last executing test programs: 3.728738101s ago: executing program 3 (id=3293): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x23, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e00)={0x50, r3, 0xe27021e5f05bd539, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_SCAN_SSIDS={0x28, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0x4}, {0x4}, {0xf, 0x0, @random="1f73f4bfda97843c9ddacc"}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 3.239623677s ago: executing program 3 (id=3294): setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000000)=0x6, 0x4) (async, rerun: 32) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x4, 0x4}, 0x6) (async, rerun: 32) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000080)={0x6, 'vcan0\x00', {0x8}, 0xd03}) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f00000000c0), 0x4) (async) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5}, 0x50) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x18, 0x15, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x0, 0x5, 0x0, 0x4, 0x18, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xcb3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @generic={0x8, 0xd, 0x9, 0x4, 0x100}, @alu={0x4, 0x0, 0x8, 0x7, 0x1, 0x10, 0xfffffffffffffff0}]}, &(0x7f0000000300)='syzkaller\x00', 0x908, 0x1000, &(0x7f0000000340)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001340)={0x4, 0xd, 0x81, 0xa63d}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001380)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000013c0)=[{0x2, 0x1, 0x4, 0x2}, {0x1, 0x3, 0xf, 0x3}, {0x4, 0x4, 0x8, 0x1}], 0x10, 0x401}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001500)={{r2}, &(0x7f0000000200), &(0x7f00000014c0)=r3}, 0x20) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001640)={@cgroup, 0x10, 0x1, 0x7, &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000001580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000015c0)=[0x0, 0x0], &(0x7f0000001600)=[0x0, 0x0, 0x0], 0x0}, 0x40) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000016c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001680)={@cgroup=r5, r3, 0x35, 0x0, 0x0, @void, @value=r3, @void, @void, r4}, 0x20) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001800)={&(0x7f0000001740)=@deltaction={0xa8, 0x31, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc2}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x64256440}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x14, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}]}]}, 0xa8}}, 0x4004040) (async) gettid() (async) setsockopt$sock_void(r1, 0x1, 0x12, 0x0, 0x0) (async) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000001880)={@remote, @rand_addr, 0x0}, &(0x7f00000018c0)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001900)=@bloom_filter={0x1e, 0x5, 0x5, 0x1e, 0x800, r2, 0x7, '\x00', r7, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0x7}, 0x50) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000001980)={@in={{0x2, 0x4e22, @loopback}}, 0x0, 0x0, 0x3c, 0x0, "e712d3053cb97aa97625f7f24bb4b5a7ebfeaf90f4bb7d4da328d4d80690724b946956c0d66fdfba10d1a565363a741b56d44637906fa190ea651a9f010a569a975ef4c86e8bf3f4411fd2c360309b19"}, 0xd8) (async, rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001b80)={@fallback=r5, 0x2f, 0x1, 0x3, &(0x7f0000001a80)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async, rerun: 64) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001c00), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001bc0)={@ifindex=r7, r3, 0x1b, 0x2010, r3, @value=r10, @void, @void, @void, r9}, 0x20) bind$rds(r8, &(0x7f0000001c40)={0x2, 0x4e22, @multicast2}, 0x10) (async) bind$alg(r8, &(0x7f0000001c80)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r11, 0x6, 0x23, &(0x7f0000001e80)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001d00)=""/83, 0x53, 0x1, &(0x7f0000001d80)=""/201, 0xc9}, &(0x7f0000001ec0)=0x40) r12 = accept4$unix(0xffffffffffffffff, &(0x7f0000001f00)=@abs, &(0x7f0000001f80)=0x6e, 0x800) clock_gettime(0x0, &(0x7f0000008c40)={0x0, 0x0}) recvmmsg$unix(r12, &(0x7f0000008ac0)=[{{&(0x7f0000001fc0)=@abs, 0x6e, &(0x7f0000002480)=[{&(0x7f0000002040)=""/23, 0x17}, {&(0x7f0000002080)=""/57, 0x39}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/96, 0x60}, {&(0x7f00000021c0)=""/29, 0x1d}, {&(0x7f0000002200)=""/223, 0xdf}, {&(0x7f0000002300)=""/71, 0x47}, {&(0x7f0000002380)=""/58, 0x3a}, {&(0x7f00000023c0)=""/113, 0x71}, {&(0x7f0000002440)=""/24, 0x18}], 0xa, &(0x7f0000002540)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000002600)=@abs, 0x6e, &(0x7f00000029c0)=[{&(0x7f0000002680)=""/19, 0x13}, {&(0x7f00000026c0)=""/106, 0x6a}, {&(0x7f0000002740)=""/76, 0x4c}, {&(0x7f00000027c0)=""/209, 0xd1}, {&(0x7f00000028c0)=""/17, 0x11}, {&(0x7f0000002900)=""/164, 0xa4}], 0x6, &(0x7f0000002a40)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000002b40), 0x6e, &(0x7f00000060c0)=[{&(0x7f0000002bc0)=""/25, 0x19}, {&(0x7f0000002c00)=""/153, 0x99}, {&(0x7f0000002cc0)=""/217, 0xd9}, {&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000003dc0)=""/128, 0x80}, {&(0x7f0000003e40)=""/156, 0x9c}, {&(0x7f0000003f00)=""/202, 0xca}, {&(0x7f0000004000)=""/4096, 0x1000}, {&(0x7f0000005000)=""/171, 0xab}, {&(0x7f00000050c0)=""/4096, 0x1000}], 0xa, &(0x7f0000006180)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{0x0, 0x0, &(0x7f0000007480)=[{&(0x7f00000062c0)=""/221, 0xdd}, {&(0x7f00000063c0)=""/4096, 0x1000}, {&(0x7f00000073c0)=""/169, 0xa9}], 0x3, &(0x7f00000074c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{0x0, 0x0, &(0x7f0000007840)=[{&(0x7f0000007540)=""/244, 0xf4}, {&(0x7f0000007640)=""/156, 0x9c}, {&(0x7f0000007700)=""/51, 0x33}, {&(0x7f0000007740)=""/43, 0x2b}, {&(0x7f0000007780)=""/150, 0x96}], 0x5, &(0x7f00000078c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000007940), 0x6e, &(0x7f0000008a40)=[{&(0x7f00000079c0)=""/42, 0x2a}, {&(0x7f0000007a00)=""/4096, 0x1000}, {&(0x7f0000008a00)=""/35, 0x23}], 0x3, &(0x7f0000008a80)=[@cred={{0x1c}}], 0x20}}], 0x6, 0x1, &(0x7f0000008c80)={r13, r14+10000000}) 2.983841803s ago: executing program 3 (id=3295): sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x40000) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) socket(0x10, 0x2, 0x0) listen(r2, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r5, &(0x7f0000000280), 0x0}, 0x20) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$int_in(r0, 0x5421, &(0x7f0000001000)=0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xffff, 0x1ff}}]}}]}, 0x48}}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000005ff070000000000000300000d"], &(0x7f0000000f40)=""/4089, 0x4a, 0xff9, 0x1, 0x32e}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f0000001380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20060000}, 0x1000) 2.320189975s ago: executing program 2 (id=3305): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@ipv4_newrule={0x30, 0x20, 0xf4db158ec847dc81, 0x70bd28, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$NFT_BATCH(r1, &(0x7f0000000980)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x294}, 0x1, 0x0, 0x0, 0x20000000}, 0x26000010) write(r2, &(0x7f0000000000)="0c000000010001", 0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000240)={r1, &(0x7f0000000040)=')--!\x00', 0x22000, &(0x7f00000000c0)={@_ha_fsid={[0x8, 0x2]}, {0x4, 0x83b3, 0xffffffff, 0x5}}, 0x0, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000180)}) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000002c0)={0x41, 0xf7, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10) bind$unix(r3, &(0x7f0000000540)=@file={0x0, '.\x00'}, 0x6e) socket(0x840000000002, 0x3, 0xff) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000007060108000000000000000000000000050001000600"], 0x1c}}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005401c02000008000640"], 0x6c}}, 0x0) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000000000000000800090004002000"], 0x34}, 0x1, 0x0, 0x0, 0x44851}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000903000000000000000000000d00000000000000000000000a02"], 0x0, 0x3e, 0x0, 0x1}, 0x28) r9 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r9, 0x0, 0xd1, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x3, 0x3}, 0x6) recvmmsg(r1, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=@newlink={0x64, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}, @IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x40008c0) 1.865196069s ago: executing program 0 (id=3311): socket$igmp6(0xa, 0x3, 0x2) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x200008c1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51b23}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000094}, 0x20040040) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x38, r7, 0x50dc85624ea6cf59, 0x70bd25, 0x1, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x0, 0x6, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c001}, 0x400c088) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xe8, r7, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x50}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x19}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xe}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x40}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff9}]}, 0xe8}, 0x1, 0x0, 0x0, 0x48000}, 0x4000084) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={r4, 0x3ff}, 0x8) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) shutdown(0xffffffffffffffff, 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) 1.77113298s ago: executing program 3 (id=3315): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x14, 0x14, 0x603, 0x0, 0x0, {0x11}}, 0x14}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000008000000000000000d0000008500000030000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000120000850000007300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1240}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x2a012, r2, 0x0) r3 = socket(0xa, 0x2400000001, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x6, 0x4, 0xffd, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r5, 0x58, &(0x7f0000003fc0)}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000000c0)={0x3, 'veth0_virt_wifi\x00', {0x4}, 0x8001}) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) 1.66412008s ago: executing program 0 (id=3317): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x23, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e00)={0x50, r3, 0xe27021e5f05bd539, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_SCAN_SSIDS={0x28, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0x4}, {0x4}, {0xf, 0x0, @random="1f73f4bfda97843c9ddacc"}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 1.663778643s ago: executing program 3 (id=3318): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async, rerun: 64) unshare(0x26020480) (async, rerun: 64) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000063018c000000000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.626200489s ago: executing program 1 (id=3319): r0 = socket(0x10, 0x3, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x8000, 0x7, 0x9, 0xfbffffff, 0xf}) (async, rerun: 32) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, &(0x7f0000001700)) (async, rerun: 64) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001a006da800000000000500001c140000000008"], 0x24}}, 0x0) 1.616220482s ago: executing program 0 (id=3320): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0xec, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x5}, {0xffe0, 0xffff}, {0x1, 0xffe0}}, [@TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xb8, 0x2, 0x7, 0x5, 0x2, 0x2, 0x7, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0xb0, 0x1, 0x5, 0xff, 0x1, 0x7ff, 0x2, 0x7}}, {0x12, 0x2, [0x2, 0x6, 0x9, 0x2, 0x2, 0x59, 0x3]}}, {{0x1c, 0x1, {0x9, 0x0, 0x7, 0x0, 0x0, 0x8, 0x5000, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x8, 0x1, 0x0, 0x80000001, 0x2, 0x4, 0x200, 0x7}}, {0x12, 0x2, [0x8, 0x3, 0x4f, 0xa1, 0x1, 0x2, 0x400]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4002c640}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x80000000}, @qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40001}, 0x8082) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x40d, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x600b2, 0x40c01}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xfffffff8}, @IFLA_MACVLAN_FLAGS={0x6}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x10001}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8840}, 0x0) 1.507442334s ago: executing program 0 (id=3322): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r3, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r4, 0x0, 0xffffffff000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x21, 0x4, 0x1, 0x80000001, 0x1000, r1, 0x8000, '\x00', r2, r4, 0x3, 0x5, 0x4}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a05000000000000000000020000000900010073797a30000000000900020073797a300000000014000000020a0101000000000000064120c5000314000000110001"], 0x68}}, 0x0) 1.472969268s ago: executing program 1 (id=3323): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x4e22, @multicast1}, {0x306, @random="177965369cc1"}, 0x20, {0x2, 0x4e22, @multicast2}, 'macvlan1\x00'}) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r3, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000012c0)={0x0, 0x7, 0x47a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x47a}, 0x39) ioctl$NS_GET_OWNER_UID(r1, 0xb704, 0x0) 1.400485597s ago: executing program 1 (id=3324): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="1400000010000300200000000000000005ff070a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020100020073797a390000000008000a40fffffffc0c00098008000140000000020800084000000001140000001100010000000000000000010900000a"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c0001800600010058"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800b00010069703667726500003c00028004001200060003001800000008000d000d000000050008000000000014000700ff0a0000000000000000000000000001060018000b0000009fcca25b39", @ANYRES16=r4, @ANYRES8=r0, @ANYRESHEX=r1], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.370757286s ago: executing program 2 (id=3325): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xe3071, 0xffffffffffffffff, 0x2fd15000) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)=""/90, &(0x7f0000000080)=0x5a) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x1000) (async, rerun: 32) r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @private=0xa010100, {[@rr={0x7, 0x3, 0x6a}, @generic={0x44, 0x4, "0675"}]}}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x0, @loopback, @multicast1}}}}}}, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) syz_emit_ethernet(0x92, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x5c, 0x3a, 0x0, @remote, @local, {[], @dest_unreach={0x1, 0x3, 0x0, 0xf2, '\x00', {0x4, 0x6, '\x00', 0xd, 0x33, 0xff, @local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, [@hopopts={0x2b, 0x3, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x18}, @enc_lim={0x4, 0x1, 0x80}, @jumbo={0xc2, 0x4, 0x10001}, @jumbo={0xc2, 0x4, 0x2}]}], "bd33a7ae"}}}}}}}, 0x0) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e20, 0x80000, @loopback, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@hopopts={{0x18, 0x29, 0x36, {0x33}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x3b}}}], 0x30}, 0x1400c0c0) (async, rerun: 64) getsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0xa}}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @loopback}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x64}}, 0x2000000) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) 1.223909509s ago: executing program 2 (id=3326): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0, 0x80000000}, 0x50) 1.205761507s ago: executing program 2 (id=3327): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x3c}}, 0x20004055) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x3}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000020000100dcec51ecfbdbdf2502101004090000060620010008000200ac14142a08000b0006000000080001"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket$inet_sctp(0x2, 0x1, 0x84) 1.201314274s ago: executing program 1 (id=3328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000"], 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) syz_genetlink_get_family_id$fou(&(0x7f0000000080), r3) close(r2) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x20040894) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000000000000850000007100000095"], &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0x1d) socket$kcm(0xa, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYRESDEC=r1, @ANYRES64=r10, @ANYRESOCT=r1, @ANYRESDEC=0x0, @ANYRES8=r8, @ANYRESOCT=r1, @ANYRESOCT=r8, @ANYBLOB="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", @ANYBLOB="bc5ce6558e03323a5016c91c441902b13a90f37cb7be02cb01ed17991d660e9ef5a678721edab67fca0a84ce410838493d65ce7ffc99c00872221e1ecce02b9640e1014847fa35609c675e686845c5ac5abb8880079c1324d4ffccf7e144aa13507c184e056140b2545dfdbb7277e3e2f650c8d77510a13969e90be3a38050c5c8f34fe315b8737c3410450957f8e836abe58d860a7ab0802513bebdc03019506cea61d931ba82937c3aa28645fe7cc8e8cc538657e27863f3b22f7be4dee68f27b8a203", @ANYRES64], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) r11 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r11, 0x29, 0x2, &(0x7f0000000380)=0x8, 0x4) sendmmsg$inet6(r11, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e1e, 0x3, @empty, 0xfff}, 0x1c, 0x0}}], 0x1, 0x60080004) recvmmsg(r11, &(0x7f0000003080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=""/16, 0x10}, 0x25a5}], 0x1, 0x40002142, 0x0) select(0xe, 0x0, 0x0, 0x0, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.095121374s ago: executing program 2 (id=3330): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x23, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e00)={0x54, r3, 0xe27021e5f05bd539, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_SCAN_SSIDS={0x2c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0x4}, {0x4}, {0x4}, {0xf, 0x0, @random="1f73f4bfda97843c9ddacc"}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 1.030980258s ago: executing program 2 (id=3331): socket(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r4 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x44}, @in=@local, 0x0, 0x56, 0x4e23, 0x0, 0x2, 0x0, 0x80, 0x88}, {0x0, 0x0, 0x100000000000, 0x2, 0xfffffffffffffff6, 0x1002000000, 0x1, 0xfffffffffffffffd}, {0x1ff, 0x800000000000, 0x4, 0xffffffffffffff7f}, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@local, 0x0, 0x2b}, 0x2, @in=@remote, 0x3504, 0x4, 0x0, 0x0, 0xffffffff, 0x6, 0x4}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) syz_emit_ethernet(0x131, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r6, &(0x7f0000000940)={@val={0x0, 0x6006}, @val={0x1, 0x5, 0x7, 0x3, 0x80, 0x6}, @ipv6=@udp={0x1, 0x6, "019e5c", 0x264, 0x11, 0x0, @private0, @mcast1, {[@fragment={0x18, 0x0, 0x5, 0x0, 0x0, 0x1c, 0x64}, @fragment={0x2, 0x0, 0x9b, 0x1, 0x0, 0x8, 0x66}, @srh={0x11, 0x6, 0x4, 0x3, 0x9, 0x10, 0x20, [@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @private2, @dev={0xfe, 0x80, '\x00', 0x26}]}, @srh={0x4, 0x8, 0x4, 0x4, 0x9, 0x0, 0x8, [@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @loopback]}, @fragment={0x2c, 0x0, 0x0, 0x1, 0x0, 0xa, 0x67}, @dstopts={0x5aee1622bcdd567a, 0x18, '\x00', [@hao={0xc9, 0x10, @local}, @jumbo={0xc2, 0x4, 0x1}, @generic={0x2, 0xa9, "2e16b7af13603b3bb6a4ffc0385b0a051370b4a26e86b198ea914add5df86ba947ed3cdc344888f04436fe58fe6d6d0330e8c065333c7f83abb1e252ee6bf250d0bd994ee5042ae01b7b48f0a47b700459aaa6d1fb45a94cd0e3c2ced65b200513c2f7aeb148b44556ccdb3af8c15b3be2c66cf66159b6c5037d6c9cf67c8394766e4a59c59e5c73dc7b7c69b906e4d49079ac8c4f338feb2c097d74cec70b4e7b4902c6364b97e559"}]}, @fragment={0x3a, 0x0, 0xb, 0x0, 0x0, 0x0, 0x67}, @srh={0x3b, 0xa, 0x4, 0x5, 0x4, 0x60, 0x3ff, [@private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @local, @empty, @rand_addr=' \x01\x00']}], {0x4e20, 0x4e21, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "c34a86ef7763a2601102614a9e4b1192bcd32fbcea1a872d63085fadedbf9c2e", "c03f61a15f20e7abc255b073a147e603f851cd7657a199d8ddcaa4fb11905a6f603744f663d9285a578b6cf483588e44", "e25dd29aa13005896c3015d7c60d2c49926f85ebd42a9ac7f9f9b7c2", {"b5d80b45195d71a6235ef0f3f77badc8", "4a181e2df61b4a44ecaeb8c0a0c7f9ae"}}}}}}, 0x29a) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000200030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001cd3e1526f4dfca6e4af067222ad9050748eac285819ce66cc48d8d70ae92160309b91c89de11820b49b831e5375462638c0a652349e5873cc5a827db3c52fe6fa93b84c18698d71731c421a57b80a0d0c61bd4f12d175fc80ce23af3c181613d2aa8d03bda97b0f86077"], 0x7c}, 0x1, 0x0, 0x0, 0x4c0c4}, 0x4048000) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x6}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r9) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) 984.087816ms ago: executing program 4 (id=3332): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) (async) write(r0, 0x0, 0x0) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000140)={0xfffffffffffffffc, 0x23000, 0x1000, 0x8, 0x2}, 0x20) getsockopt$bt_hci(r2, 0x84, 0x1, 0x0, 0x0) (async) shutdown(r4, 0x1) 983.707068ms ago: executing program 1 (id=3333): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x931766f6159ea5d5) (async) shutdown(0xffffffffffffffff, 0x1) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0x1f0, 0x1f0, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x7, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) (async) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e", @ANYBLOB="a5e6"], 0x35c}, 0x1, 0x0, 0x0, 0x400a800}, 0x4010) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf25030000005800118044000400200001000a004eff01000000000000000000000000000101000000200002000a004e2200000004fc010000000000000000cdf90000000000008d0100000d0001007564703a73797a30000000000000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x810) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000b0000000b00000000b000000020e000000000007000000000100000000000011020000000500000004000000000000120500000000000000000000030000000001000000030000000405000000050000000c000000010000000f00000000000008020000000b00000005000085820200000700000004000000010000000a000000010000000400000009000000010000000000010008000000020000000180000002000000030000000100000000002e00612e61302e2e00"/211], &(0x7f0000000300)=""/184, 0xd3, 0xb8, 0x1, 0x6, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x6, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000001c40)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, r4}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) r5 = socket$kcm(0x10, 0x2, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000000)={0x0, 0x100000, 0x1800, 0x1}, 0x20) (async) recvmsg(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000000) (async) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) socket(0x1e, 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) 965.318798ms ago: executing program 3 (id=3334): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="ea3a50e5771bf7ad44e3031413f58935ebeb90ae641e78235f1ae0f8504186fa0f705fd4c3b7084f2a88208768172cf1bfcfee020f"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x5, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4, r3}, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x10, {0x0, 0x0, 0x4a00, 0x0, 0x8020}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x840) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002780)={0x30, 0x40, 0x107, 0x70bd2d, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x1c, 0x1c2, 0x0, 0x1, [@nested={0x18, 0x9, 0x0, 0x1, [@typed={0x12, 0x91, 0x0, 0x0, @str='/dev/qrtr-tun\x00'}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r7, 0x29, 0x11, 0x0, &(0x7f00000000c0)) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080028bd7000ffdbdf250200000008000700ac1414aa08000800ac1e0101080202000a00000014000500fc000900000000000000000000000001"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d9a", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, '\x00'/12}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x2, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4610001394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "00000000000000000000000200000000000000000000000000008879e66485201a0015ca837400000000000000000000001c0000000000"}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x1f, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000004c0)='pimreg0\x00', 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r10 = socket(0x10, 0x803, 0x0) ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000380)={0x5, "9b2bfd996c0be5abb43cb3b0dbe99f3a7926b4b8e032ee19cb719817a88a825ea1816942b4e9322bc95288a463141e5ac63db6b8a145be31b7616743ed728bb8f3bae936e132cf4d5bf66ad646ff4ccef51ec743af93382a56162bbefd23448915341fcaf41f1d0862316ab3dd7d1de6f02814ca5f5c03d29189749fef86a658"}) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x210}]}, 0x34}}, 0x8000) 811.848192ms ago: executing program 1 (id=3335): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1000}) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x3) socket$inet6(0xa, 0x80002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x14, 0x25, 0x319, 0x70bd26, 0x8000, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x24044004) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000002e00090027bd700000000000040000003438a1a0d36a96d3e7fb01c1fc31b133d30cafdf"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) ioctl$PPPIOCSDEBUG(r2, 0x40047440, 0x0) write$ppp(r2, &(0x7f0000000480)="1e", 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000003c0)={0x0, r2, 0x7, 0xfffffffffffffffd, 0x1, 0x2}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/62, 0x1338000, 0x800}, 0x20) 548.051056ms ago: executing program 4 (id=3336): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'ip6tnl0\x00', @random="011affffffff"}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020020980000200012800b0001006d61637365630000100002800c0005000300000100c2800008000500", @ANYRES32=r3, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 532.712028ms ago: executing program 0 (id=3337): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffe0, &(0x7f00000000c0)=[@rights={{0x14}}], 0x18}, 0x103) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0xff07, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) 462.859386ms ago: executing program 4 (id=3338): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1, 0x40}, 0x20) r3 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000002900), 0x0, 0x10) read$alg(r3, &(0x7f0000001480)=""/201, 0xc9) 332.042157ms ago: executing program 4 (id=3339): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9219a1e18c488e827c1bbec", 0x89}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001ec0)={0xb8, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x88, 0x8, 0x0, 0x1, [{0x84, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x5c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="0645701e0cb7fc72060ea1252c2ed3afaa532fb9a6a0a525508fddc0db8e7f9aa18f5dfaec585c642eea619c45b319cba0fbc753a6d061c213b5df1cbf5d9027e22691c114a818b75e41c918", @ANYRES16=r4, @ANYBLOB="010000000000fcffffff010000000000000009410000004c00180000000062726f6164636173742d6c696e6b00"/98], 0x68}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000640)={0xa, 0x4e20, 0x81, @mcast1, 0x64}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9219a1e18c488e827c1bbec", 0x89}], 0x1}, 0x0) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) (async) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001ec0)={0xb8, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x88, 0x8, 0x0, 0x1, [{0x84, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x5c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="0645701e0cb7fc72060ea1252c2ed3afaa532fb9a6a0a525508fddc0db8e7f9aa18f5dfaec585c642eea619c45b319cba0fbc753a6d061c213b5df1cbf5d9027e22691c114a818b75e41c918", @ANYRES16=r4, @ANYBLOB="010000000000fcffffff010000000000000009410000004c00180000000062726f6164636173742d6c696e6b00"/98], 0x68}}, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) bind$inet6(r5, &(0x7f0000000640)={0xa, 0x4e20, 0x81, @mcast1, 0x64}, 0x1c) (async) 194.647067ms ago: executing program 0 (id=3340): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=@delchain={0x4c0, 0x65, 0x2, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0x0, 0x1}, {0x0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x484, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x9c, 0x1, [@m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x60, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x2d, 0x6, "726786f30e509174574dc37f3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaed"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_ACT={0x3b4, 0x1, [@m_ctinfo={0x100, 0x4, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x53}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x7f, 0x10000000, 0x82c}}]}, {0xb1, 0x6, "c14309d56e11f3e88ad36b866a06cff47631fe31f29c2d83a2e6f0bf13045227d5cfc3c4f57b9a903cf86c567461f60a0fb69f562613042765a016443f0181bfeba7e917511c20f8585f40c15cc948ecdd08e5acfddde4c4d1eeb8e4156045960e71ed491970a569097578137069861cf0a28baddf976ebf5e96eca138cadcea7bfb921158875a49e4975a5dbb3ab54f13ee0f5254fe6f752f120208ad930afb01c2417b4953f4774567f9bbf1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x2}}}}, @m_skbmod={0x78, 0x4, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x5, 0x6, "cc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x178, 0x1b, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xff, 0x1, 0xffffffffffffffff, 0x0, 0xefb}, @loopback, @empty, 0xffffff00, 0x800}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x4, 0x6, 0x8, 0x9}, @local, @dev={0xac, 0x14, 0x14, 0x1c}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x357a, 0x9, 0x7, 0x101, 0x5}, @broadcast, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5f2, 0x40, 0x5, 0x1, 0x1}, @broadcast, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x7, 0x20000000, 0x7, 0x59c3}, @loopback, @loopback, 0xff}}]}, {0x85, 0x6, "eef24a41a52f4314740d880a9749ccbff0e34c74cfcac1e63977a597552daff459d49bffeac63ea994857207934fd2d00f52f25f0f3d8c80b3a218a170d8b1961a361663d049269537cb537e3789e52bb3db1eec99b6cdd8dd022491e57495f8bd3687340df10a1e43f1a2790d3910c094f2c7203385622c8498933c3e883b83b3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0xc0, 0x7, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_TYPE={0x6, 0x5, 0x80}]}, {0x53, 0x6, "daa5b54b8fd0c24420f4f8780058ad50ee4150c6fee394f5a95d4098188bd40737585fc8ac8e2f83499abc4488a7f9fe845b86c9e4527e6c8e6501b48e035fcfdf0cbd8adc487c01d1152c7b22124c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x4c0}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) socket$kcm(0x10, 0x2, 0x10) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) r1 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ee527e004c3c0000000000000000000000000000000100ff02000000000000000000000000000133"], 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) 129.825199ms ago: executing program 4 (id=3341): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x23, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e00)={0x54, r3, 0xe27021e5f05bd539, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_SCAN_SSIDS={0x2c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0x4}, {0x4}, {0x4}, {0xf, 0x0, @random="1f73f4bfda97843c9ddacc"}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 0s ago: executing program 4 (id=3342): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x2) shutdown(r1, 0x0) connect$unix(r1, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = accept(r2, 0x0, 0x0) sendmsg$can_raw(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=@can={{0x0, 0x1, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "2e84fb84f52a2292"}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x884) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xd) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r4, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32=r4, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48890}, 0x4000010) kernel console output (not intermixed with test programs): l_pcp:4kB free_cma:0kB [ 291.194891][T13215] lowmem_reserve[]: 0 0 0 0 0 [ 291.199987][T13215] Node 1 Normal free:3935808kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 291.260980][T13215] lowmem_reserve[]: 0 0 0 0 0 [ 291.261435][T13245] netlink: 'syz.3.1975': attribute type 13 has an invalid length. [ 291.273930][T13215] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 291.292783][T13215] Node 0 DMA32: 3522*4kB (UME) 3137*8kB (UME) 1716*16kB (UME) 308*32kB (UME) 197*64kB (UME) 131*128kB (UM) 100*256kB (UME) 79*512kB (UM) 39*1024kB (U) 32*2048kB (UME) 209*4096kB (UM) = 1133456kB [ 291.319601][T13215] Node 0 Normal: 1*4kB (U) 0*8kB [ 291.340811][T13252] __nla_validate_parse: 3 callbacks suppressed [ 291.340829][T13252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1978'. [ 291.363304][T13215] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 291.382708][T13215] Node 1 Normal: 2*4kB (UM) 3*8kB (UM) 12*16kB (UM) 5*32kB (UM) 7*64kB (UM) 8*128kB (UM) 5*256kB (UM) 5*512kB (UM) 4*1024kB (UM) 1*2048kB (U) 958*4096kB (M) = 3935808kB [ 291.408699][T13215] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 291.422615][T13215] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 291.450467][T13215] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 291.463384][T13215] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 291.473091][T13215] 44787 total pagecache pages [ 291.477806][T13215] 0 pages in swap cache [ 291.481975][T13215] Free swap = 124996kB [ 291.486285][T13215] Total swap = 124996kB [ 291.490471][ T8009] lo speed is unknown, defaulting to 1000 [ 291.490671][T13215] 2097051 pages RAM [ 291.496459][T13255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1975'. [ 291.521062][T13245] netlink: 'syz.3.1975': attribute type 2 has an invalid length. [ 291.524933][T13215] 0 pages HighMem/MovableOnly [ 291.529381][T13245] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1975'. [ 291.554346][T13215] 427122 pages reserved [ 291.571029][T13215] 0 pages cma reserved [ 291.594821][T13245] dummy0 (unregistering): left promiscuous mode [ 291.658117][T13274] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1984'. [ 291.674193][T13278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1985'. [ 291.687741][T13278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1985'. [ 291.698787][T13278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1985'. [ 291.710060][T13278] netlink: 'syz.4.1985': attribute type 22 has an invalid length. [ 291.718200][T13278] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1985'. [ 291.776521][T13283] batadv_slave_1: entered promiscuous mode [ 291.872318][T13295] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1990'. [ 291.977880][T13298] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1991'. [ 292.044787][T13302] sctp: [Deprecated]: syz.4.1993 (pid 13302) Use of int in max_burst socket option. [ 292.044787][T13302] Use struct sctp_assoc_value instead [ 292.104327][T13306] netlink: 'syz.0.1994': attribute type 30 has an invalid length. [ 292.118357][T13306] netlink: 'syz.0.1994': attribute type 30 has an invalid length. [ 292.672802][T13359] ip6gre3: entered promiscuous mode [ 292.678103][T13359] ip6gre3: entered allmulticast mode [ 292.685558][T13356] tipc: Enabled bearer , priority 0 [ 292.693703][T13356] syzkaller0: entered promiscuous mode [ 292.699201][T13356] syzkaller0: entered allmulticast mode [ 292.715045][T13356] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 292.737707][T13357] tipc: Resetting bearer [ 292.747869][T13357] tipc: Disabling bearer [ 292.839082][T13371] syzkaller0: entered promiscuous mode [ 292.845329][T13371] syzkaller0: entered allmulticast mode [ 293.100326][T13384] netlink: 'syz.2.2017': attribute type 27 has an invalid length. [ 293.150725][T13388] netlink: 'syz.4.2020': attribute type 3 has an invalid length. [ 293.500767][T13419] syzkaller1: entered promiscuous mode [ 293.512193][T13420] block nbd0: not configured, cannot reconfigure [ 293.517400][T13419] syzkaller1: entered allmulticast mode [ 293.537797][T13419] ip6gre0: Caught tx_queue_len zero misconfig [ 293.546232][T13419] sch_tbf: burst 0 is lower than device ip6gre0 mtu (32769) ! [ 293.614604][T13427] tc_dump_action: action bad kind [ 293.755600][T13442] netlink: 'syz.3.2036': attribute type 5 has an invalid length. [ 294.140008][T13479] lo speed is unknown, defaulting to 1000 [ 294.240425][T13410] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 294.267162][T13410] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 294.334583][ T8200] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.419174][ T8200] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.433109][T13499] syzkaller0: entered promiscuous mode [ 294.438641][T13499] syzkaller0: entered allmulticast mode [ 294.447111][ T8198] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.472396][T13512] syzkaller0: entered promiscuous mode [ 294.483660][T13512] syzkaller0: entered allmulticast mode [ 294.490461][ T8198] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.523447][T13512] tipc: Enabled bearer , priority 0 [ 294.531309][T13511] tipc: Resetting bearer [ 294.555711][T13511] tipc: Disabling bearer [ 294.822022][T13545] netlink: 'syz.2.2067': attribute type 1 has an invalid length. [ 294.921495][T13558] syzkaller0: entered promiscuous mode [ 294.927839][T13558] syzkaller0: entered allmulticast mode [ 294.939822][T13558] tipc: Enabled bearer , priority 0 [ 294.949200][T13557] tipc: Resetting bearer [ 294.970620][T13557] tipc: Disabling bearer [ 295.122204][T13569] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 295.346479][T13604] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 295.428991][T13609] syzkaller0: entered promiscuous mode [ 295.459797][T13609] syzkaller0: entered allmulticast mode [ 295.490990][T13615] tipc: Enabled bearer , priority 0 [ 295.505003][T13614] 8021q: VLANs not supported on gre0 [ 295.517223][T13608] tipc: Resetting bearer [ 295.551501][T13608] tipc: Disabling bearer [ 295.635248][T13619] netlink: 'syz.2.2092': attribute type 8 has an invalid length. [ 295.654419][T13619] sch_fq: defrate 0 ignored. [ 295.746224][T13629] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 295.754478][T13629] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 295.764573][T13629] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 295.783140][T13629] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 295.805175][T13629] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 295.831869][T13629] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 295.855692][T13629] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 295.880126][T13629] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 295.915261][T13629] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 295.926482][T13635] sctp: [Deprecated]: syz.2.2097 (pid 13635) Use of int in maxseg socket option. [ 295.926482][T13635] Use struct sctp_assoc_value instead [ 295.940300][T13629] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 296.038257][T13649] 8021q: VLANs not supported on gre0 [ 296.770711][T13702] __nla_validate_parse: 30 callbacks suppressed [ 296.770730][T13702] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2120'. [ 296.797412][T13702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2120'. [ 296.820559][T13703] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2120'. [ 297.083177][T13713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2125'. [ 297.110995][T13713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2125'. [ 297.122766][T13721] FAULT_INJECTION: forcing a failure. [ 297.122766][T13721] name failslab, interval 1, probability 0, space 0, times 0 [ 297.153903][T13721] CPU: 0 UID: 0 PID: 13721 Comm: syz.1.2128 Not tainted syzkaller #0 PREEMPT(full) [ 297.153925][T13721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 297.153933][T13721] Call Trace: [ 297.153939][T13721] [ 297.153945][T13721] dump_stack_lvl+0xe8/0x150 [ 297.153966][T13721] should_fail_ex+0x40c/0x560 [ 297.153988][T13721] should_failslab+0xa8/0x100 [ 297.154010][T13721] __kmalloc_noprof+0xe8/0x750 [ 297.154029][T13721] ? lock_release+0x4b/0x3c0 [ 297.154050][T13721] ? kobject_get_path+0xc5/0x2f0 [ 297.154071][T13721] ? __kfree_rcu_sheaf+0x1ad/0x5d0 [ 297.154091][T13721] kobject_get_path+0xc5/0x2f0 [ 297.154114][T13721] kobject_rename+0x194/0x500 [ 297.154135][T13721] ? __pfx_kobject_rename+0x10/0x10 [ 297.154156][T13721] ? sysfs_rename_link_ns+0x178/0x1b0 [ 297.154177][T13721] device_rename+0x15d/0x210 [ 297.154195][T13721] cfg80211_dev_rename+0x131/0x200 [ 297.154214][T13721] nl80211_set_wiphy+0x2cc/0x3050 [ 297.154235][T13721] ? __rtnl_unlock+0xc8/0xf0 [ 297.154250][T13721] ? netdev_run_todo+0x1045/0x10d0 [ 297.154264][T13721] ? nl80211_pre_doit+0x5e/0x890 [ 297.154281][T13721] ? __pfx_netdev_run_todo+0x10/0x10 [ 297.154297][T13721] ? __pfx_nl80211_set_wiphy+0x10/0x10 [ 297.154314][T13721] ? __nla_parse+0x40/0x60 [ 297.154334][T13721] ? nl80211_pre_doit+0x53d/0x890 [ 297.154351][T13721] genl_family_rcv_msg_doit+0x233/0x340 [ 297.154372][T13721] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 297.154395][T13721] ? bpf_lsm_capable+0x9/0x20 [ 297.154409][T13721] ? security_capable+0x7e/0x2c0 [ 297.154432][T13721] genl_rcv_msg+0x614/0x7a0 [ 297.154451][T13721] ? __pfx_genl_rcv_msg+0x10/0x10 [ 297.154467][T13721] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 297.154481][T13721] ? __pfx_nl80211_set_wiphy+0x10/0x10 [ 297.154496][T13721] ? __pfx_nl80211_post_doit+0x10/0x10 [ 297.154511][T13721] ? __netlink_lookup+0xc6/0x8b0 [ 297.154524][T13721] ? rcu_is_watching+0x15/0xb0 [ 297.154544][T13721] netlink_rcv_skb+0x226/0x4a0 [ 297.154565][T13721] ? __pfx_genl_rcv_msg+0x10/0x10 [ 297.154582][T13721] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 297.154608][T13721] ? down_read+0x2be/0x330 [ 297.154630][T13721] genl_rcv+0x28/0x40 [ 297.154652][T13721] netlink_unicast+0x7bb/0x940 [ 297.154675][T13721] netlink_sendmsg+0x813/0xb40 [ 297.154699][T13721] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.154722][T13721] ? aa_sock_msg_perm+0xf1/0x1b0 [ 297.154736][T13721] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 297.154754][T13721] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.154775][T13721] ____sys_sendmsg+0x9b9/0xa20 [ 297.154800][T13721] ? __pfx_____sys_sendmsg+0x10/0x10 [ 297.154821][T13721] ? lock_release+0x4b/0x3c0 [ 297.154841][T13721] ? import_iovec+0x73/0xa0 [ 297.154862][T13721] ___sys_sendmsg+0x2a5/0x360 [ 297.154881][T13721] ? rcu_is_watching+0x15/0xb0 [ 297.154896][T13721] ? get_pid_task+0x20/0x1f0 [ 297.154911][T13721] ? __pfx____sys_sendmsg+0x10/0x10 [ 297.154933][T13721] ? rcu_is_watching+0x15/0xb0 [ 297.154959][T13721] ? __fget_files+0x2a/0x420 [ 297.154976][T13721] ? __fget_files+0x3a2/0x420 [ 297.154996][T13721] __x64_sys_sendmsg+0x1b1/0x290 [ 297.155017][T13721] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 297.155043][T13721] ? rcu_is_watching+0x15/0xb0 [ 297.155059][T13721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.155075][T13721] do_syscall_64+0x174/0x580 [ 297.155093][T13721] ? trace_irq_disable+0x3b/0x140 [ 297.155113][T13721] ? clear_bhb_loop+0x40/0x90 [ 297.155129][T13721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.155144][T13721] RIP: 0033:0x7fe9add9ce59 [ 297.155159][T13721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.155172][T13721] RSP: 002b:00007fe9aec75028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 297.155189][T13721] RAX: ffffffffffffffda RBX: 00007fe9ae015fa0 RCX: 00007fe9add9ce59 [ 297.155201][T13721] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 297.155211][T13721] RBP: 00007fe9aec75090 R08: 0000000000000000 R09: 0000000000000000 [ 297.155220][T13721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.155230][T13721] R13: 00007fe9ae016038 R14: 00007fe9ae015fa0 R15: 00007ffe544de5a8 [ 297.155248][T13721] [ 297.701278][T13740] IPVS: set_ctl: invalid protocol: 3 172.20.20.45:20000 [ 297.719404][T13734] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2125'. [ 297.734979][T13732] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 297.846415][T13754] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2138'. [ 297.879992][T13749] xt_CT: No such helper "snmp_trap" [ 297.948534][T13766] netlink: 'syz.2.2139': attribute type 10 has an invalid length. [ 298.054732][T13775] lo speed is unknown, defaulting to 1000 [ 298.249145][T13797] netlink: 'syz.2.2147': attribute type 1 has an invalid length. [ 298.296633][T13804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.359113][T13804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.454951][ T4953] block nbd3: Possible stuck request ffff8880277fe000: control (read@0,1024B). Runtime 30 seconds [ 298.465696][ T4953] block nbd3: Possible stuck request ffff8880277fe1c0: control (read@1024,1024B). Runtime 30 seconds [ 298.477309][ T4953] block nbd3: Possible stuck request ffff8880277fe380: control (read@2048,1024B). Runtime 30 seconds [ 298.488693][ T4953] block nbd3: Possible stuck request ffff8880277fe540: control (read@3072,1024B). Runtime 30 seconds [ 298.729471][T13842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.745412][T13846] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2162'. [ 298.765181][T13842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.794950][T13846] bond8: entered promiscuous mode [ 298.802874][T13846] 8021q: adding VLAN 0 to HW filter on device bond8 [ 298.938357][T13853] syzkaller0: entered promiscuous mode [ 298.952481][T13853] syzkaller0: entered allmulticast mode [ 299.040292][T13857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2165'. [ 299.066366][T13857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2165'. [ 299.310802][T13875] SET target dimension over the limit! [ 299.531711][T13891] netlink: 'syz.2.2178': attribute type 11 has an invalid length. [ 300.185171][T13948] bond4: option ad_actor_sys_prio: invalid value (0) [ 300.192183][T13948] bond4: option ad_actor_sys_prio: allowed values 1 - 65535 [ 300.201885][T13948] bond4 (unregistering): Released all slaves [ 300.587040][T13984] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 300.643414][T13980] bond14: option updelay: invalid value (18446744073709518847) [ 300.651080][T13980] bond14: option updelay: allowed values 0 - 2147483647 [ 300.661608][T13980] bond14 (unregistering): Released all slaves [ 300.696807][T13990] netlink: 'syz.2.2209': attribute type 1 has an invalid length. [ 300.721702][T13990] bond14: entered promiscuous mode [ 300.730703][T13990] bond14: entered allmulticast mode [ 300.736663][T13990] 8021q: adding VLAN 0 to HW filter on device bond14 [ 300.759101][T13990] netlink: 'syz.2.2209': attribute type 4 has an invalid length. [ 300.857461][T14011] netlink: 'syz.3.2213': attribute type 1 has an invalid length. [ 300.901500][T14011] bond5: entered promiscuous mode [ 300.919816][T14011] bond5: entered allmulticast mode [ 300.940248][T14011] 8021q: adding VLAN 0 to HW filter on device bond5 [ 300.960031][T14020] erspan2: entered allmulticast mode [ 301.116330][T14041] netlink: 'syz.3.2224': attribute type 1 has an invalid length. [ 301.166047][T14048] netlink: 'syz.0.2226': attribute type 1 has an invalid length. [ 301.243323][T14048] 8021q: adding VLAN 0 to HW filter on device bond14 [ 301.965805][T14081] netlink: 'syz.2.2237': attribute type 1 has an invalid length. [ 301.990571][T14074] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 302.229899][T14112] netlink: 'syz.0.2246': attribute type 1 has an invalid length. [ 302.244207][T14116] __nla_validate_parse: 6 callbacks suppressed [ 302.244222][T14116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2243'. [ 303.011875][T14145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2255'. [ 305.108705][T14097] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 305.120137][T14131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2251'. [ 305.199679][T14154] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 305.234194][T14154] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 305.362630][T14176] netlink: 'syz.3.2265': attribute type 1 has an invalid length. [ 305.441060][T14176] 8021q: adding VLAN 0 to HW filter on device bond6 [ 305.465836][T14188] FAULT_INJECTION: forcing a failure. [ 305.465836][T14188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.482621][T14188] CPU: 0 UID: 0 PID: 14188 Comm: syz.4.2268 Not tainted syzkaller #0 PREEMPT(full) [ 305.482643][T14188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 305.482652][T14188] Call Trace: [ 305.482659][T14188] [ 305.482665][T14188] dump_stack_lvl+0xe8/0x150 [ 305.482688][T14188] should_fail_ex+0x40c/0x560 [ 305.482707][T14188] _copy_from_user+0x2d/0xb0 [ 305.482727][T14188] __sys_bpf+0x229/0x950 [ 305.482748][T14188] ? __pfx___sys_bpf+0x10/0x10 [ 305.482773][T14188] ? ksys_write+0x242/0x270 [ 305.482795][T14188] ? __pfx_ksys_write+0x10/0x10 [ 305.482815][T14188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.482831][T14188] __x64_sys_bpf+0x7c/0x90 [ 305.482849][T14188] do_syscall_64+0x174/0x580 [ 305.482869][T14188] ? trace_irq_disable+0x3b/0x140 [ 305.482888][T14188] ? clear_bhb_loop+0x40/0x90 [ 305.482905][T14188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.482919][T14188] RIP: 0033:0x7f05c679ce59 [ 305.482934][T14188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.482947][T14188] RSP: 002b:00007f05c76e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 305.482965][T14188] RAX: ffffffffffffffda RBX: 00007f05c6a15fa0 RCX: 00007f05c679ce59 [ 305.482977][T14188] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 305.482987][T14188] RBP: 00007f05c76e5090 R08: 0000000000000000 R09: 0000000000000000 [ 305.482997][T14188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.483006][T14188] R13: 00007f05c6a16038 R14: 00007f05c6a15fa0 R15: 00007ffe43ed8138 [ 305.483024][T14188] [ 305.654823][T14182] bond6: (slave gretap3): making interface the new active one [ 305.665109][T14182] bond6: (slave gretap3): Enslaving as an active interface with an up link [ 305.679924][T14183] batadv0: entered promiscuous mode [ 305.685523][T14183] net_ratelimit: 56 callbacks suppressed [ 305.685535][T14183] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 305.708871][T14190] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 305.878193][T14211] netlink: 'syz.1.2276': attribute type 1 has an invalid length. [ 305.971775][T14224] FAULT_INJECTION: forcing a failure. [ 305.971775][T14224] name failslab, interval 1, probability 0, space 0, times 0 [ 305.976645][T14225] syzkaller0: entered promiscuous mode [ 305.990129][T14225] syzkaller0: entered allmulticast mode [ 306.003255][T14224] CPU: 0 UID: 0 PID: 14224 Comm: syz.0.2281 Not tainted syzkaller #0 PREEMPT(full) [ 306.003286][T14224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 306.003295][T14224] Call Trace: [ 306.003301][T14224] [ 306.003307][T14224] dump_stack_lvl+0xe8/0x150 [ 306.003329][T14224] should_fail_ex+0x40c/0x560 [ 306.003348][T14224] should_failslab+0xa8/0x100 [ 306.003372][T14224] __kmalloc_cache_node_noprof+0x8c/0x690 [ 306.003392][T14224] ? unwind_next_frame+0x8f/0x2550 [ 306.003410][T14224] ? __get_vm_area_node+0x136/0x300 [ 306.003430][T14224] __get_vm_area_node+0x136/0x300 [ 306.003446][T14224] ? is_bpf_text_address+0x26/0x2b0 [ 306.003469][T14224] __vmalloc_node_range_noprof+0x358/0x1730 [ 306.003488][T14224] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 306.003506][T14224] ? lock_release+0x4b/0x3c0 [ 306.003526][T14224] ? lock_release+0x4b/0x3c0 [ 306.003548][T14224] ? is_bpf_text_address+0x292/0x2b0 [ 306.003573][T14224] ? lock_release+0x4b/0x3c0 [ 306.003592][T14224] ? arch_stack_walk+0xfb/0x150 [ 306.003609][T14224] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 306.003627][T14224] ? __might_fault+0xaf/0x130 [ 306.003644][T14224] ? rcu_is_watching+0x15/0xb0 [ 306.003660][T14224] ? lock_acquire+0x5f/0x350 [ 306.003679][T14224] ? aa_file_perm+0x18b/0x15f0 [ 306.003697][T14224] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 306.003716][T14224] __vmalloc_noprof+0xd2/0x120 [ 306.003734][T14224] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 306.003755][T14224] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 306.003774][T14224] ? bpf_prog_alloc+0x2a/0x1a0 [ 306.003794][T14224] bpf_prog_alloc+0x3c/0x1a0 [ 306.003815][T14224] bpf_prog_load+0x788/0x1a10 [ 306.003834][T14224] ? rcu_is_watching+0x15/0xb0 [ 306.003849][T14224] ? get_pid_task+0x20/0x1f0 [ 306.003865][T14224] ? get_pid_task+0x20/0x1f0 [ 306.003880][T14224] ? __pfx_bpf_prog_load+0x10/0x10 [ 306.003898][T14224] ? __might_fault+0xaf/0x130 [ 306.003919][T14224] ? __might_fault+0xaf/0x130 [ 306.003935][T14224] ? __might_fault+0xcb/0x130 [ 306.003951][T14224] ? bpf_lsm_bpf+0x9/0x20 [ 306.003971][T14224] ? security_bpf+0x7e/0x2d0 [ 306.003993][T14224] __sys_bpf+0x618/0x950 [ 306.004013][T14224] ? __pfx___sys_bpf+0x10/0x10 [ 306.004038][T14224] ? ksys_write+0x242/0x270 [ 306.004058][T14224] ? __pfx_ksys_write+0x10/0x10 [ 306.004078][T14224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.004094][T14224] __x64_sys_bpf+0x7c/0x90 [ 306.004111][T14224] do_syscall_64+0x174/0x580 [ 306.004130][T14224] ? trace_irq_disable+0x3b/0x140 [ 306.004148][T14224] ? clear_bhb_loop+0x40/0x90 [ 306.004165][T14224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.004180][T14224] RIP: 0033:0x7f101cd9ce59 [ 306.004195][T14224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.004209][T14224] RSP: 002b:00007f101dbc3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 306.004226][T14224] RAX: ffffffffffffffda RBX: 00007f101d015fa0 RCX: 00007f101cd9ce59 [ 306.004238][T14224] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 306.004248][T14224] RBP: 00007f101dbc3090 R08: 0000000000000000 R09: 0000000000000000 [ 306.004257][T14224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.004272][T14224] R13: 00007f101d016038 R14: 00007f101d015fa0 R15: 00007ffe45dc38e8 [ 306.004290][T14224] [ 306.004355][T14224] syz.0.2281: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 306.036167][T14227] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2279'. [ 306.039820][T14224] ,cpuset=/,mems_allowed=0-1 [ 306.360829][T14224] CPU: 1 UID: 0 PID: 14224 Comm: syz.0.2281 Not tainted syzkaller #0 PREEMPT(full) [ 306.360851][T14224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 306.360860][T14224] Call Trace: [ 306.360866][T14224] [ 306.360873][T14224] dump_stack_lvl+0xe8/0x150 [ 306.360892][T14224] warn_alloc+0x249/0x340 [ 306.360915][T14224] ? __pfx_warn_alloc+0x10/0x10 [ 306.360934][T14224] ? __get_vm_area_node+0x136/0x300 [ 306.360954][T14224] ? __get_vm_area_node+0x2af/0x300 [ 306.360974][T14224] __vmalloc_node_range_noprof+0x37d/0x1730 [ 306.360992][T14224] ? lock_release+0x4b/0x3c0 [ 306.361013][T14224] ? lock_release+0x4b/0x3c0 [ 306.361035][T14224] ? is_bpf_text_address+0x292/0x2b0 [ 306.361061][T14224] ? lock_release+0x4b/0x3c0 [ 306.361080][T14224] ? arch_stack_walk+0xfb/0x150 [ 306.361099][T14224] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 306.361117][T14224] ? __might_fault+0xaf/0x130 [ 306.361133][T14224] ? rcu_is_watching+0x15/0xb0 [ 306.361149][T14224] ? lock_acquire+0x5f/0x350 [ 306.361168][T14224] ? aa_file_perm+0x18b/0x15f0 [ 306.361187][T14224] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 306.361206][T14224] __vmalloc_noprof+0xd2/0x120 [ 306.361225][T14224] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 306.361246][T14224] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 306.361274][T14224] ? bpf_prog_alloc+0x2a/0x1a0 [ 306.361295][T14224] bpf_prog_alloc+0x3c/0x1a0 [ 306.361315][T14224] bpf_prog_load+0x788/0x1a10 [ 306.361334][T14224] ? rcu_is_watching+0x15/0xb0 [ 306.361348][T14224] ? get_pid_task+0x20/0x1f0 [ 306.361363][T14224] ? get_pid_task+0x20/0x1f0 [ 306.361378][T14224] ? __pfx_bpf_prog_load+0x10/0x10 [ 306.361397][T14224] ? __might_fault+0xaf/0x130 [ 306.361418][T14224] ? __might_fault+0xaf/0x130 [ 306.361434][T14224] ? __might_fault+0xcb/0x130 [ 306.361451][T14224] ? bpf_lsm_bpf+0x9/0x20 [ 306.361471][T14224] ? security_bpf+0x7e/0x2d0 [ 306.361493][T14224] __sys_bpf+0x618/0x950 [ 306.361513][T14224] ? __pfx___sys_bpf+0x10/0x10 [ 306.361540][T14224] ? ksys_write+0x242/0x270 [ 306.361560][T14224] ? __pfx_ksys_write+0x10/0x10 [ 306.361581][T14224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.361596][T14224] __x64_sys_bpf+0x7c/0x90 [ 306.361613][T14224] do_syscall_64+0x174/0x580 [ 306.361633][T14224] ? trace_irq_disable+0x3b/0x140 [ 306.361653][T14224] ? clear_bhb_loop+0x40/0x90 [ 306.361671][T14224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.361686][T14224] RIP: 0033:0x7f101cd9ce59 [ 306.361700][T14224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.361714][T14224] RSP: 002b:00007f101dbc3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 306.361731][T14224] RAX: ffffffffffffffda RBX: 00007f101d015fa0 RCX: 00007f101cd9ce59 [ 306.361743][T14224] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 306.361753][T14224] RBP: 00007f101dbc3090 R08: 0000000000000000 R09: 0000000000000000 [ 306.361763][T14224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.361773][T14224] R13: 00007f101d016038 R14: 00007f101d015fa0 R15: 00007ffe45dc38e8 [ 306.361791][T14224] [ 306.361864][T14224] Mem-Info: [ 306.671788][T14224] active_anon:18303 inactive_anon:6 isolated_anon:0 [ 306.671788][T14224] active_file:2955 inactive_file:40443 isolated_file:0 [ 306.671788][T14224] unevictable:768 dirty:142 writeback:0 [ 306.671788][T14224] slab_reclaimable:11585 slab_unreclaimable:115974 [ 306.671788][T14224] mapped:32570 shmem:1288 pagetables:1438 [ 306.671788][T14224] sec_pagetables:0 bounce:0 [ 306.671788][T14224] kernel_misc_reclaimable:0 [ 306.671788][T14224] free:1293772 free_pcp:11025 free_cma:0 [ 306.719221][T14224] Node 0 active_anon:73280kB inactive_anon:24kB active_file:11820kB inactive_file:161580kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130316kB dirty:568kB writeback:0kB shmem:3616kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16456kB pagetables:5652kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 306.754255][T14224] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 306.754702][T14232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2279'. [ 306.796572][T14224] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 306.829851][T14224] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 306.840275][T14224] Node 0 DMA32 free:1225732kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:73268kB inactive_anon:24kB active_file:11820kB inactive_file:161580kB unevictable:1536kB writepending:568kB zspages:0kB present:3129332kB managed:2552592kB mlocked:0kB bounce:0kB free_pcp:42396kB local_pcp:20952kB free_cma:0kB [ 306.885397][T14236] netlink: 'syz.4.2284': attribute type 1 has an invalid length. [ 306.896404][T14224] lowmem_reserve[]: 0 0 0 0 0 [ 306.906499][T14224] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:664kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:4kB free_cma:0kB [ 306.907533][T14236] 8021q: adding VLAN 0 to HW filter on device bond9 [ 306.952628][T14224] lowmem_reserve[]: 0 0 0 0 0 [ 306.953976][T14236] vlan3: entered allmulticast mode [ 306.962529][T14236] bond9: entered allmulticast mode [ 306.967246][T14224] Node 1 Normal free:3935808kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 306.999361][T14236] bond9: (slave geneve5): making interface the new active one [ 306.999380][T14236] geneve5: entered allmulticast mode [ 307.006889][T14236] bond9: (slave geneve5): Enslaving as an active interface with an up link [ 307.020923][ T8195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.030795][ T8200] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.044056][T14224] lowmem_reserve[]: 0 0 0 0 0 [ 307.051702][ T8200] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.056808][T14224] Node 0 [ 307.064977][ T8200] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.066993][T14224] DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 307.077158][T14241] veth1_vlan: left promiscuous mode [ 307.089644][T14224] Node 0 DMA32: 5487*4kB (UME) 3495*8kB (UM) 1601*16kB (UM) 428*32kB (UME) 291*64kB (UME) 191*128kB (UM) 152*256kB (UME) 123*512kB (UM) 68*1024kB (UME) 54*2048kB (UM) 198*4096kB (UM) = 1225412kB [ 307.113752][T14224] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 307.126466][T14224] Node 1 Normal: 2*4kB (UM) 3*8kB (UM) 12*16kB (UM) 5*32kB (UM) 7*64kB (UM) 8*128kB (UM) 5*256kB (UM) 5*512kB (UM) 4*1024kB (UM) 1*2048kB (U) 958*4096kB (M) = 3935808kB [ 307.144042][T14224] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 307.154038][T14224] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 307.163642][T14224] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 307.173638][T14224] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 307.188160][T14224] 44684 total pagecache pages [ 307.193140][T14224] 0 pages in swap cache [ 307.197422][T14224] Free swap = 124996kB [ 307.201654][T14224] Total swap = 124996kB [ 307.206318][T14224] 2097051 pages RAM [ 307.208551][T14249] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 307.210209][T14224] 0 pages HighMem/MovableOnly [ 307.226511][T14224] 427122 pages reserved [ 307.230676][T14224] 0 pages cma reserved [ 307.290754][T14254] veth1_to_bond: Caught tx_queue_len zero misconfig [ 307.361940][T14255] 8021q: adding VLAN 0 to HW filter on device bond7 [ 308.926077][T14217] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 309.137702][T14280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2294'. [ 309.193163][T14285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2296'. [ 309.271511][T14299] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2299'. [ 309.442610][T14321] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2305'. [ 310.043737][T14289] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 310.117245][T14349] netlink: zone id is out of range [ 310.129738][T14349] netlink: zone id is out of range [ 310.142596][T14349] netlink: zone id is out of range [ 310.154283][T14349] netlink: zone id is out of range [ 310.160979][T14349] netlink: zone id is out of range [ 310.174957][T14349] netlink: zone id is out of range [ 310.189859][T14349] netlink: zone id is out of range [ 310.196212][T14349] netlink: zone id is out of range [ 310.222856][T14361] geneve5: entered promiscuous mode [ 310.317856][ T8196] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 310.327147][ T8196] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 310.341701][ T8196] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 310.364622][ T8196] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 310.485761][T14392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2323'. [ 310.550113][T14399] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2323'. [ 310.611567][T14402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2327'. [ 310.624900][T14405] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!Y [ 310.624900][T14405] 3UH5rBn [ 310.629391][T14402] tipc: Resetting bearer [ 310.696590][T14411] netlink: 'syz.1.2330': attribute type 10 has an invalid length. [ 310.706951][T14411] team0: Device bridge0 failed to register rx_handler [ 310.788509][T14404] netlink: 'syz.3.2326': attribute type 1 has an invalid length. [ 310.860337][T14404] 8021q: adding VLAN 0 to HW filter on device bond8 [ 311.014693][T14431] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2334'. [ 311.084362][T14431] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2334'. [ 311.219307][T14442] net_ratelimit: 392 callbacks suppressed [ 311.219325][T14442] openvswitch: netlink: Key type 120 is out of range max 32 [ 311.328514][T14451] tipc: Enabling of bearer rejected, failed to enable media [ 311.365569][T14456] --map-set only usable from mangle table [ 311.406998][T14459] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2342'. [ 311.445801][T14463] netlink: 'syz.2.2344': attribute type 3 has an invalid length. [ 311.834365][T14508] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20014 [ 311.851259][T14508] xt_hashlimit: invalid rate [ 311.866483][T14510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.893192][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.951318][ T8009] lo speed is unknown, defaulting to 1000 [ 311.958143][ T8009] syz2: Port: 1 Link DOWN [ 311.982976][ T8196] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.998378][ T8196] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.022177][ T8196] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.071740][ T8196] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.266556][T14528] lo speed is unknown, defaulting to 1000 [ 312.532041][T14552] tipc: Invalid UDP bearer configuration [ 312.532075][T14552] tipc: Enabling of bearer rejected, failed to enable media [ 312.716110][T14571] bond15: entered promiscuous mode [ 312.731457][T14571] bond15: entered allmulticast mode [ 312.745010][T14571] 8021q: adding VLAN 0 to HW filter on device bond15 [ 312.989592][ T8198] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 313.724835][T14591] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 313.809015][T14633] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 313.860959][T14634] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 313.914572][T14648] netlink: 'syz.3.2380': attribute type 6 has an invalid length. [ 313.958837][T14648] sctp: [Deprecated]: syz.3.2380 (pid 14648) Use of struct sctp_assoc_value in delayed_ack socket option. [ 313.958837][T14648] Use struct sctp_sack_info instead [ 313.995937][T14652] netlink: 'syz.0.2381': attribute type 1 has an invalid length. [ 314.014020][T14654] netlink: 'syz.1.2383': attribute type 1 has an invalid length. [ 314.055852][T14652] 8021q: adding VLAN 0 to HW filter on device bond16 [ 314.091606][T14661] bond16: (slave geneve7): making interface the new active one [ 314.100743][T14661] bond16: (slave geneve7): Enslaving as an active interface with an up link [ 314.116354][ T8198] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.129790][ T8198] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.142840][ T8198] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.161784][ T8198] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.240730][T14674] __nla_validate_parse: 9 callbacks suppressed [ 314.240747][T14674] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2387'. [ 314.267290][T14674] vlan4: entered promiscuous mode [ 314.452837][T14699] syzkaller0: entered promiscuous mode [ 314.458389][T14699] syzkaller0: entered allmulticast mode [ 314.645614][T14718] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2401'. [ 314.695093][T14721] netlink: 'syz.4.2402': attribute type 3 has an invalid length. [ 314.703252][T14721] netlink: 'syz.4.2402': attribute type 1 has an invalid length. [ 314.711224][T14721] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2402'. [ 314.822265][T14733] syzkaller0: entered promiscuous mode [ 314.829164][T14733] syzkaller0: entered allmulticast mode [ 314.839087][T14733] PKCS7: Unknown OID: [4] (bad) [ 314.845483][T14733] PKCS7: Only support pkcs7_signedData type [ 314.855687][T14733] tipc: Enabling of bearer rejected, failed to enable media [ 314.954710][T14740] netlink: 'syz.1.2406': attribute type 2 has an invalid length. [ 314.974511][T14740] lo speed is unknown, defaulting to 1000 [ 315.013157][T14740] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2406'. [ 315.297470][T14758] lo speed is unknown, defaulting to 1000 [ 315.387803][T14760] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2414'. [ 315.493655][T14774] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2420'. [ 315.506834][T14777] xt_addrtype: ipv6 does not support BROADCAST matching [ 315.546083][T14780] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2422'. [ 315.595854][T14786] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.628165][T14788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2425'. [ 315.652334][T14786] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.707137][T14786] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.726642][T14794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2428'. [ 315.728347][T14795] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 315.740692][T14794] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2428'. [ 315.756559][T14794] tipc: Resetting bearer [ 315.777390][T14786] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.864719][ T8203] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.884448][ T8196] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.912887][ T8196] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.941407][ T8196] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.960981][T14797] syzkaller0: entered promiscuous mode [ 315.977290][T14797] syzkaller0: entered allmulticast mode [ 316.133332][T14823] xfrm1: entered allmulticast mode [ 316.276597][T14840] tipc: Enabled bearer , priority 0 [ 316.364275][T14840] syzkaller0: entered promiscuous mode [ 316.370205][T14840] syzkaller0: entered allmulticast mode [ 316.428962][T14840] tipc: Resetting bearer [ 316.437830][T14837] tipc: Resetting bearer [ 316.566765][T14837] tipc: Disabling bearer [ 316.673217][T14877] bond4: option ad_select: invalid value (34) [ 316.681973][T14877] bond4 (unregistering): Released all slaves [ 316.783311][T14896] netlink: 'syz.4.2455': attribute type 2 has an invalid length. [ 317.015473][T14908] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 317.264068][T14927] tipc: Enabled bearer , priority 0 [ 317.271129][T14927] syzkaller0: entered promiscuous mode [ 317.276976][T14927] syzkaller0: entered allmulticast mode [ 317.287845][T14927] tipc: Resetting bearer [ 317.299564][T14926] tipc: Resetting bearer [ 317.316638][T14926] tipc: Disabling bearer [ 317.351272][T14931] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 317.358303][T14931] openvswitch: netlink: Key 3 has unexpected len 16 expected 4 [ 317.410255][T14933] syzkaller1: entered promiscuous mode [ 317.417862][T14933] syzkaller1: entered allmulticast mode [ 317.535480][T14947] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1806) ! [ 317.560087][T14947] tipc: Enabling of bearer rejected, already enabled [ 317.594747][T14949] netlink: 'syz.4.2472': attribute type 1 has an invalid length. [ 317.738624][T14969] netlink: 'syz.1.2477': attribute type 11 has an invalid length. [ 319.359861][T14953] Set syz1 is full, maxelem 65536 reached [ 319.385834][T15074] __nla_validate_parse: 15 callbacks suppressed [ 319.385850][T15074] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2504'. [ 319.387565][T15073] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 319.480988][T15080] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2507'. [ 321.703023][T15045] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 321.904353][T15118] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2517'. [ 322.121244][T15142] lo speed is unknown, defaulting to 1000 [ 322.621509][T15156] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2526'. [ 322.631022][T15156] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2526'. [ 322.656211][T15156] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2526'. [ 322.685821][T15159] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 322.970062][T15174] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 322.984650][T15175] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 322.997676][T15174] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 324.046853][T15196] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 325.015904][T15129] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 325.159143][T15207] netlink: 'syz.4.2542': attribute type 1 has an invalid length. [ 325.169013][T15207] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2542'. [ 325.343470][T15231] netlink: 4456 bytes leftover after parsing attributes in process `syz.2.2544'. [ 325.365503][T15234] syzkaller1: entered promiscuous mode [ 325.371121][T15234] syzkaller1: entered allmulticast mode [ 325.434369][T15240] lo: Caught tx_queue_len zero misconfig [ 325.444726][T15240] netlink: 'syz.3.2553': attribute type 1 has an invalid length. [ 325.486257][T15236] tipc: Enabling of bearer rejected, failed to enable media [ 325.606932][T15249] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2555'. [ 325.665242][T15254] netlink: 'syz.4.2558': attribute type 2 has an invalid length. [ 325.674879][T15254] netlink: 'syz.4.2558': attribute type 1 has an invalid length. [ 325.687071][T15256] netlink: 'syz.4.2558': attribute type 2 has an invalid length. [ 325.695238][T15256] netlink: 'syz.4.2558': attribute type 1 has an invalid length. [ 325.705474][T15258] syzkaller0: entered promiscuous mode [ 325.711025][T15258] syzkaller0: entered allmulticast mode [ 325.847549][T15265] netlink: 'syz.3.2561': attribute type 1 has an invalid length. [ 325.867057][T15265] 8021q: adding VLAN 0 to HW filter on device bond10 [ 325.889968][T15265] bond10: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 325.899544][T15265] bond10: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 325.918292][T15265] bond10: (slave ip6gretap1): making interface the new active one [ 325.928704][T15265] bond10: (slave ip6gretap1): Enslaving as an active interface with an up link [ 326.034049][T15279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2566'. [ 326.101468][T15273] tipc: Enabling of bearer rejected, failed to enable media [ 326.211696][T15293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2569'. [ 326.391910][T15314] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2575'. [ 326.526829][T15323] xt_CT: You must specify a L4 protocol and not use inversions on it [ 326.625475][T15330] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 326.656559][T15330] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 326.687604][T15332] lo speed is unknown, defaulting to 1000 [ 326.728188][T15330] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 326.739766][T15330] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 326.843076][T15330] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 326.860334][T15330] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 326.861606][T15349] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2581'. [ 326.898778][T15353] netlink: 'syz.4.2585': attribute type 1 has an invalid length. [ 326.927642][T15330] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 326.937591][T15330] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 326.951668][T15353] bond10: entered promiscuous mode [ 326.957394][T15353] bond10: entered allmulticast mode [ 326.963024][T15359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2587'. [ 326.963406][T15353] 8021q: adding VLAN 0 to HW filter on device bond10 [ 326.971965][T15359] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2587'. [ 326.989762][T15359] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2587'. [ 327.131172][ T8021] lo speed is unknown, defaulting to 1000 [ 327.141189][ T8195] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.149848][ T8195] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 327.172057][ T8195] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.181527][ T8195] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 327.200828][ T8195] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.210651][ T8195] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 327.230524][ T8197] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.261451][ T8197] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 327.551131][T15394] geneve6: entered promiscuous mode [ 328.017018][T15422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.022571][T15425] bridge0: port 3(syz_tun) entered blocking state [ 328.048773][T15425] bridge0: port 3(syz_tun) entered disabled state [ 328.063637][T15425] syz_tun: entered allmulticast mode [ 328.262321][T15435] bond11: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 328.325226][T15435] bond11 (unregistering): Released all slaves [ 328.383813][T15448] tipc: Enabled bearer , priority 0 [ 328.533978][ T4953] block nbd3: Possible stuck request ffff8880277fe000: control (read@0,1024B). Runtime 60 seconds [ 328.537578][T15448] syzkaller0: entered promiscuous mode [ 328.544767][ T4953] block nbd3: Possible stuck request ffff8880277fe1c0: control (read@1024,1024B). Runtime 60 seconds [ 328.544794][ T4953] block nbd3: Possible stuck request ffff8880277fe380: control (read@2048,1024B). Runtime 60 seconds [ 328.544816][ T4953] block nbd3: Possible stuck request ffff8880277fe540: control (read@3072,1024B). Runtime 60 seconds [ 328.626795][T15448] syzkaller0: entered allmulticast mode [ 328.643072][T15448] tipc: Resetting bearer [ 328.705779][T15444] tipc: Resetting bearer [ 328.762143][T15444] tipc: Disabling bearer [ 328.771463][T15453] lo speed is unknown, defaulting to 1000 [ 328.859279][T15464] lo speed is unknown, defaulting to 1000 [ 329.237317][T15477] sit0: entered promiscuous mode [ 329.244565][T15477] netlink: 'syz.0.2627': attribute type 1 has an invalid length. [ 329.504175][T15506] netlink: 'syz.0.2635': attribute type 1 has an invalid length. [ 329.595222][T15508] bond17: entered promiscuous mode [ 329.614467][T15508] bond17: entered allmulticast mode [ 329.628683][T15517] sctp: [Deprecated]: syz.3.2636 (pid 15517) Use of int in max_burst socket option. [ 329.628683][T15517] Use struct sctp_assoc_value instead [ 329.769193][T15524] mac80211_hwsim hwsim9 syzkaller1: entered promiscuous mode [ 329.784040][T15524] mac80211_hwsim hwsim9 syzkaller1: entered allmulticast mode [ 329.857199][T15522] syzkaller0: entered promiscuous mode [ 329.869304][T15522] syzkaller0: entered allmulticast mode [ 329.930991][T15528] smc: adding net device wlan0 with user defined pnetid SYZ0 [ 330.119482][T15541] macsec1: left promiscuous mode [ 330.138533][T15541] vlan3: left promiscuous mode [ 330.159182][T15541] macvlan0: left promiscuous mode [ 330.179848][T15541] ip6erspan1: left allmulticast mode [ 330.198201][T15541] ip6gre2: left promiscuous mode [ 330.206194][T15541] ip6gre2: left allmulticast mode [ 330.218512][T15541] geneve3: left promiscuous mode [ 330.223950][T15541] bridge3: left promiscuous mode [ 330.229224][T15541] bond0: left promiscuous mode [ 330.234555][T15541] bond0: left allmulticast mode [ 330.239632][T15541] bond3: left promiscuous mode [ 330.245607][T15541] bond4: left promiscuous mode [ 330.250730][T15541] bridge5: left promiscuous mode [ 330.257597][T15541] bond5: left promiscuous mode [ 330.262843][T15541] bond5: left allmulticast mode [ 330.307366][T15552] validate_nla: 1 callbacks suppressed [ 330.307381][T15552] netlink: 'syz.2.2648': attribute type 1 has an invalid length. [ 330.405571][T15552] bond16: entered promiscuous mode [ 330.416048][T15552] 8021q: adding VLAN 0 to HW filter on device bond16 [ 330.443560][T15555] ipvlan4: entered allmulticast mode [ 330.464779][T15555] bond16: entered allmulticast mode [ 330.487139][T15562] ip6tnl0: Caught tx_queue_len zero misconfig [ 330.518317][T15552] ipvlan5: entered allmulticast mode [ 330.532858][T15557] __nla_validate_parse: 13 callbacks suppressed [ 330.532872][T15557] netlink: 271 bytes leftover after parsing attributes in process `syz.3.2649'. [ 330.565538][T15562] syzkaller0: entered promiscuous mode [ 330.578780][T15559] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 330.580460][T15562] syzkaller0: entered allmulticast mode [ 330.620739][T15555] bond16: (slave bridge11): making interface the new active one [ 330.628653][T15555] bridge11: entered promiscuous mode [ 330.635440][T15555] bridge11: entered allmulticast mode [ 330.643345][T15555] bond16: (slave bridge11): Enslaving as an active interface with an up link [ 330.653198][T15559] mac80211_hwsim hwsim9 syzkaller1: left promiscuous mode [ 330.660573][T15559] mac80211_hwsim hwsim9 syzkaller1: left allmulticast mode [ 330.882069][T15589] vlan0: entered promiscuous mode [ 330.896964][T15586] lo speed is unknown, defaulting to 1000 [ 331.105260][T15601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2659'. [ 331.259638][T15610] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2661'. [ 331.310655][T15586] dvmrp0: entered allmulticast mode [ 331.358796][T15614] netlink: 'syz.3.2663': attribute type 2 has an invalid length. [ 331.367119][T15614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2663'. [ 331.397977][ T8197] dvmrp0: left allmulticast mode [ 331.504867][T15613] lo speed is unknown, defaulting to 1000 [ 331.736476][T15635] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2670'. [ 331.898361][T15640] netlink: 'syz.4.2672': attribute type 1 has an invalid length. [ 331.966301][T15640] bond11: entered promiscuous mode [ 331.982940][T15640] 8021q: adding VLAN 0 to HW filter on device bond11 [ 332.328060][T15658] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2676'. [ 332.669907][T15679] netlink: 'syz.0.2682': attribute type 3 has an invalid length. [ 332.683566][T15673] lo speed is unknown, defaulting to 1000 [ 332.689462][T15679] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2682'. [ 332.704697][T15679] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2682'. [ 332.812351][T15662] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2679'. [ 332.916239][T15684] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2684'. [ 332.962562][T15690] siw: device registration error -23 [ 333.036202][T15688] tipc: Enabling of bearer rejected, failed to enable media [ 333.633310][ T5626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 333.640721][ T5626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 333.648209][ T5626] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 333.656198][ T5626] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 333.663856][ T5626] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 333.778254][T15589] Set syz1 is full, maxelem 65536 reached [ 333.833969][ T5619] syz_tun (unregistering): left allmulticast mode [ 333.883283][T15728] dvmrp6: entered allmulticast mode [ 333.903130][ T8200] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.949499][ T8200] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.993970][ T8200] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.037566][T15745] tipc: Enabling of bearer rejected, failed to enable media [ 334.050637][ T8200] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.215485][T15718] lo speed is unknown, defaulting to 1000 [ 334.277788][ T8200] dvmrp6: left allmulticast mode [ 334.283615][ T8200] pimreg9: left allmulticast mode [ 334.337592][ T8200] team0: Port device xfrm0 removed [ 334.349772][T15761] netlink: 'syz.3.2701': attribute type 7 has an invalid length. [ 334.378390][ T8200] bond3 (unregistering): (slave gretap1): Releasing backup interface [ 334.422942][ T8200] bond16 (unregistering): (slave geneve7): Releasing active interface [ 334.486140][ T8200] bond1 (unregistering): Released all slaves [ 334.504862][ T8200] bond2 (unregistering): Released all slaves [ 334.520444][ T8200] bond3 (unregistering): (slave bond4): Releasing backup interface [ 334.530006][ T8200] bond3 (unregistering): Released all slaves [ 334.553112][ T8200] bond4 (unregistering): Released all slaves [ 334.572500][ T8200] bond5 (unregistering): Released all slaves [ 334.591391][ T8200] bond6 (unregistering): Released all slaves [ 334.611282][ T8200] bond7 (unregistering): Released all slaves [ 334.630578][ T8200] bond8 (unregistering): Released all slaves [ 334.648211][ T8200] bond9 (unregistering): Released all slaves [ 334.661764][ T8200] bond0 (unregistering): Released all slaves [ 334.676442][ T8200] bond10 (unregistering): Released all slaves [ 334.688123][ T8200] bond11 (unregistering): (slave veth5): Releasing active interface [ 334.698397][ T8200] bond11 (unregistering): Released all slaves [ 334.709359][ T8200] bond12 (unregistering): Released all slaves [ 334.720453][ T8200] bond13 (unregistering): Released all slaves [ 334.736365][ T8200] bond14 (unregistering): Released all slaves [ 334.747247][ T8200] bond15 (unregistering): Released all slaves [ 334.758225][ T8200] bond16 (unregistering): Released all slaves [ 334.769000][ T8200] bond17 (unregistering): Released all slaves [ 334.787575][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 334.886462][ T8200] tipc: Disabling bearer [ 334.905642][ T8200] tipc: Left network mode [ 335.655555][T15718] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.680294][T15718] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.683708][T15854] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 335.688902][T15718] bridge_slave_0: entered allmulticast mode [ 335.709761][T15718] bridge_slave_0: entered promiscuous mode [ 335.732701][ T5625] Bluetooth: hci5: command tx timeout [ 335.746266][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 335.764936][T15718] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.787356][T15718] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.800159][T15718] bridge_slave_1: entered allmulticast mode [ 335.811792][T15718] bridge_slave_1: entered promiscuous mode [ 335.918661][T15867] pim6reg1: entered promiscuous mode [ 335.925739][T15867] pim6reg1: entered allmulticast mode [ 335.939404][T15718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.977540][T15718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.990262][T15867] __nla_validate_parse: 8 callbacks suppressed [ 335.990290][T15867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2717'. [ 336.058367][T15718] team0: Port device team_slave_0 added [ 336.063168][T15867] netlink: 'syz.3.2717': attribute type 30 has an invalid length. [ 336.076511][T15718] team0: Port device team_slave_1 added [ 336.167795][T15881] netlink: 'syz.3.2717': attribute type 4 has an invalid length. [ 336.192751][T15881] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2717'. [ 336.217658][T15888] netlink: 'syz.2.2720': attribute type 1 has an invalid length. [ 336.673215][T15908] netlink: 'syz.4.2721': attribute type 1 has an invalid length. [ 336.691189][T15908] netlink: 15 bytes leftover after parsing attributes in process `syz.4.2721'. [ 336.736509][ T8194] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.756126][ T8194] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.800230][T15718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.831719][T15718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.886266][T15718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.900952][T15718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.908272][T15718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.938355][T15718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.958282][ T8194] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.967358][ T8194] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.998894][T15937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2723'. [ 337.026214][T15718] hsr_slave_0: entered promiscuous mode [ 337.035626][T15718] hsr_slave_1: entered promiscuous mode [ 337.046443][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 337.078592][T15939] netlink: 'syz.3.2726': attribute type 14 has an invalid length. [ 337.125149][T15937] bridge13: port 1(dummy0) entered blocking state [ 337.137406][T15937] bridge13: port 1(dummy0) entered disabled state [ 337.150999][T15937] dummy0: entered allmulticast mode [ 337.166268][T15937] dummy0: entered promiscuous mode [ 337.214842][T15937] netlink: 'syz.2.2723': attribute type 4 has an invalid length. [ 337.251969][ T8200] IPVS: stop unused estimator thread 0... [ 337.269876][T15944] x_tables: duplicate underflow at hook 2 [ 337.307540][T15944] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2727'. [ 337.567562][T15955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2728'. [ 337.812764][ T5625] Bluetooth: hci5: command tx timeout [ 337.842094][T15970] netlink: 'syz.4.2730': attribute type 39 has an invalid length. [ 337.878961][T15970] syz_tun (unregistering): left allmulticast mode [ 337.921240][T15970] bridge0: port 3(syz_tun) entered disabled state [ 337.947487][T15978] FAULT_INJECTION: forcing a failure. [ 337.947487][T15978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.982584][T15978] CPU: 0 UID: 0 PID: 15978 Comm: syz.2.2732 Not tainted syzkaller #0 PREEMPT(full) [ 337.982609][T15978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 337.982618][T15978] Call Trace: [ 337.982624][T15978] [ 337.982630][T15978] dump_stack_lvl+0xe8/0x150 [ 337.982648][T15978] should_fail_ex+0x40c/0x560 [ 337.982663][T15978] _copy_to_user+0x31/0xb0 [ 337.982680][T15978] simple_read_from_buffer+0xe1/0x170 [ 337.982695][T15978] proc_fail_nth_read+0x1bb/0x230 [ 337.982712][T15978] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 337.982727][T15978] ? rw_verify_area+0x24a/0x4c0 [ 337.982741][T15978] ? tun_chr_write_iter+0xe0/0x200 [ 337.982756][T15978] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 337.982769][T15978] vfs_read+0x213/0xa80 [ 337.982785][T15978] ? __pfx___mutex_lock+0x10/0x10 [ 337.982800][T15978] ? __pfx_vfs_read+0x10/0x10 [ 337.982816][T15978] ? __fget_files+0x3a2/0x420 [ 337.982829][T15978] ? __fget_files+0x2a/0x420 [ 337.982843][T15978] ksys_read+0x150/0x270 [ 337.982858][T15978] ? __pfx_ksys_read+0x10/0x10 [ 337.982873][T15978] ? rcu_is_watching+0x15/0xb0 [ 337.982886][T15978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.982899][T15978] do_syscall_64+0x174/0x580 [ 337.982914][T15978] ? clear_bhb_loop+0x40/0x90 [ 337.982926][T15978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.982939][T15978] RIP: 0033:0x7fb0b7d5d68e [ 337.982951][T15978] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 337.982961][T15978] RSP: 002b:00007fb0b8ca1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 337.982976][T15978] RAX: ffffffffffffffda RBX: 00007fb0b8ca26c0 RCX: 00007fb0b7d5d68e [ 337.982986][T15978] RDX: 000000000000000f RSI: 00007fb0b8ca20a0 RDI: 0000000000000004 [ 337.982993][T15978] RBP: 00007fb0b8ca2090 R08: 0000000000000000 R09: 0000000000000000 [ 337.983001][T15978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.983008][T15978] R13: 00007fb0b8016038 R14: 00007fb0b8015fa0 R15: 00007ffc15a32078 [ 337.983022][T15978] [ 338.214093][T15718] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 338.225301][T15718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 338.255901][T15718] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 338.268579][T15718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 338.279165][T15718] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 338.311448][T15718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 338.334504][T15718] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 338.375084][T15718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 338.542005][T16004] bond12: entered allmulticast mode [ 338.608065][T15718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.624185][T15718] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.635241][ T8194] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.642749][ T8194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.749830][ T8194] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.757405][ T8194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.761758][T16024] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2742'. [ 338.784700][T16022] Bluetooth: MGMT ver 1.23 [ 338.902340][T16030] vlan6: entered promiscuous mode [ 338.909593][T16030] vlan6: entered allmulticast mode [ 338.914967][T16030] hsr0: entered allmulticast mode [ 338.920496][T16030] hsr_slave_0: entered allmulticast mode [ 338.927689][T16030] hsr_slave_1: entered allmulticast mode [ 338.962055][T15718] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 338.984809][T15718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 338.989481][T16041] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2744'. [ 339.008209][T16030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2741'. [ 339.015009][T16029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.031458][T16037] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2744'. [ 339.105078][T16047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.199163][T16039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.222882][T16030] hsr_slave_0: left promiscuous mode [ 339.235864][T16030] hsr_slave_1: left promiscuous mode [ 339.370215][T16051] tipc: Resetting bearer [ 339.395978][T16057] ip6_vti0: Caught tx_queue_len zero misconfig [ 339.585310][T16075] netlink: 'syz.2.2749': attribute type 2 has an invalid length. [ 339.775749][T15718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.892721][ T5625] Bluetooth: hci5: command tx timeout [ 339.898774][T15718] veth0_vlan: entered promiscuous mode [ 339.946548][T15718] veth1_vlan: entered promiscuous mode [ 340.076948][T15718] veth0_macvtap: entered promiscuous mode [ 340.151358][T16098] 8021q: adding VLAN 0 to HW filter on device bond5 [ 340.175381][T15718] veth1_macvtap: entered promiscuous mode [ 340.188230][T16121] syzkaller0: entered promiscuous mode [ 340.226392][T16121] syzkaller0: entered allmulticast mode [ 340.264310][T15718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.273728][T16117] tipc: Enabled bearer , priority 0 [ 340.327736][T16114] tipc: Resetting bearer [ 340.356607][T16114] tipc: Disabling bearer [ 340.394298][T15718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.432400][ T8200] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.460807][ T8200] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.502927][ T8200] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.523374][ T8200] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.581428][T16136] syzkaller0: entered promiscuous mode [ 340.591054][T16136] syzkaller0: entered allmulticast mode [ 340.728657][ T8196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.762158][ T8196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.851825][ T8196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.882522][ T8196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.923006][T16159] syzkaller0: entered promiscuous mode [ 340.944272][T16159] syzkaller0: entered allmulticast mode [ 341.043537][T16175] __nla_validate_parse: 6 callbacks suppressed [ 341.043554][T16175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2766'. [ 341.086651][T16180] syzkaller1: entered promiscuous mode [ 341.087368][T16175] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2766'. [ 341.105622][T16162] xt_CT: No such helper "netbios-ns" [ 341.112286][T16180] syzkaller1: entered allmulticast mode [ 341.218886][T16189] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2767'. [ 341.271499][T16193] syzkaller0: entered promiscuous mode [ 341.272183][T16189] netlink: 'syz.3.2767': attribute type 1 has an invalid length. [ 341.287014][T16193] syzkaller0: entered allmulticast mode [ 341.302617][T16189] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2767'. [ 341.321928][T16195] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2769'. [ 341.402109][T16193] tipc: Enabled bearer , priority 0 [ 341.449025][T16192] tipc: Resetting bearer [ 341.480871][T16197] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2771'. [ 341.519400][T16192] tipc: Disabling bearer [ 341.539552][T16208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2772'. [ 341.573537][T16208] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2772'. [ 341.753659][T16226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2777'. [ 341.775065][T16231] syzkaller0: entered promiscuous mode [ 341.787121][T16231] syzkaller0: entered allmulticast mode [ 341.806104][T16230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2777'. [ 341.837166][T16230] openvswitch: netlink: Invalid VLAN frame [ 341.885363][T16233] batadv0: entered promiscuous mode [ 341.911106][T16233] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 341.974602][ T5625] Bluetooth: hci5: command tx timeout [ 341.984761][T16238] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 342.193466][T16269] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 342.206641][T16269] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 342.219775][T16269] tipc: Resetting bearer [ 342.249282][T16269] tipc: Enabling of bearer rejected, already enabled [ 342.330294][T16275] tipc: Enabled bearer , priority 0 [ 342.355893][T16275] syzkaller0: entered promiscuous mode [ 342.372342][T16275] syzkaller0: entered allmulticast mode [ 342.433289][T16275] tipc: Resetting bearer [ 342.469443][T16274] tipc: Resetting bearer [ 342.496242][T16274] tipc: Disabling bearer [ 342.773016][ T29] audit: type=1804 audit(1781949849.213:6): pid=16319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2802" name="/newroot/525/memory.events" dev="tmpfs" ino=2696 res=1 errno=0 [ 342.835975][T16322] bond17: ARP target 9.0.0.0 is already present [ 342.843568][T16322] bond17: option arp_ip_target: invalid value (9) [ 342.847460][ T29] audit: type=1800 audit(1781949849.213:7): pid=16319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2802" name="memory.events" dev="tmpfs" ino=2696 res=0 errno=0 [ 342.874106][T16322] bond17 (unregistering): Released all slaves [ 342.881957][T16333] netlink: 'syz.0.2804': attribute type 1 has an invalid length. [ 343.161437][T16347] macvlan4: entered promiscuous mode [ 343.192381][T16347] macvlan4: entered allmulticast mode [ 344.018605][T16410] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 344.062323][T16423] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 344.306242][T16450] netlink: 'syz.0.2830': attribute type 1 has an invalid length. [ 344.341435][T16450] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.888117][T16427] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 345.260963][ T29] audit: type=1804 audit(1781949851.703:8): pid=16495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2845" name="/newroot/594/cgroup.controllers" dev="tmpfs" ino=3049 res=1 errno=0 [ 345.332135][ T29] audit: type=1800 audit(1781949851.703:9): pid=16495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2845" name="cgroup.controllers" dev="tmpfs" ino=3049 res=0 errno=0 [ 345.346291][T16482] macsec4: entered promiscuous mode [ 345.984478][ T8196] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.022058][ T8196] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 346.090034][T16541] __nla_validate_parse: 11 callbacks suppressed [ 346.090052][T16541] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2858'. [ 346.126300][ T5626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 346.135249][ T8196] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.145738][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 346.155452][ T8196] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 346.155559][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 346.174962][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 346.183380][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 346.239190][T16549] netlink: 'syz.0.2859': attribute type 2 has an invalid length. [ 346.253826][ T8196] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.255108][T16549] netlink: 'syz.0.2859': attribute type 1 has an invalid length. [ 346.272290][ T8196] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 346.288347][T16549] xt_hl: Unknown TTL match mode: 237 [ 346.357284][ T8196] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.372393][ T8196] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 346.509460][T16560] gre1: entered promiscuous mode [ 346.641317][ T8196] dummy0: left allmulticast mode [ 346.671903][ T8196] dummy0: left promiscuous mode [ 346.696579][ T8196] bridge13: port 1(dummy0) entered disabled state [ 346.804573][ T8196] ip6gretap0 (unregistering): left allmulticast mode [ 346.922564][ T8196] batman_adv: batadv0: Removing interface: gretap0 [ 346.985347][ T8196] bond12 (unregistering): (slave geneve3): Releasing active interface [ 346.999088][ T8196] bond10 (unregistering): (slave geneve2): Releasing active interface [ 347.047679][ T8196] bond7 (unregistering): (slave bridge2): Releasing backup interface [ 347.055804][ T8196] bridge2 (unregistering): left promiscuous mode [ 347.083582][ T8196] bond16 (unregistering): (slave bridge11): Releasing backup interface [ 347.091963][ T8196] bridge11 (unregistering): left promiscuous mode [ 347.098431][ T8196] bridge11 (unregistering): left allmulticast mode [ 347.115266][ T8196] bond1 (unregistering): Released all slaves [ 347.126213][ T8196] bond2 (unregistering): Released all slaves [ 347.168851][ T8196] bond4 (unregistering): Released all slaves [ 347.179963][ T8196] bond3 (unregistering): Released all slaves [ 347.191570][ T8196] bond5 (unregistering): (slave bond6): Releasing backup interface [ 347.200930][ T8196] bond5 (unregistering): Released all slaves [ 347.214408][ T8196] bond6 (unregistering): Released all slaves [ 347.225268][ T8196] bond7 (unregistering): Released all slaves [ 347.236081][ T8196] bond8 (unregistering): Released all slaves [ 347.246745][ T8196] bond9 (unregistering): Released all slaves [ 347.258965][ T8196] bond10 (unregistering): Released all slaves [ 347.270394][ T8196] bond11 (unregistering): Released all slaves [ 347.289367][ T8196] bond0 (unregistering): Released all slaves [ 347.312402][ T8196] bond12 (unregistering): Released all slaves [ 347.323578][ T8196] bond13 (unregistering): Released all slaves [ 347.334713][ T8196] bond14 (unregistering): Released all slaves [ 347.345601][ T8196] bond15 (unregistering): Released all slaves [ 347.361381][ T8196] bond16 (unregistering): Released all slaves [ 347.384252][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 347.510682][ T8196] : left promiscuous mode [ 347.554010][T16542] lo speed is unknown, defaulting to 1000 [ 347.591040][ T8196] tipc: Disabling bearer [ 347.608003][T16618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2870'. [ 347.620389][ T8196] tipc: Left network mode [ 347.844074][T16631] netlink: 'syz.4.2874': attribute type 12 has an invalid length. [ 347.906837][T16634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2875'. [ 347.940667][T16643] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2877'. [ 348.198584][T16668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2882'. [ 348.213084][ T5625] Bluetooth: hci0: command tx timeout [ 348.285883][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 348.293794][T16542] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.301241][T16542] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.308533][T16542] bridge_slave_0: entered allmulticast mode [ 348.317515][T16542] bridge_slave_0: entered promiscuous mode [ 348.335345][T16542] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.342630][T16542] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.349800][T16542] bridge_slave_1: entered allmulticast mode [ 348.357048][T16542] bridge_slave_1: entered promiscuous mode [ 348.394201][T16542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.425522][T16542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.476226][T16542] team0: Port device team_slave_0 added [ 348.540872][T16542] team0: Port device team_slave_1 added [ 348.552414][T16682] bond0: (slave ipvlan0): Device is not bonding slave [ 348.561366][T16682] bond0: option active_slave: invalid value (ipvlan0) [ 348.574242][T16678] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2885'. [ 348.587203][T16678] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2885'. [ 348.639835][T16542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.663481][T16542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.695977][T16542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.711602][T16542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.719515][T16542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.746408][T16542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.771525][T16690] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2887'. [ 348.794112][T16542] hsr_slave_0: entered promiscuous mode [ 348.800334][T16542] hsr_slave_1: entered promiscuous mode [ 348.808670][T16542] debugfs: 'hsr0' already exists in 'hsr' [ 348.814458][T16542] Cannot create hsr debugfs directory [ 349.258799][ T8196] IPVS: stop unused estimator thread 0... [ 350.292576][ T5625] Bluetooth: hci0: command tx timeout [ 351.025517][T16653] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 351.045929][T16542] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 351.125994][T16542] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 351.186288][T16542] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 351.233281][T16542] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 351.259288][T16706] netlink: 'syz.0.2888': attribute type 7 has an invalid length. [ 351.280850][T16542] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 351.299504][T16542] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 351.315163][T16542] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 351.316401][T16715] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2891'. [ 351.341807][T16542] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 351.374936][T16706] netlink: 'syz.0.2888': attribute type 7 has an invalid length. [ 351.380901][T16712] batadv_slave_0: Caught tx_queue_len zero misconfig [ 351.405902][ T8194] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.421931][ T8194] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.477432][ T8194] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.502383][ T8194] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.518516][T16729] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2893'. [ 351.580850][T16732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2894'. [ 351.587832][T16542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.668836][T16542] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.670989][T16736] sctp: [Deprecated]: syz.1.2895 (pid 16736) Use of struct sctp_assoc_value in delayed_ack socket option. [ 351.670989][T16736] Use struct sctp_sack_info instead [ 351.705923][ T8194] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.713500][ T8194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.755326][ T8194] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.762926][ T8194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.099060][T16759] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2898'. [ 352.361302][T16542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.381654][ T5625] Bluetooth: hci0: command tx timeout [ 352.526019][T16542] veth0_vlan: entered promiscuous mode [ 352.536201][T16776] netlink: 'syz.1.2900': attribute type 1 has an invalid length. [ 352.590459][T16542] veth1_vlan: entered promiscuous mode [ 352.709936][T16542] veth0_macvtap: entered promiscuous mode [ 352.785056][T16542] veth1_macvtap: entered promiscuous mode [ 352.810612][T16801] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2905'. [ 352.830371][T16542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.860195][T16542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.904683][ T8195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.935643][ T8195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.963793][ T8195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.984619][ T8195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.995645][T16809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2906'. [ 353.200069][ T8196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.237126][ T8196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.271627][ T8195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.277429][T16826] netlink: 'syz.3.2910': attribute type 15 has an invalid length. [ 353.289926][ T8195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.412663][T16835] netlink: zone id is out of range [ 353.434219][T16835] block nbd3: NBD_DISCONNECT [ 353.441617][T16839] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2857'. [ 353.454708][T16835] block nbd3: Send disconnect failed -32 [ 353.466867][T16835] block nbd3: shutting down sockets [ 353.518536][ C1] blk_print_req_error: 138 callbacks suppressed [ 353.518557][ C1] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 353.534002][ C1] buffer_io_error: 138 callbacks suppressed [ 353.534108][ C1] Buffer I/O error on dev nbd3, logical block 0, async page read [ 353.547779][ C1] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 353.556887][ C1] Buffer I/O error on dev nbd3, logical block 1, async page read [ 353.564653][ C1] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 353.573756][ C1] Buffer I/O error on dev nbd3, logical block 2, async page read [ 353.581486][ C1] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 353.590587][ C1] Buffer I/O error on dev nbd3, logical block 3, async page read [ 353.601586][T16839] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2857'. [ 353.611644][T10824] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 353.633933][T10824] Buffer I/O error on dev nbd3, logical block 0, async page read [ 353.646811][T16839] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2857'. [ 353.662639][T10824] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 353.677672][T16839] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2857'. [ 353.698126][T10824] Buffer I/O error on dev nbd3, logical block 1, async page read [ 353.720370][T10824] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 353.768559][T10824] Buffer I/O error on dev nbd3, logical block 2, async page read [ 353.795158][T10824] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 353.847311][T10824] Buffer I/O error on dev nbd3, logical block 3, async page read [ 353.883862][T10824] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 353.930580][T10824] Buffer I/O error on dev nbd3, logical block 0, async page read [ 353.966619][T10824] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 354.008545][T10824] Buffer I/O error on dev nbd3, logical block 1, async page read [ 354.018762][T10824] ldm_validate_partition_table(): Disk read failed. [ 354.027214][T10824] Dev nbd3: unable to read RDB block 0 [ 354.040640][T10824] nbd3: unable to read partition table [ 354.079864][T10824] ldm_validate_partition_table(): Disk read failed. [ 354.099856][T10824] Dev nbd3: unable to read RDB block 0 [ 354.119026][T10824] nbd3: unable to read partition table [ 354.156736][T16874] lo speed is unknown, defaulting to 1000 [ 354.363636][T16894] netlink: 'syz.4.2925': attribute type 7 has an invalid length. [ 354.396926][T16897] netlink: 'syz.4.2925': attribute type 7 has an invalid length. [ 354.452614][ T5625] Bluetooth: hci0: command tx timeout [ 354.469636][T16903] syzkaller0: entered promiscuous mode [ 354.507281][T16903] syzkaller0: entered allmulticast mode [ 354.964716][T16928] netlink: zone id is out of range [ 354.994895][T16928] netlink: zone id is out of range [ 355.006486][T16928] netlink: zone id is out of range [ 355.016773][T16928] netlink: zone id is out of range [ 355.032549][T16928] netlink: zone id is out of range [ 355.042765][T16928] netlink: zone id is out of range [ 355.052524][T16928] netlink: zone id is out of range [ 355.067376][T16928] netlink: zone id is out of range [ 355.083137][T16928] netlink: zone id is out of range [ 355.225323][T16952] x_tables: duplicate underflow at hook 1 [ 355.431233][T16971] vlan2: entered promiscuous mode [ 355.440017][T16971] bridge0: entered promiscuous mode [ 355.475937][T16974] bond11: entered promiscuous mode [ 355.481432][T16974] 8021q: adding VLAN 0 to HW filter on device bond11 [ 355.489275][T16971] netlink: 'syz.0.2945': attribute type 4 has an invalid length. [ 355.508995][T16974] 8021q: adding VLAN 0 to HW filter on device bond11 [ 355.533181][T16974] bond11: (slave sit1): The slave device specified does not support setting the MAC address [ 355.545294][T16974] bond11: (slave sit1): Error -95 calling set_mac_address [ 355.559533][T16979] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 355.906259][T16998] netlink: 'syz.3.2953': attribute type 4 has an invalid length. [ 355.976815][T17001] lo speed is unknown, defaulting to 1000 [ 356.143657][T17013] vlan4: entered allmulticast mode [ 356.148900][T17013] gretap0: entered allmulticast mode [ 356.225200][T17022] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 356.233869][T17022] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 356.245803][T17022] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 356.319688][T17029] syzkaller0: entered promiscuous mode [ 356.327398][T17029] syzkaller0: entered allmulticast mode [ 356.335218][T17029] tipc: Enabled bearer , priority 0 [ 356.342930][T17028] tipc: Resetting bearer [ 356.353738][T17028] tipc: Disabling bearer [ 356.454004][T17031] __nla_validate_parse: 135 callbacks suppressed [ 356.454050][T17031] netlink: 13 bytes leftover after parsing attributes in process `syz.4.2963'. [ 356.471699][T17031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2963'. [ 356.530489][T17036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2964'. [ 356.657938][T17036] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2964'. [ 356.866751][T17060] netlink: 'syz.0.2972': attribute type 1 has an invalid length. [ 357.103584][T17077] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2976'. [ 357.218823][T17070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2976'. [ 357.312146][T17094] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 357.328207][T17094] bond1 (unregistering): Released all slaves [ 357.354751][T17101] blkio.reset_stats is deprecated [ 357.469109][T17110] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2991'. [ 357.596002][ T8200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.617562][ T8200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.762383][T17146] netlink: 'syz.2.2998': attribute type 3 has an invalid length. [ 357.818277][T17155] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3001'. [ 358.026628][T17171] netlink: 'syz.1.3007': attribute type 8 has an invalid length. [ 358.046389][T17170] vlan2: entered promiscuous mode [ 358.070841][T17170] hsr0: entered promiscuous mode [ 358.081289][T17170] vlan2: entered allmulticast mode [ 358.100852][T17170] hsr0: entered allmulticast mode [ 358.115493][T17170] hsr_slave_0: entered allmulticast mode [ 358.121190][T17170] hsr_slave_1: entered allmulticast mode [ 358.234692][T17170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3006'. [ 358.266588][T17170] hsr_slave_0: left promiscuous mode [ 358.282799][T17170] hsr_slave_1: left promiscuous mode [ 358.360841][T17192] netlink: 'syz.1.3013': attribute type 2 has an invalid length. [ 358.431906][ T5626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 358.441182][ T5626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 358.450154][ T5626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 358.460777][ T5626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 358.471055][ T5626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 358.546147][T17202] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3015'. [ 358.626202][ T8202] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.653819][T17212] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 358.670741][T17211] tipc: Enabled bearer , priority 0 [ 358.713732][T17211] syzkaller0: entered promiscuous mode [ 358.738943][T17211] syzkaller0: entered allmulticast mode [ 358.756292][ T8202] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.782961][T17211] tipc: Resetting bearer [ 358.826943][ T8202] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.858140][T17210] tipc: Resetting bearer [ 358.893812][T17210] tipc: Disabling bearer [ 358.945581][ T8202] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.080364][T17243] netlink: 'syz.4.3025': attribute type 2 has an invalid length. [ 359.177238][ T8202] bridge_slave_1: left allmulticast mode [ 359.198008][ T8202] bridge_slave_1: left promiscuous mode [ 359.212111][ T8202] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.242968][ T8202] bridge_slave_0: left allmulticast mode [ 359.262182][ T8202] bridge_slave_0: left promiscuous mode [ 359.273233][ T8202] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.385818][ T8202] bond10 (unregistering): (slave ip6gretap1): Releasing active interface [ 359.551318][ T8202] bond6 (unregistering): (slave gretap3): Releasing active interface [ 359.725950][ T8202] team0: Port device bridge1 removed [ 359.770216][ T8202] bond4 (unregistering): (slave bridge5): Releasing backup interface [ 359.871804][ T8202] bond1 (unregistering): Released all slaves [ 359.909972][ T8202] bond2 (unregistering): Released all slaves [ 359.947720][ T8202] bond0 (unregistering): (slave veth0_to_bond): Releasing active interface [ 359.957824][ T8202] bond0 (unregistering): Released all slaves [ 359.973094][ T8202] bond3 (unregistering): Released all slaves [ 359.985496][ T8202] bond4 (unregistering): Released all slaves [ 360.002193][ T8202] bond5 (unregistering): Released all slaves [ 360.013079][ T8202] bond6 (unregistering): Released all slaves [ 360.023948][ T8202] bond7 (unregistering): Released all slaves [ 360.034754][ T8202] bond8 (unregistering): Released all slaves [ 360.045444][ T8202] bond9 (unregistering): Released all slaves [ 360.055578][ T8202] bond10 (unregistering): Released all slaves [ 360.073405][ T8202] bond11 (unregistering): Released all slaves [ 360.086113][T17196] lo speed is unknown, defaulting to 1000 [ 360.130462][T17277] syzkaller0: entered promiscuous mode [ 360.142370][T17277] syzkaller0: entered allmulticast mode [ 360.161520][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 360.247811][ T8202] tipc: Left network mode [ 360.281742][ T8202] IPVS: stopping backup sync thread 6826 ... [ 360.326798][T17308] netlink: 'syz.4.3034': attribute type 10 has an invalid length. [ 360.484614][T17297] gtp2: entered promiscuous mode [ 360.489603][T17297] gtp2: entered allmulticast mode [ 360.532785][ T5626] Bluetooth: hci2: command tx timeout [ 360.745641][T17337] netlink: 'syz.2.3042': attribute type 1 has an invalid length. [ 361.028113][T17362] netlink: 'syz.4.3044': attribute type 6 has an invalid length. [ 361.046522][T17337] tc_dump_action: action bad kind [ 361.064687][T17196] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.081254][T17196] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.088754][T17196] bridge_slave_0: entered allmulticast mode [ 361.100576][T17196] bridge_slave_0: entered promiscuous mode [ 361.125853][T17196] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.138663][T17196] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.146120][T17196] bridge_slave_1: entered allmulticast mode [ 361.153889][T17196] bridge_slave_1: entered promiscuous mode [ 361.167972][T17368] batman_adv: batadv0: Adding interface: dummy0 [ 361.176870][T17368] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.202874][T17368] batman_adv: batadv0: Interface activated: dummy0 [ 361.226519][T17364] bridge_slave_1: entered allmulticast mode [ 361.249666][T17196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.276021][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 361.297827][T17196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.366961][ T8202] hsr_slave_0: left promiscuous mode [ 361.375122][T17381] netlink: 'syz.4.3048': attribute type 1 has an invalid length. [ 361.383849][ T8202] hsr_slave_1: left promiscuous mode [ 361.586968][T17388] __nla_validate_parse: 6 callbacks suppressed [ 361.586987][T17388] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3049'. [ 361.925366][ T8202] team0 (unregistering): Port device team_slave_1 removed [ 361.937766][ T8202] team0 (unregistering): Port device team_slave_0 removed [ 361.992949][ T8198] smbdirect: ib_dev[syz2] removed [ 362.009873][T17196] team0: Port device team_slave_0 added [ 362.017840][T17196] team0: Port device team_slave_1 added [ 362.060535][T17383] gretap1: entered allmulticast mode [ 362.070503][T17383] bond13: (slave gretap1): making interface the new active one [ 362.081472][T17383] bond13: (slave gretap1): Enslaving as an active interface with an up link [ 362.156662][T17196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.171849][T17196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.199347][T17196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.213112][T17196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.220549][T17196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.263732][T17196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.405726][T17196] hsr_slave_0: entered promiscuous mode [ 362.423621][T17196] hsr_slave_1: entered promiscuous mode [ 362.431976][T17196] debugfs: 'hsr0' already exists in 'hsr' [ 362.451514][T17196] Cannot create hsr debugfs directory [ 362.496690][ T8202] IPVS: stop unused estimator thread 0... [ 362.612529][ T5626] Bluetooth: hci2: command tx timeout [ 362.624501][T17431] block nbd0: server does not support multiple connections per device. [ 362.643570][T17431] block nbd0: shutting down sockets [ 362.861028][T17450] tipc: Resetting bearer [ 362.959619][T17453] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 362.976080][T17454] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 363.089458][T17196] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 363.111776][T17462] Bluetooth: MGMT ver 1.23 [ 363.113039][T17196] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 363.125637][T17196] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 363.137063][T17196] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 363.149519][T17196] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 363.167206][T17196] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 363.185735][T17196] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 363.202858][T17196] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 363.293081][T17477] mac80211_hwsim hwsim47 wlan0: entered promiscuous mode [ 363.301078][T17477] mac80211_hwsim hwsim47 wlan0: entered allmulticast mode [ 363.320704][T17477] net_ratelimit: 24 callbacks suppressed [ 363.320812][T17477] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 363.498903][T17196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.513892][T17487] tc action pedit 'at' offset 9 out of bounds [ 363.538738][T17196] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.562158][ T8198] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.569303][ T8198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.594870][ T8195] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.602378][ T8195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.798015][T17513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3076'. [ 364.054732][T17537] xt_hashlimit: size too large, truncated to 1048576 [ 364.680321][T17196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.692619][ T5626] Bluetooth: hci2: command tx timeout [ 364.781889][T17196] veth0_vlan: entered promiscuous mode [ 364.806330][T17196] veth1_vlan: entered promiscuous mode [ 364.866477][T17196] veth0_macvtap: entered promiscuous mode [ 364.892347][T17196] veth1_macvtap: entered promiscuous mode [ 364.932334][T17196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.969083][T17196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.006526][ T8204] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.034353][ T8204] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.044267][ T8204] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.064694][ T8204] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.129607][ T8204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.148536][ T8204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.184199][ T8204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.200913][ T8204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.218095][T17598] netlink: 'syz.1.3091': attribute type 16 has an invalid length. [ 365.237295][T17598] netlink: 'syz.1.3091': attribute type 3 has an invalid length. [ 365.248355][T17598] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.3091'. [ 365.320522][T17605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3011'. [ 365.346510][T17605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3011'. [ 365.575598][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 365.586152][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 365.594670][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 365.602365][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 365.611461][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 365.929013][ T5631] syz_tun (unregistering): left allmulticast mode [ 365.977357][T17650] netlink: 'syz.4.3100': attribute type 1 has an invalid length. [ 366.067463][T17658] bond14: (slave geneve6): making interface the new active one [ 366.076880][T17658] bond14: (slave geneve6): Enslaving as an active interface with an up link [ 366.091033][ T8202] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 366.120462][T17650] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3100'. [ 366.133989][ T8202] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 366.145695][ T8204] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 366.175572][T17650] 8021q: adding VLAN 0 to HW filter on device bond14 [ 366.193752][ T8204] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 366.290842][T17672] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 366.608748][T17701] netlink: 912 bytes leftover after parsing attributes in process `syz.4.3107'. [ 366.730788][T17709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3108'. [ 366.731590][T17623] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.753752][T17623] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.761384][T17623] bridge_slave_0: entered allmulticast mode [ 366.769406][T17623] bridge_slave_0: entered promiscuous mode [ 366.775609][ T5626] Bluetooth: hci2: command tx timeout [ 366.784718][T17623] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.792323][T17623] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.800122][T17623] bridge_slave_1: entered allmulticast mode [ 366.808510][T17623] bridge_slave_1: entered promiscuous mode [ 366.816206][T17709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.830746][T17709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.879772][T17623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.894718][T17623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.918949][T17623] team0: Port device team_slave_0 added [ 366.926445][T17623] team0: Port device team_slave_1 added [ 366.952586][T17623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.959556][T17623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.985791][T17623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.000792][T17623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.018014][T17623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.046057][T17623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.100257][T17623] hsr_slave_0: entered promiscuous mode [ 367.107684][T17623] hsr_slave_1: entered promiscuous mode [ 367.114670][T17623] debugfs: 'hsr0' already exists in 'hsr' [ 367.120489][T17623] Cannot create hsr debugfs directory [ 367.212375][T17623] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.248391][T17623] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.298923][T17623] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.369878][T17623] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.652832][ T5626] Bluetooth: hci1: command tx timeout [ 368.843928][T17642] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 368.860815][T17623] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 368.887948][T17623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 368.904505][T17623] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 368.915378][T17623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 368.926590][T17623] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 368.950708][T17623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 368.970731][T17623] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 368.998958][T17623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 369.158014][T17769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3110'. [ 369.202669][T17793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3118'. [ 369.310610][T17796] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3119'. [ 369.325565][T17623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.337084][T17796] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3119'. [ 369.356231][T17623] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.369886][T17796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3119'. [ 369.383855][ T8195] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.391388][ T8195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.406702][ T8195] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.414264][ T8195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.425660][T17803] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3120'. [ 369.732828][ T5626] Bluetooth: hci1: command tx timeout [ 369.792621][T17623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.830307][T17623] veth0_vlan: entered promiscuous mode [ 369.844270][T17623] veth1_vlan: entered promiscuous mode [ 369.868713][T17623] veth0_macvtap: entered promiscuous mode [ 369.877335][T17623] veth1_macvtap: entered promiscuous mode [ 369.891680][T17623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.905083][T17623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.917896][ T8196] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.927283][ T8196] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.939548][ T8196] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.949307][ T8196] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.812631][ T5626] Bluetooth: hci1: command tx timeout [ 372.409814][T17800] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 372.490234][ T8196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.498104][ T8196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.533525][T17832] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3128'. [ 372.542791][T17832] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3128'. [ 372.555563][ T8195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.573441][ T8195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.690775][T17842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3130'. [ 372.766563][T17842] 8021q: adding VLAN 0 to HW filter on device bond15 [ 372.792323][T17851] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 372.804458][T17849] xt_CT: No such helper "syz0" [ 372.845164][T17846] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 372.948580][T17863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3135'. [ 372.959568][T17863] netlink: 'syz.0.3135': attribute type 2 has an invalid length. [ 373.003616][T17863] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3135'. [ 373.288594][T17894] netlink: 'syz.3.3144': attribute type 1 has an invalid length. [ 373.297455][T17898] netlink: 'syz.2.3146': attribute type 21 has an invalid length. [ 373.309647][T17898] netlink: 'syz.2.3146': attribute type 1 has an invalid length. [ 373.317808][T17898] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3146'. [ 373.335396][T17896] pim6reg99999999: entered allmulticast mode [ 373.342149][T17894] veth0_to_hsr: entered promiscuous mode [ 373.350179][T17894] veth0_to_hsr: entered allmulticast mode [ 373.892724][ T5626] Bluetooth: hci1: command tx timeout [ 374.160899][T17998] netlink: 280 bytes leftover after parsing attributes in process `syz.2.3167'. [ 374.285709][T18007] netlink: 'syz.0.3168': attribute type 62 has an invalid length. [ 374.405833][T18014] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3172'. [ 374.447308][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 374.457884][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 374.465344][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 374.474798][ T5625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 374.485107][ T5625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 374.745176][T18036] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.3176'. [ 374.762039][T18036] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.3176'. [ 375.034940][T18015] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.043802][T18015] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.051007][T18015] bridge_slave_0: entered allmulticast mode [ 375.057859][T18015] bridge_slave_0: entered promiscuous mode [ 375.066641][T18015] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.074273][T18015] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.081431][T18015] bridge_slave_1: entered allmulticast mode [ 375.088287][T18015] bridge_slave_1: entered promiscuous mode [ 375.110495][T18015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.121986][T18015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.147075][T18015] team0: Port device team_slave_0 added [ 375.154485][T18015] team0: Port device team_slave_1 added [ 375.174942][T18015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.181888][T18015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.207829][T18015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.220403][T18015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.227510][T18015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.254570][T18015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.318243][T18015] hsr_slave_0: entered promiscuous mode [ 375.324586][T18015] hsr_slave_1: entered promiscuous mode [ 375.330671][T18015] debugfs: 'hsr0' already exists in 'hsr' [ 375.336796][T18015] Cannot create hsr debugfs directory [ 375.415600][T18015] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.425972][T18015] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 375.489820][T18015] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.501048][T18015] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 375.558505][T18015] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.570154][T18015] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 375.626291][T18015] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.646207][T18015] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 375.773354][T18015] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 375.785122][T18015] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 375.795424][T18015] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 375.807073][T18015] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 375.821403][T18015] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 375.841070][T18015] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 375.928090][T18015] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 375.944540][T18015] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 375.978130][T18079] syzkaller0: entered promiscuous mode [ 375.983808][T18079] syzkaller0: entered allmulticast mode [ 375.990946][T18079] 0: reclassify loop, rule prio 0, protocol 700 [ 376.064797][T18015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.090143][T18015] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.112292][ T8198] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.119412][ T8198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.157359][ T8198] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.164483][ T8198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.237059][ T29] audit: type=1804 audit(1781949882.683:10): pid=18105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3193" name="/newroot/21/cgroup.controllers" dev="tmpfs" ino=126 res=1 errno=0 [ 376.293694][ T29] audit: type=1800 audit(1781949882.683:11): pid=18105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3193" name="cgroup.controllers" dev="tmpfs" ino=126 res=0 errno=0 [ 376.544278][ T5626] Bluetooth: hci3: command tx timeout [ 376.621172][T18015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.734871][T18015] veth0_vlan: entered promiscuous mode [ 376.743226][T18015] veth1_vlan: entered promiscuous mode [ 376.759830][T18015] veth0_macvtap: entered promiscuous mode [ 376.767344][T18015] veth1_macvtap: entered promiscuous mode [ 376.778681][T18015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.790183][T18015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.800862][ T8188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.819564][ T8204] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.846113][ T8204] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.857891][ T8204] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.612626][ T5626] Bluetooth: hci3: command tx timeout [ 379.510821][T18131] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 379.557238][ T8198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.599348][ T8198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.628695][T18177] xt_l2tp: invalid flags combination: 8 [ 379.725294][T18192] __nla_validate_parse: 2 callbacks suppressed [ 379.725324][T18192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3208'. [ 379.774199][ T8188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.785524][ T8188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.952346][T18207] netlink: 'syz.0.3213': attribute type 1 has an invalid length. [ 380.175318][T18227] netlink: 'syz.0.3219': attribute type 1 has an invalid length. [ 380.239286][T18227] bond1: entered promiscuous mode [ 380.250119][T18227] 8021q: adding VLAN 0 to HW filter on device bond1 [ 380.261801][T18232] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 380.273785][T18232] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 380.300150][T18239] bond1: (slave bridge3): making interface the new active one [ 380.310461][T18239] bridge3: entered promiscuous mode [ 380.316677][T18239] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 380.438759][T18248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3223'. [ 380.455274][T18248] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3223'. [ 380.542123][T18256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3227'. [ 380.567161][T18256] bond1: Invalid ad_actor_system MAC address. [ 380.574185][T18256] bond1: option ad_actor_system: invalid value (7) [ 380.581737][T18256] bond1 (unregistering): Released all slaves [ 380.692819][ T5625] Bluetooth: hci3: command tx timeout [ 380.744491][T18272] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3230'. [ 380.834507][T18277] netlink: 'syz.4.3232': attribute type 4 has an invalid length. [ 380.842679][T18277] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3232'. [ 380.973399][T18283] syzkaller0: entered promiscuous mode [ 380.988421][T18283] syzkaller0: entered allmulticast mode [ 381.003873][T18283] tipc: Started in network mode [ 381.008930][T18283] tipc: Node identity 7abd157c7757, cluster identity 4711 [ 381.029332][T18283] tipc: Enabled bearer , priority 0 [ 381.045660][T18281] tipc: Resetting bearer [ 381.059389][T18281] tipc: Disabling bearer [ 381.249766][T18298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3239'. [ 381.586747][T18314] netlink: 'syz.1.3244': attribute type 1 has an invalid length. [ 381.630899][T18314] bond1: option mode: invalid value (13) [ 381.646901][T18314] bond1 (unregistering): Released all slaves [ 382.117661][T18349] tipc: Started in network mode [ 382.129053][T18349] tipc: Node identity 1ab36119b76f, cluster identity 4711 [ 382.152625][T18349] tipc: Enabled bearer , priority 0 [ 382.170976][T18354] syzkaller0: entered promiscuous mode [ 382.176881][T18354] syzkaller0: entered allmulticast mode [ 382.223386][T18356] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3254'. [ 382.243221][T18354] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 382.319667][T18356] netlink: 'syz.4.3254': attribute type 1 has an invalid length. [ 382.330565][T18354] tipc: Resetting bearer [ 382.339954][T18365] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3256'. [ 382.354566][T18356] netlink: 'syz.4.3254': attribute type 2 has an invalid length. [ 382.395406][T18356] netlink: 'syz.4.3254': attribute type 1 has an invalid length. [ 382.433465][T18349] infiniband syz0: set down [ 382.435257][T18356] netlink: 'syz.4.3254': attribute type 2 has an invalid length. [ 382.443705][T18349] infiniband syz0: added ipvlan0 [ 382.476349][T18349] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 382.495375][T18349] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 382.581175][T18349] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 382.656384][ T8021] hsr0: entered promiscuous mode [ 382.689361][T18349] RDS/IB: syz0: added [ 382.702705][T18349] smc: adding ib device syz0 with port count 1 [ 382.721937][T18349] smc: ib device syz0 port 1 has no pnetid [ 382.740189][T18374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3258'. [ 382.773348][ T5625] Bluetooth: hci3: command 0x0419 tx timeout [ 382.955479][T18338] tipc: Resetting bearer [ 383.025047][T18338] tipc: Disabling bearer [ 383.064725][T18381] syzkaller1: entered promiscuous mode [ 383.078557][T18381] syzkaller1: entered allmulticast mode [ 383.117218][T18381] team1: entered promiscuous mode [ 383.122352][T18381] team1: entered allmulticast mode [ 383.128428][T18381] 8021q: adding VLAN 0 to HW filter on device team1 [ 383.447764][T18397] syzkaller0: entered promiscuous mode [ 383.468389][T18397] syzkaller0: entered allmulticast mode [ 383.804984][T18403] netlink: 'syz.0.3270': attribute type 10 has an invalid length. [ 383.848615][T18403] team0: Port device dummy0 added [ 384.648139][T18454] hm3): entered promiscuous mode [ 384.853373][ T5626] Bluetooth: hci3: command 0x0419 tx timeout [ 384.862002][T18403] __nla_validate_parse: 9 callbacks suppressed [ 384.862016][T18403] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3270'. [ 384.943311][T18458] 5: entered promiscuous mode [ 385.221704][T18472] netlink: 'syz.4.3287': attribute type 1 has an invalid length. [ 385.258154][T18472] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.306859][T18472] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3287'. [ 385.703525][T18499] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3292'. [ 386.723336][T18536] syzkaller0: entered promiscuous mode [ 386.746888][T18536] syzkaller0: entered allmulticast mode [ 387.015559][T18563] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3305'. [ 387.640052][T18616] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3320'. [ 388.069655][T18641] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3327'. [ 388.363725][T18664] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3331'. [ 388.410111][T18668] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 388.432540][T18668] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 388.688828][T18679] netlink: 'syz.4.3336': attribute type 5 has an invalid length. [ 389.228529][T18706] ip6gre1: entered promiscuous mode [ 389.234093][T18706] ip6gre1: entered allmulticast mode [ 389.275504][ T8199] ------------[ cut here ]------------ [ 389.281010][ T8199] wlan1: Dropped data frame as no usable bitrate found while scanning and associated. Target station: 08:02:11:00:00:00 on 5 GHz band [ 389.294821][ T8199] WARNING: net/mac80211/tx.c:757 at ieee80211_tx_h_rate_ctrl+0xbd5/0x1760, CPU#1: kworker/u8:56/8199 [ 389.305867][ T8199] Modules linked in: [ 389.309790][ T8199] CPU: 1 UID: 0 PID: 8199 Comm: kworker/u8:56 Not tainted syzkaller #0 PREEMPT(full) [ 389.319435][ T8199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 389.329538][ T8199] Workqueue: events_unbound cfg80211_wiphy_work [ 389.335907][ T8199] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xc46/0x1760 [ 389.342431][ T8199] Code: bf 09 00 00 48 8b 44 24 10 8b 30 45 31 ed 83 e6 07 41 0f 95 c5 31 ff e8 08 b8 a3 f6 43 8d 4c 6d 02 48 89 df 4c 89 f6 4c 89 e2 <67> 48 0f b9 3a 41 bd 01 00 00 00 e9 dd 01 00 00 e8 a5 b3 a3 f6 48 [ 389.362148][ T8199] RSP: 0018:ffffc900034a74a0 EFLAGS: 00010293 [ 389.368332][ T8199] RAX: ffffffff8b224258 RBX: ffffffff90430cd0 RCX: 0000000000000005 [ 389.376337][ T8199] RDX: ffff8880554c6404 RSI: ffff888046025998 RDI: ffffffff90430cd0 [ 389.384344][ T8199] RBP: ffffc900034a7610 R08: ffff888064672abf R09: 1ffff1100c8ce557 [ 389.392329][ T8199] R10: dffffc0000000000 R11: ffffed100c8ce558 R12: ffff8880554c6404 [ 389.400332][ T8199] R13: 0000000000000001 R14: ffff888046025998 R15: dffffc0000000000 [ 389.408335][ T8199] FS: 0000000000000000(0000) GS:ffff88812537c000(0000) knlGS:0000000000000000 [ 389.417299][ T8199] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 389.423917][ T8199] CR2: 00007f3c8f0da6b0 CR3: 00000000757e4000 CR4: 00000000003526f0 [ 389.431910][ T8199] Call Trace: [ 389.435255][ T8199] [ 389.438265][ T8199] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 389.444448][ T8199] ? ieee80211_is_bufferable_mmpdu+0x103/0x200 [ 389.450678][ T8199] invoke_tx_handlers_late+0xb5/0x1830 [ 389.456169][ T8199] ? sta_info_get+0x2ec/0x300 [ 389.460948][ T8199] ? invoke_tx_handlers_early+0xa30/0x1cf0 [ 389.466792][ T8199] ieee80211_tx+0x2d7/0x4b0 [ 389.471303][ T8199] ? __pfx_ieee80211_tx+0x10/0x10 [ 389.476379][ T8199] ? ieee80211_set_qos_hdr+0x1d8/0x530 [ 389.481952][ T8199] ? ieee80211_xmit+0x2e5/0x3c0 [ 389.486843][ T8199] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 389.492858][ T8199] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 389.498685][ T8199] ? ieee80211_scan_state_send_probe+0x4e6/0xa00 [ 389.505140][ T8199] ieee80211_scan_state_send_probe+0x5b3/0xa00 [ 389.511319][ T8199] ieee80211_scan_work+0x488/0x1ab0 [ 389.516576][ T8199] cfg80211_wiphy_work+0x29e/0x420 [ 389.521714][ T8199] ? process_scheduled_works+0xa20/0x14e0 [ 389.527577][ T8199] process_scheduled_works+0xa8e/0x14e0 [ 389.533164][ T8199] ? __pfx_process_scheduled_works+0x10/0x10 [ 389.539162][ T8199] ? do_raw_spin_lock+0x12b/0x2f0 [ 389.544246][ T8199] ? assign_work+0x3cf/0x5d0 [ 389.548869][ T8199] worker_thread+0xa47/0xfb0 [ 389.553518][ T8199] kthread+0x388/0x470 [ 389.557600][ T8199] ? __pfx_worker_thread+0x10/0x10 [ 389.562747][ T8199] ? __pfx_kthread+0x10/0x10 [ 389.567356][ T8199] ret_from_fork+0x514/0xb70 [ 389.571990][ T8199] ? __pfx_ret_from_fork+0x10/0x10 [ 389.577142][ T8199] ? __switch_to+0xc89/0x1420 [ 389.581829][ T8199] ? __pfx_kthread+0x10/0x10 [ 389.586456][ T8199] ret_from_fork_asm+0x1a/0x30 [ 389.591272][ T8199] [ 389.594353][ T8199] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 389.601634][ T8199] CPU: 1 UID: 0 PID: 8199 Comm: kworker/u8:56 Not tainted syzkaller #0 PREEMPT(full) [ 389.611185][ T8199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 389.621248][ T8199] Workqueue: events_unbound cfg80211_wiphy_work [ 389.627519][ T8199] Call Trace: [ 389.630804][ T8199] [ 389.633739][ T8199] vpanic+0x56c/0xa60 [ 389.637756][ T8199] ? __pfx__printk+0x10/0x10 [ 389.642356][ T8199] ? __pfx_vpanic+0x10/0x10 [ 389.646865][ T8199] ? is_bpf_text_address+0x292/0x2b0 [ 389.652214][ T8199] ? is_bpf_text_address+0x26/0x2b0 [ 389.657428][ T8199] panic+0xc5/0xd0 [ 389.661156][ T8199] ? __pfx_panic+0x10/0x10 [ 389.665583][ T8199] ? ret_from_fork_asm+0x1a/0x30 [ 389.670531][ T8199] __warn+0x315/0x4c0 [ 389.674520][ T8199] ? ieee80211_tx_h_rate_ctrl+0xbd5/0x1760 [ 389.680339][ T8199] ? ieee80211_tx_h_rate_ctrl+0xbd5/0x1760 [ 389.686157][ T8199] __report_bug+0x331/0x530 [ 389.690772][ T8199] ? ieee80211_tx_h_rate_ctrl+0xbd5/0x1760 [ 389.696591][ T8199] ? __pfx___report_bug+0x10/0x10 [ 389.701627][ T8199] ? irqentry_exit+0x218/0x8f0 [ 389.706511][ T8199] ? ieee80211_tx_h_rate_ctrl+0xc4b/0x1760 [ 389.712326][ T8199] ? ieee80211_tx_h_rate_ctrl+0xc46/0x1760 [ 389.718142][ T8199] ? pt_regs_val+0xc/0x70 [ 389.722484][ T8199] report_bug_entry+0x19a/0x290 [ 389.727345][ T8199] ? ieee80211_tx_h_rate_ctrl+0xc46/0x1760 [ 389.733158][ T8199] ? ieee80211_tx_h_rate_ctrl+0xc4b/0x1760 [ 389.738973][ T8199] handle_bug+0xce/0x200 [ 389.743296][ T8199] exc_invalid_op+0x1a/0x50 [ 389.747809][ T8199] asm_exc_invalid_op+0x1a/0x20 [ 389.752697][ T8199] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xc46/0x1760 [ 389.759122][ T8199] Code: bf 09 00 00 48 8b 44 24 10 8b 30 45 31 ed 83 e6 07 41 0f 95 c5 31 ff e8 08 b8 a3 f6 43 8d 4c 6d 02 48 89 df 4c 89 f6 4c 89 e2 <67> 48 0f b9 3a 41 bd 01 00 00 00 e9 dd 01 00 00 e8 a5 b3 a3 f6 48 [ 389.778736][ T8199] RSP: 0018:ffffc900034a74a0 EFLAGS: 00010293 [ 389.784817][ T8199] RAX: ffffffff8b224258 RBX: ffffffff90430cd0 RCX: 0000000000000005 [ 389.792799][ T8199] RDX: ffff8880554c6404 RSI: ffff888046025998 RDI: ffffffff90430cd0 [ 389.800782][ T8199] RBP: ffffc900034a7610 R08: ffff888064672abf R09: 1ffff1100c8ce557 [ 389.808765][ T8199] R10: dffffc0000000000 R11: ffffed100c8ce558 R12: ffff8880554c6404 [ 389.816746][ T8199] R13: 0000000000000001 R14: ffff888046025998 R15: dffffc0000000000 [ 389.824729][ T8199] ? ieee80211_tx_h_rate_ctrl+0xc38/0x1760 [ 389.830557][ T8199] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 389.836627][ T8199] ? ieee80211_is_bufferable_mmpdu+0x103/0x200 [ 389.842780][ T8199] invoke_tx_handlers_late+0xb5/0x1830 [ 389.848231][ T8199] ? sta_info_get+0x2ec/0x300 [ 389.852903][ T8199] ? invoke_tx_handlers_early+0xa30/0x1cf0 [ 389.858703][ T8199] ieee80211_tx+0x2d7/0x4b0 [ 389.863197][ T8199] ? __pfx_ieee80211_tx+0x10/0x10 [ 389.868218][ T8199] ? ieee80211_set_qos_hdr+0x1d8/0x530 [ 389.873672][ T8199] ? ieee80211_xmit+0x2e5/0x3c0 [ 389.878509][ T8199] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 389.884481][ T8199] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 389.890282][ T8199] ? ieee80211_scan_state_send_probe+0x4e6/0xa00 [ 389.896606][ T8199] ieee80211_scan_state_send_probe+0x5b3/0xa00 [ 389.902760][ T8199] ieee80211_scan_work+0x488/0x1ab0 [ 389.907958][ T8199] cfg80211_wiphy_work+0x29e/0x420 [ 389.913064][ T8199] ? process_scheduled_works+0xa20/0x14e0 [ 389.918773][ T8199] process_scheduled_works+0xa8e/0x14e0 [ 389.924320][ T8199] ? __pfx_process_scheduled_works+0x10/0x10 [ 389.930290][ T8199] ? do_raw_spin_lock+0x12b/0x2f0 [ 389.935307][ T8199] ? assign_work+0x3cf/0x5d0 [ 389.939887][ T8199] worker_thread+0xa47/0xfb0 [ 389.944476][ T8199] kthread+0x388/0x470 [ 389.948528][ T8199] ? __pfx_worker_thread+0x10/0x10 [ 389.953630][ T8199] ? __pfx_kthread+0x10/0x10 [ 389.958206][ T8199] ret_from_fork+0x514/0xb70 [ 389.962783][ T8199] ? __pfx_ret_from_fork+0x10/0x10 [ 389.967884][ T8199] ? __switch_to+0xc89/0x1420 [ 389.972553][ T8199] ? __pfx_kthread+0x10/0x10 [ 389.977138][ T8199] ret_from_fork_asm+0x1a/0x30 [ 389.981908][ T8199] [ 389.985242][ T8199] Kernel Offset: disabled [ 389.989556][ T8199] Rebooting in 86400 seconds..