last executing test programs: 3.916353728s ago: executing program 3 (id=3964): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb006}, 0x4) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x18a, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa2b88a849008100410086dd63bede754da1246ec0b8000000db5cf3680000ffff640000000000000000000108010000000000000401af01048000000000ee000000000032060403ff480900ff02000000000000000000040000000100000000000002000000ffffac1414aa200100000000000000000000000000022f01000000000000000000004e244e000000001decd35c12be3b41abf7fad557b191957afac643851abbb16f25c1b8ad4a235b71ffc743b92da718f5d30306b2ce7e38779731cede1ac5ae0ff14d00"/234, @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="602000009078000522030c008c0240d661b106e836cf8cdae44a462e1f4f1fcb704609277ce7b8cf2d790f172c30072a8b93d797aacd32d0204df0265c93d37ffe4578c11b8a1664cbc635b6ab1e8d20fd4392c392e32051984ba7dfef6ce7edca95131f4d3e1b924b59bf2df3a5cfcc9f03f7f2b6c78d2a166cc58a0b7b9cc71525052854423e3a4056b5fb9fd2bdac2b1197bc5c5a8d30962f472d69fb3199368853026d7091e23b579b656e20a4389963119487533a482d701ad4d15f0599bfddcd3389dfbbcaf6a19a0a771d38f48f63d63298c6d073"], &(0x7f00000002c0)={0x0, 0x1, [0xd46, 0x381, 0x16e, 0x614]}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x8892}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000100)={@val={0x0, 0x88a8}, @void, @ipv4=@tcp={{0x29, 0x4, 0x3, 0x1, 0x1b3, 0x64, 0x0, 0xbe, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x44, 0xf, "db861eccbc04e33bfab19beb19"}, @rr={0x7, 0x27, 0x34, [@broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, @empty, @dev={0xac, 0x14, 0x14, 0x16}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @loopback, @local]}, @cipso={0x86, 0x59, 0x2, [{0x1, 0xf, "d3c329eda950222fdf2f5a4f1b"}, {0x2, 0x6, "6df9a725"}, {0x2, 0x7, "636f2f7f8a"}, {0x6, 0xf, "208f9014595744ab2dcbf4ecbe"}, {0x5, 0xf, "722a955342c822f6e2de7cff81"}, {0x6, 0xa, "e9b47bd18d5d2c26"}, {0x3, 0xf, "a997abc9644ad0bf8bc3372c78"}]}, @noop]}}, {{0x4e21, 0x4e21, r5, r3, 0x0, 0x0, 0xf, 0x10, 0x5, 0x0, 0xff, {[@sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0xd, 0xf989, "0271b565fa250014d4"}, @exp_fastopen={0xfe, 0x9, 0xf989, "87cce3b33a"}, @generic={0x5, 0x4, "c3f2"}, @exp_fastopen={0xfe, 0x4}, @eol]}}, {"d1726c427464d0a9d0256c631e07bad05a8f3b6a06b39137423834d2872c95f6588c1f8aef1f41e236d7f262a43bc8f302cfc845ff200587a2e0b0c3cc72753da1b1b5296cbae9f0e6c2c1748184f76c4ca41f76a8b48f16645c000e1510db24090065c9199e51fe7c806e722e6ed72f24bb2bce3c8f667bfc992e6fa775fd276556e15ee87cbf8aba05441bad9e192a21499fbc2fc2f7b444dab460b8de04e37946f9f10934fedb896af448e911ae10cb9e72bbcf6c94e046d228ee67f4c295e22cdafeea92b07704a84960b7554a8020ad79"}}}}, 0x1b7) 3.789562006s ago: executing program 3 (id=3966): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={0x1c, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00'}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r3], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) r5 = socket$inet6(0xa, 0x4, 0x9) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x28}}}, [0x3, 0x8000, 0x3283, 0xfffffffffffffffe, 0x4, 0x4, 0xb5, 0xfffffffffffffffb, 0x7ff, 0xf3a, 0xffffffff80000001, 0x8, 0x1, 0x8, 0x1]}, &(0x7f0000000140)=0x100) unshare(0x2020400) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@ifindex=0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@getqdisc={0x56, 0x26, 0x1, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xb, 0xf}, {0xc, 0xa}, {0xc, 0x5}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040010}, 0x980) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000180)={r6, 0x2}, &(0x7f00000001c0)=0x8) 3.645306777s ago: executing program 0 (id=3967): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000340)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="000000000000002002000000000000009ecba9426eae0300e4001ee75b009a09d9e17195747e19d0d1c317cccbde0a731a92010c53159c6e9558a7bcee092c6a3d0771dfe58ee5eb8490a9fbfda937306638953c35e50799bd27c19423e2a2e29bdd5f54aeff0b701bf159db8087f6beaa2d56d972f6f550c17c89a41e680ab7f25f841f38b02ae3c2178707"], 0x30, 0x4004}], 0x1, 0x81) (async) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000340)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="000000000000002002000000000000009ecba9426eae0300e4001ee75b009a09d9e17195747e19d0d1c317cccbde0a731a92010c53159c6e9558a7bcee092c6a3d0771dfe58ee5eb8490a9fbfda937306638953c35e50799bd27c19423e2a2e29bdd5f54aeff0b701bf159db8087f6beaa2d56d972f6f550c17c89a41e680ab7f25f841f38b02ae3c2178707"], 0x30, 0x4004}], 0x1, 0x81) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="2f0000ccdddc63daa7fe35d6d8394a28", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="2f0000ccdddc63daa7fe35d6d8394a28", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f00000002c0)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}, 0x40) (async) sendmsg$kcm(r5, &(0x7f00000002c0)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}, 0x40) r6 = socket(0x10, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000006c00010026bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000400088004001400030064756d6d79300000000000000000000018003480140035"], 0x4c}, 0x1, 0x0, 0x0, 0x6}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="f5001000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000e000000"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000040)={0x3ff, 0x2, 0x8, 0x8}, 0x10) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000040)={0x3ff, 0x2, 0x8, 0x8}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010000100000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000240012800b000100697036746e6c00001400028006000f0001000000050009000000000008000a00", @ANYRES32=r8, @ANYBLOB="0000053f0000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r10 = socket(0x1, 0x803, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="6a2a00ff010100", @ANYRES8=r0, @ANYBLOB="5606090000000000e45e4f42e42f220678f9cc43ec73d64e538c20c6e57c8545d2298d3ea5ef1117d6e360fae5aa35c003460989d6508f10b534c04a8f04b98a6c43a7af14fc2131760d6c1e48da3bff0c0dd3683419b955238e5646ec41a8d8546289be36072d2daa915f6d902f6bd96de5067e63e708c348275830646607bc7dc7c4df910a1f82ef90c8cb00ba98ed66507d39172be2097f5e883aa3e87850d5c95e8d506cad1bfb2bcfa9059616fb9375aa735a8c4b226393c7f02b71879a31954aaa1362cfeea28ffe9a13dc17ca1992b9ced4ab1dbb3fff49adada9ae1ab161319ed2471e6df35cc09d5074bb8ebd1e06f78027ff67746230e5c717306fa50595760b4f63c51967ef7edcb4e8c83bde7c897b82a7480e9e3b5fd9935d1e769bb35f61f5f9e270b5de7c2556c1177bd2f699a0f1b5d7219e103244b197a2a1d64b17dfcc64e3bb1959063ab70c517456850660eeba399e9819f21e626d441306"], 0x20}, 0x1, 0x0, 0x0, 0x600}, 0x48000) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="6a2a00ff010100", @ANYRES8=r0, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x600}, 0x48000) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r12, 0x8940, &(0x7f0000000380)=@generic={0x0, 0xff, 0xa805}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="300000002000010000000000000000000200000000000000000000000c001440feffffffffffffff"], 0x30}}, 0x4000) 3.531072197s ago: executing program 3 (id=3968): ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000200)={&(0x7f0000000140)=""/153, 0x99, 0x7, 0x6}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="180a0000d0ff00000000000000000004851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000066080000feffffff180000000000000000000000000000019500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x3, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) 3.432499442s ago: executing program 3 (id=3969): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r4, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x24004000) r6 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d0a0000000000000000000006040098"], &(0x7f0000000f40)=""/4088, 0x3e, 0xff8, 0x1}, 0x28) bind$qrtr(r2, &(0x7f0000000140)={0x2a, 0x1}, 0xc) connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r6, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00', @ANYRES64=r0], 0x40}}, 0x0) 3.213652596s ago: executing program 4 (id=3972): socket$netlink(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) socket(0x10, 0x803, 0xe4a2) (async) r1 = socket(0x10, 0x803, 0xe4a2) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) r3 = accept4$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14, 0x80000) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES64=r4, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x20000881) (async) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES64=r4, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x20000881) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@mpls_getroute={0x34, 0x1a, 0x2, 0x70bd29, 0x25dfdbfb, {0x1c, 0x14, 0x20, 0x5, 0xff, 0x4, 0xfd, 0x8, 0xc00}, [@RTA_OIF={0x8, 0x4, r4}, @RTA_OIF={0x8, 0x4, r5}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x3}]}, 0x34}}, 0x8000) (async) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@mpls_getroute={0x34, 0x1a, 0x2, 0x70bd29, 0x25dfdbfb, {0x1c, 0x14, 0x20, 0x5, 0xff, 0x4, 0xfd, 0x8, 0xc00}, [@RTA_OIF={0x8, 0x4, r4}, @RTA_OIF={0x8, 0x4, r5}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x3}]}, 0x34}}, 0x8000) syz_emit_ethernet(0x5e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaace000000000088a8"], 0x0) 3.084972096s ago: executing program 4 (id=3974): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x2b, 0x803, 0x40002) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newtfilter={0x40, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r5, {0x9}, {0xfff1}, {0x2, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x800}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x40) r6 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x6e}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000480)=[{0x7, 0x0, 0x0, 0x8000}, {0x1f, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0xfd}, {0x8, 0x1, 0x0, 0xf7}]}, 0xffffffffffffff50) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r9, @ANYBLOB="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"], 0xbc}, 0x1, 0x0, 0x0, 0x11}, 0x20000004) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYRES8=0xffffffffffffffff, @ANYBLOB="020a040007000000b6f1ffff0000854105001a000000000000d74619edc70000"], 0x38}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r2], 0x70}}, 0x240048c0) sendmmsg(r10, &(0x7f0000000180), 0x3ef, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0, @ANYRESOCT=r7, @ANYRES16=r11, @ANYRESOCT=r2, @ANYRESHEX], 0xb8}, 0x1, 0x0, 0x0, 0x20000600}, 0x880d) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.970922275s ago: executing program 3 (id=3975): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="5c00000012006bab9e3fe3d86e6c1d0000147ea64e21160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x1b, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r1, @ANYRES64=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000050000008500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x17, 0x8, &(0x7f0000000000)="b800000500060000", &(0x7f0000000300)=""/8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x20) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$alg(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@iv={0x18}, @op={0x18, 0x114}], 0x30}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2b, 0x80801, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=@newtaction={0x14, 0x30, 0x13f}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r8, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x4850) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, r10, 0x300, 0x70bc2d, 0x21dfdbff, {}, [@NL80211_ATTR_TXQ_LIMIT={0x1, 0x10a, 0x2}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008850}, 0x20040800) sendmsg$NL80211_CMD_SET_COALESCE(r9, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r10, 0x1, 0x14, 0x0, {{0x2}, {@val={0x8, 0x3, r11}, @void}}}, 0x28}}, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.850939816s ago: executing program 4 (id=3978): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="800000000514020029bd7000fedbdf250800010000000000000800030000000000080001000000000008000300010000000800010002000000080003000100000008000100000000000800030003000000080001000000000008000300000000000800010002000000080003000200"/128], 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x0, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x8a693f2646744d2d}, {0xfff1, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000085c}, 0x4844) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_buf(r2, 0x1, 0x4b, 0x0, &(0x7f00000001c0)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c84c}, 0x400c000) socket$nl_generic(0x10, 0x3, 0x10) listen(0xffffffffffffffff, 0xfffffffd) r3 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005180)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x7fd}, {{0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000003a80)=""/22, 0x16}, {0x0}, {0x0}], 0x3}, 0x16}], 0x3, 0x40002002, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 2.708270403s ago: executing program 2 (id=3980): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) accept(r0, 0x0, &(0x7f0000000340)) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000480)="69a0cd1e5dad7f93bb470f103ea56230b4823cded3cc589b6929e9fb7ba1260b95bd85", 0x23) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) unshare(0x2a060400) r2 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>\x00\x00\x00B\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) r6 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000851e3b85c95f0eb881b0000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x8, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000080)={0x209d, 0x0, 0x4, 0x1f}, 0x10) write(r11, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700f0ff01000000", 0x18) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYRES64=r0, @ANYRES32=r10, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYRESOCT=0x0, @ANYRES32=0x0, @ANYBLOB="00000000003f000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="400401000000000008000a00", @ANYRES32=r10, @ANYBLOB], 0x50}}, 0x0) r13 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r13) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002fff300851000000600000018020000", @ANYRES32, @ANYBLOB="000000000000000066000200f3ffffff180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES8=r12, @ANYRES8=r6, @ANYRESHEX=r6], &(0x7f0000000b40)=""/4080, 0x33, 0xff0, 0x0, 0xce2, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0f000000060012006aff02000100000004080000", @ANYRES32, @ANYBLOB="1df900"/20, @ANYRES32=0x0, @ANYRES32=r14, @ANYBLOB="0400000002000000765c00"/28], 0x50) 2.622059906s ago: executing program 0 (id=3981): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000010080000000000003000000850000004100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (rerun: 64) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 64) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56441, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0x2, 0xb}, {0xa, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x204c480) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) (rerun: 64) 2.433613826s ago: executing program 4 (id=3983): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000605d0000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0xa}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x2, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000080)=0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100fdffff0000000000000000000000000000000000000000004e2107944e230020020000003c00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c25080000000000020000000000000083000000000000000000000000000000feffffffffffffffff7f0000000000001f00000000000000fe0100000000000002000000fcffffff000000002abd700000000000020000fd2000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x20040810) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = gettid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x45e], 0x0, 0x0, 0x1, 0x0, r7}}, 0x40) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000}}, 0xe8) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000c00)={0x6, {{0x2, 0x4e20, @loopback}}}, 0x88) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x94}, 0x1, 0x0, 0x0, 0x10044894}, 0x4004100) 2.433012784s ago: executing program 2 (id=3984): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg(r0, &(0x7f0000002880)={&(0x7f0000000000)=@llc={0x1a, 0x306, 0x0, 0x7, 0x9, 0x7, @multicast}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000080)="86952345782e7ada8ab504c9b375667491a3b6164284fd939cfa58df998080b9348794070dd2127e6dca6c6762fe81bbe5bad98ef06e4f8cc068df67ad45ad6d4e22d0d3bdfda297d7a61cd100dea9e0b1ede581828026cb9c7152af3c720782eb6892c7c4205314c6fb8fb3924eae79e258074d94db462f10c1888d3868899d76c54e451e5694c0331f4f02b7c667b6ce47cf9d2a1cdc93a0fcd2823abd7681c67b5d3106571b4eb1e50c978d6889f413aeba22b7285d47dd6450928d1199e7d74591da1921cc2a5d2966efd19c1b16246a54b3ff21fd8eac19ef617ecc9ded6bb36d9f16ea1e0ae2", 0xe9}, {&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="969e60eaf3d603fafe56e2a44f01964dbe8084307f6477ff1fa51354150b5892b1d0a4a713a7e403430c558fa6ba39c329d7e28156cb0319ddf666e31d4c5c6a8faa242d2813d712431eb4310e5c09c47c6663bd7d18a34a07fb34ffbeb2dcfed4777c60986ce58bd804a7ca7f71b60bc3d1b6cf7cc84c47ca9580afecd7564d449b5e0b03c6b86d4a6bc28c550a92ad5c2e74be4f6ac360069c797c528da5", 0x9f}, {&(0x7f0000001240)="d5ee79abc9d81fff", 0x8}, {&(0x7f0000001280)="b57544f976e7f051d8a469206c093a07229024321f5e0129720677a69f240409d5864126bbc313265064604703974913a5f3800b9f3d9383dd3d0a0ba5beb378b86cb313ca493e3d7a4820f0974232cbc806fe658a36d835f4a20f8e7fab23bf3f6d8c8b1c8fdfe0688cf6e9f4753ec4bf61", 0x72}, {&(0x7f0000001300)="711da9a9481759bd807a339fd82a70f97fbd8d35847351a34bec2b1af2185cc945e51be99c3c2df090052199d82ccede61ac374a2324b4c96dcf91566b0a2d91856ea66a680d2c3e679083749fd51c9f720642dc6deb32e99fc654e1f294c6b025546f86ca45c364655406de7fe561ad9eb3397f9cb63e59bab45a1f9777cef445ba05da49394489dfd5a4a4ad7101ac16fc5adf3c1eadf668e80c23b8165029a62227d80ff935ec72c9b574b8c14b4579abfe9d943cb8965804187c584feda998f8ae1ff5de421663bf40a7961bf455e30b84ada90f660a6d895f56b324f00564882d65", 0xe4}, {&(0x7f0000001400)="bc59eb52b079843c2df0b951b32a3355432277d49b650c032f787099c18beb487e2e573aa5a985d19da07414c29592bbefd283b4aa6dcdb44bc9b31d202b2e29c4cf75b2fcaa3a1ed5dcbb298327068e2d5944f12c396fca2fc854823a44227b976dbcd027a4298bb2c105d31d6a88b340937d9bdb0750a6c04685ae27e0b1f7887946808da41c6ca9327c1f72a0a83b2a4882a163480f9086dac7c61191", 0x9e}], 0x7, &(0x7f0000001540)=[{0xb8, 0x10a, 0xe, "25503579889e8881a281e87e0daf69406b152255c1e759c22f7be706f923ea741fd98fb59b5ea10bc1fd5da9517c72b70bdea87a23ad0eaa29b47e6267e762727ffc7abb92b54de5011224ca445cb64d86c80f0e39e03fd59aac9bd8f5b560d1ceed8ca8f7600ee3d4aca39a2f1a2c572ad0d279482b4c5bdd8bc7c6439ec0fd22d2eee0c841fd2e25b4240e31245251cca03879a24b3c205e8098fe8a072d65401bc66bf79a3eb9"}, {0x50, 0x117, 0x8, "5119845fb8c48b5a0ea8bd0f312d16f1d5317b31eba00efdcf6bae1b35c34633bbc71c74067749257ed4bb329a31544375a46072a601e5b28e"}, {0x78, 0x111, 0x3, "a0582c3bb6528f9d090b132757bf205b844f8bd72c9effc11b15c94c57f52c0d5b68aab5bae33df40aa23c21f023abfc5d8bfc0e6d4938632e7ecca622f8a9c31c6cc2acabc4855a91375afa5703be3ac79f3cf36c34be77f64503f7ebead642fa1d8d"}, {0xb8, 0x10f, 0x6, "20f11d462db7c094e2672b7d60a7a5aaca3460bef2bdb5dc64e8519f09e9934a1a0a071ab5d1fb6133aaa60301a1ef454f86fc86b86cfa85dfd820574a4ab83e373db50effc5d9ffe8f9a8b125b4e96cbcf304caa86a48fb79ac444910d725b7bc3eaf71e42e44aef1b218b76f728a42bbc313d89bf4e661c4f523b927a00aadc4d6c16db8d18dc33dfcf110219655e95a46b546b54c550cb2dc16fe9343c4a5fac3676874"}, {0x30, 0x115, 0x0, "77fe7f67e032776b88242678079ba26e68c39e5e897bdb4a5df60d"}, {0x10, 0x112, 0x7}, {0x1010, 0x114, 0xfff, "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"}, {0xb8, 0x116, 0x6, "bf5c6db5da773647370f0138450eecd92fdd5a71c7eeda76749d71a9100998861245a1c30f64218068ef717ff2eb9040e5a96193bf529d529cdb039726a3cf7d8178036cc9d09d97d7cf876649fa05829d6d8b891c9be12853f48ff7429bd9e6936b24a523002d9dbdb642cccf3ef1830b76f8731a6edf1e90bec2de7cb7d7c8417cdccbe6b4e931b9b6ae29587f38fb4e66cbd944c1d1be59e6437d72d52c20f1b17eef579b"}], 0x1340}, 0x5) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000028c0), 0x8) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000002900)={@local, 0xe}) (async) r2 = socket$inet6(0xa, 0x3, 0x3) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000002940), &(0x7f0000002980)=0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f00000029c0), 0x4) (async) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000002a40), r1) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000002b40)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a80)={0x54, r4, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4011}, 0x80) (async) getpeername$packet(r1, &(0x7f0000002b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002bc0)=0x14) sendmsg(r1, &(0x7f0000003340)={&(0x7f0000002c00)=@can={0x1d, r5}, 0x80, &(0x7f0000003200)=[{&(0x7f0000002c80)="4a853e44d6237f6a1ab8544dd1e1a92c4d9eb84138d036a9c1fb888770c50d61ae66a8079501cdccf30457aea431c932", 0x30}, {&(0x7f0000002cc0)="749625d8b8d754c84c437bdae216ea785389e0d783791be3be0d45f2d3228bcae6a482eda9b226ab9c729153bab08876e55b118c576066ab6d1002e991acd2ff7bb86cb552eb4a0ea7400ad5238e93394e7dc957f67dee5a20800bb4802f604543f04857f8b873e54037456607b29cf50ad1b45161791e6126a54bd0d0d469ef65e48166a52d95ffe2176d0b33abd2b5e0eeb37508b09b1c547a89bf3de14760a1f88553714b035b00a92ede5580973553a2083fa6a4cba16aa3e922eeda1c739e23d876079eeb7d538c1b92779c2fd600c71216db81", 0xd6}, {&(0x7f0000002dc0)="06e135ffc08a6be8a669e2d1086d552f5169074dfccb203144a599064659d2580ed70f0766310416931e1e69ad1b574c3d9c73640b1ad942993c48d8e674117f8f104b18d39af5ef4bfcfb456398aba280ebc2a9aaeacc46c26f69a292e4e0624b9be9d3f2acd7ddb035564e281fc092b18e74bfbdccc3b0f9a7c4502f5325be53554ccc29ff0c95448c606b155f60558e3984e593cd3be3c735ff050a451a831ba6329401f39d83c58a6f4f4a321a67b709eb0ba56884bb7dbc6cf4188664bcd941e6a8548b6256ec", 0xc9}, {&(0x7f0000002ec0)="aece8fce94335f1aaaef81aaba3e41bb886498b31056042661efe135b4f493a3a77512237a6b13e035929f3c0274e7fdab26cbbd04feca17e1a30d948930d636bd58f20a281b7ba8831d9e296357a95814c479783b302cf8c2f3ff739572131d71a1fa8435eec5524b27f96ac6ace293726336c8cdac9f1c28c73f2849109cccb9c00a73c2a340959e11decc12ca6716fdb8e57d832a181048632c0517f9192b9d1b6b512858fc98399bb36ddf7e0149527fcd64c37ac1a70494415ad6d2609ca4f8a0693a2d3763b7a25295751b10d987f91d6d9b810ca7705db4e066b4df", 0xdf}, {&(0x7f0000002fc0)="e28c146e60e21d78d8f89552e1d0b5f6a02b6aa09a98dda4e33c28320e583f272da5c6ae64743c8ed9df1f43bb20ce08ef0fd948b38e7bef3272f31137f92e6ea4d0f8775eb6c257f9b2ea05560dc1089bb76f4a3be84924f784be69191593ab08e32b103275ea9784fb48ff3886d2daac6d93e8585cf0e3be96afb7c8f55c70c523a71a85ac90f747a27cd419b7e8130c9e6e57dda06ebfc51d433db4817fefb7c2e45f243b4cfec7063b5fec1dd002891154f8a201", 0xb6}, {&(0x7f0000003080)="8436f59c6f8352e736e78b7715db689471aab100608470747a29376063c93eb1468cfee8ae65aacb0b0037dfccc2ded6db961eaa4711b677307985450afdad919e9271607371339b9e595d2ab7923da47750cf5771950c182d28fe42538ff456882eeba00af0768851b9de5f5865a155dde3ed823eab65e580fa137b8e7449241e6c80afd1802f5d7d495e2e475cb6d3f9a7f217413e48f1bf762b0b5fa960dbbf3d5a55a13fdc7053c15a55e050cde075412b5e319bf867e22411b987014ced71c0ecdfe75462a941a0f202024b718d79d5f0725159f424d67aab40e69c712dfb971077c02dfb368609823713320efcc7912a3a5fa74bacbc", 0xf9}, {&(0x7f0000003180)="06de599351371195aa76c30db12ccfa1261ebe335ddce04eb034fdcb236613843a09dbdc29e3becf71027ef4a968ee8aac8ac3a978f36e925a129c7398b79f54079302061fec33eb63071b293ad3b91ae41cdb79a468f9875e2b57b01fc8716d731abe42bc7069faf48d015d418625967cef426135072f", 0x77}], 0x7, &(0x7f0000003280)=[{0xc0, 0x104, 0xb3, "448927374cce1fae32763330c6df9a397c5a36ca9d9cf9fe55069fa4109639ae86a443f820d5052ed70e28d7825970111e2a0b97df08daf35bf33285340909a750839d58c99d2e918986f516da2c0db47b0caeef4372838a54817df27ee4808b0ce9a1bffec41c4dd862033e95241701ed1d39c9c9b3a5d1446a81372a93bb31ab40ce0bb02ed8ccf424629d6354dc50709768842330a19a842b9109dc54e214a5d5aa20f921733eebc01431507d59"}], 0xc0}, 0x5) (async) write$bt_hci(r1, &(0x7f0000003380)={0x1, @write_ssp_mode={{0xc56, 0x1}, {0x8}}}, 0x5) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000034c0)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003480)={&(0x7f0000003400)={0x60, 0x1403, 0x4, 0x70bd2d, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bond\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000005) (async) sendmsg$nl_route(r1, &(0x7f0000003600)={&(0x7f0000003500)={0x10, 0x0, 0x0, 0x20000004}, 0xc, &(0x7f00000035c0)={&(0x7f0000003540)=@ipv4_deladdr={0x70, 0x15, 0x300, 0x70bd2c, 0x25dfdbfc, {0x2, 0x78, 0x46, 0xff, r5}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0xfffffc01}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_CACHEINFO={0x14, 0x6, {0xffff, 0x5, 0x0, 0x4}}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x3ff, 0x7ff, 0x101}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4044040}, 0x4000000) (async) connect$bt_rfcomm(r1, &(0x7f0000003640)={0x1f, @any, 0x7}, 0xa) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000036c0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r6, &(0x7f0000003780)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003740)={&(0x7f0000003700)={0x34, r7, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x8005) (async) setsockopt(r2, 0x6, 0xffff, &(0x7f00000037c0), 0x0) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000003800)={"0187af876c6660666a4fb991eb9b2548", 0x0, 0x0, {0x7, 0x10000}, {0x297, 0x5}, 0x43, [0x8, 0x1, 0x29, 0x8, 0xdd, 0x7, 0x8, 0x2, 0x8, 0x9, 0x6, 0x4, 0xfff, 0x9, 0xf, 0x81]}) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000003900)=r8) socket$netlink(0x10, 0x3, 0x4) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000003940)={0x0, 0x5, 0x20, 0x44cb, 0xffffffffffff650e}, &(0x7f0000003980)=0x18) write$cgroup_int(r1, &(0x7f00000039c0)=0x6, 0x12) (async) epoll_pwait(r1, &(0x7f0000003a00)=[{}, {}, {}, {}, {}], 0x5, 0x80000000, &(0x7f0000003a40)={[0x2]}, 0x8) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet6_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000003a80)=@ccm_128={{0x304}, "c188db618c900b08", "0cd8fb338586d9deb7d7914f8109f263", "d646354f", "63ef693d0c77d60f"}, 0x28) (async) socket$l2tp(0x2, 0x2, 0x73) (async) connect$nfc_raw(r1, &(0x7f0000003ac0)={0x27, 0x0, 0x0, 0x1}, 0x10) 2.248324404s ago: executing program 4 (id=3986): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_gettime(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x10, 0xfffffffe}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000100)={{0x2, 0x4e1c, @remote}, {0x304, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x7e, {0x2, 0x4e25, @empty}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000500)={0x40, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}}, 0x0) 2.170295325s ago: executing program 2 (id=3987): setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)=',8', 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0x10, 0x2, 0x4) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="78010000", @ANYRES16=r2, @ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r2, @ANYRES32=0x0, @ANYRESOCT=r2, @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40840}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f00000005c0), 0x10) recvmmsg(r7, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000140)=""/42, 0x2a}], 0x2}, 0x8000}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newlink={0x50, 0x10, 0x405, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45502, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_IFNAME={0x14}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x44010) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r12], 0x5c}}, 0x40) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x4c}}, 0x884) 2.055389125s ago: executing program 0 (id=3989): socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x38, &(0x7f00000000c0)=0x5, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a14000000120a010100f0ff000000000002000000140000001100010000000000000000000000000af830d189aeb34f296d1d196827240e0c1024665820ec4143ed33dcaa30ce6acedb97715ff3549470d2046c086cc6dcd6828fdb754daf7eb4009597abcacd9ff85a29e9bf4f2c7b895378e6e8ff5e07e6375fa1511108c474b1335b1cc6f16d6ec15684d9915dbc8af9e7ce3f2e7dbf1884b8fd19c717eb058cd582ef040ced0cad60caf64f2c004d9bbf1a2d0000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x200080c0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0xf, 0x20, 0x5, 0x3, {{0xe, 0x4, 0x0, 0x9, 0x38, 0x64, 0x0, 0xfa, 0x4, 0x0, @private=0xa010102, @broadcast, {[@generic={0x86, 0xc, "391b6535a89224174dd3"}, @cipso={0x86, 0x18, 0x1, [{0x1, 0x12, "2fb4baaa7b256f6a1fc1f922b227b323"}]}]}}}}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0c00000007000000000001000900000008010004ffd8fd6175c3dbb14daaa7e16c87c4256eec89274c7bd08d05e9809f68f95ba66584a2f989d94cb636cc076abc32329cbe7639f07ef11ab1bd0a12f95fac175653c8eabe27bbbf67ce8460a8433206b5db5e59cf14c53719192b9b3aa1bb9b3cbac806481c1a25b437b2c0f874b70bc510a9235fc00f4e864bb9152f798194c038050d", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=r2, @ANYRES8=r2, @ANYBLOB="04000000040000000200"/28], 0x50) sendmsg$nl_route(r1, 0x0, 0x4000000) shutdown(r0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x290, 0x168, 0x10, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff6a], [0xff], 'ip6gretap0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x1, 0xb6, 0x0, 0x20}, 0x6000000, 0x228, 0x290, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0xffffff00, 0xffffffff, 0xffffffff], @ipv4=@multicast1, [0xffffffff, 0xffff00, 0xffffff00], 0x4d2, 0x0, 0x1, 0x1, 0x0, 0x5}, {@ipv6=@loopback, [0xff000000, 0xffffffff, 0xffffffff, 0xff000000], @ipv4=@local, [0xffffffff, 0xffffff00, 0xffffff00, 0xff000000], 0x4d6, 0x3507, 0x29, 0x1, 0x4, 0x16}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffffff, 0xffffff00, 0xff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x1}, [0xff000000, 0x0, 0xffffffff, 0xffffffff], 0x4d5, 0x3507, 0x0, 0x0, 0x4, 0x4}, {@ipv4=@multicast1, [0xffffffff, 0x0, 0xff, 0xff], @ipv6=@loopback, [0xff000000, 0x0, 0xff000000, 0xffffffff], 0x4d5, 0x3502, 0x21, 0x1, 0x11, 0x14}], 0x1, 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@eui64={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRES16], 0x2260}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094) accept$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0xffff}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000680)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xa3, @loopback, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x804) shutdown(r6, 0x1) socket$nl_route(0x10, 0x3, 0x0) 1.882333879s ago: executing program 1 (id=3990): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000001c0)={r0, &(0x7f0000000040)='.>!\\+@\x00', 0x1d1000, &(0x7f0000000080)={@_ha_fsid={[0xcba, 0x2bd]}, {0x4, 0xd126, 0x5b68, 0xe51}}, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x1}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000002c0)={0x8000000, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100030a00000000000000000000000300050000000000020000000000000000000000000000000200100000000000ffffffff00000000030006000000000002"], 0x50}}, 0x0) sendmmsg$alg(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0654ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)='f', 0x1}, {&(0x7f0000000300)='\x00\x00', 0x2}], 0x3}], 0x1, 0x0) (async) r6 = socket$xdp(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r7, @ANYRES32=r2], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r8, r7}, 0xc) (async) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) (async) recvmmsg$unix(r9, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1}}], 0x1, 0x26022, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) socket(0x2b, 0x1, 0x1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="64000000020601080000000000000000510000091400078008e2114000000000050015006a000000050005000a00000005000100070000000500040020c400000900020073797a320000000015000300686173683a69702c706f72742c6e657400000000"], 0x64}}, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700bfff0c00078008000800000000400900020073797a32000000a2c4df5d2a5950b60c66005f9ce17b84000500040000000000050005000a000000050001000600000015000300686173683a69702c706f72742c6e657400000000"], 0x5c}}, 0x80) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @sit={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x80000000}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @mcast2}]}}}]}, 0x54}}, 0x0) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x8031, 0xffffffffffffffff, 0x67476000) (async) write$cgroup_int(r12, &(0x7f0000000200), 0xffffffc1) 1.653185871s ago: executing program 1 (id=3991): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000480)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x11, 0x0, &(0x7f0000000080)="dc188619b95d02ff4284860188a86a4e08", 0x0, 0x8001ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x50) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r6 = socket$kcm(0xa, 0x922000000003, 0x11) (async, rerun: 64) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a32000000"], 0x94}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x3}, 0x80, 0x0}, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x4008014) (async, rerun: 64) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r3) (rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYBLOB='\x00'/28], 0x50) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000bbb916378e8117e6ece4387762f1da4345378e71a020a8e079790d21088a29feb8c5f41f9f3f7f1448e6dec9654a4ea6b94aba1924888bbf02e37a1305bccbacb0f341bc9a34c3a34ca04c680a8de6e7090d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1c, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="18080000000000000000000000000000010000005db81d63e405000000d73a5fc2bc8ff04f2f6ca96bd0105f6361f922a52a960100000000000000d745ffcb", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000550901000000000095000000000000009405080010000000bf98000000000000560800000000000085000000b4000000b7000000000000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req3={0xfffffffd, 0x3, 0x2, 0x81, 0x475, 0x4, 0x3}, 0x1c) r10 = socket(0x8, 0x800, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000140)=@req={0x2, 0x0, 0xf4, 0x2}, 0x10) r11 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r11, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x4003, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) recvmsg$unix(r11, &(0x7f0000000100)={0x0, 0x1d, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) 1.329278922s ago: executing program 1 (id=3992): syz_emit_ethernet(0xf86, &(0x7f0000000980)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0xf50, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private1, [{0x18, 0xa, "21125ef61d153277b8e16396521752b9adbee5aeae013164e249ea90143563744ab5a8c881554b739ae98935e8a7f4792f99c59851a9a959f40d7066709c3d92ae9e171f65c9080c60744ce3c5e11510b149"}, {0x1, 0x3, "41d744ea371d3b2fc03dfafa7aad188985958a016a056c5117c8"}, {0x18, 0x6, "a6c471be3be48418bde0019a790511b1e0fd42262d975733226081a88984ca8e8c93d7824af40d148d2d8f8e63fb5a0985"}, {0xe, 0x3, "04983a676fbfb2659e5a20860a09bce68dcc0dcef6b456be9a4b42c1"}, {0x1, 0x1cf, "b015c11db29c72c0c8706c60985391fc86a3f2e47f68ad66986545e022666c2d5f4859279c7aa0994f6ff0a290f8fee1b7c8747eaa307058139f1b6eb84abc841379755da3a9285863ce11081c9d33ab2c82904bd70d79ed083c4fc19cc09b8af940ecd37674a31bc5373b2daea341e1fc777d37ad191af6e04dd152f11d03f63582c32180923289311ee66cd2b47e3c2f56609405c55b863ae0b0045b86743db41be255796e2721062c31c6c0fabc9683f538f3a7b05f08f61335177ce40ac7e6afc1537743e9899ec5c0ea70f24267a742e043e789304ea3f5fea883a2334e311f2ce3f8755f9d18ec6689f1e1ddfb995bca0930bf620fc3b6587d9d424b21bfb3c51a8e462e5f8b8bec5a9524264b39ebff576115c63637573d887096d41e5c11dd17f4e6aa44e323e30b9c06eda1ca087a00bf1511d2bdcab9348123fca36f5dacaae7f9eae59bfda266428db78e2b15eda2f1df6d80ebbb06a6f2a2a67716d7ee3add0e58982048167b48b84f86c4d39ce73ec713ef71ebb691cd6b9b96c14f988f95a4362f285706b2b6886f1b49ee3082072e4134ba95002f5763c9b49fa4a0153cce47b0d1ae7b998e906f1c322d4a7b1a12bfd0ca5f213e37276a58d316a4d60bc71529100274aa6460aaecdcf7600a703d3de3c7b907982f5b2960a2d6021e3ee204dd672d7a9433850c38ba8236f42be0066ddf4a932bfbb01cc17fb118ab0bcb386721759755c0c370e379f3d6269c37d0b22919178031176e1a594e782ce7ef78c19141dd4b2382c82c3b60aa177e64a65ca9827e0391a60faa8758d487ceb5ca67905816fcf5b22ca132d3266e421d6d649b0b0efb6be13b67a4ec32a03f649f35f1571b9ef9849f2c1b08bb6ea28a74f1fd662939e2b5e5aecf1efb3861df60635f628e468acc4d535f36ce43c005fc4acf44c5befc720c8294be4cd42b2f86a502cc9e1dcc8b0ff53630f07823b6bb4fec216f175a291a695c1e01c0f0bd2d8507068dd0e1780967d0514d52f026bdf677e15566c76757e06ea018e19ca3c66e02ad26da4cad9759b6036a08e499683fbe1732d51ba7c2c1539dd8b06252020c9910115426b846a0b7b8a5c05b6bd32f7b578c133aca8b57923a474d6985c16f78ea048873747e155d39925fb6173d1cb690e961ed56d1f94b6744a38dde02bf49100c70e56fa2a8055262054730c58d1ee9d5b33e40d4ec55f7edb5b5717df8ef8765a420912c7552a34493b5059ad78d2edf8c35cea2fb3ef81fb0554dce5815e071c53fcf56b0b6491eba4e73b11e2e18961069866fbdb10be0b53daaeb974872aa084bb401379882613db399b07260097291bf730225cc256acd877c4fdc98039cb8cfa9b0df3cf8063f8804ad9f71bd985b3c7d0ecab768e1e2f62755e64d7d940cee3782a0cf9f231f0fded7810403dd7d3d156237fe5719a7d72c4a3aed39b1c0658bc3f4ee9e19f2c22222cd6cba4f487b91111ab75b8fb1877195e432ef01f173e5b6684ef344b78ba76989287f8333e39dd521ec5f57d142baf5a54a30241de6fa8f8b7c825b6f84934be109dd3c08200130225a1efd6dd07f98e702b53e9577af244ddf2b1d8aec8524a612060897bb8fac86c3cbd02b822ec62b186b79030efdfadd5ce9109e14fba978db94e4026c4f79dd088bd1ed7018db427644148cc29628a190d77a23d3ab0f86a3576e15ea871ba524ca22a0a153cfa1ca7ca86c155fa01d2e88930d57fc6d4c42c13d7e6db5577ffd3830681ee9670c01ff04222789d06d0185aca1e8f271252a133c917efbb9175e1b744f4f9683da4ea220aa084c0b9967efd03c5e937c365b5c500bea80f42013ef5f09b0efa72ad3f98b31c084f9e16b04ad7fd745670cc68856c958cac5250867d4e15b52156c374e5acfe17bf68c2456683c6baafab3bc7d0640c5a9bbe3295432bec1869fe5f21b3162c067a2e8daffdf58d8a4ae133f8fc979600206b68727798710aef59d91168f7b0c3aa509bf562b8743c04a7dbc02cc6659dff74645a08c9d7d16baf388e805c9710ff77e2f6a90181e36a6f92b4cf753cd97827d987e8c2f9550a3fe0e09fb8ea717fc6e49685dd7a53c2a5ccfaa08dd3ab85bde164e38e85a2655832db3867c4ec4650dc91cf27fdbcf079525980f6ea996468179e23aea4cd48aba97d51c884580335199bf5828e80008e4e3c034e01d0b72d7bed2bc57b8ad6f143af8151fb59a603118192fe70d5d8e18e86b54c7aecf4fb04a4ce7a4a62c2bb5895a944500db6b94c52c87e3c032d4196f14cc97e544b2f5e43efe3f68b5e5e7ec6e3d6bcc899ea9824246f4e0e4530ba04263adf3d181594369b166ca6e88e00341813d5e176a55a9ccde042e79371d1d144a7219e25c916817276d42386595aee01fb260e96b73c8a10f1031c8f8c4d0c4f025cba231529d2cd86198b61da9af6ae26f03f1e461a8b60879b5baf7b60517a1b71e539dbf391a93e0056c6843c749ad17db3596b8c726ed4de4049e301712b6f3cbc7a16d989b096397b7127eda3a25d204d138d659f3050e965b5b2d1105eb060f6025571cbc5ffa7bb7a1d2618b2d4940bd28a05f52df145326fab1d5777783d40c1a5d6949814dd0756a9017ec8d7c507f3d5035f6eed097185156c8c5eb1340baf2c9af397bd67a440c22bc90bed5e4f0dd19e4b47a5cd3e4ec40443d7928ecc1a9b199e14bf6e4880e27052b732431edb2ed5ef1e888ac317a4f68590ad908243c73bc7dae395744e56e6c77e42ced106e81e8d15392173cec2212b421e45b1bcd94c7fa5fd197d0aeeadf0227b18d6d8a0b527c85b10546ca5c3978e3437109a76c89213d1827aa5889cc9493adf1c35c5d1664a1d6a050ea244593af07f6d27bdc5954c46a649ff727191ddb2802c346d1d829b327993eb13dcbd28df269864ed054e5229b5e3a5a69370c94921d0bcf6fc07a940536a514717d696967029b9c3fef983b3a3aa8aa27655cf4c547391ae37a5cc85d1dd80b8f28275b36139701b63270e13aa421d2e92be44d3093740c8b89086164d78228efe3f070dbe056c89beba10c330942f82639595d2fc24cf2c2cbc8c9595373a1f6925af222f4819dfd3a45968fb5d7e604a9fd9e0bb473b801a044616e6c2b5d5583380fca70a00552bfe611bc47fd24d9915020ed6dfac54fd60def40b5ebdc4f2c43af1b830fc7ce7503e3501f8e27cd9dbab5425adc5f513867266c925ec7759d1707ac8f4e55c5743dd1e40f06e59804644610f06145447d6965f5335c63c8eb0943a7ca3316e3feb08a4bdeb6e760a7ad4190e44de8f7865d5fd75656f06080d8c3b2e6bacb098a545a99729ee8dcba2a80459d99536365dce51f3fd9d9c2391b4fc08ce9a7b37e84bf60142f57e5c94df95f084b6d5aa9387e7796ff4fe3ee17eb5d91b9cc2848e902dc1c7855897b103ab19909f727eecbb65f5904f4cd9eb0dd323bdcaa5c0b4c169acfbd03b9e320d643a231d2d3f329162da7072dafc99510dfc5a73d683b1c1bdbb2784e1ae5420df3bb4db9ea073a43e4a0333d68160b780caf17ab5f302203d3c8c412e17aa068e10836fd26c05d8b8f8299dd9027a894bd6696501ccee7a17db077cd33ec8244f5bcfecf3d97c8cfe920fc29f84d2649a22cbef60d3edd3afcc6e14743ca13bbd014553f685f84619092a81320d88bf0b39a8cba7119c4758682aedfbdf51386b5764318e16d2b2bfaea5cc22e706a3177181875adb82a4649be3600f2df15445283d2ba80dc32ac589ec56d22b7574062e6571bc240ccd4ddb1f06986f082a9086861288ca2dcef398231ead2f3e4783d4c3548e6c02905f108032b59299275246c56c024b9d4aa3472da4d2ce03e57e9daa3e80543d564ba4e7af0599317c6a454d233c6719c80f25edb68310a561ded4a83e9a58c136d4c26995a77c2743a3b59a2d97627fa7c574769bba43c6dc25c62a633376c56ed4066689d878dc6b348301f98f0602f550ea90ecd516bfb4cb495c1518f24a88417e644d5ba486e14b79cf10dcc1a2e1df0e7a3317486792e3fdfdc23b46b43d4811eb976b1db8dce4a8ff9ddf2d93f3007e549237dd4fcbf1504cb088c1f3f103a01d0f5c793b67b22d85e5cf2161d2079a622ffecfc22bc0e8699b6b830677e8a0f862515cff8e724b0cf4fa220a0a42a34a251ea5eb43490c3346ab3e0fd7661d76b0da4fd742915d6a099aec3a54844cae1c565757952010d13093ea97934be64c9c0167ad99e5f3448fe923ec24dfaba9e5dde707e74585d20fb7bb074799d6ab465e4414507b7f741abd7704273c6511b66f8279fa6751703fee5c33e944b154a229ec512b0658e35792761828395479418671d9da579ef6d88d30c7b0b0887f728b39379ee08024eac58c9678d254b24adecc5c17bc3cf47503eef1e02e6b4fa85ab14ef5b3775dd02e412f7d2561afc4a9d5a6f4a35e1e016abda7bbde17fb37d100019f17b14d4099f55ee2931362ac942eddc58a7e0cf6b9bd0501ae75bed65c9ffb8f2d164c502163d92f7103323a7fea1c0ab82b16a416867952626d9145f46fde46aabd3db15d8de0bf860bd99997d0e2feb422d4b4d51d809ef077bcbd4a57bb9cbd6d4c893e67055d2d384d1eb776dba3b85b7500b3f5e12a0ffeb23244e601a87ddb986ac9e579fadfbce548658c8ba8254ec3f286b0176347cca7c74908b9cc412cbd828b8b96d720726637602dd1cfc8a08763abdfdc53dd20f37eeac7fe441f94c2334f9708d6d69e3f0293309b166398becf4386c36b4b3bea69b7060fffcd465a8be78386b76494f6f9fc119d74cbedda8156e3aff3839bfb884d7630db87b557ad176db2f8967ef4c04e90b4ccd863d65632e48da0610760ce511b00294f599ee9b85caed40028a8c61ec432ef7d2ae88796e59111315caa9d4828b6f0b3b7c8e5d1aa8989d0b70fd913442bdfa6e77db683517ef46f931b3612c348952c4a08a3e646ff98395297bb7d0c738c851708b81c44defe0e159aae7bb7055dfec5406f32bdf033dd4a13c0d830295aa4b1124398d9bcd008467dbf984cdf2cf58f585eeeb1149bbfe5e90e2ea09dd9dd226d516d131ee2cd7d0e679f0dc7c7c31d30709787f4ac0f7706d165f2bf33c9f1a479ee46ee92bd81d49d46b7811685d7b37c4647be0fd05cf259ec30f077514d8648e81b7ccb78c94720e64d4c93cdaf356d076f1be9480cdd720a175"}]}}}}}}, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x22, 0x0, &(0x7f0000001080)="f6f6e9a1d78ad62ceef1894386dd78bb3fb7dbfcc7199cc190885422e4d22c8c4c86", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="030000000000000000000030000000000067907800000000e00000012100907812000228250000000000000000000000e0000002e0000001"], 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f00000002c0)=0x80000b, 0x4) 1.277846797s ago: executing program 2 (id=3993): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x48}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) accept4$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x80000) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newtaction={0x48, 0x12, 0xbf68af9d17701211, 0x0, 0x0, {0x7}, [{0x4}, {0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x1d, {0x3, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x240000d0}, 0x0) 1.17734435s ago: executing program 4 (id=3994): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008000) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x0, @void}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000001c0)=ANY=[@ANYBLOB="083e0bf0c27600000000000086dd6710000000442f82fe8000000000000000000000000000aaff02000000000000000000000000000104206558000000030c080000000086dd886488be0000000415030735010000000004c289080022eb002e0000655800000004"], 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a00000000000000000000020000000000000000010000840800100006000000010000000300000b0000000000002e"], &(0x7f0000000380)=""/3, 0x46, 0x3, 0x1}, 0x28) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@initdev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private0}}, &(0x7f00000005c0)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x4e22, 0x101, 0x4e22, 0x0, 0xa, 0x0, 0xb0, 0x67, r1, r6}, {0xffff, 0x1, 0x8, 0x8, 0x1ff, 0x0, 0x100, 0x8000}, {0xb1, 0x6, 0x8, 0xbe10}, 0xe, 0x6e6bbd, 0x1, 0x1, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d5, 0x2b}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3503, 0x1, 0x1, 0x5, 0xb, 0xff, 0x4}}, 0xe8) r7 = socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup, 0xffffffffffffffff, 0x37, 0x4028, 0x4}, 0x20) sendmsg$kcm(r7, &(0x7f0000000b80)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1, 0x10001, 0x2, 0xfffffbff, 0x1ff, 0x4, 0x5}, 0x1c) r8 = socket$tipc(0x1e, 0x5, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000000)={0x18, 0x0, {0x1, @local, 'ip6gre0\x00'}}, 0x1e) r10 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r10, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) r11 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r11, &(0x7f0000000080)={0x18, 0x0, {0x1, @local, 'veth0_virt_wifi\x00'}}, 0x1e) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) 958.242294ms ago: executing program 2 (id=3995): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0xd, &(0x7f00000006c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0017"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r3) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xff, '\x00', r2, r4, 0x3, 0x4, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000800)="0000000000000000606b53cc7273", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 953.892649ms ago: executing program 1 (id=3996): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f00000003c0)={0xa}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = accept(r1, &(0x7f0000000280)=@sco={0x1f, @fixed}, &(0x7f0000000340)=0x80) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000380), 0x4) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001280), r3) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x44, r5, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xf}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xc936}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0xc04}, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f00000000c0)={0x278c, 0x38, [0xffffffff00000000, 0x9, 0x3, 0x6], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r6, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r6, 0xaa0f4000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socket$igmp6(0xa, 0x3, 0x2) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8117}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1ac}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000010480)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x5, 0x2}, {0xfff1, 0xe}}}, 0x24}}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x42, '\x00', r8, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r12, 0x0, 0xe, 0x0, &(0x7f0000000200)="e02742e86c0d85ff9783763a0a00", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x1, 0x4) 724.743617ms ago: executing program 0 (id=3997): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90644}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_GROUP={0x8, 0x1b, 0x3}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 591.176769ms ago: executing program 2 (id=3998): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0400fcffffff0400f2ff1e000000"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x24040040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001100)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r1], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f00000010c0)=r2}, 0xffffffffffffffc9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r9, 0x6, 0xd, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000001000)={'bridge_slave_0\x00', @random="e4a8b032869c"}) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f00000011c0)=""/221, &(0x7f0000001180)=0xfffffffffffffe82) syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYBLOB], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000001080)=r8, 0x4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f00000002c0)={0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) recvmsg$unix(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) 378.175469ms ago: executing program 0 (id=3999): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge0\x00'}) (async) socket$kcm(0x29, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x16, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES8=r2, @ANYBLOB="0000000000000000100100000000000200050000000002000000"], 0x48) (rerun: 32) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r3, r4, 0x7, 0x0, @val=@tcx={@void, @value=r3}}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r3}, 0x16) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000580)={'gre0\x00', &(0x7f0000000480)=@ethtool_eeprom={0x4f, 0xcd, 0x7}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a03000800000000000000020000000c000340000000000000000209000200733d9481414dc638f3631d0bfbb1c382797a32000000000900010073797a3000000000140000001100010000000000000000000500000a"], 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) (async, rerun: 64) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async, rerun: 64) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r11, &(0x7f00000002c0)=[{&(0x7f0000001740)=""/12, 0xc}], 0x1, 0x4, 0xfffffffe) (async, rerun: 32) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (rerun: 32) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000280)={r9, r9, 0x3, 0x57, &(0x7f0000000740)="818325fd661ca34ec8a87d1ff40eb45db54c3a60f05b063fb3d9c2b335d57194899e6a9b9ad987ab0107b3bc118c90fd6e03e349ed25502ec3d6a150f3eb5eb8325d7c9b73a559bede854e921223527665cc557e7a1d6e", 0x9, 0xf3, 0x1, 0x40, 0xc336, 0x1, 0x8000, 'syz0\x00'}) (async, rerun: 32) r12 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r11, 0x84, 0x72, &(0x7f0000000340)={0x0, 0x20c, 0x10}, &(0x7f0000000440)=0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r11, 0x84, 0x7c, &(0x7f00000004c0)={r13, 0x7, 0x7fff}, 0x8) (async, rerun: 64) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="500000001000ffff27bd7000eedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d6163736563000018000280050003000c0000000f000100060000000000000108000500", @ANYBLOB="755ea10f429ecead13823b42bd993ea8cec793820556827101989a15302097da4bc2e09c7ccd1bfb18ae579c8ab351dce88cf8106d808541709128a076bc6e4955d9101b8191526e02dd5c3dff28d2e08b2ff20bdb99d31852ed73b173e278965ee7312800b84d08568983e9a074ac7bbe51688da209b94f97e20a0780aee52bf0791794a29a1ac6c0ff3467e419926edbdc017d347c977f0fec39d0ca33666493f2383ebf351aed3e941a0d76ceef1ab2584652d6514f6433e04f43f3509af0130ba5f44bf03953b08246e2b03cc20cde"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x8000) (rerun: 64) 239.163435ms ago: executing program 1 (id=4000): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10044}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x40008000}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x7}]}}}]}, 0x44}}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYBLOB="6507a42bf81c964064e684f101c1ffb001e96f783c5492303fd45fb3f1b324fe3abbdeb05597fa68b55294fa201b1db43dcd17c6970c8be04bb1e302bb40fd50347d68da97ddc0ceb7674d54b824670c8c0a17c24ca2ce003814dcae03e61ff7172e7592398e7b473a1fe629c118ffb850a779eef646c265", @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES8=r1], 0x158}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 149.66522ms ago: executing program 0 (id=4001): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf250300000008000100000000000c0006"], 0x28}}, 0x40000) (async) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf250300000008000100000000000c0006"], 0x28}}, 0x40000) syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000600)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd4, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xbafc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xf4d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffc0}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffe}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0xd4}, 0x20008000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0x10000, 0x42}, 0x50) 60.278788ms ago: executing program 1 (id=4002): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000a700400000000000003000000850000007404000095000000d20000002b98ca8f3ac8fc778746031ec019fbe057c4527c5d807a34c020d19bace89749d339a1985d03b91e0e265ec4ae4c470730533491ffa6581b2da377b44bb22f40b9c9eb4f7debbe012ce22d01aca3f869ebcf82d007af9a9795486232cc159b0617b60e5779de67cbb2deed6d51f8c759fdfe5ef7daa0793ac4c5c0ef583e63f0dcb8ec784bffa2f3239ba7c8a4d4c6fa1e780189fcca38f16f761fd309bcaec25d6524b5103fc2838015356153b62150fcb99c13768981bc794a0b9980db7713833939806a9c003421b26d151a37fd3204d07798e52c6ae49927762a46889220911dbb34c21f7f84013b30f8ea23aa082cf18c2bb0c71bea3aadee086a041ba2a7716058fd0fd835"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffffc}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) accept(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r0, 0x0, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x4) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0xfffffffe) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f00000002c0)=[{{&(0x7f0000000100)={0xa, 0x4a23, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x6}, 0x1c, 0x0}}], 0x1, 0x20000000) recvmmsg(r6, 0x0, 0x0, 0x40002102, 0x0) writev(r5, 0x0, 0x0) accept4$unix(r4, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=4003): r0 = socket$kcm(0x10, 0x2, 0x4) recvmmsg(r0, &(0x7f0000003d00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000000, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001880)="5c00000012006bab9e3de3d86e6c1dffff137e0300000000000000b68675f8001d000a00a0e69ee517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)={0x16, 0x7, '\x00', [@ra={0x5, 0x2, 0x5}, @calipso={0x7, 0x20, {0x2, 0x6, 0x8, 0x4, [0x1, 0x200000, 0x5]}}, @jumbo={0xc2, 0x4, 0x101}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}, @ra]}, 0x48) listen(r1, 0x800) kernel console output (not intermixed with test programs): 9020][T17333] team0: Port device team_slave_1 added [ 531.988469][T17500] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2882'. [ 532.015812][T17501] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2882'. [ 532.098224][T17333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.116037][T17333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 532.196380][T17333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 532.309264][T17333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 532.344937][T17333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 532.399926][T17508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2883'. [ 532.455752][T17333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.795835][T17514] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2885'. [ 532.887164][T17333] hsr_slave_0: entered promiscuous mode [ 532.918326][T17333] hsr_slave_1: entered promiscuous mode [ 533.062535][T17526] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2887'. [ 533.202754][T17526] bridge0: port 1(batadv1) entered blocking state [ 533.224645][T17526] bridge0: port 1(batadv1) entered disabled state [ 533.238496][T17526] batadv1: entered allmulticast mode [ 533.248510][T17526] batadv1: entered promiscuous mode [ 533.258124][T17519] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 533.414764][T17534] netlink: 'syz.3.2889': attribute type 33 has an invalid length. [ 533.517950][T17538] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2889'. [ 533.557642][T17538] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2889'. [ 533.587587][T17501] lo speed is unknown, defaulting to 1000 [ 533.663620][T13320] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 533.677145][T13320] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 533.756058][ T5626] Bluetooth: hci5: command tx timeout [ 533.769891][T17536] tipc: Enabled bearer , priority 0 [ 533.825194][T17545] syzkaller0: entered promiscuous mode [ 533.830972][T17545] syzkaller0: entered allmulticast mode [ 533.989596][T17548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2891'. [ 534.039743][T17333] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.141137][T17554] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2893'. [ 534.170512][T17548] syz_tun (unregistering): left allmulticast mode [ 534.192699][T17529] tipc: Disabling bearer [ 534.410016][T17333] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.598618][T17563] xt_hashlimit: size too large, truncated to 1048576 [ 534.723299][T17333] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.918244][T17333] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.798516][T17333] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 535.833796][ T5626] Bluetooth: hci5: command tx timeout [ 535.856782][T17333] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 535.891290][T17333] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 535.948030][T17333] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 535.967207][T17583] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2900'. [ 535.986508][T17333] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 536.044099][T17333] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 536.062256][T17333] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 536.105483][T17333] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 536.443860][ T7022] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 536.459466][T17333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.540886][T17333] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.604118][ T133] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.611824][ T133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.663495][ T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 536.679762][ T133] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.687249][ T133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.914820][T17630] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 537.442217][T17630] bond7 (unregistering): Released all slaves [ 537.527756][T17638] syzkaller1: entered promiscuous mode [ 537.541979][T17638] syzkaller1: entered allmulticast mode [ 537.637910][T13320] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 537.732848][T17650] __nla_validate_parse: 1 callbacks suppressed [ 537.759108][T17650] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2917'. [ 537.838318][T17655] ip6tnl8: entered allmulticast mode [ 537.956551][T17662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.284439][T17682] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2923'. [ 538.316322][T17682] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2923'. [ 538.645224][T17694] netlink: 'syz.3.2926': attribute type 12 has an invalid length. [ 538.715700][T13314] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 538.752787][T13314] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 538.787745][ T7015] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 539.266761][T17716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2928'. [ 539.397035][T17333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 539.418241][T17698] netlink: 732 bytes leftover after parsing attributes in process `syz.4.2925'. [ 539.431891][T17698] netlink: 732 bytes leftover after parsing attributes in process `syz.4.2925'. [ 539.517651][T17729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2931'. [ 539.564168][T17734] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2932'. [ 539.580295][T17734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2932'. [ 539.637766][T17333] veth0_vlan: entered promiscuous mode [ 539.652118][T17333] veth1_vlan: entered promiscuous mode [ 539.736703][T17333] veth0_macvtap: entered promiscuous mode [ 539.757644][T17333] veth1_macvtap: entered promiscuous mode [ 539.818336][T17333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 539.836967][T17740] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2933'. [ 539.858584][T17333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 539.870541][T17739] netlink: 'syz.4.2935': attribute type 13 has an invalid length. [ 539.922476][ T133] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.959105][ T133] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.987976][ T133] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.035515][ T133] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.197184][T17736] lo speed is unknown, defaulting to 1000 [ 540.493101][ T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.528287][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.597843][T13320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.606997][T13320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.389117][T17794] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 541.448600][ T5627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 541.466884][ T5627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 541.479055][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 541.501467][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 541.510185][ T5627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 541.804585][T17806] tipc: Failed to remove unknown binding: 66,0,0/10005162:2751095148/2751095149 [ 543.044265][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 543.109612][T17834] geneve2: left promiscuous mode [ 543.159602][T13320] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.192902][T17840] netlink: 'syz.4.2959': attribute type 23 has an invalid length. [ 543.195730][T13320] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.415507][T13320] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.431350][T13320] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.592550][T17852] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 543.603482][ T5626] Bluetooth: hci1: command tx timeout [ 543.736872][ T6232] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 543.748514][ T6232] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 543.786635][ T6232] team0: Port device macvlan4 removed [ 543.825608][T17864] netlink: 'syz.1.2963': attribute type 11 has an invalid length. [ 543.864989][T17864] __nla_validate_parse: 11 callbacks suppressed [ 543.865013][T17864] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2963'. [ 544.025120][T17858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 544.179025][T17795] lo speed is unknown, defaulting to 1000 [ 544.467415][T17877] syzkaller0: entered promiscuous mode [ 544.474445][T17877] syzkaller0: entered allmulticast mode [ 544.485783][T17876] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2968'. [ 544.497198][T17873] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2968'. [ 544.532668][T13320] netdevsim netdevsim0 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.638498][ T1696] block nbd2: Possible stuck request ffff888027aa4b40: control (read@0,4096B). Runtime 150 seconds [ 544.652509][T13303] netdevsim netdevsim0 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.711217][T17897] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2970'. [ 544.755426][T17901] IPv6: addrconf: prefix option has invalid lifetime [ 544.811084][T13303] netdevsim netdevsim0 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.835058][T17891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2970'. [ 544.989725][T13303] netdevsim netdevsim0 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.125879][ T6232] lo: left allmulticast mode [ 545.126202][T17912] netlink: 388 bytes leftover after parsing attributes in process `syz.2.2973'. [ 545.304467][T17919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2974'. [ 545.573562][ T6232] bond2 (unregistering): (slave bridge5): Releasing backup interface [ 545.584190][ T6232] bridge5 (unregistering): left promiscuous mode [ 545.592399][ T6232] bridge5 (unregistering): left allmulticast mode [ 545.618103][ T6232] team0: Port device bridge0 removed [ 545.629631][ T6232] team0: Port device bridge7 removed [ 545.648379][ T6232] bond0 (unregistering): Released all slaves [ 545.659745][ T6232] bond1 (unregistering): Released all slaves [ 545.684199][ T5626] Bluetooth: hci1: command tx timeout [ 545.687015][ T6232] bond2 (unregistering): Released all slaves [ 545.706155][ T6232] bond3 (unregistering): (slave team0): Releasing backup interface [ 545.717580][ T6232] bond3 (unregistering): Released all slaves [ 545.737154][ T6232] bond4 (unregistering): Released all slaves [ 545.753122][ T6232] bond5 (unregistering): Released all slaves [ 546.150820][T17918] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.158723][T17918] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.383008][T17918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.401328][T17918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.676360][T17919] 8021q: adding VLAN 0 to HW filter on device bond7 [ 546.725512][ T6232] : left promiscuous mode [ 546.797150][T13303] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.812165][T13303] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.825893][T13303] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.884904][ T6232] : left promiscuous mode [ 546.972752][T13303] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.053091][ T6232] tipc: Disabling bearer [ 547.090038][ T6232] tipc: Left network mode [ 547.234325][T17969] netlink: 'syz.1.2981': attribute type 1 has an invalid length. [ 547.303421][T17879] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 547.753338][ T5626] Bluetooth: hci1: command tx timeout [ 547.972354][T17988] vlan3: entered promiscuous mode [ 548.042986][T17988] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2984'. [ 548.291693][T18013] netlink: 'syz.2.2988': attribute type 6 has an invalid length. [ 548.327490][T18015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2989'. [ 548.510349][T18015] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 548.552603][T18025] bond11: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 548.613673][T18025] bond11 (unregistering): Released all slaves [ 548.684645][T18039] ksmbd: Unknown IPC event: 1, ignore. [ 548.691168][T18038] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2992'. [ 549.046788][T18055] xt_TCPMSS: Only works on TCP SYN packets [ 549.117942][T18059] netlink: 'syz.4.2998': attribute type 21 has an invalid length. [ 549.151051][ T5282] 8021q: adding VLAN 0 to HW filter on device eth5 [ 549.217023][T18064] xt_hashlimit: size too large, truncated to 1048576 [ 549.246239][T18057] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 549.273793][T18063] macsec0: entered promiscuous mode [ 549.398076][T17795] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.439299][T18075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3000'. [ 549.448628][T17795] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.448815][T17795] bridge_slave_0: entered allmulticast mode [ 549.452546][T17795] bridge_slave_0: entered promiscuous mode [ 549.524880][T17795] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.556684][T17795] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.580209][T17795] bridge_slave_1: entered allmulticast mode [ 549.609638][T17795] bridge_slave_1: entered promiscuous mode [ 549.627815][T18078] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 549.816986][T18093] netlink: 'syz.3.3004': attribute type 1 has an invalid length. [ 549.843365][ T5626] Bluetooth: hci1: command tx timeout [ 549.968855][T17795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.040711][T18108] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3004'. [ 550.189664][T18093] 8021q: adding VLAN 0 to HW filter on device bond9 [ 550.263803][T17795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.331904][T18108] bond9: entered promiscuous mode [ 550.343612][T18108] bond9: entered allmulticast mode [ 550.392170][T18103] team0: Port device dummy0 removed [ 550.433113][T18103] bond9: (slave dummy0): making interface the new active one [ 550.449484][T18103] dummy0: entered promiscuous mode [ 550.490209][T18103] dummy0: entered allmulticast mode [ 550.505071][T18103] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 550.957769][T17795] team0: Port device team_slave_0 added [ 551.153146][T17795] team0: Port device team_slave_1 added [ 551.159905][T18146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3013'. [ 551.306993][ T6232] hsr_slave_0: left promiscuous mode [ 551.336919][ T6232] hsr_slave_1: left promiscuous mode [ 551.351214][ T6232] batman_adv: batadv0: Interface deactivated: dummy0 [ 551.378805][ T6232] batman_adv: batadv0: Removing interface: dummy0 [ 551.432994][T18135] "syz.3.3010" (18135) uses obsolete ecb(arc4) skcipher [ 551.451975][ T6232] veth0: left promiscuous mode [ 551.589417][ T6232] team0 (unregistering): Port device veth5 removed [ 551.922884][T17795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.930685][T17795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.982719][T17795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.998972][ T5282] 8021q: adding VLAN 0 to HW filter on device eth6 [ 552.112705][T17795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.140972][T17795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.176306][T17795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.314103][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 552.443124][T17795] hsr_slave_0: entered promiscuous mode [ 552.473862][T18177] netlink: 'syz.1.3019': attribute type 16 has an invalid length. [ 552.482227][T17795] hsr_slave_1: entered promiscuous mode [ 552.502946][T17795] debugfs: 'hsr0' already exists in 'hsr' [ 552.512533][T18177] netlink: 'syz.1.3019': attribute type 17 has an invalid length. [ 552.529034][T17795] Cannot create hsr debugfs directory [ 552.549153][T18182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3019'. [ 552.678788][T18177] sit0: left promiscuous mode [ 552.754531][T18177] dummy0: left promiscuous mode [ 552.795105][T18177] veth0_to_bridge: left allmulticast mode [ 552.845268][T18177] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 552.856803][T18177] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 552.870252][T18177] 0·: left allmulticast mode [ 552.879543][T18177] hsr_slave_0: left allmulticast mode [ 552.893609][T18177] hsr_slave_1: left allmulticast mode [ 552.919558][T18177] veth1_vlan: left promiscuous mode [ 552.942792][T18177] veth0_vlan: left promiscuous mode [ 552.969578][T18177] veth0_vlan: entered promiscuous mode [ 552.998880][T18177] veth1_vlan: entered promiscuous mode [ 553.077370][T18177] geneve1: left promiscuous mode [ 553.096332][T18177] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 553.114014][T18177] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 553.145772][T18177] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 553.169633][T18177] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 553.191937][T18177] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 553.233596][T18177] batman_adv: batadv0: Interface activated: wlan0 [ 553.266688][T18177] 8021q: adding VLAN 0 to HW filter on device bond1 [ 553.276824][T18177] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 553.295704][T18177] 8021q: adding VLAN 0 to HW filter on device bond2 [ 553.332760][T18177] 8021q: adding VLAN 0 to HW filter on device bond3 [ 553.404395][T18177] 8021q: adding VLAN 0 to HW filter on device bond4 [ 553.428364][T18177] 8021q: adding VLAN 0 to HW filter on device bond5 [ 553.456965][T18177] gretap1: left allmulticast mode [ 553.470038][T18177] 8021q: adding VLAN 0 to HW filter on device bond6 [ 553.490491][T18177] veth0_to_team: entered promiscuous mode [ 553.505559][T18177] 8021q: adding VLAN 0 to HW filter on device bond7 [ 553.539782][T18177] bridge0: port 1(vlan0) entered blocking state [ 553.546304][T18177] bridge0: port 1(vlan0) entered forwarding state [ 553.556139][T18177] bridge0: port 1(vlan0) entered disabled state [ 553.574404][T18177] bond8: left promiscuous mode [ 553.579570][T18177] bond8: left allmulticast mode [ 553.585915][T18177] 8021q: adding VLAN 0 to HW filter on device bond8 [ 553.593722][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 553.594003][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 553.611059][T18177] bridge2: left allmulticast mode [ 553.649427][T18177] vlan2: left allmulticast mode [ 553.656039][T18177] bond9: left allmulticast mode [ 553.662643][T18177] bond10: left promiscuous mode [ 553.668219][T18177] bond10: left allmulticast mode [ 553.676246][T18177] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 553.688375][T18177] ip6tnl7: left allmulticast mode [ 553.701383][T18177] ip6tnl8: left allmulticast mode [ 553.712520][T18177] vlan3: left promiscuous mode [ 553.776917][ T133] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 553.791767][ T133] bond1: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 553.845830][T18200] tipc: Enabled bearer , priority 0 [ 553.862709][T13320] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.872180][T13320] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.882319][T13320] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.897305][T13320] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.907974][T18205] syzkaller0: entered promiscuous mode [ 553.915905][T18205] syzkaller0: entered allmulticast mode [ 553.926401][T18220] tipc: Resetting bearer [ 553.937248][ T5282] 8021q: adding VLAN 0 to HW filter on device eth7 [ 553.971883][T18220] tipc: Resetting bearer [ 553.996949][T18220] tipc: Disabling bearer [ 554.010429][T13320] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.064111][T13320] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.166335][ T6232] IPVS: stop unused estimator thread 0... [ 554.180707][T18234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3027'. [ 554.208046][T18234] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3027'. [ 554.234572][T18235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3027'. [ 554.241888][T13320] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.256392][T18235] netlink: 'syz.2.3027': attribute type 2 has an invalid length. [ 554.295685][T13320] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.488724][T18243] bond9 (unregistering): Released all slaves [ 554.542641][T18250] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3030'. [ 554.560179][T18251] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3030'. [ 554.589001][T18251] ip6gre1: entered promiscuous mode [ 554.613469][T18253] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3030'. [ 554.638342][T18251] ip6gre1: entered allmulticast mode [ 554.709730][T13303] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 554.746547][T13303] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 554.756574][ T5622] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 554.926067][T13303] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 554.938820][T13303] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 554.956560][ T5622] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 555.074841][T13319] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 555.085916][T13319] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 555.095277][ T5748] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 555.130614][T17795] netdevsim netdevsim0 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.271396][T17795] netdevsim netdevsim0 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.375417][T17795] netdevsim netdevsim0 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.474803][T17795] netdevsim netdevsim0 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.322325][T18248] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 557.389650][T17795] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 557.427534][T17795] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 557.456433][T17795] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 557.515794][T17795] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 557.546091][T17795] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 557.576730][T18361] netlink: 'syz.2.3038': attribute type 1 has an invalid length. [ 557.587670][T17795] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 557.606157][T17795] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 557.628804][T17795] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 557.954687][T18384] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3042'. [ 558.040035][T17795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.081430][T18386] bridge0: port 2(batadv2) entered blocking state [ 558.097276][T18386] bridge0: port 2(batadv2) entered disabled state [ 558.111026][T18390] netlink: zone id is out of range [ 558.118119][T18386] batadv2: entered allmulticast mode [ 558.133149][T18390] netlink: zone id is out of range [ 558.144773][T18386] batadv2: entered promiscuous mode [ 558.152052][T18390] netlink: zone id is out of range [ 558.171712][T18397] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3046'. [ 558.176135][T18390] netlink: zone id is out of range [ 558.193919][T18390] netlink: zone id is out of range [ 558.194456][T18396] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 558.199116][T18390] netlink: zone id is out of range [ 558.199179][T18390] netlink: zone id is out of range [ 558.229392][T18390] netlink: zone id is out of range [ 558.256379][T18390] netlink: zone id is out of range [ 558.278527][T17795] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.342824][ T6232] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.350238][ T6232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.373861][T18403] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3048'. [ 558.386917][ T6232] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.394348][ T6232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.432797][T18406] gretap2: entered allmulticast mode [ 558.563399][T13320] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 558.573499][T13320] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 558.757029][T18424] netlink: 'syz.1.3050': attribute type 7 has an invalid length. [ 558.793550][ C0] ip6_tnl_xmit_ctl: 6 callbacks suppressed [ 558.793575][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 558.873530][ C0] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 558.916511][T18389] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 559.181432][T18440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3055'. [ 559.193528][ C0] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 559.241285][T18440] vlan2: entered promiscuous mode [ 559.248150][T18440] bridge0: entered promiscuous mode [ 559.284842][T18448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3055'. [ 559.516341][T18455] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3057'. [ 559.580464][T13319] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 559.620661][T18457] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 559.640133][T17795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.640887][T18470] netlink: 'syz.2.3059': attribute type 9 has an invalid length. [ 559.916186][T17795] veth0_vlan: entered promiscuous mode [ 559.936526][T17795] veth1_vlan: entered promiscuous mode [ 560.021058][T17795] veth0_macvtap: entered promiscuous mode [ 560.051689][T17795] veth1_macvtap: entered promiscuous mode [ 560.127085][T18486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3064'. [ 560.146067][T17795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.178275][T17795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.218941][T18486] batman_adv: batadv0: Interface deactivated: wlan0 [ 560.293137][T18486] batman_adv: batadv0: Removing interface: wlan0 [ 560.329325][T18496] nft_compat: unsupported protocol 1 [ 560.547887][ T133] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.659007][T18509] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 560.707488][T18509] gretap3: left allmulticast mode [ 560.741531][T18509] geneve2: left allmulticast mode [ 560.777543][T18509] ip6tnl3: left allmulticast mode [ 560.836977][T18509] bond9: left promiscuous mode [ 560.862533][T18509] dummy0: left promiscuous mode [ 560.890439][T18509] bond9: left allmulticast mode [ 560.908333][T18509] dummy0: left allmulticast mode [ 560.919898][ T133] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.930580][ T133] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.949909][ T133] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.226697][ T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.256748][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.356258][ T133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.379955][ T133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.380589][T18527] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 561.436096][T18528] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 561.697992][T18542] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3078'. [ 562.151914][T18560] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 562.293974][T18568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3085'. [ 562.468128][ T5627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 562.489864][ T5627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 562.502291][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 562.510534][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 562.518764][ T5627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 562.772668][T18582] netlink: 556 bytes leftover after parsing attributes in process `syz.2.3089'. [ 563.192930][T18561] lo speed is unknown, defaulting to 1000 [ 563.207555][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.636364][ T5627] Bluetooth: hci0: command tx timeout [ 564.950701][T18627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3093'. [ 566.723960][ T5627] Bluetooth: hci0: command tx timeout [ 567.054879][ C0] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 567.062828][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 567.109310][T18645] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3098'. [ 567.687315][ C0] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 567.736839][T18569] lo speed is unknown, defaulting to 1000 [ 567.830769][T18649] netlink: 'syz.1.3099': attribute type 1 has an invalid length. [ 567.854477][T18649] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3099'. [ 568.120920][T18662] xt_connbytes: Forcing CT accounting to be enabled [ 568.437467][T18674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3104'. [ 568.666549][T18679] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.3106'. [ 568.679319][T18679] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.3106'. [ 568.731703][T18674] veth19: entered allmulticast mode [ 568.981607][T18686] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3107'. [ 569.003489][T18686] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3107'. [ 569.065230][T18683] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 569.083834][T18683] net_ratelimit: 13 callbacks suppressed [ 569.083917][T18683] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 569.176487][T18690] tipc: Failed to remove unknown binding: 66,0,0/10005162:3232029787/3232029789 [ 569.260411][T18690] tipc: Failed to remove unknown binding: 66,0,0/10005162:3232029787/3232029788 [ 569.316786][T18690] tipc: Failed to remove unknown binding: 66,0,0/10005162:3232029787/3232029789 [ 569.345246][T18690] tipc: Failed to remove unknown binding: 66,0,0/10005162:3232029787/3232029788 [ 569.675079][T18712] netlink: 'syz.3.3114': attribute type 1 has an invalid length. [ 569.748855][T18569] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.756567][T18569] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.766408][T18569] bridge_slave_0: entered allmulticast mode [ 569.775653][T18569] bridge_slave_0: entered promiscuous mode [ 569.797955][T18712] bond10: (slave bridge3): Enslaving as a backup interface with an up link [ 569.820637][T18569] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.828497][T18569] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.838580][T18569] bridge_slave_1: entered allmulticast mode [ 569.849106][T18569] bridge_slave_1: entered promiscuous mode [ 569.919274][T18569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.941019][T18712] syzkaller0: entered promiscuous mode [ 569.957091][T18712] syzkaller0: entered allmulticast mode [ 569.976406][T18569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.078244][T18726] netlink: 'syz.2.3118': attribute type 10 has an invalid length. [ 570.113355][T18569] team0: Port device team_slave_0 added [ 570.122998][T18726] team0: Port device dummy0 added [ 570.148356][T18569] team0: Port device team_slave_1 added [ 570.224582][T18569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.244135][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 570.253008][T18569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.304237][T18569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.340502][T18569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.348060][T18569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.377023][T18569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.393134][T18738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3122'. [ 570.510194][T18738] bridge5: port 1(erspan0) entered blocking state [ 570.518112][T18738] bridge5: port 1(erspan0) entered disabled state [ 570.518543][T18742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3122'. [ 570.537620][T18738] erspan0: entered allmulticast mode [ 570.565120][T18738] erspan0: entered promiscuous mode [ 570.600823][T18569] hsr_slave_0: entered promiscuous mode [ 570.608579][T18569] hsr_slave_1: entered promiscuous mode [ 570.617249][T18569] debugfs: 'hsr0' already exists in 'hsr' [ 570.625956][T18569] Cannot create hsr debugfs directory [ 570.810758][T18748] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) ! [ 571.190552][T18756] bond1: option ad_user_port_key: invalid value (65535) [ 571.218487][T18756] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 571.231461][T18756] bond1 (unregistering): Released all slaves [ 571.504897][T18569] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.053968][T18569] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.091973][T18787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3131'. [ 572.136407][T18787] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3131'. [ 572.156324][T18787] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3131'. [ 572.306018][T18569] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.179201][T18569] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.836626][T18843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3142'. [ 573.871554][T18847] bridge6: entered allmulticast mode [ 574.079069][T18851] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 574.614163][T18867] netlink: 'syz.2.3149': attribute type 1 has an invalid length. [ 574.650733][T18867] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3149'. [ 574.677125][T18569] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 574.703320][T18867] netlink: 'syz.2.3149': attribute type 1 has an invalid length. [ 574.718283][ T1696] block nbd2: Possible stuck request ffff888027aa4b40: control (read@0,4096B). Runtime 180 seconds [ 574.742555][T18569] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 574.756656][T18569] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 574.785652][T18569] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 574.794231][T18569] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 574.816985][T18569] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 574.856229][T18569] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 574.975361][T18888] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3152'. [ 574.995796][T18888] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3152'. [ 575.071213][T18569] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 575.288171][T18900] netlink: 'syz.2.3153': attribute type 2 has an invalid length. [ 575.416806][T18896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3153'. [ 575.493786][T18908] x_tables: duplicate underflow at hook 2 [ 575.500607][T18900] : entered promiscuous mode [ 575.538260][T18917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3156'. [ 575.581898][T18917] netlink: 'syz.0.3156': attribute type 10 has an invalid length. [ 575.625382][T18917] netlink: 'syz.0.3156': attribute type 8 has an invalid length. [ 575.679061][T18917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3156'. [ 575.730389][T18921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3156'. [ 575.782040][T18929] netlink: 'syz.3.3157': attribute type 15 has an invalid length. [ 575.800766][T18917] geneve2: entered promiscuous mode [ 575.813563][T18917] geneve2: entered allmulticast mode [ 576.011542][T18939] netlink: 'syz.1.3159': attribute type 13 has an invalid length. [ 576.045362][T18939] netlink: 'syz.1.3159': attribute type 17 has an invalid length. [ 576.294315][T18935] bridge5: port 1(erspan0) entered disabled state [ 577.824663][T18939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.837790][T18939] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.876082][T18939] veth0_to_team: left promiscuous mode [ 577.896638][T18939] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 577.907429][T18939] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 577.930466][T18939] veth1_vlan: left promiscuous mode [ 577.937895][T18939] veth0_vlan: left promiscuous mode [ 577.945677][T18939] veth0_vlan: entered promiscuous mode [ 577.952822][T18939] veth1_vlan: entered promiscuous mode [ 577.968709][T18939] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 577.980332][T18939] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 577.991139][T18939] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 578.006231][T18939] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 578.016873][T18939] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 578.024860][T18939] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 578.036634][T18939] 8021q: adding VLAN 0 to HW filter on device bond1 [ 578.044650][T18939] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 578.057404][T18939] 8021q: adding VLAN 0 to HW filter on device bond2 [ 578.067671][T18939] 8021q: adding VLAN 0 to HW filter on device bond3 [ 578.087980][T18939] 8021q: adding VLAN 0 to HW filter on device bond4 [ 578.096747][T18939] 8021q: adding VLAN 0 to HW filter on device bond5 [ 578.116075][T18939] 8021q: adding VLAN 0 to HW filter on device bond6 [ 578.130857][T18939] veth0_to_team: entered promiscuous mode [ 578.138379][T18939] 8021q: adding VLAN 0 to HW filter on device bond7 [ 578.153087][T18939] 8021q: adding VLAN 0 to HW filter on device bond8 [ 578.167484][T18939] 8021q: adding VLAN 0 to HW filter on device bond9 [ 578.177426][T18939] 8021q: adding VLAN 0 to HW filter on device bond10 [ 578.185690][T18939] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 578.205190][T18939] bridge0: port 2(batadv2) entered blocking state [ 578.211827][T18939] bridge0: port 2(batadv2) entered forwarding state [ 578.219083][T18939] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 578.229250][T18939] veth19: left allmulticast mode [ 578.241176][T18939] bridge6: left allmulticast mode [ 578.572551][T18569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.648914][ T133] batman_adv: batadv2: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 2 [ 578.746742][T18569] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.956832][T13317] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.964076][T13317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.007380][T13317] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.014614][T13317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.271696][T19011] netlink: 'syz.3.3172': attribute type 8 has an invalid length. [ 580.446164][T19020] __nla_validate_parse: 4 callbacks suppressed [ 580.446199][T19020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3174'. [ 580.556131][T18569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.925960][T19047] netlink: 'syz.0.3181': attribute type 9 has an invalid length. [ 581.382988][T19060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3183'. [ 581.431000][T19066] FAULT_INJECTION: forcing a failure. [ 581.431000][T19066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 581.483451][T19066] CPU: 1 UID: 0 PID: 19066 Comm: syz.0.3185 Not tainted syzkaller #0 PREEMPT(full) [ 581.483479][T19066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 581.483491][T19066] Call Trace: [ 581.483500][T19066] [ 581.483510][T19066] dump_stack_lvl+0xe8/0x150 [ 581.483605][T19066] should_fail_ex+0x40c/0x560 [ 581.483675][T19066] _copy_to_user+0x31/0xb0 [ 581.483781][T19066] simple_read_from_buffer+0xe1/0x170 [ 581.483839][T19066] proc_fail_nth_read+0x1bb/0x230 [ 581.483890][T19066] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 581.483926][T19066] ? rw_verify_area+0x24a/0x4c0 [ 581.483966][T19066] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 581.483992][T19066] vfs_read+0x213/0xa80 [ 581.484027][T19066] ? __pfx___mutex_lock+0x10/0x10 [ 581.484094][T19066] ? __pfx_vfs_read+0x10/0x10 [ 581.484124][T19066] ? __fget_files+0x2a/0x420 [ 581.484158][T19066] ? __fget_files+0x3a2/0x420 [ 581.484182][T19066] ? __fget_files+0x2a/0x420 [ 581.484215][T19066] ksys_read+0x150/0x270 [ 581.484247][T19066] ? __pfx_ksys_read+0x10/0x10 [ 581.484294][T19066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.484332][T19066] do_syscall_64+0x174/0x580 [ 581.484357][T19066] ? trace_irq_disable+0x3b/0x140 [ 581.484399][T19066] ? clear_bhb_loop+0x40/0x90 [ 581.484423][T19066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.484443][T19066] RIP: 0033:0x7f4b5a95e68e [ 581.484464][T19066] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 581.484480][T19066] RSP: 002b:00007f4b5b882fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 581.484508][T19066] RAX: ffffffffffffffda RBX: 00007f4b5b8836c0 RCX: 00007f4b5a95e68e [ 581.484523][T19066] RDX: 000000000000000f RSI: 00007f4b5b8830a0 RDI: 0000000000000004 [ 581.484534][T19066] RBP: 00007f4b5b883090 R08: 0000000000000000 R09: 0000000000000000 [ 581.484547][T19066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 581.484559][T19066] R13: 00007f4b5ac26038 R14: 00007f4b5ac25fa0 R15: 00007ffcfc269ec8 [ 581.484594][T19066] [ 581.875109][T18569] veth0_vlan: entered promiscuous mode [ 581.964147][T18569] veth1_vlan: entered promiscuous mode [ 582.031624][T18569] veth0_macvtap: entered promiscuous mode [ 582.032700][T13314] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 582.044613][T18569] veth1_macvtap: entered promiscuous mode [ 582.075948][T18569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 582.099491][T18569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 582.145378][T19077] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 582.188656][T13303] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.228479][T13303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.282349][T13303] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.316994][T13303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.387866][T19096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3191'. [ 582.476659][T19092] bridge5: entered allmulticast mode [ 582.526707][T19104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3190'. [ 582.582173][ T5622] dummy0: entered promiscuous mode [ 582.724024][ C0] batman_adv: batadv2: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 2 [ 582.986623][ T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.017013][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.159236][T19129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3196'. [ 583.193073][T13314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.219073][T13314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.321309][T19146] netlink: 'syz.3.3195': attribute type 1 has an invalid length. [ 583.677399][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.684779][ C0] bridge0: topology change detected, propagating [ 583.692105][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.700539][ C0] bridge0: topology change detected, propagating [ 583.840904][T19167] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3199'. [ 584.395768][ T5626] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 584.409665][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 584.421631][ T5626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 584.430331][ T5626] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 584.438960][ T5626] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 584.745110][T19205] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3206'. [ 585.218675][T19216] pim6reg1: entered promiscuous mode [ 585.225932][T19216] pim6reg1: entered allmulticast mode [ 585.847802][T19185] lo speed is unknown, defaulting to 1000 [ 586.473451][ T5626] Bluetooth: hci4: command tx timeout [ 586.556090][T19185] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.564881][T19185] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.572633][T19185] bridge_slave_0: entered allmulticast mode [ 586.584857][T19185] bridge_slave_0: entered promiscuous mode [ 586.594527][T19185] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.602052][T19185] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.609970][T19185] bridge_slave_1: entered allmulticast mode [ 586.619296][T19185] bridge_slave_1: entered promiscuous mode [ 586.668540][T19185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.682160][T19185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.730695][T19185] team0: Port device team_slave_0 added [ 586.740405][T19185] team0: Port device team_slave_1 added [ 586.781875][T19185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.789368][T19185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.816698][T19185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.830252][T19185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.838064][T19185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.864921][T19185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.944958][T19185] hsr_slave_0: entered promiscuous mode [ 586.952201][T19185] hsr_slave_1: entered promiscuous mode [ 586.959881][T19185] debugfs: 'hsr0' already exists in 'hsr' [ 586.966216][T19185] Cannot create hsr debugfs directory [ 587.162128][T19180] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 587.482085][T19185] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.494859][T19185] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.715158][T19311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3216'. [ 587.845724][T19317] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3216'. [ 587.932668][T19325] xt_l2tp: invalid flags combination: 8 [ 588.565322][ T5626] Bluetooth: hci4: command tx timeout [ 590.630745][ T4987] udevd[4987]: worker [8821] /devices/virtual/block/nbd2 timeout; kill it [ 590.633501][ T5626] Bluetooth: hci4: command tx timeout [ 590.639770][ T4987] udevd[4987]: seq 18370 '/devices/virtual/block/nbd2' killed [ 590.724359][ C0] batman_adv: batadv2: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 2 [ 591.231569][T19185] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 591.244171][T19185] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.425425][T19352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3220'. [ 591.645362][T19185] bond0: (slave netdevsim1): Releasing backup interface [ 591.668128][T19185] bond0: (slave netdevsim1): the permanent HWaddr of slave - aa:aa:aa:aa:aa:2b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 591.726239][T19185] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 591.738816][T19185] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.824661][T19301] lo speed is unknown, defaulting to 1000 [ 591.994982][T19185] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 592.044987][T19185] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.214347][T19360] netlink: 'syz.2.3222': attribute type 1 has an invalid length. [ 592.290372][T19360] bond3: entered promiscuous mode [ 592.297743][T19360] 8021q: adding VLAN 0 to HW filter on device bond3 [ 592.430419][T19360] 8021q: adding VLAN 0 to HW filter on device bond3 [ 592.437839][T19360] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 592.449717][T19360] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 592.466925][T19360] bond3: (slave vti0): making interface the new active one [ 592.474532][T19360] vti0: entered promiscuous mode [ 592.481777][T19360] bond3: (slave vti0): Enslaving as an active interface with an up link [ 592.714725][ T5626] Bluetooth: hci4: command tx timeout [ 592.939631][T19185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 592.979982][T19185] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 593.000543][T19185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 593.044310][T19185] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 593.117254][T19185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 593.163829][T19185] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 593.265342][T19185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 593.309483][T19185] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 593.398188][T19386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 593.620362][T19185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.636192][T19402] netlink: 'syz.0.3232': attribute type 1 has an invalid length. [ 593.710748][T19185] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.738573][T19403] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3231'. [ 593.751393][ T6232] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.759012][ T6232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.784673][T13314] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.792327][T13314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.181002][T19422] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3235'. [ 594.210723][T19422] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3235'. [ 594.221667][T19422] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3235'. [ 594.269773][T19424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3235'. [ 594.279282][T19422] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3235'. [ 594.337834][T19424] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3235'. [ 594.586581][T19435] netlink: 'syz.2.3239': attribute type 1 has an invalid length. [ 594.588318][T19438] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3238'. [ 594.729649][T19444] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3241'. [ 594.768953][T19447] netlink: 'syz.2.3239': attribute type 11 has an invalid length. [ 594.772554][T19435] 8021q: adding VLAN 0 to HW filter on device bond4 [ 594.796923][T19444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3241'. [ 594.841970][T19449] bridge6: entered promiscuous mode [ 594.851164][T19449] bridge6: entered allmulticast mode [ 594.861520][T19449] team0: Port device bridge6 added [ 594.904490][T19440] bond4: (slave veth3): Enslaving as an active interface with a down link [ 595.080928][T19442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.126909][T19442] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.146592][T19442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 595.229094][T19442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.265777][T19442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 595.288208][T19442] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 595.313633][T19442] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 595.348030][T19442] veth1_vlan: left promiscuous mode [ 595.364924][T19442] veth0_vlan: left promiscuous mode [ 595.371733][T19442] veth0_vlan: entered promiscuous mode [ 595.384361][T19442] veth1_vlan: entered promiscuous mode [ 595.400391][T19442] veth1_macvtap: left promiscuous mode [ 595.416626][T19442] veth0_macvtap: left promiscuous mode [ 595.426010][T19442] veth0_macvtap: entered promiscuous mode [ 595.435026][T19442] veth1_macvtap: entered promiscuous mode [ 595.441304][T19442] macsec0: left promiscuous mode [ 595.464293][T19442] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 595.474780][T19442] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 595.484681][T19442] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 595.493858][T19442] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 595.504729][T19442] 8021q: adding VLAN 0 to HW filter on device bond1 [ 595.514857][T19442] ip6gre1: left promiscuous mode [ 595.520390][T19442] ip6gre1: left allmulticast mode [ 595.527026][T19442] 8021q: adding VLAN 0 to HW filter on device bond2 [ 595.546150][T19442] bond3: left promiscuous mode [ 595.551396][T19442] vti0: left promiscuous mode [ 595.566291][T19447] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 595.576340][T19447] bond4: (slave batadv1): making interface the new active one [ 595.587303][T19447] batadv1: entered promiscuous mode [ 595.597421][T19447] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 595.616808][T19444] veth1_macvtap: left promiscuous mode [ 595.651634][T19449] bridge0: port 2(team0) entered blocking state [ 595.661154][T19449] bridge0: port 2(team0) entered disabled state [ 595.677837][T19449] team0: entered allmulticast mode [ 595.686417][T19449] team_slave_0: entered allmulticast mode [ 595.702807][T19449] team_slave_1: entered allmulticast mode [ 595.725856][T19449] team0: entered promiscuous mode [ 595.731063][T19449] team_slave_0: entered promiscuous mode [ 595.740025][T19449] team_slave_1: entered promiscuous mode [ 595.796556][T13314] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.803896][T13314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 595.867095][T13314] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.874473][T13314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 595.957620][T13317] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.967237][T13317] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.978848][T13317] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.989981][T13317] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.127301][T19465] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.135587][T19465] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.372573][T19465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 596.400394][T19465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 596.642973][T19465] geneve2: left promiscuous mode [ 596.653825][T19465] geneve2: left allmulticast mode [ 596.690273][T13303] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.731274][T13303] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.756897][T13303] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.785115][T13303] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.844917][T13303] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.856683][T13303] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.870148][T13303] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.929525][T13303] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.974358][T19185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.049161][T13318] bond4: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 597.253326][T19514] tipc: Started in network mode [ 597.259219][T19514] tipc: Node identity b63120a7d7f1, cluster identity 4711 [ 597.268359][T19514] tipc: Enabled bearer , priority 0 [ 597.279306][T19514] syzkaller0: entered promiscuous mode [ 597.286927][T19514] syzkaller0: entered allmulticast mode [ 597.303341][T19514] tipc: Resetting bearer [ 597.318065][T19185] veth0_vlan: entered promiscuous mode [ 597.328968][T19512] tipc: Resetting bearer [ 597.352175][T19512] tipc: Disabling bearer [ 597.401287][T19185] veth1_vlan: entered promiscuous mode [ 597.572460][T19185] veth0_macvtap: entered promiscuous mode [ 597.597663][T19185] veth1_macvtap: entered promiscuous mode [ 597.624577][T19185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 597.664436][T19185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.687689][T13317] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.697075][T19528] block nbd4: not configured, cannot reconfigure [ 597.710775][T13317] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.775391][T13317] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.794424][T13317] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.173134][T13319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.183551][T13319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.321283][T19547] +: renamed from syzkaller0 [ 598.352856][T13320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.361292][T13320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.626503][T19555] x_tables: duplicate underflow at hook 2 [ 599.145023][ T5627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 599.162399][ T5627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 599.172951][ T5627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 599.187649][ T5627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 599.212399][ T5627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 600.110852][T19592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 600.125710][T19596] netlink: 'syz.0.3275': attribute type 9 has an invalid length. [ 600.628726][T19612] netlink: 'syz.0.3279': attribute type 21 has an invalid length. [ 600.669480][T19612] __nla_validate_parse: 10 callbacks suppressed [ 600.669502][T19612] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3279'. [ 600.722981][T19616] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3280'. [ 600.738019][T19612] netlink: 'syz.0.3279': attribute type 4 has an invalid length. [ 600.755413][T19612] netlink: 'syz.0.3279': attribute type 5 has an invalid length. [ 600.772114][T19612] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3279'. [ 600.935975][T19577] lo speed is unknown, defaulting to 1000 [ 600.992213][T19624] bond0: entered promiscuous mode [ 601.053748][T19624] bond_slave_0: entered promiscuous mode [ 601.084171][T19624] bond_slave_1: entered promiscuous mode [ 601.127881][T19624] bond0: left promiscuous mode [ 601.159756][T19624] bond_slave_0: left promiscuous mode [ 601.188303][T19624] bond_slave_1: left promiscuous mode [ 601.273378][ T5626] Bluetooth: hci2: command tx timeout [ 601.342748][T19639] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3284'. [ 601.692733][T19625] bond0: entered promiscuous mode [ 601.698144][T19625] bond_slave_0: entered promiscuous mode [ 601.705412][T19625] bond_slave_1: entered promiscuous mode [ 601.712741][T19625] bond0: left promiscuous mode [ 601.718039][T19625] bond_slave_0: left promiscuous mode [ 601.725877][T19625] bond_slave_1: left promiscuous mode [ 601.968676][T19666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3290'. [ 602.265146][T19679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3293'. [ 602.288282][T19679] openvswitch: netlink: Flow actions attr not present in new flow. [ 602.345176][T19679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3293'. [ 602.381640][T19687] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3294'. [ 602.402638][T19679] bond0: (slave bond_slave_0): Releasing backup interface [ 602.496955][T19696] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3296'. [ 602.650689][T19690] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3296'. [ 602.679913][T19703] mac80211_hwsim hwsim34 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 602.719237][T19577] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.734059][T19577] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.753050][T19577] bridge_slave_0: entered allmulticast mode [ 602.785753][T19577] bridge_slave_0: entered promiscuous mode [ 602.791836][T19706] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 602.848761][T19696] tipc: Enabling of bearer rejected, failed to enable media [ 602.900257][T19577] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.922888][T19577] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.952491][T19577] bridge_slave_1: entered allmulticast mode [ 602.980374][T19577] bridge_slave_1: entered promiscuous mode [ 603.127957][T19577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.172546][T19577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.326174][T19577] team0: Port device team_slave_0 added [ 603.336767][T19732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 603.341974][T19577] team0: Port device team_slave_1 added [ 603.360766][ T5626] Bluetooth: hci2: command tx timeout [ 603.414661][T19577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.434439][T19577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.474314][T19577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.487017][T19734] syzkaller1: entered promiscuous mode [ 603.492816][T19734] syzkaller1: entered allmulticast mode [ 603.523273][T19577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.544357][T19577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.623692][T19577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.849916][T19577] hsr_slave_0: entered promiscuous mode [ 603.876866][T19577] hsr_slave_1: entered promiscuous mode [ 603.917750][T19577] debugfs: 'hsr0' already exists in 'hsr' [ 603.927885][T19577] Cannot create hsr debugfs directory [ 604.270055][T19771] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 604.296271][ T7020] IPVS: starting estimator thread 0... [ 604.393698][T19774] IPVS: using max 29 ests per chain, 69600 per kthread [ 604.800932][ T1696] block nbd2: Possible stuck request ffff888027aa4b40: control (read@0,4096B). Runtime 210 seconds [ 604.911071][T19785] syzkaller1: entered promiscuous mode [ 604.923946][T19785] syzkaller1: entered allmulticast mode [ 605.193584][T13314] wlan1: Trigger new scan to find an IBSS to join [ 605.208229][T19804] bridge1: entered promiscuous mode [ 605.434303][ T5627] Bluetooth: hci2: command tx timeout [ 605.571984][T19817] 8021q: VLANs not supported on ip6gre0 [ 605.609185][T19820] netlink: 'syz.0.3325': attribute type 3 has an invalid length. [ 605.650036][T19820] netlink: 'syz.0.3325': attribute type 1 has an invalid length. [ 606.002198][T19784] lo speed is unknown, defaulting to 1000 [ 606.002832][T19831] __nla_validate_parse: 9 callbacks suppressed [ 606.002849][T19831] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3328'. [ 606.012124][T19577] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 606.060876][T19577] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 606.080305][T19577] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 606.089246][ C0] batman_adv: batadv2: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 2 [ 606.132868][T19577] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 606.156950][T19832] bond0: (slave wlan0): Error: Device can not be enslaved while up [ 606.175615][T19577] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 606.203585][T19577] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 606.224803][T19577] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 606.227501][T19834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3329'. [ 606.260587][T19834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3329'. [ 606.293574][T19834] netlink: 'syz.1.3329': attribute type 13 has an invalid length. [ 606.304991][T19577] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 606.360371][T19836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3330'. [ 606.403625][T19836] xfrm1: entered promiscuous mode [ 606.423320][T19836] xfrm1: entered allmulticast mode [ 606.430158][T19836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3330'. [ 606.439532][T19844] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3331'. [ 606.491615][T19844] netlink: 'syz.2.3331': attribute type 11 has an invalid length. [ 606.825739][T19577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.891322][T19577] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.929574][T13303] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.936826][T13303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.982031][T13303] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.990501][T13303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.130046][T13320] batadv1: left promiscuous mode [ 607.356915][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 607.514249][ T5626] Bluetooth: hci2: command tx timeout [ 607.665845][T19890] netlink: 272 bytes leftover after parsing attributes in process `syz.1.3344'. [ 608.155057][T13303] wlan1: Trigger new scan to find an IBSS to join [ 608.208279][T19907] syzkaller1: entered promiscuous mode [ 608.238818][T19907] syzkaller1: entered allmulticast mode [ 608.469306][T19916] bond0: entered promiscuous mode [ 608.493250][T19916] bond_slave_0: entered promiscuous mode [ 608.510164][T19916] bond_slave_1: entered promiscuous mode [ 608.526224][T19916] batadv0: entered promiscuous mode [ 608.532569][T19916] debugfs: 'hsr1' already exists in 'hsr' [ 608.541124][T19922] netlink: 'syz.1.3350': attribute type 1 has an invalid length. [ 608.561545][T19916] Cannot create hsr debugfs directory [ 608.568544][T19916] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 608.579994][T19922] netlink: 756 bytes leftover after parsing attributes in process `syz.1.3350'. [ 608.589462][T19916] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 608.601669][T19916] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 609.127244][T19916] bond0: left promiscuous mode [ 609.136770][T19916] bond_slave_0: left promiscuous mode [ 609.144187][T19916] bond_slave_1: left promiscuous mode [ 609.150893][T19916] batadv0: left promiscuous mode [ 609.499131][T19577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 609.603070][T19943] bond0: Error: Cannot enslave bond to itself. [ 609.665421][T19949] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3355'. [ 609.815724][T19949] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3355'. [ 609.838284][T19577] veth0_vlan: entered promiscuous mode [ 609.926722][T19577] veth1_vlan: entered promiscuous mode [ 610.095505][T19577] veth0_macvtap: entered promiscuous mode [ 610.137303][T19577] veth1_macvtap: entered promiscuous mode [ 610.216872][T19577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 610.279653][T19969] netlink: 'syz.0.3357': attribute type 3 has an invalid length. [ 610.284004][T19577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 610.379898][T13303] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.410278][T13303] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.435733][T13303] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.461354][T13303] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.808079][T13317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.845501][T13317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.014130][T19989] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 611.117249][T13317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.132831][T20002] sctp: [Deprecated]: syz.1.3364 (pid 20002) Use of int in max_burst socket option. [ 611.132831][T20002] Use struct sctp_assoc_value instead [ 611.144062][T13317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.199223][T13317] wlan1: Trigger new scan to find an IBSS to join [ 611.401477][T20008] tipc: Started in network mode [ 611.414177][T20008] tipc: Node identity 4246, cluster identity 4711 [ 611.431019][T20008] tipc: Node number set to 16966 [ 611.522836][T19966] lo speed is unknown, defaulting to 1000 [ 611.653967][T20021] sctp: [Deprecated]: syz.1.3370 (pid 20021) Use of struct sctp_assoc_value in delayed_ack socket option. [ 611.653967][T20021] Use struct sctp_sack_info instead [ 611.721720][T20026] team0: No ports can be present during mode change [ 611.736960][T20021] sctp: [Deprecated]: syz.1.3370 (pid 20021) Use of struct sctp_assoc_value in delayed_ack socket option. [ 611.736960][T20021] Use struct sctp_sack_info instead [ 611.780274][T20026] __nla_validate_parse: 2 callbacks suppressed [ 611.780297][T20026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3371'. [ 612.051722][T20034] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3372'. [ 612.126533][T13314] wlan1: Creating new IBSS network, BSSID 9a:4c:6d:ca:22:3d [ 612.510570][T20049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3377'. [ 612.536186][T20049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3377'. [ 612.537062][T20052] netlink: 'syz.0.3378': attribute type 1 has an invalid length. [ 612.557667][T20049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3377'. [ 612.612061][T20052] bond1: entered allmulticast mode [ 612.618378][T20052] 8021q: adding VLAN 0 to HW filter on device bond1 [ 612.817238][T20030] lo speed is unknown, defaulting to 1000 [ 613.252855][T20066] eql: remember to turn off Van-Jacobson compression on your slave devices [ 613.342464][T20066] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 613.485381][T20070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3383'. [ 613.519915][T20070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3383'. [ 613.553400][T20071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3383'. [ 613.584464][T20071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3383'. [ 613.801309][T20074] vlan0: entered promiscuous mode [ 614.268362][T20085] sit1: entered promiscuous mode [ 614.469860][T13303] bond6: left allmulticast mode [ 614.487826][T13303] bond6: left promiscuous mode [ 614.506589][T13303] bridge0: port 1(bond6) entered disabled state [ 614.588154][T13303] dvmrp8: left allmulticast mode [ 615.009510][T13303] bond5 (unregistering): (slave geneve4): Releasing active interface [ 615.090372][T13303] bond8 (unregistering): (slave bridge4): Releasing active interface [ 615.128105][T13303] bond0 (unregistering): Released all slaves [ 615.139699][T13303] bond1 (unregistering): Released all slaves [ 615.155010][T13303] bond2 (unregistering): Released all slaves [ 615.169824][T13303] bond3 (unregistering): Released all slaves [ 615.190380][T13303] bond4 (unregistering): Released all slaves [ 615.206302][T13303] bond5 (unregistering): Released all slaves [ 615.230076][T13303] bond6 (unregistering): Released all slaves [ 615.246186][T13303] bond7 (unregistering): Released all slaves [ 615.279385][T13303] bond8 (unregistering): Released all slaves [ 615.356232][T20088] syzkaller0: entered promiscuous mode [ 615.361911][T20088] syzkaller0: entered allmulticast mode [ 618.478711][T13303] : left promiscuous mode [ 618.606017][T13303] tipc: Left network mode [ 618.692737][T13303] IPVS: stopping backup sync thread 11143 ... [ 618.776979][T20121] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 619.145550][T20145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3400'. [ 619.178792][T20141] netlink: 'syz.0.3399': attribute type 7 has an invalid length. [ 619.206513][T20141] netlink: 'syz.0.3399': attribute type 8 has an invalid length. [ 619.244736][T20149] netlink: 'syz.1.3401': attribute type 5 has an invalid length. [ 619.256602][T20150] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3400'. [ 619.275690][T20149] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3401'. [ 619.342299][T20155] netlink: 'syz.4.3402': attribute type 1 has an invalid length. [ 619.363927][T20150] veth0_to_team: entered promiscuous mode [ 619.371443][T20150] veth0_to_team: entered allmulticast mode [ 619.457634][T20158] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3402'. [ 619.573472][T20155] 8021q: adding VLAN 0 to HW filter on device bond1 [ 619.595446][T20163] netlink: 'syz.3.3404': attribute type 39 has an invalid length. [ 619.634527][T20156] bond1: (slave veth3): Enslaving as an active interface with a down link [ 619.870228][T20175] netlink: 'syz.1.3407': attribute type 4 has an invalid length. [ 620.016523][T20178] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3408'. [ 620.140561][T20178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3408'. [ 620.202578][T20178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3408'. [ 620.721885][T20206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3415'. [ 621.077165][T20221] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 621.080477][T20212] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 621.109001][T20223] ieee802154 phy1 wpan1: encryption failed: -22 [ 621.247091][T20219] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 621.437954][T20230] syzkaller0: entered promiscuous mode [ 621.460088][T20230] syzkaller0: entered allmulticast mode [ 621.574602][T20233] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3423'. [ 621.658574][T20243] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 621.792605][T13303] hsr_slave_0: left promiscuous mode [ 622.364782][T20240] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 622.710801][T20243] netlink: 'syz.1.3426': attribute type 3 has an invalid length. [ 622.742691][T13319] smc: removing ib device syz1 [ 622.751846][T20243] netlink: 'syz.1.3426': attribute type 3 has an invalid length. [ 622.772106][T20248] IPVS: Error connecting to the multicast addr [ 622.793712][T20253] lo: entered allmulticast mode [ 623.119766][T20279] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3435'. [ 623.166028][T20287] xt_hashlimit: max too large, truncated to 1048576 [ 623.234387][T20289] netlink: 'syz.3.3435': attribute type 13 has an invalid length. [ 623.298289][T20289] netlink: 'syz.3.3435': attribute type 17 has an invalid length. [ 623.371576][T13319] smbdirect: ib_dev[syz1] removed [ 623.710533][T20279] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.718641][T20279] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.991783][T20279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 624.031744][T20279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 624.638546][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.673467][T20289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.708053][T20289] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.766795][T20289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.861472][T20289] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.869069][T20289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.887447][T20289] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.894968][T20289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.929270][T20289] veth0_to_team: left promiscuous mode [ 624.946988][T20289] veth0_to_team: left allmulticast mode [ 625.002200][T20289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 625.019319][T20289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 625.121632][T20289] veth1_vlan: left promiscuous mode [ 625.149446][T20289] vlan0: left promiscuous mode [ 625.179550][T20289] veth1_vlan: entered promiscuous mode [ 625.223950][T20289] veth1_macvtap: left promiscuous mode [ 625.241926][T20289] veth0_macvtap: left promiscuous mode [ 625.261593][T20289] veth0_macvtap: entered promiscuous mode [ 625.286700][T20289] veth1_macvtap: entered promiscuous mode [ 625.311868][T20289] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 625.330340][T20289] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 625.349701][T20289] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 625.369365][T20289] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 625.403603][T20289] mac80211_hwsim hwsim45 wlan0: entered promiscuous mode [ 625.423931][T20289] sit1: left promiscuous mode [ 625.483255][T20295] __nla_validate_parse: 2 callbacks suppressed [ 625.483273][T20295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3435'. [ 625.521541][T20295] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.836402][T20341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3441'. [ 625.909124][T20330] netlink: 'syz.2.3440': attribute type 2 has an invalid length. [ 625.941354][T20333] netlink: 'syz.2.3440': attribute type 2 has an invalid length. [ 626.397751][T20370] netlink: 'syz.2.3445': attribute type 1 has an invalid length. [ 626.884907][T20370] 8021q: adding VLAN 0 to HW filter on device bond5 [ 627.542619][T20423] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3454'. [ 627.740933][T20417] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 627.759286][T20417] bond1 (unregistering): Released all slaves [ 627.950343][T20439] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3457'. [ 627.988812][T20397] syzkaller0: entered promiscuous mode [ 628.017658][T20397] syzkaller0: entered allmulticast mode [ 628.356497][T20451] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3458'. [ 628.576831][T20460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3461'. [ 628.717536][T13303] IPVS: stop unused estimator thread 0... [ 628.924615][T20471] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 628.944788][T20475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3466'. [ 628.988302][T20482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3469'. [ 629.095280][T13312] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.129383][T13312] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.180154][T13312] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.215939][T13312] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.278291][T20494] netlink: 'syz.1.3471': attribute type 1 has an invalid length. [ 629.317069][T20494] netlink: 'syz.1.3471': attribute type 1 has an invalid length. [ 629.492632][T20481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3468'. [ 629.940459][T20510] No such timeout policy "syz1" [ 629.979410][T20517] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3477'. [ 629.985256][T20489] netlink: zone id is out of range [ 630.016740][T20489] netlink: zone id is out of range [ 630.035781][T20489] netlink: zone id is out of range [ 630.062463][T20489] netlink: zone id is out of range [ 630.099434][T20489] netlink: zone id is out of range [ 630.126082][T20489] netlink: zone id is out of range [ 630.155861][T20489] netlink: zone id is out of range [ 630.207252][T20489] netlink: zone id is out of range [ 630.255708][T20530] tipc: Enabled bearer , priority 0 [ 630.267993][T20489] netlink: zone id is out of range [ 630.308504][T20489] netlink: zone id is out of range [ 630.308721][T20534] syzkaller0: entered promiscuous mode [ 630.328995][T20534] syzkaller0: entered allmulticast mode [ 630.519694][T20519] tipc: Resetting bearer [ 630.587595][T20519] tipc: Disabling bearer [ 631.179313][T20564] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 631.632497][T20599] __nla_validate_parse: 1 callbacks suppressed [ 631.632522][T20599] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3492'. [ 631.720238][T20594] team0: Device xfrm0 is of different type [ 631.739051][T20604] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3496'. [ 632.680555][T20633] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3500'. [ 634.874179][ T1696] block nbd2: Possible stuck request ffff888027aa4b40: control (read@0,4096B). Runtime 240 seconds [ 635.200141][T20654] netlink: 'syz.1.3503': attribute type 1 has an invalid length. [ 635.269493][T20659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3503'. [ 635.323428][T20654] 8021q: adding VLAN 0 to HW filter on device bond1 [ 635.351652][T20667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3504'. [ 635.469365][T20671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3506'. [ 635.887634][T20684] batadv_slave_1: entered promiscuous mode [ 635.920506][T20684] batadv_slave_1: left promiscuous mode [ 636.011496][T20687] sctp: [Deprecated]: syz.1.3509 (pid 20687) Use of int in max_burst socket option. [ 636.011496][T20687] Use struct sctp_assoc_value instead [ 636.698769][T20706] netlink: 'syz.0.3515': attribute type 4 has an invalid length. [ 636.699988][T20703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3514'. [ 636.713341][T20706] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3515'. [ 636.784715][T20708] netlink: 'syz.3.3516': attribute type 1 has an invalid length. [ 636.794320][ C0] net_ratelimit: 17 callbacks suppressed [ 636.794341][ C0] batman_adv: batadv2: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 2 [ 636.823500][T20708] netlink: 'syz.3.3516': attribute type 2 has an invalid length. [ 637.053099][T20723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3522'. [ 637.071863][T20723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3522'. [ 637.110046][T13303] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.125116][T13303] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.152074][T13303] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.179645][T13303] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.302438][T20742] tipc: Enabling of bearer rejected, failed to enable media [ 637.335784][T20742] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 637.361957][T20742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3526'. [ 637.382362][T20742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3526'. [ 637.443944][T20752] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.451749][T20752] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.460716][T20752] bridge0: entered allmulticast mode [ 637.509820][T20752] bridge_slave_1: left allmulticast mode [ 637.537893][T20752] bridge_slave_1: left promiscuous mode [ 637.557965][T20752] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.585799][T20752] bridge_slave_0: left allmulticast mode [ 637.603789][T20752] bridge_slave_0: left promiscuous mode [ 637.614973][T20752] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.632950][T20753] can: request_module (can-proto-0) failed. [ 637.813832][T20767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3532'. [ 638.120215][T20777] netlink: 'syz.3.3535': attribute type 1 has an invalid length. [ 638.320920][T20793] IPVS: set_ctl: invalid protocol: 135 172.30.0.2:20001 [ 638.331332][T20792] netlink: 766 bytes leftover after parsing attributes in process `syz.1.3538'. [ 638.445351][T20798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3539'. [ 638.461827][T20798] netlink: 356 bytes leftover after parsing attributes in process `syz.0.3539'. [ 638.472889][T20785] bond1: (slave gretap1): making interface the new active one [ 638.505823][T20785] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 638.556801][T20777] macvlan3: entered promiscuous mode [ 638.562635][T20777] macvlan3: entered allmulticast mode [ 638.572293][T20777] bond1: entered promiscuous mode [ 638.578348][T20777] gretap1: entered promiscuous mode [ 638.591529][T20777] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 638.614443][T20777] bond1: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 638.663896][T20777] bond1: left promiscuous mode [ 638.691240][T20777] gretap1: left promiscuous mode [ 639.828534][T20870] netlink: 'syz.1.3557': attribute type 1 has an invalid length. [ 639.906876][T20870] bond2: entered promiscuous mode [ 639.912491][T20870] 8021q: adding VLAN 0 to HW filter on device bond2 [ 639.928776][T20874] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.936746][T20874] bridge0: entered allmulticast mode [ 639.978362][T20865] bridge_slave_1: left promiscuous mode [ 640.005402][T20865] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.089328][T20865] bridge_slave_0: left allmulticast mode [ 640.113382][T20865] bridge_slave_0: left promiscuous mode [ 640.123829][T20865] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.299352][T20888] atomic_op ffff888079008198 conn xmit_atomic 0000000000000000 [ 640.416238][T20870] 8021q: adding VLAN 0 to HW filter on device bond2 [ 640.446097][T20870] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 640.463974][T20870] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 640.508821][T20870] bond2: (slave ip6gre1): making interface the new active one [ 640.513939][T20904] Bluetooth: MGMT ver 1.23 [ 640.529017][T20870] ip6gre1: entered promiscuous mode [ 640.542582][T20870] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 641.331545][T20934] netlink: 'syz.1.3577': attribute type 39 has an invalid length. [ 641.431353][T20941] sctp: [Deprecated]: syz.4.3579 (pid 20941) Use of int in max_burst socket option. [ 641.431353][T20941] Use struct sctp_assoc_value instead [ 641.487410][T20941] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 641.856180][T20958] __nla_validate_parse: 14 callbacks suppressed [ 641.856203][T20958] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3583'. [ 641.920299][T20960] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3584'. [ 641.941193][T20958] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 642.197377][T20971] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3587'. [ 642.355234][T20976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3588'. [ 642.370619][T20976] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3588'. [ 642.390700][T20976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3588'. [ 642.642469][T20983] netlink: 'syz.0.3590': attribute type 1 has an invalid length. [ 642.673985][T20983] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3590'. [ 642.917661][T20990] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3592'. [ 642.998589][T17758] udevd[17758]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 643.440356][T21011] xt_hashlimit: size too large, truncated to 1048576 [ 643.777682][T21023] openvswitch: netlink: Missing key (keys=40, expected=100) [ 644.018551][T21027] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3602'. [ 644.053032][T21028] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3602'. [ 644.397985][T21047] xt_CT: You must specify a L4 protocol and not use inversions on it [ 644.425073][T21053] netlink: 'syz.2.3604': attribute type 21 has an invalid length. [ 644.448900][T21047] netlink: 'syz.2.3604': attribute type 21 has an invalid length. [ 644.476427][T13314] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 644.498472][T21048] xt_CT: You must specify a L4 protocol and not use inversions on it [ 644.899589][ T5626] Bluetooth: hci2: link tx timeout [ 644.919352][ T5626] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 646.873041][T21143] syzkaller0: entered promiscuous mode [ 646.901689][T21143] syzkaller0: entered allmulticast mode [ 646.963217][ T5626] Bluetooth: hci2: command 0x0406 tx timeout [ 647.003573][ T29] audit: type=1800 audit(1783675090.451:13): pid=21147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3630" name="memory.events" dev="tmpfs" ino=858 res=0 errno=0 [ 647.217160][T21153] __nla_validate_parse: 5 callbacks suppressed [ 647.217180][T21153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3631'. [ 647.402275][T21155] netlink: 'syz.2.3632': attribute type 1 has an invalid length. [ 647.537590][T21155] 8021q: adding VLAN 0 to HW filter on device bond7 [ 647.611766][T21167] team0: Port device dummy0 removed [ 647.627070][T21167] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 647.920966][T21177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3637'. [ 648.518313][T21197] ip6tnl1: entered allmulticast mode [ 648.544814][T21199] netlink: 'syz.2.3644': attribute type 1 has an invalid length. [ 648.571380][T21201] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3645'. [ 648.580941][T21199] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3644'. [ 648.605189][T21199] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3644'. [ 648.623428][T21199] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3644'. [ 648.776400][T21209] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3647'. [ 649.019412][T21213] netlink: 'syz.2.3648': attribute type 1 has an invalid length. [ 649.304936][T21213] 8021q: adding VLAN 0 to HW filter on device bond8 [ 649.392747][T21222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 649.409935][T21222] bond8: (slave bond0): Enslaving as an active interface with an up link [ 649.426533][T21230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3652'. [ 649.623833][T21230] bond2: Invalid ad_actor_system MAC address. [ 649.669437][T21230] bond2: option ad_actor_system: invalid value (7) [ 649.716539][T21230] bond2 (unregistering): Released all slaves [ 649.754962][T21237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3653'. [ 649.986375][T21246] syzkaller0: entered promiscuous mode [ 650.010533][T21246] syzkaller0: entered allmulticast mode [ 650.098930][T21249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3656'. [ 650.127940][T21249] hsr_slave_0: left promiscuous mode [ 650.152415][T21249] hsr_slave_1: left promiscuous mode [ 650.322790][T21262] lo: entered allmulticast mode [ 650.348545][T21262] tunl0: entered allmulticast mode [ 650.368973][T21262] gre0: entered allmulticast mode [ 650.388748][T21262] gretap0: entered allmulticast mode [ 650.415183][T21262] erspan0: entered allmulticast mode [ 650.470851][T21262] ip_vti0: entered allmulticast mode [ 650.503030][T21262] ip6_vti0: entered allmulticast mode [ 650.520662][T21262] sit0: entered allmulticast mode [ 650.534220][T21262] ip6tnl0: entered allmulticast mode [ 650.548356][T21262] ip6gre0: entered allmulticast mode [ 650.559221][T21262] syz_tun: entered allmulticast mode [ 650.566041][T21262] ip6gretap0: entered allmulticast mode [ 650.579219][T21262] bridge0: entered allmulticast mode [ 650.596130][T21262] bond0: entered allmulticast mode [ 650.602581][T21262] bond_slave_1: entered allmulticast mode [ 650.614265][T21262] team0: entered allmulticast mode [ 650.619644][T21262] team_slave_0: entered allmulticast mode [ 650.627146][T21262] team_slave_1: entered allmulticast mode [ 650.638320][T21262] nlmon0: entered allmulticast mode [ 650.654427][T21262] batadv0: entered allmulticast mode [ 650.661439][T21262] vxcan0: entered allmulticast mode [ 650.671047][T21262] vxcan1: entered allmulticast mode [ 650.677427][T21262] veth0: entered allmulticast mode [ 650.689960][T21262] veth1: entered allmulticast mode [ 650.707599][T21262] wg0: entered allmulticast mode [ 650.726528][T21262] wg2: entered allmulticast mode [ 650.745192][T21262] veth0_to_bridge: entered allmulticast mode [ 650.763605][T21262] veth1_to_bridge: entered allmulticast mode [ 650.771163][T21262] veth1_to_bond: entered allmulticast mode [ 650.810025][T21262] veth0_to_team: entered allmulticast mode [ 650.830658][T21262] veth1_to_team: entered allmulticast mode [ 650.845049][T21262] veth0_to_batadv: entered allmulticast mode [ 650.851959][T21262] batadv_slave_0: entered allmulticast mode [ 650.866159][T21262] veth1_to_batadv: entered allmulticast mode [ 650.881207][T21262] batadv_slave_1: entered allmulticast mode [ 650.888398][T21262] xfrm0: entered allmulticast mode [ 650.895308][T21262] veth0_to_hsr: entered allmulticast mode [ 650.902030][T21262] hsr_slave_0: entered allmulticast mode [ 650.910567][T21262] veth1_to_hsr: entered allmulticast mode [ 650.920278][T21262] hsr_slave_1: entered allmulticast mode [ 650.927818][T21262] hsr0: entered allmulticast mode [ 650.934355][T21262] veth1_virt_wifi: entered allmulticast mode [ 650.943737][T21262] veth0_virt_wifi: entered allmulticast mode [ 650.950497][T21262] virt_wifi0: entered allmulticast mode [ 650.959278][T21262] veth1_vlan: entered allmulticast mode [ 650.966586][T21262] veth0_vlan: entered allmulticast mode [ 650.974834][T21262] vlan0: entered allmulticast mode [ 650.980801][T21262] vlan1: entered allmulticast mode [ 650.987931][T21262] macvlan0: entered allmulticast mode [ 650.995392][T21262] macvlan1: entered allmulticast mode [ 651.001738][T21262] ipvlan0: entered allmulticast mode [ 651.009469][T21262] ipvlan1: entered allmulticast mode [ 651.018326][T21262] veth1_macvtap: entered allmulticast mode [ 651.027421][T21262] veth0_macvtap: entered allmulticast mode [ 651.039727][T21262] macvtap0: entered allmulticast mode [ 651.047159][T21262] macsec0: entered allmulticast mode [ 651.054653][T21262] geneve0: entered allmulticast mode [ 651.061357][T21262] geneve1: entered allmulticast mode [ 651.069138][T21262] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 651.079302][T21262] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 651.089332][T21262] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 651.099566][T21262] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 651.110003][T21262] mac80211_hwsim hwsim42 wlan0: entered allmulticast mode [ 651.120549][T21262] mac80211_hwsim hwsim43 wlan1: entered allmulticast mode [ 651.130379][T21262] vxlan0: entered allmulticast mode [ 651.137638][T21262] : entered allmulticast mode [ 651.142940][T21262] ipvlan2: entered allmulticast mode [ 651.151308][T21262] ipvlan3: entered allmulticast mode [ 651.160164][T21262] bridge1: entered allmulticast mode [ 651.169286][T21262] gre1: entered allmulticast mode [ 651.179017][T21262] bond1: entered allmulticast mode [ 651.185340][T21262] vxlan1: entered allmulticast mode [ 651.191676][T21262] bond2: left promiscuous mode [ 651.201346][T21262] ip6gre1: left promiscuous mode [ 651.206909][T21262] bond2: entered allmulticast mode [ 651.212326][T21262] ip6gre1: entered allmulticast mode [ 651.228743][T21262] veth0_macvtap.0: entered allmulticast mode [ 651.235822][T21262] ip6gre2: entered allmulticast mode [ 651.241501][T21262] ieee802154 phy1 wpan1: entered allmulticast mode [ 652.113090][T21301] netlink: 'syz.4.3667': attribute type 1 has an invalid length. [ 652.123042][T21301] netlink: 'syz.4.3667': attribute type 2 has an invalid length. [ 652.313280][ T5627] Bluetooth: hci5: command 0x0406 tx timeout [ 652.378529][T21326] netlink: 'syz.4.3679': attribute type 8 has an invalid length. [ 652.558567][T21333] IPv6: addrconf: prefix option has invalid lifetime [ 652.692002][T21334] syzkaller0: entered promiscuous mode [ 652.703610][T21334] syzkaller0: entered allmulticast mode [ 653.077348][T21362] __nla_validate_parse: 2 callbacks suppressed [ 653.077369][T21362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3688'. [ 653.792253][T21386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3694'. [ 654.232539][T21404] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3699'. [ 654.620363][T21412] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3702'. [ 655.175168][T21437] batman_adv: batadv0: Adding interface: vlan2 [ 655.195305][T21437] batman_adv: batadv0: The MTU of interface vlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 655.262766][T21437] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 655.757844][T21466] netlink: 'syz.2.3713': attribute type 1 has an invalid length. [ 655.926303][T21471] bond9: (slave bridge2): Enslaving as a backup interface with an up link [ 656.027637][T21478] macvlan2: entered promiscuous mode [ 656.042932][T21478] macvlan2: entered allmulticast mode [ 656.074159][T21478] bond9: entered promiscuous mode [ 656.102404][T21478] bridge2: entered promiscuous mode [ 656.114404][T21478] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 656.131130][T21478] bond9: left promiscuous mode [ 656.148306][T21478] bridge2: left promiscuous mode [ 656.161571][T21496] netlink: 'syz.0.3720': attribute type 30 has an invalid length. [ 656.189446][T21497] netlink: 'syz.1.3718': attribute type 1 has an invalid length. [ 656.197516][T21496] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3720'. [ 656.224747][T21499] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3721'. [ 656.306785][T21497] 8021q: adding VLAN 0 to HW filter on device bond3 [ 656.398184][T21496] bond2: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 656.410295][T21496] bond2 (unregistering): Released all slaves [ 656.599360][T21503] bond3: (slave veth3): Enslaving as an active interface with a down link [ 656.623334][T21509] netlink: 'syz.2.3722': attribute type 12 has an invalid length. [ 657.123600][T21539] Cannot find add_set index 0 as target [ 657.604410][T21554] netlink: 'syz.2.3735': attribute type 12 has an invalid length. [ 657.687438][T21559] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 657.754493][T21560] netlink: 'syz.2.3735': attribute type 8 has an invalid length. [ 657.815991][T21562] netlink: 'syz.0.3737': attribute type 1 has an invalid length. [ 657.878463][T21564] netlink: 376 bytes leftover after parsing attributes in process `syz.1.3738'. [ 657.907173][T21564] openvswitch: netlink: Flow key attr not present in new flow. [ 658.014118][T21562] 8021q: adding VLAN 0 to HW filter on device bond2 [ 658.247807][T21567] bond2: (slave ip6gretap2): making interface the new active one [ 658.278361][T21567] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 658.354749][T21581] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 658.441975][T21581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3743'. [ 658.945061][T21595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3747'. [ 658.998924][T21597] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3747'. [ 659.039781][T21595] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3747'. [ 659.132224][T21597] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.140396][T21597] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.161324][T21597] bridge0: entered allmulticast mode [ 659.243818][T21598] bridge_slave_1: left allmulticast mode [ 659.278637][T21598] bridge_slave_1: left promiscuous mode [ 659.309641][T21598] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.347673][T21598] bridge_slave_0: left allmulticast mode [ 659.363732][T21598] bridge_slave_0: left promiscuous mode [ 659.369696][T21598] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.706916][T21618] syzkaller1: entered promiscuous mode [ 659.752100][T21618] syzkaller1: entered allmulticast mode [ 660.457262][T21652] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3760'. [ 660.467157][T21652] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3760'. [ 660.478133][T21652] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3760'. [ 660.501570][T21652] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3760'. [ 660.587250][T21655] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3761'. [ 660.665914][T21657] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3762'. [ 661.275870][T21683] netlink: 'syz.1.3769': attribute type 6 has an invalid length. [ 663.057304][T21636] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 663.483009][T21721] __nla_validate_parse: 1 callbacks suppressed [ 663.483030][T21721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3779'. [ 663.492645][T21711] netlink: 'syz.1.3778': attribute type 1 has an invalid length. [ 663.498760][T21721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3779'. [ 663.498794][T21721] netlink: 'syz.2.3779': attribute type 18 has an invalid length. [ 663.527392][T21716] batman_adv: batadv0: Adding interface: gretap1 [ 663.534646][T21716] batman_adv: batadv0: Interface activated: gretap1 [ 663.535424][T21723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3779'. [ 663.551348][T21723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3779'. [ 663.560414][T21723] netlink: 'syz.2.3779': attribute type 18 has an invalid length. [ 663.656708][T21711] 8021q: adding VLAN 0 to HW filter on device bond4 [ 663.801151][T13324] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 4352 - 0 [ 663.811345][T21724] bond4: entered promiscuous mode [ 663.817573][T21724] bond4: entered allmulticast mode [ 663.852507][T13324] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0 [ 663.897390][T13324] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0 [ 663.948538][T13324] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0 [ 664.151140][T21738] syzkaller1: entered promiscuous mode [ 664.166698][T21738] syzkaller1: entered allmulticast mode [ 664.166953][T21748] netlink: 'syz.3.3786': attribute type 2 has an invalid length. [ 664.208778][T21748] netlink: 'syz.3.3786': attribute type 8 has an invalid length. [ 664.217448][T21748] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3786'. [ 664.247321][T21753] bond0: entered promiscuous mode [ 664.252755][T21753] bond_slave_0: entered promiscuous mode [ 664.272328][T21753] bond_slave_1: entered promiscuous mode [ 664.287640][T21755] netlink: 'syz.3.3786': attribute type 2 has an invalid length. [ 664.296695][T21755] netlink: 'syz.3.3786': attribute type 8 has an invalid length. [ 664.301680][T21753] bond0: left promiscuous mode [ 664.308246][T21755] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3786'. [ 664.327799][T21753] bond_slave_0: left promiscuous mode [ 664.337157][T21753] bond_slave_1: left promiscuous mode [ 664.666068][T21771] netlink: 'syz.0.3791': attribute type 1 has an invalid length. [ 664.785883][T21771] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 664.859841][T21786] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3796'. [ 664.895114][T21786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3796'. [ 664.930945][T21786] tipc: Enabled bearer , priority 10 [ 664.958327][ T1696] block nbd2: Possible stuck request ffff888027aa4b40: control (read@0,4096B). Runtime 270 seconds [ 664.967038][T21789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3798'. [ 665.382647][T21816] netlink: 'syz.2.3803': attribute type 2 has an invalid length. [ 665.426461][T21820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3804'. [ 665.462536][T21820] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 665.479251][T21820] syzkaller1: linktype set to 778 [ 665.585643][T21823] syzkaller0: entered promiscuous mode [ 665.613712][T21823] syzkaller0: entered allmulticast mode [ 666.944263][T21859] ipvlan2: entered allmulticast mode [ 666.957192][T21859] ip6gretap0: entered allmulticast mode [ 666.987079][T21875] IPVS: set_ctl: invalid protocol: 47 172.30.1.1:20004 [ 667.707356][T21908] dvmrp0: entered allmulticast mode [ 667.819608][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 667.867013][T21910] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 668.160871][T21927] syzkaller1: entered promiscuous mode [ 668.173806][T21927] syzkaller1: entered allmulticast mode [ 668.188899][T21927] syzkaller1: left promiscuous mode [ 668.201642][T21927] syzkaller1: left allmulticast mode [ 668.899380][T21947] __nla_validate_parse: 7 callbacks suppressed [ 668.899401][T21947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3841'. [ 669.028873][T21947] syzkaller0: entered promiscuous mode [ 669.041263][T21947] syzkaller0: entered allmulticast mode [ 669.923711][T21979] tipc: Enabled bearer , priority 0 [ 669.930937][T21977] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3845'. [ 669.932982][T21979] syzkaller0: entered promiscuous mode [ 669.964796][T21979] syzkaller0: entered allmulticast mode [ 669.991518][T21979] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 670.083995][T21979] tipc: Resetting bearer [ 670.135039][T21978] tipc: Resetting bearer [ 670.238859][T21978] tipc: Disabling bearer [ 670.496985][T22002] validate_nla: 1 callbacks suppressed [ 670.497030][T22002] netlink: 'syz.3.3851': attribute type 4 has an invalid length. [ 671.125762][T21988] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 671.167547][T22011] netlink: 'syz.3.3853': attribute type 1 has an invalid length. [ 671.850681][T22028] IPVS: set_ctl: invalid protocol: 50 100.1.1.0:20004 [ 671.965919][T22031] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3857'. [ 671.981667][T22031] 0·: renamed from hsr0 (while UP) [ 672.056179][T22031] 0·: entered allmulticast mode [ 672.073553][T22031] hsr_slave_0: entered allmulticast mode [ 672.085478][T22031] hsr_slave_1: entered allmulticast mode [ 672.102068][T22031] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 672.166687][T22032] syzkaller0: entered promiscuous mode [ 672.199681][T22032] syzkaller0: entered allmulticast mode [ 672.255159][T22043] netlink: 292 bytes leftover after parsing attributes in process `syz.2.3862'. [ 672.286565][T22032] netlink: 'syz.3.3858': attribute type 1 has an invalid length. [ 672.292863][T22044] netlink: 'syz.0.3854': attribute type 12 has an invalid length. [ 672.312388][T22021] netlink: 'syz.0.3854': attribute type 12 has an invalid length. [ 673.018119][T22076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3868'. [ 673.221479][T22083] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3870'. [ 673.237685][T22084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3871'. [ 673.604930][T22094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3874'. [ 673.718299][T22098] syzkaller0: entered promiscuous mode [ 673.733407][T22098] syzkaller0: entered allmulticast mode [ 674.000651][T22105] syzkaller0: entered promiscuous mode [ 674.021293][T22105] syzkaller0: entered allmulticast mode [ 674.089005][T22107] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3878'. [ 674.145441][T22107] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3878'. [ 674.469395][T22120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3879'. [ 675.217886][T22142] batadv_slave_1: entered promiscuous mode [ 675.243098][T22139] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 675.245570][T22140] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 675.406206][T22145] batadv_slave_1: left promiscuous mode [ 675.415238][T22149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3888'. [ 675.441594][T22149] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3888'. [ 675.700015][T22158] veth1_to_bond: entered promiscuous mode [ 675.719019][T22161] netlink: 'syz.1.3892': attribute type 1 has an invalid length. [ 675.735144][T22158] veth1_to_bond: entered allmulticast mode [ 675.851138][T22161] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 676.242980][T22171] syzkaller0: entered promiscuous mode [ 676.270933][T22171] syzkaller0: entered allmulticast mode [ 676.278676][ T6224] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 676.474976][ T63] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 676.596018][T22198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3898'. [ 676.945179][T22179] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 677.929935][T22207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3900'. [ 680.687286][T22217] bond0: (slave ip6tnl0): refused to change device type [ 680.719065][T22217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3902'. [ 680.738173][T22217] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3902'. [ 680.780220][T22217] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3902'. [ 680.840337][T22217] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3902'. [ 680.889927][T22224] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3905'. [ 680.909770][T22224] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3905'. [ 680.924996][T22225] netlink: 'syz.4.3906': attribute type 21 has an invalid length. [ 680.953753][T22225] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3906'. [ 680.981471][T22225] netlink: 'syz.4.3906': attribute type 5 has an invalid length. [ 680.990799][T22225] netlink: 'syz.4.3906': attribute type 6 has an invalid length. [ 681.006397][T22225] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3906'. [ 681.128147][T22235] syz_tun: entered allmulticast mode [ 681.149761][T22235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3908'. [ 681.174116][T22235] netlink: 'syz.0.3908': attribute type 9 has an invalid length. [ 681.194600][T22235] netlink: 'syz.0.3908': attribute type 6 has an invalid length. [ 681.233866][T22233] syz_tun: left allmulticast mode [ 681.510496][T22251] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3914'. [ 681.532460][T22245] bond0: (slave bond_slave_0): Releasing backup interface [ 681.569446][T22245] bond0: (slave bond_slave_1): Releasing backup interface [ 681.579805][T22250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 681.616832][T22245] team0: Port device team_slave_0 removed [ 681.644654][T22245] team0: Port device team_slave_1 removed [ 681.658385][T22245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 681.669799][T22245] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 681.686814][T22245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 681.705363][T22245] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 681.738578][T22245] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 681.760372][T22255] team0: Mode changed to "roundrobin" [ 682.057382][T22264] syzkaller0: entered promiscuous mode [ 682.077860][T22264] syzkaller0: entered allmulticast mode [ 682.292594][T22287] tipc: Started in network mode [ 682.318720][T22287] tipc: Node identity 3, cluster identity 4711 [ 682.328393][T22287] tipc: Node number set to 3 [ 683.103797][T22327] netlink: 'syz.4.3933': attribute type 2 has an invalid length. [ 683.442727][T22339] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 683.976228][T22363] netlink: 'syz.4.3941': attribute type 1 has an invalid length. [ 683.990093][T22364] netlink: 'syz.1.3940': attribute type 21 has an invalid length. [ 684.157623][T22371] netlink: 'syz.2.3944': attribute type 13 has an invalid length. [ 684.166460][T22371] netlink: 'syz.2.3944': attribute type 17 has an invalid length. [ 684.316131][T22377] xt_connbytes: Forcing CT accounting to be enabled [ 684.772184][T22355] bond2: (slave gretap2): making interface the new active one [ 684.792189][T22355] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 684.931750][T22371] veth1_to_bond: left promiscuous mode [ 684.936932][T22382] xt_CT: No such helper "syz0" [ 684.961270][T22371] veth1_to_bond: left allmulticast mode [ 684.989225][T22371] 0·: left allmulticast mode [ 684.995130][T22371] hsr_slave_0: left allmulticast mode [ 685.000603][T22371] hsr_slave_1: left allmulticast mode [ 685.120470][T22371] bridge1: left promiscuous mode [ 685.136023][T22371] 8021q: adding VLAN 0 to HW filter on device bond6 [ 685.150931][ T48] bond9: (slave bridge2): link status up again after 0 ms [ 685.152056][T22371] 8021q: adding VLAN 0 to HW filter on device bond9 [ 685.168526][ T48] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 685.187934][ T6234] bond9: (slave bridge2): link status up again after 0 ms [ 685.217352][ T6234] bond9: (slave bridge2): link status up again after 0 ms [ 685.254193][ T6234] bond9: (slave bridge2): link status up again after 0 ms [ 685.294211][ T6234] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 685.338279][ T6234] bond9: (slave bridge2): link status up again after 0 ms [ 685.373437][ T48] bond9: (slave bridge2): link status up again after 0 ms [ 686.583350][ T48] net_ratelimit: 55 callbacks suppressed [ 686.583376][ T48] bond9: (slave bridge2): link status up again after 0 ms [ 686.613653][ T48] bond9: (slave bridge2): link status up again after 0 ms [ 686.638010][ T35] bond9: (slave bridge2): link status up again after 0 ms [ 686.671503][ T6224] bond9: (slave bridge2): link status up again after 0 ms [ 686.702199][ T6234] bond9: (slave bridge2): link status up again after 0 ms [ 686.733754][ T6224] bond9: (slave bridge2): link status up again after 0 ms [ 686.765722][ T6224] bond9: (slave bridge2): link status up again after 0 ms [ 686.798084][ T35] bond9: (slave bridge2): link status up again after 0 ms [ 686.827493][ T6234] bond9: (slave bridge2): link status up again after 0 ms [ 686.857761][ T6234] bond9: (slave bridge2): link status up again after 0 ms [ 688.477635][T22390] erspan1: entered allmulticast mode [ 688.711705][T22400] __nla_validate_parse: 12 callbacks suppressed [ 688.711729][T22400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3956'. [ 688.761944][T22399] tipc: Enabling of bearer rejected, failed to enable media [ 688.960857][T22416] netlink: 'syz.4.3960': attribute type 7 has an invalid length. [ 689.160305][T22421] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3962'. [ 689.323547][T22429] netlink: 'syz.3.3966': attribute type 18 has an invalid length. [ 689.508511][T22437] netlink: 'syz.0.3967': attribute type 1 has an invalid length. [ 689.631007][T22438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3967'. [ 689.809832][T22449] syzkaller0: entered promiscuous mode [ 689.829297][T22449] syzkaller0: entered allmulticast mode [ 690.021570][T22462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3974'. [ 690.051508][T22462] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3974'. [ 690.073050][T22462] netlink: 'syz.4.3974': attribute type 1 has an invalid length. [ 690.188166][T22466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3975'. [ 690.570886][T22483] tipc: Started in network mode [ 690.586043][T22483] tipc: Node identity 727bb9ac03b3, cluster identity 4711 [ 690.607055][T22483] tipc: Enabled bearer , priority 0 [ 690.636249][T22484] syzkaller0: entered promiscuous mode [ 690.665104][T22484] syzkaller0: entered allmulticast mode [ 690.783527][T22482] tipc: Resetting bearer [ 690.901736][T22482] tipc: Disabling bearer [ 690.986923][T22497] netlink: 'syz.2.3987': attribute type 1 has an invalid length. [ 691.267395][T22497] bond10: (slave gretap1): making interface the new active one [ 691.280366][T22497] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 691.321389][T22497] macvlan2: entered promiscuous mode [ 691.336870][T22497] macvlan2: entered allmulticast mode [ 691.350928][T22497] bond10: entered promiscuous mode [ 691.368834][T22497] gretap1: entered promiscuous mode [ 691.396903][T22497] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 691.430673][T22497] bond10: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 691.463768][T22497] bond10: left promiscuous mode [ 691.481082][T22497] gretap1: left promiscuous mode [ 691.640210][T13322] net_ratelimit: 96 callbacks suppressed [ 691.640234][T13322] bond9: (slave bridge2): failed to get link speed/duplex [ 691.654847][T22505] No such timeout policy "syz1" [ 691.670346][T22505] netlink: zone id is out of range [ 691.687885][T22505] netlink: zone id is out of range [ 691.695701][T22505] netlink: zone id is out of range [ 691.717819][T22505] netlink: zone id is out of range [ 691.729541][T22505] netlink: zone id is out of range [ 691.746993][T22505] netlink: zone id is out of range [ 691.763840][ T35] bond9: (slave bridge2): failed to get link speed/duplex [ 691.784765][T22505] netlink: zone id is out of range [ 691.800166][T22505] netlink: zone id is out of range [ 691.927772][T22526] netlink: 'syz.2.3993': attribute type 29 has an invalid length. [ 692.265077][T22535] netlink: 'syz.2.3995': attribute type 23 has an invalid length. [ 692.291257][T22539] netlink: 'syz.0.3997': attribute type 1 has an invalid length. [ 692.367933][T22537] netlink: 'syz.1.3996': attribute type 11 has an invalid length. [ 692.376853][T22537] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3996'. [ 692.462078][T22540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3996'. [ 692.518867][T22542] bond3: (slave gretap1): making interface the new active one [ 692.527387][T22542] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 692.573969][T22537] vlan2: entered promiscuous mode [ 692.592053][T22537] bond0: entered promiscuous mode [ 692.607362][T22537] bond_slave_1: entered promiscuous mode [ 692.737654][T22530] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 692.765741][T22530] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 693.006520][ C1] ------------[ cut here ]------------ [ 693.012077][ C1] !local->started [ 693.012113][ C1] WARNING: net/mac80211/rx.c:5563 at ieee80211_rx_list+0x2a34/0x3910, CPU#1: kworker/1:2/1224 [ 693.026383][ C1] Modules linked in: [ 693.030421][ C1] CPU: 1 UID: 0 PID: 1224 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 693.039947][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 693.050095][ C1] Workqueue: events delayed_vfree_work [ 693.055971][ C1] RIP: 0010:ieee80211_rx_list+0x2a34/0x3910 [ 693.061904][ C1] Code: 90 e9 25 eb ff ff e8 9b ac 80 f6 e9 1b eb ff ff e8 91 ac 80 f6 e9 11 eb ff ff e8 87 ac 80 f6 e9 07 eb ff ff e8 7d ac 80 f6 90 <0f> 0b 90 e9 f9 ea ff ff e8 6f ac 80 f6 48 c7 44 24 50 00 00 00 00 [ 693.082318][ C1] RSP: 0018:ffffc90000a08b40 EFLAGS: 00010246 [ 693.088938][ C1] RAX: ffffffff8b45c543 RBX: ffff8880768016f5 RCX: ffff888029855d00 [ 693.097514][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000005 [ 693.108039][ C1] RBP: ffffc90000a08db0 R08: ffffffff8b45d501 R09: 0000000000000000 [ 693.116826][ C1] R10: 0000000000000000 R11: ffffffff8eb59c20 R12: dffffc0000000000 [ 693.124881][ C1] R13: ffff88807f4948c0 R14: ffff888076803248 R15: ffff888076800f40 [ 693.133053][ C1] FS: 0000000000000000(0000) GS:ffff888125060000(0000) knlGS:0000000000000000 [ 693.142462][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 693.149474][ C1] CR2: 00002000002d5000 CR3: 000000006101e000 CR4: 00000000003526f0 [ 693.157547][ C1] Call Trace: [ 693.160862][ C1] [ 693.163788][ C1] ? __lock_acquire+0x683/0x2cf0 [ 693.168825][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 693.174538][ C1] ? __lock_acquire+0x683/0x2cf0 [ 693.179562][ C1] ? ieee80211_rx_napi+0xd1/0x3d0 [ 693.184786][ C1] ? lock_acquire+0x106/0x350 [ 693.189509][ C1] ? ieee80211_rx_napi+0xd1/0x3d0 [ 693.194663][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 693.199739][ C1] ? ieee80211_rx_napi+0xd1/0x3d0 [ 693.204859][ C1] ieee80211_rx_napi+0x1ad/0x3d0 [ 693.209843][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 693.215396][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 693.221326][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 693.226657][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 693.232516][ C1] ? skb_dequeue+0x124/0x160 [ 693.237253][ C1] ieee80211_handle_queued_frames+0xe4/0x1d0 [ 693.243398][ C1] tasklet_action_common+0x2d7/0x490 [ 693.248864][ C1] handle_softirqs+0x225/0x840 [ 693.253835][ C1] ? __irq_exit_rcu+0xca/0x220 [ 693.258657][ C1] __irq_exit_rcu+0xca/0x220 [ 693.263346][ C1] irq_exit_rcu+0x9/0x30 [ 693.267634][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 693.273378][ C1] [ 693.276352][ C1] [ 693.279498][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 693.285685][ C1] RIP: 0010:in_task_stack+0x0/0x40 [ 693.290842][ C1] Code: 36 03 00 cc 48 c7 c7 c0 59 97 8e 4c 89 fe e8 07 92 41 f9 b0 01 e9 53 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <0f> 1f 40 d6 48 8b 4e 20 48 8d b1 00 80 00 00 48 39 cf 41 0f 93 c0 [ 693.310650][ C1] RSP: 0018:ffffc90005cd7630 EFLAGS: 00000286 [ 693.316811][ C1] RAX: 1ffff92000b9aee4 RBX: ffffc90005cd76e8 RCX: ffffc90005cd7708 [ 693.324992][ C1] RDX: ffffc90005cd76e8 RSI: ffff888029855d00 RDI: ffffc90005cd7690 [ 693.333010][ C1] RBP: ffffc90005cd7710 R08: ffffc90005cd7747 R09: 0000000000000000 [ 693.341092][ C1] R10: ffffc90005cd76e8 R11: fffff52000b9aee9 R12: ffffc90005cd7690 [ 693.349274][ C1] R13: dffffc0000000000 R14: ffffc90005cd7690 R15: ffff888029855d00 [ 693.357567][ C1] get_stack_info_noinstr+0x19/0x130 [ 693.362907][ C1] get_stack_info+0x3a/0xf0 [ 693.367708][ C1] __unwind_start+0x3c5/0x660 [ 693.372679][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 693.378998][ C1] arch_stack_walk+0xe3/0x150 [ 693.383909][ C1] ? __unwind_start+0xed/0x660 [ 693.388742][ C1] stack_trace_save+0xa9/0x100 [ 693.393976][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 693.399400][ C1] ? stack_depot_save_flags+0x33/0x800 [ 693.405095][ C1] save_stack+0x122/0x230 [ 693.409482][ C1] ? __pfx_save_stack+0x10/0x10 [ 693.414552][ C1] ? page_ext_get+0x22/0x2e0 [ 693.419307][ C1] ? page_ext_put+0x97/0xc0 [ 693.423920][ C1] __reset_page_owner+0x71/0x1f0 [ 693.429004][ C1] free_pages_prepare+0x960/0xa60 [ 693.434137][ C1] __free_contig_range_common+0x174/0x340 [ 693.439922][ C1] free_pages_bulk+0x48/0x120 [ 693.444700][ C1] vfree+0x224/0x4a0 [ 693.448649][ C1] delayed_vfree_work+0x55/0x80 [ 693.453601][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 693.459546][ C1] process_scheduled_works+0xa8e/0x14e0 [ 693.465218][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 693.471436][ C1] ? assign_work+0x3cf/0x5d0 [ 693.476142][ C1] worker_thread+0xa47/0xfb0 [ 693.480902][ C1] kthread+0x388/0x470 [ 693.485063][ C1] ? __pfx_worker_thread+0x10/0x10 [ 693.490297][ C1] ? __pfx_kthread+0x10/0x10 [ 693.494962][ C1] ret_from_fork+0x514/0xb70 [ 693.499605][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 693.504798][ C1] ? __switch_to+0xc89/0x1420 [ 693.509698][ C1] ? __pfx_kthread+0x10/0x10 [ 693.514807][ C1] ret_from_fork_asm+0x1a/0x30 [ 693.519758][ C1] [ 693.522813][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 693.530132][ C1] CPU: 1 UID: 0 PID: 1224 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 693.539638][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 693.550251][ C1] Workqueue: events delayed_vfree_work [ 693.555764][ C1] Call Trace: [ 693.559080][ C1] [ 693.561952][ C1] vpanic+0x56c/0xa60 [ 693.566022][ C1] ? __pfx__printk+0x10/0x10 [ 693.570665][ C1] ? __pfx_vpanic+0x10/0x10 [ 693.575228][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 693.580571][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 693.585932][ C1] panic+0xc5/0xd0 [ 693.589901][ C1] ? __pfx_panic+0x10/0x10 [ 693.594736][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 693.599919][ C1] __warn+0x315/0x4c0 [ 693.603943][ C1] ? ieee80211_rx_list+0x2a34/0x3910 [ 693.609396][ C1] ? ieee80211_rx_list+0x2a34/0x3910 [ 693.615048][ C1] __report_bug+0x331/0x530 [ 693.619719][ C1] ? ieee80211_rx_list+0x2a34/0x3910 [ 693.625055][ C1] ? __pfx___report_bug+0x10/0x10 [ 693.630174][ C1] ? ieee80211_rx_list+0x2a34/0x3910 [ 693.635500][ C1] report_bug+0x16a/0x220 [ 693.639893][ C1] ? ieee80211_rx_list+0x2a34/0x3910 [ 693.645826][ C1] ? ieee80211_rx_list+0x2a36/0x3910 [ 693.651151][ C1] handle_bug+0x9c/0x200 [ 693.655494][ C1] exc_invalid_op+0x1a/0x50 [ 693.660032][ C1] asm_exc_invalid_op+0x1a/0x20 [ 693.665062][ C1] RIP: 0010:ieee80211_rx_list+0x2a34/0x3910 [ 693.670970][ C1] Code: 90 e9 25 eb ff ff e8 9b ac 80 f6 e9 1b eb ff ff e8 91 ac 80 f6 e9 11 eb ff ff e8 87 ac 80 f6 e9 07 eb ff ff e8 7d ac 80 f6 90 <0f> 0b 90 e9 f9 ea ff ff e8 6f ac 80 f6 48 c7 44 24 50 00 00 00 00 [ 693.690687][ C1] RSP: 0018:ffffc90000a08b40 EFLAGS: 00010246 [ 693.696761][ C1] RAX: ffffffff8b45c543 RBX: ffff8880768016f5 RCX: ffff888029855d00 [ 693.705189][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000005 [ 693.713167][ C1] RBP: ffffc90000a08db0 R08: ffffffff8b45d501 R09: 0000000000000000 [ 693.721233][ C1] R10: 0000000000000000 R11: ffffffff8eb59c20 R12: dffffc0000000000 [ 693.729408][ C1] R13: ffff88807f4948c0 R14: ffff888076803248 R15: ffff888076800f40 [ 693.737394][ C1] ? ieee80211_rx_napi+0xd1/0x3d0 [ 693.742526][ C1] ? ieee80211_rx_list+0x2a33/0x3910 [ 693.747835][ C1] ? __lock_acquire+0x683/0x2cf0 [ 693.753066][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 693.758749][ C1] ? __lock_acquire+0x683/0x2cf0 [ 693.763707][ C1] ? ieee80211_rx_napi+0xd1/0x3d0 [ 693.768735][ C1] ? lock_acquire+0x106/0x350 [ 693.773427][ C1] ? ieee80211_rx_napi+0xd1/0x3d0 [ 693.778479][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 693.783581][ C1] ? ieee80211_rx_napi+0xd1/0x3d0 [ 693.788656][ C1] ieee80211_rx_napi+0x1ad/0x3d0 [ 693.793619][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 693.799120][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 693.805031][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 693.810369][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 693.816271][ C1] ? skb_dequeue+0x124/0x160 [ 693.820885][ C1] ieee80211_handle_queued_frames+0xe4/0x1d0 [ 693.826966][ C1] tasklet_action_common+0x2d7/0x490 [ 693.832265][ C1] handle_softirqs+0x225/0x840 [ 693.837118][ C1] ? __irq_exit_rcu+0xca/0x220 [ 693.841898][ C1] __irq_exit_rcu+0xca/0x220 [ 693.846514][ C1] irq_exit_rcu+0x9/0x30 [ 693.850861][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 693.856523][ C1] [ 693.859467][ C1] [ 693.862437][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 693.868432][ C1] RIP: 0010:in_task_stack+0x0/0x40 [ 693.873655][ C1] Code: 36 03 00 cc 48 c7 c7 c0 59 97 8e 4c 89 fe e8 07 92 41 f9 b0 01 e9 53 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <0f> 1f 40 d6 48 8b 4e 20 48 8d b1 00 80 00 00 48 39 cf 41 0f 93 c0 [ 693.894695][ C1] RSP: 0018:ffffc90005cd7630 EFLAGS: 00000286 [ 693.900782][ C1] RAX: 1ffff92000b9aee4 RBX: ffffc90005cd76e8 RCX: ffffc90005cd7708 [ 693.908778][ C1] RDX: ffffc90005cd76e8 RSI: ffff888029855d00 RDI: ffffc90005cd7690 [ 693.916778][ C1] RBP: ffffc90005cd7710 R08: ffffc90005cd7747 R09: 0000000000000000 [ 693.924754][ C1] R10: ffffc90005cd76e8 R11: fffff52000b9aee9 R12: ffffc90005cd7690 [ 693.932730][ C1] R13: dffffc0000000000 R14: ffffc90005cd7690 R15: ffff888029855d00 [ 693.940742][ C1] get_stack_info_noinstr+0x19/0x130 [ 693.946049][ C1] get_stack_info+0x3a/0xf0 [ 693.950587][ C1] __unwind_start+0x3c5/0x660 [ 693.955430][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 693.961614][ C1] arch_stack_walk+0xe3/0x150 [ 693.966404][ C1] ? __unwind_start+0xed/0x660 [ 693.971200][ C1] stack_trace_save+0xa9/0x100 [ 693.975975][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 693.981381][ C1] ? stack_depot_save_flags+0x33/0x800 [ 693.987054][ C1] save_stack+0x122/0x230 [ 693.991418][ C1] ? __pfx_save_stack+0x10/0x10 [ 693.996396][ C1] ? page_ext_get+0x22/0x2e0 [ 694.001022][ C1] ? page_ext_put+0x97/0xc0 [ 694.005539][ C1] __reset_page_owner+0x71/0x1f0 [ 694.010513][ C1] free_pages_prepare+0x960/0xa60 [ 694.015581][ C1] __free_contig_range_common+0x174/0x340 [ 694.021334][ C1] free_pages_bulk+0x48/0x120 [ 694.026023][ C1] vfree+0x224/0x4a0 [ 694.030037][ C1] delayed_vfree_work+0x55/0x80 [ 694.034916][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 694.040649][ C1] process_scheduled_works+0xa8e/0x14e0 [ 694.046230][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 694.052416][ C1] ? assign_work+0x3cf/0x5d0 [ 694.057008][ C1] worker_thread+0xa47/0xfb0 [ 694.061617][ C1] kthread+0x388/0x470 [ 694.066835][ C1] ? __pfx_worker_thread+0x10/0x10 [ 694.071971][ C1] ? __pfx_kthread+0x10/0x10 [ 694.076797][ C1] ret_from_fork+0x514/0xb70 [ 694.081463][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 694.086623][ C1] ? __switch_to+0xc89/0x1420 [ 694.091423][ C1] ? __pfx_kthread+0x10/0x10 [ 694.096036][ C1] ret_from_fork_asm+0x1a/0x30 [ 694.101352][ C1] [ 694.104695][ C1] Kernel Offset: disabled [ 694.109194][ C1] Rebooting in 86400 seconds..