netlink: 640 bytes leftover after parsing attributes in process `syz.1.6285'. [ 617.356645][T29518] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 617.638730][T29527] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6288'. [ 619.439070][T29536] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6288'. [ 619.779877][T29557] xt_socket: unknown flags 0xe4 [ 619.829675][T29557] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 619.925078][T29560] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6294'. [ 620.022472][ T5639] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 620.034252][ T5639] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 620.043044][ T5639] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 620.056774][ T5639] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 620.067306][ T5639] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 620.687384][T18059] syz_tun (unregistering): left allmulticast mode [ 620.696399][ T7021] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 620.725397][T29597] netlink: 'syz.4.6300': attribute type 1 has an invalid length. [ 620.751789][T29597] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6300'. [ 621.045521][T29566] xfrm0 speed is unknown, defaulting to 1000 [ 621.592538][T29633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6310'. [ 621.727740][T29638] vcan0: tx address claim with dest, not broadcast [ 621.798459][T29640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6313'. [ 621.987784][T29566] lo speed is unknown, defaulting to 1000 [ 622.020114][T29652] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6315'. [ 622.033705][T29652] block nbd10: Unsupported socket: should be TCP or UNIX. [ 622.134209][ T5643] Bluetooth: hci5: command tx timeout [ 624.226003][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.229223][ T5643] Bluetooth: hci5: command tx timeout [ 624.233013][ T1315] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 625.246691][T29566] syzkaller0 speed is unknown, defaulting to 1000 [ 625.435937][T29715] netlink: 'syz.4.6324': attribute type 1 has an invalid length. [ 625.648425][T29729] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 625.657242][T29729] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 625.688214][T29731] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6329'. [ 625.705820][T29731] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6329'. [ 625.725949][T29735] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6330'. [ 625.831308][T29738] tipc: Failed to remove unknown binding: 66,0,0/0:2450646221/2450646222 [ 625.841864][T29738] tipc: Failed to remove unknown binding: 66,0,0/0:2450646221/2450646222 [ 625.982063][T29747] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6334'. [ 626.026089][T29740] syzkaller0: entered promiscuous mode [ 626.031745][T29740] syzkaller0: entered allmulticast mode [ 626.041849][T29751] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6333'. [ 626.084911][T29751] netlink: 164104 bytes leftover after parsing attributes in process `syz.1.6333'. [ 626.133341][T29566] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.153764][T29566] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.169980][T29566] bridge_slave_0: entered allmulticast mode [ 626.182175][T29566] bridge_slave_0: entered promiscuous mode [ 626.240249][T29566] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.250030][T29566] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.261564][T29566] bridge_slave_1: entered allmulticast mode [ 626.275236][T29566] bridge_slave_1: entered promiscuous mode [ 626.293716][ T5643] Bluetooth: hci5: command tx timeout [ 626.399233][T29566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.418175][T29566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.447627][T29766] netlink: 'syz.2.6338': attribute type 30 has an invalid length. [ 626.486477][T29769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6339'. [ 626.523203][T29566] team0: Port device team_slave_0 added [ 626.551056][T29566] team0: Port device team_slave_1 added [ 626.833262][T29769] macvtap1: entered promiscuous mode [ 626.874531][T29769] vlan0: entered promiscuous mode [ 626.889692][T29769] macvtap1: entered allmulticast mode [ 626.909512][T29769] vlan0: entered allmulticast mode [ 626.927478][T29769] veth0_vlan: entered allmulticast mode [ 627.141323][T29566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.171007][T29566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.240066][T29566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.307961][T29566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.345518][T29790] FAULT_INJECTION: forcing a failure. [ 627.345518][T29790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 627.374677][T29566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.449740][T29790] CPU: 1 UID: 0 PID: 29790 Comm: syz.2.6344 Not tainted syzkaller #0 PREEMPT(full) [ 627.449763][T29790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 627.449774][T29790] Call Trace: [ 627.449781][T29790] [ 627.449788][T29790] dump_stack_lvl+0xe8/0x150 [ 627.449815][T29790] should_fail_ex+0x412/0x560 [ 627.449843][T29790] _copy_from_user+0x2d/0xb0 [ 627.449867][T29790] ___sys_sendmsg+0x1c6/0x360 [ 627.449888][T29790] ? __lock_acquire+0x6b5/0x2cf0 [ 627.449910][T29790] ? __pfx____sys_sendmsg+0x10/0x10 [ 627.449963][T29790] ? __fget_files+0x2a/0x420 [ 627.449983][T29790] ? __fget_files+0x3a0/0x420 [ 627.450012][T29790] __x64_sys_sendmsg+0x1bd/0x2a0 [ 627.450038][T29790] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 627.450070][T29790] ? __pfx_ksys_write+0x10/0x10 [ 627.450102][T29790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.450121][T29790] do_syscall_64+0x15f/0xf80 [ 627.450142][T29790] ? trace_irq_disable+0x3b/0x140 [ 627.450176][T29790] ? clear_bhb_loop+0x40/0x90 [ 627.450198][T29790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.450217][T29790] RIP: 0033:0x7f3b0b79cdd9 [ 627.450233][T29790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 627.450249][T29790] RSP: 002b:00007f3b0c644028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 627.450268][T29790] RAX: ffffffffffffffda RBX: 00007f3b0ba16090 RCX: 00007f3b0b79cdd9 [ 627.450281][T29790] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 000000000000000d [ 627.450292][T29790] RBP: 00007f3b0c644090 R08: 0000000000000000 R09: 0000000000000000 [ 627.450303][T29790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 627.450313][T29790] R13: 00007f3b0ba16128 R14: 00007f3b0ba16090 R15: 00007fffa1842ca8 [ 627.450342][T29790] [ 627.636533][T29566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.929221][T29566] hsr_slave_0: entered promiscuous mode [ 627.956098][T29566] hsr_slave_1: entered promiscuous mode [ 627.988596][T29566] debugfs: 'hsr0' already exists in 'hsr' [ 628.007405][T29566] Cannot create hsr debugfs directory [ 628.162643][T29805] netlink: 'syz.1.6350': attribute type 10 has an invalid length. [ 628.375038][ T5643] Bluetooth: hci5: command tx timeout [ 628.552632][T29566] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 628.589242][T29566] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 628.739831][T29566] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 628.751372][T29566] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 628.816318][T29836] tipc: Started in network mode [ 628.825141][T29836] tipc: Node identity 4a7bdfd3e514, cluster identity 4711 [ 628.837599][T29836] tipc: Enabled bearer , priority 0 [ 628.879815][T29566] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 628.893048][T29566] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 628.926637][T29836] syzkaller0: entered promiscuous mode [ 628.932696][T29836] syzkaller0: entered allmulticast mode [ 628.952827][T29836] tipc: Resetting bearer [ 628.996355][T29566] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 629.007204][T29566] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 629.041821][T29834] tipc: Resetting bearer [ 629.070720][T29834] tipc: Disabling bearer [ 629.146529][T29847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6365'. [ 629.211540][T29854] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6366'. [ 629.305951][T29856] netlink: 'syz.2.6367': attribute type 3 has an invalid length. [ 629.344565][T29856] netlink: 666 bytes leftover after parsing attributes in process `syz.2.6367'. [ 629.471673][T29861] vlan2: entered allmulticast mode [ 629.481262][T29862] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6368'. [ 629.493149][T29861] bond0: entered allmulticast mode [ 629.500332][T29861] bond_slave_0: entered allmulticast mode [ 629.507215][T29861] bond_slave_1: entered allmulticast mode [ 629.515403][T29566] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 629.541519][T29566] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 629.552368][T29872] nft_compat: unsupported protocol 0 [ 629.579881][T29862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 629.603099][T29862] bond_slave_0: left allmulticast mode [ 629.625592][T29862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 629.657801][T29862] bond_slave_1: left allmulticast mode [ 629.672496][T29862] bond0 (unregistering): Released all slaves [ 629.700893][T29566] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 629.718056][T29566] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 629.734254][T29566] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 629.789946][T29566] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 629.830165][T29566] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 629.865537][T29566] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 629.931984][T29893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.959849][T29893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.998377][T29896] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 630.015997][T29896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6376'. [ 630.026483][T29896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6376'. [ 630.068863][T29566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.095266][T29566] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.108731][ T7021] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.115946][ T7021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.137217][T12886] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.144420][T12886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.236680][T29906] netlink: 'syz.4.6379': attribute type 1 has an invalid length. [ 630.379986][T29912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6380'. [ 630.821308][T29566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 630.984819][T29566] veth0_vlan: entered promiscuous mode [ 631.005173][T29566] veth1_vlan: entered promiscuous mode [ 631.120281][T29566] veth0_macvtap: entered promiscuous mode [ 631.174318][T29566] veth1_macvtap: entered promiscuous mode [ 631.264449][T29566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 631.306497][T29566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 631.377659][T29942] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6387'. [ 631.397161][ T7024] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.438185][ T7024] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.483906][ T7024] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.529823][ T7024] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.811285][ T7024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.851877][ T7024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.001622][T29957] netlink: 'syz.2.6392': attribute type 4 has an invalid length. [ 632.068444][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.077200][T29961] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6394'. [ 632.115927][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.130774][T29964] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6395'. [ 632.320093][T29964] bond0 (unregistering): Released all slaves [ 632.408810][T29978] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 632.446098][T29979] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 632.705579][T29993] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 633.222499][T30014] netlink: 'syz.1.6408': attribute type 83 has an invalid length. [ 633.409375][T30035] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 633.430102][T30035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 633.714921][T30043] macvtap1: entered promiscuous mode [ 633.720437][T30043] vlan0: entered promiscuous mode [ 633.727032][T30043] macvtap1: entered allmulticast mode [ 633.733345][T30043] vlan0: entered allmulticast mode [ 633.739333][T30043] veth0_vlan: entered allmulticast mode [ 633.880127][T30054] netlink: 'syz.0.6417': attribute type 29 has an invalid length. [ 634.254477][T30083] __nla_validate_parse: 9 callbacks suppressed [ 634.254496][T30083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6428'. [ 634.330962][T30077] bond1 (unregistering): Released all slaves [ 634.439893][T30086] FAULT_INJECTION: forcing a failure. [ 634.439893][T30086] name failslab, interval 1, probability 0, space 0, times 0 [ 634.538429][T30086] CPU: 0 UID: 0 PID: 30086 Comm: syz.4.6429 Not tainted syzkaller #0 PREEMPT(full) [ 634.538454][T30086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 634.538465][T30086] Call Trace: [ 634.538473][T30086] [ 634.538481][T30086] dump_stack_lvl+0xe8/0x150 [ 634.538507][T30086] should_fail_ex+0x412/0x560 [ 634.538536][T30086] should_failslab+0xa8/0x100 [ 634.538563][T30086] ? can_rx_register+0x16d/0x7a0 [ 634.538583][T30086] kmem_cache_alloc_noprof+0x87/0x650 [ 634.538620][T30086] can_rx_register+0x16d/0x7a0 [ 634.538638][T30086] ? cgw_create_job+0x4d4/0xc90 [ 634.538663][T30086] ? __pfx_can_can_gw_rcv+0x10/0x10 [ 634.538698][T30086] cgw_register_filter+0x7f/0xd0 [ 634.538728][T30086] cgw_create_job+0x95a/0xc90 [ 634.538759][T30086] ? __pfx_cgw_create_job+0x10/0x10 [ 634.538791][T30086] ? __pfx_cgw_create_job+0x10/0x10 [ 634.538816][T30086] rtnetlink_rcv_msg+0x77e/0xbe0 [ 634.538840][T30086] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 634.538860][T30086] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 634.538879][T30086] ? ref_tracker_free+0x693/0x840 [ 634.538905][T30086] ? __pfx_ref_tracker_free+0x10/0x10 [ 634.538939][T30086] netlink_rcv_skb+0x232/0x4b0 [ 634.538962][T30086] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 634.538985][T30086] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 634.539019][T30086] ? netlink_deliver_tap+0x2e/0x1b0 [ 634.539040][T30086] ? netlink_deliver_tap+0x2e/0x1b0 [ 634.539068][T30086] netlink_unicast+0x75c/0x8e0 [ 634.539100][T30086] netlink_sendmsg+0x813/0xb40 [ 634.539132][T30086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.539159][T30086] ? aa_sock_msg_perm+0xf1/0x1b0 [ 634.539184][T30086] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 634.539212][T30086] ____sys_sendmsg+0x972/0x9f0 [ 634.539236][T30086] ? __might_fault+0xaf/0x130 [ 634.539265][T30086] ? __pfx_____sys_sendmsg+0x10/0x10 [ 634.539298][T30086] ? import_iovec+0x73/0xa0 [ 634.539326][T30086] ___sys_sendmsg+0x2a5/0x360 [ 634.539347][T30086] ? __lock_acquire+0x6b5/0x2cf0 [ 634.539366][T30086] ? __pfx____sys_sendmsg+0x10/0x10 [ 634.539429][T30086] ? __fget_files+0x2a/0x420 [ 634.539446][T30086] ? __fget_files+0x3a0/0x420 [ 634.539472][T30086] __x64_sys_sendmsg+0x1bd/0x2a0 [ 634.539493][T30086] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 634.539522][T30086] ? __pfx_ksys_write+0x10/0x10 [ 634.539551][T30086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.539568][T30086] do_syscall_64+0x15f/0xf80 [ 634.539587][T30086] ? trace_irq_disable+0x3b/0x140 [ 634.539608][T30086] ? clear_bhb_loop+0x40/0x90 [ 634.539626][T30086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.539641][T30086] RIP: 0033:0x7fc17df9cdd9 [ 634.539656][T30086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.539669][T30086] RSP: 002b:00007fc17ee3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 634.539691][T30086] RAX: ffffffffffffffda RBX: 00007fc17e215fa0 RCX: 00007fc17df9cdd9 [ 634.539701][T30086] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 000000000000000d [ 634.539711][T30086] RBP: 00007fc17ee3f090 R08: 0000000000000000 R09: 0000000000000000 [ 634.539720][T30086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.539728][T30086] R13: 00007fc17e216038 R14: 00007fc17e215fa0 R15: 00007ffd74d409c8 [ 634.539753][T30086] [ 634.541572][T30088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6432'. [ 634.644836][T30096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6432'. [ 634.863072][T30100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6434'. [ 634.884112][T12881] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 634.997782][T30108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6434'. [ 635.113136][T30110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6437'. [ 635.167221][T30113] netlink: 'syz.4.6437': attribute type 1 has an invalid length. [ 635.238108][T30117] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 635.262451][T30117] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6439'. [ 635.354262][T30121] IPVS: set_ctl: invalid protocol: 33 172.30.1.1:20002 [ 635.538938][T30129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6445'. [ 635.589335][T30129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6445'. [ 635.632333][T30138] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 635.664804][T30142] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6449'. [ 635.676519][T30138] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 636.192150][T30171] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 636.221597][T30171] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 636.240912][T30171] gretap1: entered promiscuous mode [ 636.247711][T30171] gretap1: entered allmulticast mode [ 636.693096][T30195] netlink: 'syz.1.6464': attribute type 1 has an invalid length. [ 636.742163][T30195] 8021q: adding VLAN 0 to HW filter on device bond1 [ 636.771100][T30195] bond1: (slave veth0_to_bond): making interface the new active one [ 636.781062][T30195] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 636.824822][T30195] 8021q: adding VLAN 0 to HW filter on device bond2 [ 636.841451][T30195] bond1: (slave bond2): Enslaving as an active interface with a down link [ 636.866937][T30189] syzkaller0: entered promiscuous mode [ 636.878002][T30189] syzkaller0: entered allmulticast mode [ 637.032824][T30211] netlink: 'syz.1.6466': attribute type 1 has an invalid length. [ 637.091096][T30214] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 637.170469][T30211] 8021q: adding VLAN 0 to HW filter on device bond3 [ 637.208529][T30218] bond3: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 637.223239][T30218] bond3: entered allmulticast mode [ 637.310539][T30224] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 637.345805][T30230] syz_tun: entered allmulticast mode [ 637.431208][T30230] syz_tun: left allmulticast mode [ 637.532922][T30247] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 637.945875][T30262] netdevsim netdevsim1: Direct firmware load for r1 failed with error -2 [ 637.966623][T30262] netdevsim netdevsim1: Falling back to sysfs fallback for: r1 [ 638.290412][T30271] netlink: 'syz.4.6483': attribute type 29 has an invalid length. [ 638.327686][T30269] netlink: 'syz.4.6483': attribute type 29 has an invalid length. [ 638.397806][T30272] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.969506][T30308] netlink: 'syz.6.6493': attribute type 4 has an invalid length. [ 639.038989][T30310] openvswitch: netlink: Flow key attr not present in new flow. [ 639.127299][T30318] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 639.406366][T30336] xt_HMARK: spi-set and port-set can't be combined [ 639.427414][T30338] __nla_validate_parse: 22 callbacks suppressed [ 639.427432][T30338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6506'. [ 639.427697][T30336] openvswitch: netlink: Multiple metadata blocks provided [ 639.512176][T30345] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6507'. [ 639.524460][T30345] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6507'. [ 639.534910][T30345] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6507'. [ 639.627039][T30348] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 639.701537][T30350] netlink: 'syz.1.6510': attribute type 8 has an invalid length. [ 639.800039][T30352] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6511'. [ 639.820876][T30352] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.828633][T30352] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.926296][T30356] syzkaller0: entered promiscuous mode [ 639.931895][T30356] syzkaller0: entered allmulticast mode [ 640.101428][T30360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6514'. [ 640.115035][T30360] syzkaller1: entered promiscuous mode [ 640.120924][T30360] syzkaller1: entered allmulticast mode [ 640.219058][T30364] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6515'. [ 640.239246][T30366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6516'. [ 640.451321][T30373] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 640.512853][T30380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6520'. [ 640.723052][T30394] vxcan0: tx address claim with dest, not broadcast [ 640.782561][T30394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6525'. [ 640.792464][T30401] netlink: 'syz.4.6527': attribute type 1 has an invalid length. [ 640.792488][T30401] netlink: 'syz.4.6527': attribute type 2 has an invalid length. [ 640.810483][T30396] netlink: 'syz.2.6526': attribute type 1 has an invalid length. [ 640.842427][T30396] netlink: 'syz.2.6526': attribute type 3 has an invalid length. [ 640.887299][T30403] netlink: 'syz.2.6526': attribute type 2 has an invalid length. [ 641.011427][T30409] syzkaller1: entered promiscuous mode [ 641.019346][T30409] syzkaller1: entered allmulticast mode [ 641.372852][T30430] 8021q: adding VLAN 0 to HW filter on device bond2 [ 641.444426][T30430] bond2: (slave veth0_to_bond): making interface the new active one [ 641.475471][T30430] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 641.496327][ T2335] block nbd3: Possible stuck request ffff888027367000: control (read@0,1024B). Runtime 330 seconds [ 641.508098][ T2335] block nbd3: Possible stuck request ffff8880273671c0: control (read@1024,1024B). Runtime 330 seconds [ 641.520066][ T2335] block nbd3: Possible stuck request ffff888027367380: control (read@2048,1024B). Runtime 330 seconds [ 641.531721][ T2335] block nbd3: Possible stuck request ffff888027367540: control (read@3072,1024B). Runtime 330 seconds [ 641.563030][T30437] bond2: entered promiscuous mode [ 641.591678][T30437] veth0_to_bond: entered promiscuous mode [ 641.629483][T30437] bond2: entered allmulticast mode [ 641.636256][T30437] veth0_to_bond: entered allmulticast mode [ 642.462418][T30450] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 642.589583][T30498] SET target dimension over the limit! [ 642.712540][T30505] bridge_slave_0: left allmulticast mode [ 642.728878][T30505] bridge_slave_0: left promiscuous mode [ 642.747134][T30505] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.803242][T30505] bridge_slave_1: left allmulticast mode [ 642.824409][T30505] bridge_slave_1: left promiscuous mode [ 642.836770][T30505] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.850359][T30505] bond1: (slave veth0_to_bond): Releasing active interface [ 642.859398][T30505] bond1: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 642.896774][T30505] bond0: (slave bond_slave_0): Releasing backup interface [ 642.907618][T30505] bond0: (slave bond_slave_1): Releasing backup interface [ 642.923136][T30505] team0: Port device team_slave_0 removed [ 642.938360][T30505] team0: Port device team_slave_1 removed [ 642.947619][T30505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 642.955890][T30505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 642.965652][T30505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 642.973061][T30505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 642.982782][T30505] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 643.039169][T30515] mac80211_hwsim hwsim56 syzkaller0: entered promiscuous mode [ 643.059496][T30515] mac80211_hwsim hwsim56 syzkaller0: entered allmulticast mode [ 643.379393][T30537] validate_nla: 3 callbacks suppressed [ 643.379411][T30537] netlink: 'syz.0.6564': attribute type 1 has an invalid length. [ 643.539269][T30557] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 643.546555][T30557] IPv6: NLM_F_CREATE should be set when creating new route [ 643.553898][T30557] IPv6: NLM_F_CREATE should be set when creating new route [ 643.690730][T30560] openvswitch: netlink: Multiple metadata blocks provided [ 644.215623][T30540] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 644.728955][T28526] IPVS: starting estimator thread 0... [ 644.746252][T30596] only policy match revision 0 supported [ 644.746272][T30596] unable to load match [ 644.761618][T30598] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.761680][T30596] __nla_validate_parse: 7 callbacks suppressed [ 644.761693][T30596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6578'. [ 644.804121][T30596] netlink: 176 bytes leftover after parsing attributes in process `syz.0.6578'. [ 644.827090][T30596] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6578'. [ 644.846050][T30605] IPVS: using max 38 ests per chain, 91200 per kthread [ 644.856836][T30608] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6582'. [ 644.865824][T30610] tipc: Started in network mode [ 644.865852][T30610] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 644.866114][T30610] tipc: Enabled bearer , priority 24 [ 644.946547][T30616] ip6gre1: entered promiscuous mode [ 644.951791][T30616] ip6gre1: entered allmulticast mode [ 645.212549][T30635] xt_ipcomp: unknown flags 1D [ 645.692468][T30644] syzkaller0: entered promiscuous mode [ 645.698228][T30644] syzkaller0: entered allmulticast mode [ 646.085579][T30669] netlink: 'syz.0.6598': attribute type 10 has an invalid length. [ 648.277586][ T7620] tipc: Node number set to 10005162 [ 648.301588][T30669] veth1_virt_wifi: entered promiscuous mode [ 648.410114][T30672] netlink: 'syz.6.6599': attribute type 1 has an invalid length. [ 648.489384][T30682] netlink: 'syz.0.6601': attribute type 11 has an invalid length. [ 648.633219][T30684] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6603'. [ 648.655811][T30684] netlink: 'syz.6.6603': attribute type 3 has an invalid length. [ 648.672655][T30684] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6603'. [ 648.696752][T30684] netlink: 'syz.6.6603': attribute type 3 has an invalid length. [ 648.909278][T30709] netlink: 224 bytes leftover after parsing attributes in process `syz.6.6610'. [ 648.972080][T30712] netlink: 'syz.0.6611': attribute type 21 has an invalid length. [ 648.991504][T30712] IPv6: NLM_F_CREATE should be specified when creating new route [ 649.011137][T30712] netlink: 'syz.0.6611': attribute type 21 has an invalid length. [ 649.011978][T30715] openvswitch: netlink: Flow key attribute not present in set flow. [ 649.046640][T30720] netlink: 'syz.6.6614': attribute type 1 has an invalid length. [ 649.055677][T30720] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6614'. [ 649.076211][T30721] macvlan0: entered promiscuous mode [ 649.228717][T30727] lo: entered allmulticast mode [ 649.230024][T30725] netlink: 'syz.6.6616': attribute type 1 has an invalid length. [ 649.246573][T30727] lo: left allmulticast mode [ 649.309222][T30725] 8021q: adding VLAN 0 to HW filter on device bond2 [ 649.353067][T30733] bond2: (slave geneve3): making interface the new active one [ 649.362765][T30733] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 649.431976][T30731] bond0: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 649.519515][T30731] bond0 (unregistering): Released all slaves [ 649.602299][ T5643] block nbd10: Receive control failed (result -32) [ 649.662439][T30744] xfrm0 speed is unknown, defaulting to 1000 [ 650.187725][T30767] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6622'. [ 650.242080][T30757] vlan2: entered promiscuous mode [ 650.422389][T30777] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6628'. [ 650.423300][T30767] bond0 (unregistering): Released all slaves [ 650.432627][T30777] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6628'. [ 650.469206][T30777] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6628'. [ 650.469218][T30744] lo speed is unknown, defaulting to 1000 [ 650.470877][T30744] syzkaller0 speed is unknown, defaulting to 1000 [ 650.779711][T30793] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6632'. [ 650.822479][T30793] netlink: 'syz.4.6632': attribute type 10 has an invalid length. [ 650.912094][T30793] ipvlan0: entered allmulticast mode [ 650.926007][T30793] team0: Device ipvlan0 failed to register rx_handler [ 651.675854][T30837] netlink: 112 bytes leftover after parsing attributes in process `syz.6.6642'. [ 651.686747][T30832] openvswitch: netlink: Key type 5126 is out of range max 32 [ 651.794265][T30848] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6646'. [ 651.809323][T30848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6646'. [ 651.986620][T30858] tipc: Started in network mode [ 652.013322][T30858] tipc: Node identity ac14140f, cluster identity 4711 [ 652.031579][T30858] tipc: New replicast peer: 255.255.255.255 [ 652.049032][T30858] tipc: Enabled bearer , priority 10 [ 652.076876][T30867] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6649'. [ 652.107570][T30871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6653'. [ 652.362770][T30889] syzkaller1: entered promiscuous mode [ 652.378532][T30889] syzkaller1: entered allmulticast mode [ 652.408246][T30892] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 652.422451][T30892] bond3 (unregistering): Released all slaves [ 652.602009][T30904] netlink: 'syz.2.6662': attribute type 9 has an invalid length. [ 652.667345][T30906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 652.975094][T30920] openvswitch: netlink: Flow key attr not present in new flow. [ 653.164067][ T7621] tipc: Node number set to 2886997007 [ 654.029289][T30981] netlink: 'syz.2.6686': attribute type 10 has an invalid length. [ 654.239492][T30984] netlink: 'syz.4.6688': attribute type 24 has an invalid length. [ 656.015886][T30923] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 656.118159][T30987] netlink: 'syz.4.6689': attribute type 2 has an invalid length. [ 656.148514][T30987] netlink: 'syz.4.6689': attribute type 8 has an invalid length. [ 656.160636][T30987] __nla_validate_parse: 7 callbacks suppressed [ 656.160652][T30987] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6689'. [ 656.266806][T31001] netlink: 208240 bytes leftover after parsing attributes in process `syz.6.6692'. [ 656.281079][T30987] syzkaller1: entered promiscuous mode [ 656.298545][T30987] syzkaller1: entered allmulticast mode [ 656.333900][T30987] netlink: 140 bytes leftover after parsing attributes in process `syz.4.6689'. [ 656.351796][T31001] veth3: entered allmulticast mode [ 656.508522][T31014] netlink: 'syz.6.6697': attribute type 3 has an invalid length. [ 656.541274][T31014] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.6697'. [ 656.729227][T31029] openvswitch: netlink: IP tunnel dst address not specified [ 656.806849][T31032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6703'. [ 656.837466][T31032] openvswitch: netlink: Flow actions attr not present in new flow. [ 656.876895][T31033] mac80211_hwsim hwsim56 syzkaller0: left promiscuous mode [ 656.890824][T31033] mac80211_hwsim hwsim56 syzkaller0: left allmulticast mode [ 657.072053][T31053] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6709'. [ 657.207004][ T7640] IPVS: starting estimator thread 0... [ 657.223328][T31066] syzkaller0: entered promiscuous mode [ 657.230065][T31066] syzkaller0: entered allmulticast mode [ 657.272607][T31066] tc action pedit offset must be on 32 bit boundaries [ 657.311241][T31066] erspan0: entered promiscuous mode [ 657.321211][T31066] erspan0: entered allmulticast mode [ 657.329762][T31067] IPVS: using max 25 ests per chain, 60000 per kthread [ 657.357716][T31071] netlink: 'syz.6.6714': attribute type 29 has an invalid length. [ 657.431094][T31078] netlink: 'syz.6.6714': attribute type 32 has an invalid length. [ 657.440615][T31077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6716'. [ 657.451703][T31078] netlink: 500 bytes leftover after parsing attributes in process `syz.6.6714'. [ 657.470310][T31077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6716'. [ 657.495412][T31071] netlink: 'syz.6.6714': attribute type 29 has an invalid length. [ 657.500340][T31081] netlink: 'syz.0.6717': attribute type 1 has an invalid length. [ 657.516767][T31080] netlink: 'syz.0.6717': attribute type 1 has an invalid length. [ 657.528394][T31080] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6717'. [ 658.268931][T31126] l2tp_ppp: sess 2/0: no socket in recv [ 658.390508][T31133] ip6gretap0: entered promiscuous mode [ 658.530283][ T30] audit: type=1800 audit(1778106557.380:19): pid=31145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6735" name="memory.events" dev="tmpfs" ino=733 res=0 errno=0 [ 658.595705][ T30] audit: type=1804 audit(1778106557.380:20): pid=31145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.6735" name="/newroot/141/memory.events" dev="tmpfs" ino=733 res=1 errno=0 [ 658.804139][T31157] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 658.836387][T31156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 659.188930][T31177] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 659.196262][T31177] IPv6: NLM_F_CREATE should be set when creating new route [ 659.203587][T31177] IPv6: NLM_F_CREATE should be set when creating new route [ 659.210855][T31177] IPv6: NLM_F_CREATE should be set when creating new route [ 659.361909][ T30] audit: type=1804 audit(1778106558.210:21): pid=31187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6752" name="/newroot/146/cgroup.controllers" dev="tmpfs" ino=759 res=1 errno=0 [ 659.431499][ T30] audit: type=1800 audit(1778106558.210:22): pid=31187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6752" name="cgroup.controllers" dev="tmpfs" ino=759 res=0 errno=0 [ 659.447434][T31189] validate_nla: 9 callbacks suppressed [ 659.447450][T31189] netlink: 'syz.4.6754': attribute type 5 has an invalid length. [ 659.941324][ T30] audit: type=1804 audit(1778106558.790:23): pid=31217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.6763" name="/newroot/249/cgroup.controllers" dev="tmpfs" ino=1291 res=1 errno=0 [ 659.967105][ T30] audit: type=1800 audit(1778106558.790:24): pid=31217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6763" name="cgroup.controllers" dev="tmpfs" ino=1291 res=0 errno=0 [ 664.225939][T31254] syzkaller0: entered promiscuous mode [ 664.232048][T31254] syzkaller0: entered allmulticast mode [ 664.413059][T31305] __nla_validate_parse: 11 callbacks suppressed [ 664.413078][T31305] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6782'. [ 664.674994][T31331] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6785'. [ 666.061704][ T7023] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 667.529338][T31342] ip6t_rpfilter: unknown options [ 667.628946][T31350] mac80211_hwsim hwsim56 syzkaller0: entered promiscuous mode [ 667.656677][T31350] mac80211_hwsim hwsim56 syzkaller0: entered allmulticast mode [ 667.915102][ T153] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 667.941096][ T153] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 667.954093][ T7621] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 668.016026][ T7621] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 668.238004][T31381] xfrm0 speed is unknown, defaulting to 1000 [ 668.380404][T31393] syzkaller1: entered promiscuous mode [ 668.400039][T31393] syzkaller1: entered allmulticast mode [ 668.461958][T31398] netlink: 'syz.0.6801': attribute type 1 has an invalid length. [ 668.497412][T31398] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6801'. [ 668.515545][T31393] syzkaller1: left promiscuous mode [ 668.532796][T31393] syzkaller1: left allmulticast mode [ 668.669316][T31370] netlink: 112 bytes leftover after parsing attributes in process `syz.2.6796'. [ 668.939669][T31381] lo speed is unknown, defaulting to 1000 [ 668.959453][T31381] syzkaller0 speed is unknown, defaulting to 1000 [ 669.016987][ T7621] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 669.145649][T31421] syzkaller0: entered promiscuous mode [ 669.171049][T31421] syzkaller0: entered allmulticast mode [ 669.262442][T31421] team0: Device gtp0 is of different type [ 669.582908][T31448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6813'. [ 669.677001][T31455] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6814'. [ 669.691837][T31453] syzkaller1: entered promiscuous mode [ 669.714862][T31453] syzkaller1: entered allmulticast mode [ 670.072516][ T30] audit: type=1804 audit(1778106568.920:25): pid=31469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.6818" name="/newroot/260/cgroup.controllers" dev="tmpfs" ino=1351 res=1 errno=0 [ 670.099145][T31431] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 670.109427][T31442] netlink: 'syz.4.6811': attribute type 1 has an invalid length. [ 670.111209][ T30] audit: type=1800 audit(1778106568.920:26): pid=31469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6818" name="cgroup.controllers" dev="tmpfs" ino=1351 res=0 errno=0 [ 670.121476][T31442] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6811'. [ 670.370897][T31474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6819'. [ 670.481832][T31483] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6823'. [ 670.575943][T31491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6824'. [ 670.720372][T31495] veth5: entered promiscuous mode [ 670.725984][T31495] veth5: entered allmulticast mode [ 670.818058][T31497] syzkaller0: entered promiscuous mode [ 670.837206][T31497] syzkaller0: entered allmulticast mode [ 670.908029][T31512] netlink: 'syz.6.6830': attribute type 1 has an invalid length. [ 670.960464][T31512] 8021q: adding VLAN 0 to HW filter on device bond3 [ 671.129917][T31524] netlink: 'syz.0.6835': attribute type 1 has an invalid length. [ 671.138887][T31525] netlink: 'syz.0.6835': attribute type 1 has an invalid length. [ 671.220649][T31524] bond1: entered promiscuous mode [ 671.227488][T31524] 8021q: adding VLAN 0 to HW filter on device bond1 [ 671.241714][T31524] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6835'. [ 671.277517][T31535] sctp: [Deprecated]: syz.4.6837 (pid 31535) Use of int in max_burst socket option. [ 671.277517][T31535] Use struct sctp_assoc_value instead [ 671.310356][T31534] netlink: 788 bytes leftover after parsing attributes in process `syz.6.6836'. [ 671.519598][T31544] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.526239][T31552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6843'. [ 671.526822][T31544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 671.592498][ T2335] block nbd3: Possible stuck request ffff888027367000: control (read@0,1024B). Runtime 360 seconds [ 671.604417][ T2335] block nbd3: Possible stuck request ffff8880273671c0: control (read@1024,1024B). Runtime 360 seconds [ 671.616349][ T2335] block nbd3: Possible stuck request ffff888027367380: control (read@2048,1024B). Runtime 360 seconds [ 671.630204][ T2335] block nbd3: Possible stuck request ffff888027367540: control (read@3072,1024B). Runtime 360 seconds [ 671.707089][T31554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6844'. [ 671.951856][T31567] xfrm0 speed is unknown, defaulting to 1000 [ 672.343312][T31567] lo speed is unknown, defaulting to 1000 [ 672.356544][T31567] syzkaller0 speed is unknown, defaulting to 1000 [ 672.559389][T31593] Can't find ip_set type [ 672.580506][T31591] Can't find ip_set type [ 673.312591][T31614] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 673.533108][T31629] mac80211_hwsim hwsim56 syzkaller0: Caught tx_queue_len zero misconfig [ 673.625001][T31629] sctp: [Deprecated]: syz.2.6868 (pid 31629) Use of struct sctp_assoc_value in delayed_ack socket option. [ 673.625001][T31629] Use struct sctp_sack_info instead [ 673.666887][T31635] veth0: entered promiscuous mode [ 673.932845][T31634] veth0: left promiscuous mode [ 674.429641][T31664] gretap0: left allmulticast mode [ 674.445843][T31664] bridge0: port 3(gretap0) entered disabled state [ 674.536452][T31664] bridge_slave_0: left allmulticast mode [ 674.552429][T31664] bridge_slave_0: left promiscuous mode [ 674.569179][T31664] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.586131][T31664] bridge_slave_1: left allmulticast mode [ 674.592019][T31664] bridge_slave_1: left promiscuous mode [ 674.598982][T31664] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.632821][T31664] bond2: (slave veth0_to_bond): Releasing active interface [ 674.650993][T31664] veth0_to_bond: left promiscuous mode [ 674.663777][T31664] veth0_to_bond: left allmulticast mode [ 674.715897][T31664] bond0: (slave bond_slave_0): Releasing backup interface [ 674.766224][T31664] bond0: (slave bond_slave_1): Releasing backup interface [ 674.820649][T31667] __nla_validate_parse: 5 callbacks suppressed [ 674.820669][T31667] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6880'. [ 674.866188][T31664] team0: Port device team_slave_0 removed [ 674.898213][T31664] team0: Port device team_slave_1 removed [ 674.915885][T31664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 674.925639][T31664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.940570][T31664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 674.950410][T31664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 674.971434][T31664] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 675.114698][T31674] netlink: 204 bytes leftover after parsing attributes in process `syz.4.6882'. [ 675.173317][T31678] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.6884'. [ 675.174880][T31681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6885'. [ 675.198287][T31678] openvswitch: netlink: Message has 5 unknown bytes. [ 675.204152][T31676] SET target dimension over the limit! [ 675.256836][T31676] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6883'. [ 675.297764][T31676] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6883'. [ 675.370928][T31681] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 675.426186][T31681] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 675.527721][T31687] macvlan4: entered promiscuous mode [ 675.542984][T31687] macvlan4: entered allmulticast mode [ 675.565951][T31687] bond5: (slave macvlan4): Error -98 calling set_mac_address [ 675.812181][T31695] syzkaller0: entered promiscuous mode [ 675.829349][T31695] syzkaller0: entered allmulticast mode [ 675.863011][T31706] netlink: 'syz.2.6892': attribute type 21 has an invalid length. [ 675.939255][T31706] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6892'. [ 675.976251][T31715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6894'. [ 676.035882][T31715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6894'. [ 676.046585][T31709] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 676.064791][ T31] INFO: task udevd:6784 blocked in I/O wait for more than 143 seconds. [ 676.066026][T31709] bond0 (unregistering): Released all slaves [ 676.076299][ T31] Not tainted syzkaller #0 [ 676.087760][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 676.098962][ T31] task:udevd state:D stack:20488 pid:6784 tgid:6784 ppid:4992 task_flags:0x400140 flags:0x00080002 [ 676.112541][ T31] Call Trace: [ 676.116781][ T31] [ 676.119843][ T31] __schedule+0x17b4/0x5680 [ 676.125384][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 676.130664][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 676.136705][ T31] ? __pfx___schedule+0x10/0x10 [ 676.141624][ T31] ? schedule+0x90/0x360 [ 676.147044][ T31] schedule+0x164/0x360 [ 676.151261][ T31] io_schedule+0x7f/0xd0 [ 676.158369][ T31] folio_wait_bit_common+0x6d8/0xbc0 [ 676.164023][ T31] ? filemap_get_entry+0xcd/0x3f0 [ 676.169087][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 676.175450][ T31] ? filemap_read_folio+0x23e/0x3b0 [ 676.180656][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 676.186751][ T31] ? __filemap_get_folio_mpol+0x7a9/0xb00 [ 676.192477][ T31] do_read_cache_folio+0x1ad/0x590 [ 676.200155][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 676.206475][ T31] read_part_sector+0xb6/0x2b0 [ 676.211286][ T31] adfspart_check_POWERTEC+0x9a/0x7a0 [ 676.219801][ T31] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 676.226299][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 676.231878][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 676.238974][ T31] bdev_disk_changed+0x817/0x1770 [ 676.244626][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 676.250122][ T31] blkdev_get_whole+0x380/0x510 [ 676.255056][ T31] bdev_open+0x31e/0xd30 [ 676.259327][ T31] blkdev_open+0x470/0x610 [ 676.266793][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 676.271860][ T31] do_dentry_open+0x785/0x14e0 [ 676.277404][ T31] vfs_open+0x3b/0x340 [ 676.281512][ T31] ? path_openat+0x2df0/0x3860 [ 676.286362][ T31] path_openat+0x2e08/0x3860 [ 676.291065][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 676.298245][ T31] ? stack_depot_save_flags+0x33/0x810 [ 676.304963][ T31] ? __pfx_path_openat+0x10/0x10 [ 676.309960][ T31] ? __x64_sys_openat+0x138/0x170 [ 676.315152][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 676.320152][ T31] do_file_open+0x23e/0x4a0 [ 676.325339][ T31] ? __pfx_do_file_open+0x10/0x10 [ 676.330401][ T31] ? _raw_spin_unlock+0x28/0x50 [ 676.335755][ T31] ? alloc_fd+0x64b/0x6c0 [ 676.340088][ T31] do_sys_openat2+0x113/0x200 [ 676.344880][ T31] ? __pfx___schedule+0x10/0x10 [ 676.349766][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 676.355620][ T31] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 676.361692][ T31] __x64_sys_openat+0x138/0x170 [ 676.367075][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.373139][ T31] do_syscall_64+0x15f/0xf80 [ 676.380335][ T31] ? clear_bhb_loop+0x40/0x90 [ 676.386149][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.392084][ T31] RIP: 0033:0x7fa2a06a7407 [ 676.396966][ T31] RSP: 002b:00007ffd650c9b20 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 676.406127][ T31] RAX: ffffffffffffffda RBX: 00007fa2a0e26880 RCX: 00007fa2a06a7407 [ 676.415958][ T31] RDX: 00000000000a0800 RSI: 000055561c0c3520 RDI: ffffffffffffff9c [ 676.424540][ T31] RBP: 000055561c0ac910 R08: 0000000000000000 R09: 0000000000000000 [ 676.432524][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055561c0c0ba0 [ 676.440539][ T31] R13: 000055561c0ba190 R14: 0000000000000000 R15: 000055561c0c0ba0 [ 676.449074][ T31] [ 676.452221][ T31] INFO: task syz.5.5260:25528 blocked for more than 143 seconds. [ 676.461004][ T31] Not tainted syzkaller #0 [ 676.466585][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 676.475911][ T31] task:syz.5.5260 state:D stack:26056 pid:25528 tgid:25526 ppid:17644 task_flags:0x400040 flags:0x00080002 [ 676.488861][ T31] Call Trace: [ 676.492194][ T31] [ 676.495377][ T31] __schedule+0x17b4/0x5680 [ 676.499923][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 676.506354][ T31] ? __pfx___schedule+0x10/0x10 [ 676.511256][ T31] ? schedule+0x90/0x360 [ 676.515970][ T31] schedule+0x164/0x360 [ 676.520130][ T31] schedule_preempt_disabled+0x13/0x30 [ 676.526107][ T31] __mutex_lock+0x7f7/0x1550 [ 676.530729][ T31] ? __mutex_lock+0x608/0x1550 [ 676.540498][ T31] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 676.546833][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 676.551871][ T31] ? __nlmsg_put+0xef/0x1b0 [ 676.556441][ T31] ? genlmsg_put+0x137/0x2e0 [ 676.561049][ T31] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 676.567307][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 676.574259][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 676.580612][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 676.586203][ T31] ? __asan_memcpy+0x40/0x70 [ 676.590805][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 676.597754][ T31] genl_rcv_msg+0x61c/0x7a0 [ 676.602301][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 676.608834][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 676.616328][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 676.621745][ T31] netlink_rcv_skb+0x232/0x4b0 [ 676.627158][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 676.632205][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 676.638028][ T31] ? down_read+0x270/0x2e0 [ 676.642449][ T31] ? genl_rcv+0xd/0x40 [ 676.646566][ T31] genl_rcv+0x28/0x40 [ 676.650562][ T31] netlink_unicast+0x75c/0x8e0 [ 676.655925][ T31] netlink_sendmsg+0x813/0xb40 [ 676.660704][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 676.666581][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 676.671524][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 676.676890][ T31] ____sys_sendmsg+0x972/0x9f0 [ 676.681676][ T31] ? __might_fault+0xaf/0x130 [ 676.686959][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 676.692253][ T31] ? import_iovec+0x73/0xa0 [ 676.701083][ T31] ___sys_sendmsg+0x2a5/0x360 [ 676.706643][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 676.711636][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 676.717945][ T31] ? futex_wake+0x4ac/0x580 [ 676.722499][ T31] ? __fget_files+0x2a/0x420 [ 676.727874][ T31] ? __fget_files+0x3a0/0x420 [ 676.732586][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 676.737777][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 676.743504][ T31] ? rcu_is_watching+0x15/0xb0 [ 676.748577][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.755624][ T31] do_syscall_64+0x15f/0xf80 [ 676.760214][ T31] ? trace_irq_disable+0x3b/0x140 [ 676.765350][ T31] ? clear_bhb_loop+0x40/0x90 [ 676.770042][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.776096][ T31] RIP: 0033:0x7fbee5d9cdd9 [ 676.780539][ T31] RSP: 002b:00007fbee6cd3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 676.789824][ T31] RAX: ffffffffffffffda RBX: 00007fbee6015fa0 RCX: 00007fbee5d9cdd9 [ 676.797884][ T31] RDX: 0000000020040000 RSI: 0000200000000140 RDI: 0000000000000006 [ 676.805917][ T31] RBP: 00007fbee5e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 676.815955][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 676.824177][ T31] R13: 00007fbee6016038 R14: 00007fbee6015fa0 R15: 00007fff10d7c7e8 [ 676.832188][ T31] [ 676.835354][ T31] [ 676.835354][ T31] Showing all locks held in the system: [ 676.843079][ T31] 1 lock held by khungtaskd/31: [ 676.849469][ T31] #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 676.908097][ T31] 2 locks held by getty/5384: [ 676.916531][ T31] #0: ffff888036ab10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 676.926439][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 676.936986][ T31] 3 locks held by kworker/u9:8/5643: [ 676.942303][ T31] #0: ffff888095d86940 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 676.954809][ T31] #1: ffffc90003f67c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 676.967462][ T31] #2: ffff8880444e0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 676.978653][ T31] 1 lock held by udevd/6784: [ 676.983254][ T31] #0: ffff888027273350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 676.994543][ T31] 2 locks held by syz.3.2920/16962: [ 676.999747][ T31] #0: ffffffff8fe3e7e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 677.008010][ T31] #1: ffffffff8ec8aba0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 677.021406][ T31] 2 locks held by syz.5.5260/25528: [ 677.026926][ T31] #0: ffffffff8fe3e7e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 677.035220][ T31] #1: ffffffff8ec8aba0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 677.046052][ T31] 2 locks held by syz.4.6894/31709: [ 677.051262][ T31] #0: ffffffff9030dd80 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 677.061182][ T31] #1: ffffffff8e962f38 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 677.071168][ T31] 2 locks held by dhcpcd/31726: [ 677.076653][ T31] #0: ffff8880747cc260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 677.086630][ T31] #1: ffffffff8e963068 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 677.098819][ T31] [ 677.101195][ T31] ============================================= [ 677.101195][ T31] [ 677.112133][ T31] NMI backtrace for cpu 0 [ 677.112151][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 677.112194][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 677.112216][ T31] Call Trace: [ 677.112229][ T31] [ 677.112237][ T31] dump_stack_lvl+0xe8/0x150 [ 677.112264][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 677.112292][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 677.112314][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 677.112343][ T31] sys_info+0x135/0x170 [ 677.112365][ T31] watchdog+0xfd3/0x1030 [ 677.112404][ T31] ? watchdog+0x1c9/0x1030 [ 677.112439][ T31] kthread+0x388/0x470 [ 677.112462][ T31] ? __pfx_watchdog+0x10/0x10 [ 677.112485][ T31] ? __pfx_kthread+0x10/0x10 [ 677.112509][ T31] ret_from_fork+0x514/0xb70 [ 677.112532][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 677.112550][ T31] ? __switch_to+0xc79/0x1410 [ 677.112577][ T31] ? __pfx_kthread+0x10/0x10 [ 677.112601][ T31] ret_from_fork_asm+0x1a/0x30 [ 677.112636][ T31] [ 677.112652][ T31] Sending NMI from CPU 0 to CPUs 1: [ 677.229920][ C1] NMI backtrace for cpu 1 [ 677.229935][ C1] CPU: 1 UID: 0 PID: 20427 Comm: ipvs-e:16:0 Not tainted syzkaller #0 PREEMPT(full) [ 677.229953][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 677.229963][ C1] RIP: 0010:debug_object_assert_init+0x2d/0x3b0 [ 677.229987][ C1] Code: fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 18 80 3d 5f 53 74 0b 00 0f 85 b8 02 00 00 49 89 f6 48 89 fb 66 90 8b 05 4b c2 54 0a <3b> 05 49 c2 54 0a 0f 82 e7 02 00 00 49 bf 00 00 00 00 00 fc ff df [ 677.230001][ C1] RSP: 0018:ffffc90006a3f670 EFLAGS: 00000046 [ 677.230015][ C1] RAX: 00000000000002e0 RBX: ffff8880b873bbc0 RCX: ffff888085279ec0 [ 677.230027][ C1] RDX: 0000000040000000 RSI: ffffffff8bcf52a0 RDI: ffff8880b873bbc0 [ 677.230038][ C1] RBP: ffffc90006a3f7d0 R08: ffffffff81b2cf35 R09: ffffffff9a48a588 [ 677.230050][ C1] R10: dffffc0000000000 R11: ffffed1004f427b1 R12: ffff8880b873ae40 [ 677.230061][ C1] R13: dffffc0000000000 R14: ffffffff8bcf52a0 R15: ffff8880b873bbc0 [ 677.230073][ C1] FS: 0000000000000000(0000) GS:ffff888125390000(0000) knlGS:0000000000000000 [ 677.230086][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 677.230097][ C1] CR2: 00007fc17e1ea2f8 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 677.230117][ C1] Call Trace: [ 677.230124][ C1] [ 677.230134][ C1] hrtimer_start_range_ns+0x3f/0xed0 [ 677.230155][ C1] ? ktime_get+0x45/0x220 [ 677.230177][ C1] ? ktime_get+0x45/0x220 [ 677.230199][ C1] ? ktime_get+0x1f5/0x220 [ 677.230221][ C1] finish_task_switch+0x3cd/0xbe0 [ 677.230240][ C1] __schedule+0x17bc/0x5680 [ 677.230258][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 677.230290][ C1] ? __pfx___schedule+0x10/0x10 [ 677.230312][ C1] ? schedule+0x90/0x360 [ 677.230330][ C1] schedule+0x164/0x360 [ 677.230348][ C1] schedule_timeout+0x158/0x2c0 [ 677.230366][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 677.230381][ C1] ? __pfx_process_timeout+0x10/0x10 [ 677.230410][ C1] ip_vs_estimation_kthread+0x29e8/0x3950 [ 677.230431][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 677.230451][ C1] ? ip_vs_estimation_kthread+0x2835/0x3950 [ 677.230486][ C1] ? __pfx_ip_vs_estimation_kthread+0x10/0x10 [ 677.230504][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 677.230532][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 677.230554][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 677.230576][ C1] kthread+0x388/0x470 [ 677.230594][ C1] ? __pfx_ip_vs_estimation_kthread+0x10/0x10 [ 677.230612][ C1] ? __pfx_kthread+0x10/0x10 [ 677.230631][ C1] ret_from_fork+0x514/0xb70 [ 677.230649][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 677.230664][ C1] ? __switch_to+0xc79/0x1410 [ 677.230687][ C1] ? __pfx_kthread+0x10/0x10 [ 677.230706][ C1] ret_from_fork_asm+0x1a/0x30 [ 677.230732][ C1] [ 677.497329][ T5639] Bluetooth: hci3: command 0x0406 tx timeout [ 677.517653][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 677.524530][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 677.533648][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 677.543709][ T31] Call Trace: [ 677.546988][ T31] [ 677.549907][ T31] vpanic+0x56c/0xa60 [ 677.553883][ T31] ? __pfx___schedule+0x10/0x10 [ 677.558741][ T31] ? __pfx_vpanic+0x10/0x10 [ 677.563232][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 677.569385][ T31] panic+0xc5/0xd0 [ 677.573095][ T31] ? __pfx_panic+0x10/0x10 [ 677.577509][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 677.582895][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 677.589045][ T31] watchdog+0x102c/0x1030 [ 677.593375][ T31] ? watchdog+0x1c9/0x1030 [ 677.597811][ T31] kthread+0x388/0x470 [ 677.601890][ T31] ? __pfx_watchdog+0x10/0x10 [ 677.606566][ T31] ? __pfx_kthread+0x10/0x10 [ 677.611154][ T31] ret_from_fork+0x514/0xb70 [ 677.615736][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 677.620836][ T31] ? __switch_to+0xc79/0x1410 [ 677.625512][ T31] ? __pfx_kthread+0x10/0x10 [ 677.630100][ T31] ret_from_fork_asm+0x1a/0x30 [ 677.634873][ T31] [ 677.638479][ T31] Kernel Offset: disabled [ 677.642791][ T31] Rebooting in 86400 seconds..