last executing test programs: 3m3.718892979s ago: executing program 1 (id=5426): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(r1, &(0x7f0000000800)={0xa, 0x4e24, 0x8000c0, @mcast2, 0xc58e}, 0x1c) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000180)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108ec50000fffffffffffff8ffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f00000003c0)={0x14ae4701}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c000000100001002fbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="572702000000001400030064756d8c0000000208001d0001800000000000001d00000000"], 0x3c}}, 0x24040800) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x14, 0x11, 0x0, @private1, @mcast2, {[@fragment={0x88, 0x0, 0x85, 0x0, 0x0, 0x8, 0x65}], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 3m3.718309748s ago: executing program 1 (id=5427): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xfa3b6b2883b6fee3) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000280)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES8=0x0], 0x154}, 0x1, 0x0, 0x0, 0x8005}, 0x800) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x13, r2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x9, &(0x7f0000000140)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x28}, [@map_val={0x18, 0xa, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff9}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x10}]}, &(0x7f0000000480)='GPL\x00'}, 0x94) (async) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) socket$unix(0x1, 0x2, 0x0) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000180001002cbd7000000000000a100000fc02ff000000000008000400", @ANYRES32=r5, @ANYBLOB="0600150008000000100016800c"], 0x3c}}, 0x0) 3m3.631244193s ago: executing program 1 (id=5429): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004802c00018008000100636d70"], 0x84}}, 0x0) (async, rerun: 64) close(r0) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 64) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x304}, "d8cbba097ad5cf6a", "06b74c62d85164e4eaf2f237889223cc", "990db03f", "54ce5aaa100e1c1e"}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "0001000000000100", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) (async, rerun: 32) connect$llc(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3m3.526788058s ago: executing program 1 (id=5431): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xb8, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0xff, 0x0, 'hsr0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) (async) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000001080), &(0x7f00000010c0)=0x4) (async) r2 = socket(0x2c, 0x80805, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000500000000000000b64f7110b5000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x140b, 0xddc7ec68a2052e43, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) (async) sendmsg$rds(r3, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000480)=""/190, 0xbe}], 0x1, &(0x7f0000001c00)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000001a00)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0x4f}], 0x1}}], 0x48}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x23, &(0x7f0000000140)={0x0, {{0x29, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x88) (async) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000000010104000000000000000002002000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140002000000000000000000080002007f0000010c0002800500010000000000080007400000000004000480"], 0x68}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) (async) socketpair(0x5, 0x80000, 0x5, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r8, &(0x7f0000001240)="085a06f8838ab3f5aec405c77153c9ea439f69e10b29a5ab636caa2900da157c7f8920e478bd22c0b83049e22f435f6e9117acb62c25a492171153105bbf01f83b3d1434ccce6cb5c098baaf3e0ca1bc50bd3696b96b26e6a9d4bfe36779c0b3e2aea5efe9e6987a937ffeb519a2", 0x6e, 0x8000, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000001100)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001140)=0x18) (async) getsockopt$bt_hci(r2, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32, @ANYBLOB="050001"], 0x38}}, 0x0) 3m3.512662749s ago: executing program 1 (id=5432): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0x1400, 0x7, 0x3}]}}]}, 0x48}}, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000001200)={r0, 0x9, 0xfff8}) 3m3.484455502s ago: executing program 1 (id=5433): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c459434390a56366e46ac53d4639f994b7c99f49e81cd729d6c45d0ef12c36ed0d7dfd88e8b3f8497915f86a054d2c70a62f75cca28e2a33ca05846b4edda4e59b1136e15be0d829db20527d"], 0x48) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509000000d44a6be5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4a, &(0x7f0000000600)=0x3fa, 0x4) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 2m47.47389805s ago: executing program 32 (id=5433): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c459434390a56366e46ac53d4639f994b7c99f49e81cd729d6c45d0ef12c36ed0d7dfd88e8b3f8497915f86a054d2c70a62f75cca28e2a33ca05846b4edda4e59b1136e15be0d829db20527d"], 0x48) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509000000d44a6be5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4a, &(0x7f0000000600)=0x3fa, 0x4) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 2m38.82085641s ago: executing program 3 (id=5747): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000140)={0x0, 0x300000, 0x1000, 0x9, 0x2}, 0x20) (async) write(r0, &(0x7f0000000080)="defb8f697876c8f9335fb16e507719b6b09e460e867c9495ca4eaef74a18edd6e90448643147994ddb20225baa08b51e33685064d7f988fad83e21b1d9d1a835d041a9577e24e24b16c18b96060e851ec4946c23cfb3ea0abcf7ea", 0x5b) 2m38.759557072s ago: executing program 3 (id=5748): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x1e, 0x1, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="34010000", @ANYRES16=r6, @ANYBLOB="0100000000003fc14d7a0100000004000480080002000100000008000100000000000400088008010c8054000b800800090000000000080009000000000008000a0000000000080009000000000008000a00000000000800090000000009"], 0x134}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r5) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="670000000000000000000000000000807110b100000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7, @ANYBLOB="05f300000000000000002000000004000380"], 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x7956}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0xdd1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x48d2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8}, 0x24000040) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)=""/93, 0x5d}, {&(0x7f0000000600)=""/82, 0x52}, {&(0x7f0000000680)=""/125, 0x7d}], 0x3, &(0x7f0000000740)=""/21, 0x15}, 0x4da}, {{&(0x7f0000000780)=@isdn, 0x80, &(0x7f0000000840)=[{&(0x7f0000000800)=""/1, 0x1}], 0x1}, 0x9}], 0x2, 0x10040, &(0x7f0000000900)) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000140)={'batadv_slave_1\x00', @local}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 2m38.524925953s ago: executing program 3 (id=5752): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x3a) (async) r3 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1={0xff, 0x3}}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1feff, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) clock_gettime(0xfffffff2, 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x2c, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @empty, "fd0c"}}}}}, 0x0) (async) syz_emit_ethernet(0x2c, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @empty, "fd0c"}}}}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmmsg$alg(r6, &(0x7f0000007300), 0x0, 0x20000000) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)=@getsa={0x34, 0x12, 0x1, 0x4, 0x0, {@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x0, 0x32}, [@mark={0xc, 0x15, {0x35075d}}]}, 0xfffffffffffffe10}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x34, r8, 0x433, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000048}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r4, 0x1, 0x80004, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000084}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1b, 0x14, &(0x7f0000001740)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@tail_call], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x10, 0x3, 0x0) (async) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001280)={0x18, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4, 0x6}]}, 0x18}}, 0x0) (async) sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001280)={0x18, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4, 0x6}]}, 0x18}}, 0x0) setsockopt$inet_int(r9, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) listen(r9, 0x0) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r11, 0x0, 0x31, &(0x7f0000000000)=0x80000000, 0x4) (async) setsockopt$inet_int(r11, 0x0, 0x31, &(0x7f0000000000)=0x80000000, 0x4) 2m37.913052503s ago: executing program 3 (id=5757): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) readv(r0, &(0x7f0000000840)=[{&(0x7f0000000580)=""/144, 0x90}, {&(0x7f0000000640)=""/60, 0x3c}, {&(0x7f0000000680)=""/116, 0x74}, {&(0x7f0000000700)=""/114, 0x72}, {&(0x7f0000000780)=""/187, 0xbb}], 0x5) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000440)={0xde, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e21, @rand_addr=0x64010100}}}, 0x108) (async) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r5, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x44, 0x28, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'wlan1\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) (async) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x24, &(0x7f0000019080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000002500090122bd7008fcffffff0200f0110c003d800800cb00534b46a2f24ee504b69175f00d2a4485a9b5dd9cf1dc0702d52bad5b66d934367af1df5cec98209066e9e77c118350bd51d883c370c018b08bc675fdcf5303304ac7cb18", @ANYRES32, @ANYBLOB="0800030033000000"], 0x28}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r10 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf2531000000080001006200000008000300", @ANYRES32=r9, @ANYRES64=r3, @ANYRES32=r10, @ANYBLOB="93019e36", @ANYRES32=r9, @ANYBLOB="0800db00", @ANYRES32=r2, @ANYBLOB="080001000a000000"], 0x58}, 0x1, 0x0, 0x0, 0x2000c014}, 0x4a2) (async) getsockopt$inet_mreq(r7, 0x0, 0x20, &(0x7f00000001c0)={@broadcast}, &(0x7f0000000400)=0x8) 2m37.663178958s ago: executing program 3 (id=5763): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000400"], 0x0, 0x34}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0xff, 0x0, 'hsr0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0xe8}}, 0x0) 2m37.349458835s ago: executing program 3 (id=5769): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "55c926d748e9219f0595ad24890a6a15b2d52368edf173313fe245fb5ed9af9e", "fc3ebcf63a94a908599549df41158f149c5e1ce4e2082ab95ca423907d3ef289", "11c948cbc903529e681aca17173ac072b9b50f709829a5ec17155fe68a6829dd", "fede46b54094378d3bbcaaebcd42971817a4c31e9ec87f80b16012641e0dce25", "37ad975abe70c433906fdf7d67be68e374ec371af7752d9fb41a35fb9f55f0b5", "93479de76a07e7caf29fc22b", 0x7, 0x404, 0x7f, 0x5d46, 0x6}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000440)={0x2, 0x3}, 0x8) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0xffd5, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4040090) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="b8000000290001000000000000080000ac1414bb000000000000000000000000fc00000000000000000000000000000000000000100000000200200000000000", @ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="000000000000ea44000000000000000000000000000000000000000000000000010000000000000009000000000000000a000000000000000000000000000000010000000000000002"], 0xb8}, 0x1, 0x0, 0x0, 0x2404c831}, 0x0) 2m22.167327879s ago: executing program 33 (id=5769): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "55c926d748e9219f0595ad24890a6a15b2d52368edf173313fe245fb5ed9af9e", "fc3ebcf63a94a908599549df41158f149c5e1ce4e2082ab95ca423907d3ef289", "11c948cbc903529e681aca17173ac072b9b50f709829a5ec17155fe68a6829dd", "fede46b54094378d3bbcaaebcd42971817a4c31e9ec87f80b16012641e0dce25", "37ad975abe70c433906fdf7d67be68e374ec371af7752d9fb41a35fb9f55f0b5", "93479de76a07e7caf29fc22b", 0x7, 0x404, 0x7f, 0x5d46, 0x6}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000440)={0x2, 0x3}, 0x8) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0xffd5, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4040090) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="b8000000290001000000000000080000ac1414bb000000000000000000000000fc00000000000000000000000000000000000000100000000200200000000000", @ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="000000000000ea44000000000000000000000000000000000000000000000000010000000000000009000000000000000a000000000000000000000000000000010000000000000002"], 0xb8}, 0x1, 0x0, 0x0, 0x2404c831}, 0x0) 1m17.955379203s ago: executing program 4 (id=6877): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x81, 0x2, 0x80, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x9, 0x0, 0x22}, 0xe) shutdown(r0, 0x0) syz_emit_ethernet(0x6f, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000002", 0x39, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts], "fb"}}}}}}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)="4bafcd7ebae5f0def07fcee3888dd79853b9ece6de358600db1551c185e070e028fa0818037da842b28d42ca81e281e87483f9ba845046d5af66abc540e0cd73a0036bf756d117a318fb", 0x4a}], 0x1}], 0x1, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000080)={r3}, &(0x7f0000000140)=0x8) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, r5, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xd}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xc049}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000040}, 0x854) 1m17.806537479s ago: executing program 4 (id=6881): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0xffff, 0x4) ioctl$sock_bt_hci(r0, 0x800448d3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 1m17.488456786s ago: executing program 4 (id=6884): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x0, 0x2}, 0x10) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) ioctl(r0, 0x8b29, &(0x7f0000000040)) 1m17.450835193s ago: executing program 4 (id=6889): r0 = accept4$llc(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x80000) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000200)=0x7fffffff, 0x4) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r3 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f00000035c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}], 0x1, 0x84) recvmsg$can_raw(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000440)=""/127, 0x7f}], 0x1}, 0x40) (async) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000140)={'xfrm0\x00', 0x2}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300002000000085000000c800000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0xff6, &(0x7f0000000c40)=""/4086, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x62) (async) listen(r5, 0x3) (async, rerun: 64) r6 = socket$kcm(0x1e, 0x4, 0x0) (rerun: 64) sendmsg$kcm(r6, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000026000100fdff070000100000040000458d22cc80"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async) accept$nfc_llcp(r5, 0x0, 0x0) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380080018", @ANYRESDEC=r4], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1m17.383912547s ago: executing program 4 (id=6891): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYRES8], 0x48) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) bind$bt_hci(r2, &(0x7f0000000180)={0x27}, 0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000000), 0x6) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000040)='syzkaller\x00', 0x2}, 0x94) bind$tipc(r5, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket(0x28, 0x80805, 0xffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x11, &(0x7f0000000540)=ANY=[@ANYRESHEX=r10, @ANYRESHEX=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000000100008520000002000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x13, 0xdf, &(0x7f0000000f80)=""/223, 0x0, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0x3, 0x7, 0xfffffffc}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000007c0)=[0x1], &(0x7f0000000800)=[{0x1, 0x4, 0xd, 0x8}, {0x1, 0x2, 0x7, 0xb}, {0x0, 0x4, 0xa, 0x2}, {0x1, 0x2, 0xf, 0xa}, {0x1, 0x4, 0x7, 0xb}, {0x1, 0x3}, {0x2, 0x5, 0x4, 0x3}, {0x2, 0x3, 0xe, 0x6}], 0x10, 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r13, 0xe0, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000940)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0], 0x0, 0xa4, &(0x7f0000000a40)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0xa0, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000c80)={@local, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xb, @multicast, @remote, @multicast, @empty}}}}, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000b40)={r11, 0x0, 0x6, [0xfffb, 0xb, 0x8, 0x7, 0x7, 0x1]}, &(0x7f0000000b80)=0x14) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x74, &(0x7f0000000100)={r12, 0x0, 0x10, 0x20000000006, 0xb1aa}, &(0x7f0000000040)=0x18) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4e0, 0x0, 0xffffffff, 0xffffffff, 0x1b0, 0xffffffff, 0x410, 0xffffffff, 0xffffffff, 0x410, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffffff, 0x0, 0x0, 0xff0000ff], [], 'veth0_macvtap\x00', 'ipvlan0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0x148, 0x1b0, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00', 0xfd}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x29, 0x1ff, 0x6, 0xb0e6, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x800, 0x1, 0x6, 'netbios-ns\x00', 'syz0\x00', {0x8}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x4}, 0x0, 0x1f8, 0x260, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x10000, 0x0, 0x7, 0x3ff}}}, @common=@inet=@recent0={{0xf8}, {0xffff, 0x40, 0x4, 0x1, 'syz1\x00', 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x8, 0x2, 0x8, 'pptp\x00', 'syz1\x00', {0x886cb6b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x55d) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffff7}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x81) 1m17.277280832s ago: executing program 4 (id=6893): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x26, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) sendmsg$nl_generic(r2, &(0x7f0000000c00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000800)={0x3ac, 0x42, 0x200, 0x70bd2d, 0x25dfdbfe, {0x20}, [@nested={0x241, 0x152, 0x0, 0x1, [@typed={0x9, 0x141, 0x0, 0x0, @str='%))#\x00'}, @typed={0x1d, 0x4d, 0x0, 0x0, @binary="e0c27518b89bb29a366fd2acaa4f4944bcca9aed5398fac1a3"}, @nested={0x4, 0x104}, @generic="e9aa8783e3867d827b4ef7633603af41c52984f04c9f74d86ab97a1758adfc90ff6eb8742594675707cf81b18fe49e6db2b9a05f30079e1dbd4151891b0ba5c0e27870d1d0533d2f10702321e28635248c4e593b47f1f25ee35a7db3781596234216762550a7155c54a8617677eaee29ceafd2817e9999fc3df067ee77e0ef83c85dd2131348b5943d5f582089ce30f4f54ff2a7bd30e44b5f9929e1358054919b26b710b1193d71fd38efcd850cf87ebd0b80", @generic="4c57fa0a1d137df6d3fe6b8d8baf0a6f0869cd6a67dc4f2022d02f8eaacd946f2ee065581b6db4b6a9aca01a8e393c4821441ad9b41683e03276557b1a5535a15b0446fe39386a4898e14cdcb8b1b061ae21f33a6656fc69fb2deca30bb09e9762949916c8f610b01deea81bd44cfcad172d8b75157715bae8900f446348a478015745b4131506a4193d11db208ccbe17181ee719ab33e0fcf9535009de9a31cada0a915212c87eaf1cb797a8cb6f45cc58b15b314bfb428d136532649fcf53edcb3f8c809dafca76ec025800377ad381613bb8aa19817", @generic="798b0b68b52f05cb9ee85fce24f384128c2003b647a5c95de036cb4d754375e243e7c80f558f90887dc4d8eb6c6afbae7cc4440f2e603e48ed22bed0e518b119193ecbf2310c5064f260f9b1b91036aaaef165c7164f5b09f307da3dc933729fde8706ce3846342af46d23c5341d5fe95bef02edee579850a2f01d30254859", @nested={0x4, 0x3e}]}, @generic="e5169fd90366e0e09cceaecd389f60397282876ced2cbf232fe62628afae848d953a5e8ea7056e12efaadeaed4b9e2c9455940f58d82113ed1470532520ce4c3b93fbd83806f209e28efa0785830362cb7f5fd6bd95569342f4490cb6c6db1b9d0a40c9b6e915c95e482797a98be9a15207ac5df347e", @generic="540d13bda3bda9dff7e95ddbbbf35f163cc109425559171161e55b4ba83a04acb75de943630c67b7f8ba0c19b76aebe530df3b50d65a93ca5d4e45c3a9c75d7b38551136b1d49b7a76ec51de3ae7a18dc34b80837fe9052cfaa09922f8fb9bbaa21ce810bd1ec40dc59697b8e875b73263e43ba9d12c9b1df4dc5657c53aae935bc0049b26f947c5cc84eca869601ca866a8a38eedae4aa574c06d6e7294c046f4ea1c82ef490dda8d11c1a8364e043d089a3dab90e0fbe21055b4c349617259eee417191d52c4162212f2a5ef3032310bae5c", @typed={0x8, 0x10, 0x0, 0x0, @fd=r0}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x40084}, 0x8000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300100000000000fbdbdf2500000000000000000000000000000001ac1414bb00000000000000000000000000000004000000000a0060803b000000", @ANYRES32=0x0], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2081}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x90, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x40}, {0x8, 0x13, 0x9}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x7}, {0x5, 0x14, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}}, @NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xb}}}, 0x78}, 0x1, 0x0, 0x0, 0x90}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000002c0)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, &(0x7f0000000480)={"fb7aba0155146d98238dfd3c589b092c", 0x0, 0x0, {0x48de24b8, 0xffffffff}, {0x7ff, 0x8}, 0x1, [0x8000000000000000, 0x4, 0x0, 0x9, 0xf7, 0x8, 0x0, 0x6, 0x1b6, 0x3, 0x98, 0x2, 0xfffffffffffffff9, 0x4, 0x1, 0x401]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r8, 0xc0c89425, &(0x7f0000000580)={"f76893082b5ded902d4624908bed9c50", 0x0, r9, {0x56334d2, 0xbb02}, {0x2, 0x1}, 0x0, [0x5, 0x7, 0x6, 0x100, 0x72, 0x3, 0x7fffffffffffffff, 0x1, 0xf3, 0x142943bb, 0x1, 0x100000001, 0x5, 0x0, 0x7, 0x6]}) 1m2.202039418s ago: executing program 34 (id=6893): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x26, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) sendmsg$nl_generic(r2, &(0x7f0000000c00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000800)={0x3ac, 0x42, 0x200, 0x70bd2d, 0x25dfdbfe, {0x20}, [@nested={0x241, 0x152, 0x0, 0x1, [@typed={0x9, 0x141, 0x0, 0x0, @str='%))#\x00'}, @typed={0x1d, 0x4d, 0x0, 0x0, @binary="e0c27518b89bb29a366fd2acaa4f4944bcca9aed5398fac1a3"}, @nested={0x4, 0x104}, @generic="e9aa8783e3867d827b4ef7633603af41c52984f04c9f74d86ab97a1758adfc90ff6eb8742594675707cf81b18fe49e6db2b9a05f30079e1dbd4151891b0ba5c0e27870d1d0533d2f10702321e28635248c4e593b47f1f25ee35a7db3781596234216762550a7155c54a8617677eaee29ceafd2817e9999fc3df067ee77e0ef83c85dd2131348b5943d5f582089ce30f4f54ff2a7bd30e44b5f9929e1358054919b26b710b1193d71fd38efcd850cf87ebd0b80", @generic="4c57fa0a1d137df6d3fe6b8d8baf0a6f0869cd6a67dc4f2022d02f8eaacd946f2ee065581b6db4b6a9aca01a8e393c4821441ad9b41683e03276557b1a5535a15b0446fe39386a4898e14cdcb8b1b061ae21f33a6656fc69fb2deca30bb09e9762949916c8f610b01deea81bd44cfcad172d8b75157715bae8900f446348a478015745b4131506a4193d11db208ccbe17181ee719ab33e0fcf9535009de9a31cada0a915212c87eaf1cb797a8cb6f45cc58b15b314bfb428d136532649fcf53edcb3f8c809dafca76ec025800377ad381613bb8aa19817", @generic="798b0b68b52f05cb9ee85fce24f384128c2003b647a5c95de036cb4d754375e243e7c80f558f90887dc4d8eb6c6afbae7cc4440f2e603e48ed22bed0e518b119193ecbf2310c5064f260f9b1b91036aaaef165c7164f5b09f307da3dc933729fde8706ce3846342af46d23c5341d5fe95bef02edee579850a2f01d30254859", @nested={0x4, 0x3e}]}, @generic="e5169fd90366e0e09cceaecd389f60397282876ced2cbf232fe62628afae848d953a5e8ea7056e12efaadeaed4b9e2c9455940f58d82113ed1470532520ce4c3b93fbd83806f209e28efa0785830362cb7f5fd6bd95569342f4490cb6c6db1b9d0a40c9b6e915c95e482797a98be9a15207ac5df347e", @generic="540d13bda3bda9dff7e95ddbbbf35f163cc109425559171161e55b4ba83a04acb75de943630c67b7f8ba0c19b76aebe530df3b50d65a93ca5d4e45c3a9c75d7b38551136b1d49b7a76ec51de3ae7a18dc34b80837fe9052cfaa09922f8fb9bbaa21ce810bd1ec40dc59697b8e875b73263e43ba9d12c9b1df4dc5657c53aae935bc0049b26f947c5cc84eca869601ca866a8a38eedae4aa574c06d6e7294c046f4ea1c82ef490dda8d11c1a8364e043d089a3dab90e0fbe21055b4c349617259eee417191d52c4162212f2a5ef3032310bae5c", @typed={0x8, 0x10, 0x0, 0x0, @fd=r0}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x40084}, 0x8000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300100000000000fbdbdf2500000000000000000000000000000001ac1414bb00000000000000000000000000000004000000000a0060803b000000", @ANYRES32=0x0], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2081}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x90, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x40}, {0x8, 0x13, 0x9}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x7}, {0x5, 0x14, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}}, @NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xb}}}, 0x78}, 0x1, 0x0, 0x0, 0x90}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000002c0)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, &(0x7f0000000480)={"fb7aba0155146d98238dfd3c589b092c", 0x0, 0x0, {0x48de24b8, 0xffffffff}, {0x7ff, 0x8}, 0x1, [0x8000000000000000, 0x4, 0x0, 0x9, 0xf7, 0x8, 0x0, 0x6, 0x1b6, 0x3, 0x98, 0x2, 0xfffffffffffffff9, 0x4, 0x1, 0x401]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r8, 0xc0c89425, &(0x7f0000000580)={"f76893082b5ded902d4624908bed9c50", 0x0, r9, {0x56334d2, 0xbb02}, {0x2, 0x1}, 0x0, [0x5, 0x7, 0x6, 0x100, 0x72, 0x3, 0x7fffffffffffffff, 0x1, 0xf3, 0x142943bb, 0x1, 0x100000001, 0x5, 0x0, 0x7, 0x6]}) 9.667273775s ago: executing program 0 (id=7400): r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000180)="621125635c23e722a2ce2b3ba3a85b828cc8a7f495f1c34bff219d58cf8226faeb133107e10cf84336c96d6f0f292d638038b55edff4de5654a1ec4a69077d85d691ac064579e3c6106d41859ca2bdb0c7850606d3927785de53f186aa0106528701d50cc3fa07cdf4507ff8edfa26161b28b69e4bc63e90dfdc9c1ff8c323d0b61dbb853e923164efb4a68ffc9d20c72d060eeae3da8473a259ce2297a69d", 0x9f) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e2e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 7.887470311s ago: executing program 0 (id=7407): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000040}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [""]}, 0x14}}, 0x4004054) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r1, 0x0) recvmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}, 0xfffffffd}], 0x1, 0x60, 0x0) 7.045162805s ago: executing program 2 (id=7410): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="0000000007010100000000000071000a0000010900010073797a3100000000080005400000000200"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x54, r5, 0xc00, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000041}, 0x40) 5.337720652s ago: executing program 0 (id=7412): r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt(r1, 0x11b, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000880), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r4, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001580)=[{}, {&(0x7f0000000000)=""/53, 0x35}, {&(0x7f0000001740)=""/4111, 0x100f}, {&(0x7f0000001640)=""/206, 0xce}, {&(0x7f0000001240)=""/244, 0xf4}, {&(0x7f0000000140)=""/240, 0xf0}, {&(0x7f0000001440)=""/112, 0x70}, {&(0x7f00000014c0)=""/140, 0x8c}], 0x8, &(0x7f0000000040)=""/49, 0x31, 0xe88}, 0x8}], 0x1, 0x10122, 0x0) (async) recvmmsg(r4, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001580)=[{}, {&(0x7f0000000000)=""/53, 0x35}, {&(0x7f0000001740)=""/4111, 0x100f}, {&(0x7f0000001640)=""/206, 0xce}, {&(0x7f0000001240)=""/244, 0xf4}, {&(0x7f0000000140)=""/240, 0xf0}, {&(0x7f0000001440)=""/112, 0x70}, {&(0x7f00000014c0)=""/140, 0x8c}], 0x8, &(0x7f0000000040)=""/49, 0x31, 0xe88}, 0x8}], 0x1, 0x10122, 0x0) 4.843111392s ago: executing program 2 (id=7415): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)=ANY=[@ANYRESDEC=r0], 0x1c}}, 0xc080) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x40000000015, 0x5, 0x0) sendmsg$can_j1939(r2, &(0x7f00000005c0)={&(0x7f0000000440)={0x1d, 0x0, 0x2, {0x2, 0xff, 0x1}, 0x1}, 0x18, &(0x7f0000000580)={&(0x7f0000000480)="175f968b738d1b3fa9df720b685fe97b18922522a9147dd89160edbcb6e990583096a6df9cb92a588c9b8eb64b2c4843ad42130a7eef07113b113b51358c492c6372701db31e6e7e4fc30754d1dfb2249051918d096ec150e001413415bd3bfacc2b79cd5770724419ba786474cf5b3765ff83bb42867f2270a6df898f9dd30d3a51386a4de6c0f2ef5b0c99ca2db920b2fd22e51cd23dc9b1de374b862c1bc57861dcfb758a47c91a4cd3ed97a35f2905e8b94ea84d3270bf97c2da5205240b6ba8eb220a859d40d38762271da5a9fe4f7817ead054362bb0be4d51869697f100", 0xe1}, 0x1, 0x0, 0x0, 0x1}, 0x45) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x4008083}, 0x4000080) (async, rerun: 32) socket(0x2a, 0x6, 0x6) (async, rerun: 32) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) (async) getsockname$packet(r2, 0x0, &(0x7f0000000380)) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000760001"], 0x18}}, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8001, 0x7}}}, {{@ipv6={@empty, @rand_addr=' \x01\x00', [0xffffffff, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0x0, 0xffffffff, 0xff], 'veth0_to_batadv\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x1, 0x2, 0xd, 0x2}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 4.634693451s ago: executing program 2 (id=7417): mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000d80)=@add_del={0x2, &(0x7f0000000d40)='veth1_to_team\x00'}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2, 0xa, 0x0, 0x9, 0x7, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1e, 0x10}]}, 0x38}}, 0x8000) ioctl$BTRFS_IOC_ENCODED_WRITE(0xffffffffffffffff, 0x40809440, &(0x7f0000001600)={&(0x7f0000001540)=[{&(0x7f0000000000)="609495710fc85ae8e2772c1c7e0f992c893417d60a43727b96cd4147e7022e5c7aa2be7b75279a28efe4af3f7d7788c94f16192ae4930b3a8d59dc594af31d4d4a873e6884a33fc0cb23734983fb5a53857fd943bd5d01180160f3245f8838d627e4aa7eb657038f7cdffc368a75e93580afab11375b68192820ff2051007eef37877ff9f6477b9a55844548e9fc656a519d500bb4741d8688cc2f1508ac04cd9fea63a0918d07df7a3022dda3cd749f45806ebd80", 0xb5}, {&(0x7f00000000c0)="a7d915a2589fed3062e6c693f3ff23cced2e90e45da7fb4f8c226d4ac7daa3c643572bcdb7c48da5b69933440103d0fba7c280e05841a216b66e12beb4b79675a546b3d72df22ca97acaeea990748d6cb59e1d0cc9c6ffd8b129f2d8609d9d73", 0x60}, {&(0x7f0000000140)="bea0c7622bd00116083ba4af0299505772c50487cdeb79b9114a4fcb2b836fb319ea8580862513635f206eac297c6477a9217b7f913eb0d94e4896802324609a32aa69d26045b16f7b072e3db5c5154a1ece92308fcb5f1051e2f5d551684e81226dced9c48922f50fb0c422d29266f27b896c7c272367d84af98900edb8b9663599e09af8f7586bbcfc354b761a25ad46dc57bc15d1e614cf75c7678a9c82fbabc58df4c755ca1f087f37b395cb3a482788031769364527", 0xb8}, {&(0x7f0000000200)="d1bc6f6c9629be590d826ad73779c13b47e3fae45bad29bccfb296a77d3202f6f3b1c317aa8bffc373245cb3cf1353c6a91acccccfaa919a8a63402ffc47c6186c4adb4e6bc1e52607b597352d8d6253a4ef2c123edcd0eb571a9c094cd8fce2c3dedd7c9a0cc9e81971dbb61034778d3435ef390f761a31155f18b477eb6e2237b0d4cb88539fd830df25d422e816a27e639b507c184143965c955d877abf7aa9d382065c3120fceeaa328ada86787c1ec535178dff99f69728daa34ddaa2bcffaf2b6ebf3d6fa7bac6ae61cf5dee384acc112b03ea30f4332077d0", 0xdc}, {&(0x7f0000000300)="fd4d4dd70d490cce152de4fa7b64ca277956e46a99b98521ae", 0x19}, {&(0x7f0000000340)="00dc5663e750dbb6ca5a9a2706f34ef0b53f1e4de6762640b5b4802623c45f20bbe2eceddec1d0b029fa64592e8a6f9df9480ec009d66ee2e6f54d587462b8a4cb7150e12f2751f4e16f284a7ecbec4906c3ef47e9e45a786b32c868e17594d70580f5670519e74658dff6a15e910eb3cf4e4edcccde6b", 0x77}, {&(0x7f00000003c0)="f34d6cffd0e0ed75c5ec0e03da7ba310070046da065e085ffb8fec3bf2d852199eb0e10918ac8285b4165038530e1cdf00000040f30000006e7d4224da792236a8cada23eb9b25d544a8a135e9307884a36d07eb5e3ef6197cbc3c0000", 0x5d}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="b9660dbe7757edea64f9ce838a1407fb48f50995e582351c392e9adeacb96ec01567c9e86bc899bd9d06ae5bf7a436795ae0fa3197acff284ff6216129645873f80377677654c64c4d18c3c6fb16bfa5b0000ddb40d087dff511a590012a54519710fa58d36ff5e8859ca147a904a3ee6337905b50d3b52b363a9a61d19b318d160dbd158d74679c9e9e1411fbaa75d60016c5a6162db7e430bfd669afeb07c58b2a0f3e0f5b4a017f5580530a1dcc56a3667c3412c7ba400a3c", 0xba}, {&(0x7f0000001500)="4be47faf232b99ca0546b24715c28b202d0b08710a1e0c5b48015a004f33e3102eeed4e470daf39d2c69d4f0e9fe7cbbf0e41fd7c490a18737b9f6aa69", 0x3d}], 0xa, 0x7, 0x0, 0x72, 0x1, 0x3ff, 0x8, 0x7}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001680)=ANY=[@ANYBLOB="6800003114000100000000000000000000000000000000000000000000000000ac1414aa0000000000000000000000000000000000000000000000000000000057afb7818326739549920ce58fc589b8927abd1007588e81483f3c871053bc5e1c5ad694a00894a60995b1b2d5267d0c796aaa8124e2dc9ef784cbb0ace4feea0d6cc26cb10eb72ae41e4421bd9c897a2d17f494e8cb81c61b8f80d8a4b5758473f1bdebfa7c50d07d6d8524f981f474229c4a33ec2535605ebf3e", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000c000800a4fe0800000000000c0015000000000000000000"], 0x68}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) 4.63276785s ago: executing program 6 (id=7418): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xfffffff7}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200), 0x4) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1190e95fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a202304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a8640724a5f4e12ad99012a2e01ce79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe50151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa332482e6137e994d3f5259b7f51544cdc6d8cb4becc20dd3a57545b0c2621e4c5f94a23f73ee02c22ee7e27c2cc491a85947baac523c347c9b9ede5d6265997f2ad6e9719aafdb323988e62b7ec84545cd63b7a7"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000040)={r4, 0xffffffffffffffff, 0x29}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000400007012dbd7000ffdbdf25047c00000400c3000c00018008001600e0000001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000380)={0x29c, r3, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff1538}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfa}]}, @TIPC_NLA_LINK={0xd4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc24}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6e4bab41}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa2b5}]}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb940}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4000000}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcc3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x75064578}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd1bc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_SOCK={0xb4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x86b1}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x85c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf9}]}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x400c010}, 0x8040005) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) sendmsg$NL80211_CMD_GET_INTERFACE(r5, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="08002abd7000ffdbdf25050000f38983fbec6c7b79000c000000"], 0x20}, 0x1, 0x0, 0x0, 0x4004095}, 0x20004000) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) 4.632390737s ago: executing program 5 (id=7419): r0 = socket(0xa, 0x3, 0x3a) (async) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x1, 0x803, 0x0) (async, rerun: 32) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r9, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r11) (async, rerun: 64) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r11) (rerun: 64) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r12, 0xb6c91f939c8321d, 0x0, 0x0, {0x10}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r8, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r12, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x41) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x38, r12, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0xbe8c26572f06796) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r13], 0x44}}, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r15, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r15, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r16}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (async) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0x6, r2, 0x1}, 0xc) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x4b, r2, 0x2}, 0xc) 4.601560302s ago: executing program 7 (id=7420): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x40) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0xb, 0x6, 0x3, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x8080) 4.398790825s ago: executing program 2 (id=7421): r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000000)="db23b7e575c9a115c805392fa909821faaa80ae37cae", 0x16, 0x448c1, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) listen(r0, 0x80000000) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="5a0d15a28f7e5cdc67463111e94f3652e0d5853d748d35e9b1f073e82c248924774941c80e8575d647c6026dde202ffd", 0x30, 0x24040040, &(0x7f0000000180)={0x11, 0x8, r3, 0x1, 0x4, 0x6, @multicast}, 0x14) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000200)=0x7, 0x4) socket$packet(0x11, 0x2, 0x300) (async) r6 = accept$nfc_llcp(r2, 0x0, &(0x7f0000000240)) close(r6) (async) socketpair(0x25, 0x4, 0x63, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000002c0)={'ipvlan0\x00', {0x2, 0x4e21, @broadcast}}) (async) sendto$inet(r5, &(0x7f0000000300)="f293e85d48b9c19af1d421c237f3d8da98466c9ea62cef0ff8500adb8218fb4fef1d9b60d56bcd6ceff22e6b22d1725853dafeb55de35fa19f1394b88476f8f6e947e1ed563a11", 0x47, 0x800, 0x0, 0x0) close(r2) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r7) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x24010100}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, r8, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x67}, @NL80211_ATTR_PMKID={0x14, 0x55, "23bdd3cc8314100c682f2a3826b12630"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000085}, 0x24000000) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f0000000680)={{r1, &(0x7f0000000500)='ipvlan0\x00', 0xd43f285dc063bfbc, &(0x7f0000000540)={@_ha_fsid={[0x100, 0x95]}, {0x7, 0xce, 0x80000000, 0x5}}, 0x1, &(0x7f0000000580), &(0x7f00000005c0)=0x80000000}, {[0x6, 0xcf7, 0x4, 0x8]}, 0x4, 0x72, &(0x7f0000000600)=""/114}) sendmsg$inet_sctp(r9, &(0x7f0000000800)={&(0x7f0000000700)=@in={0x2, 0x4e22, @empty}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000740)="0163ea7829489a85fac6ccac30d311e8d7a2c5de5b9e99b7be5e5b82df577a82aaf4decbe423fb27a4efa97bc818aac99dbc42910884a81065613e3fa8a0ee52bd91edba42a8d6266eb0b1dc885a92aee75388e3e1ab61ae90701b10ec4addfbffcfb180569386a932aa1449167eea895e2729d3a6ac", 0x76}], 0x1, 0x0, 0x0, 0x4000044}, 0x4000000) (async) close(r4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000840)={r2, r3, 0x25, 0x9, @val=@perf_event={0x40}}, 0x18) gettid() (async) r10 = socket(0xf, 0x5, 0xff) r11 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, r11, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x8090) (async) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000a00)={'filter\x00', 0x7, 0x4, 0x4c8, 0x2f8, 0x0, 0x2f8, 0x3e0, 0x3e0, 0x3e0, 0x4, &(0x7f00000009c0), {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:netutils_exec_t:s0\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x15}, 0x8, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x7}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518) (async) ioctl$XFS_IOC_FSGROWFSRT(r9, 0x40105870, &(0x7f0000000f40)={0x9, 0x400}) socket$tipc(0x1e, 0x2, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000001400)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000013c0)={&(0x7f00000010c0)={0x2d8, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [{{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xed}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x194e}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x14}, 0x20040801) 4.351044048s ago: executing program 6 (id=7422): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000300)) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='vegas', 0x5) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$smc(0xfffffffffffffffc, r3) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 4.349752599s ago: executing program 5 (id=7423): r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x4, 0x10, 0xa, 0xf}, 0xc) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f00000000c0)={0x5, 0x5b}) r1 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000100)) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000000140)={{r0}, "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"}) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000003b00)={{r1, &(0x7f0000001140)='*,[+,,\x00', 0x2000, &(0x7f0000001180)={@align=0x4021, {0x6, 0x2, 0x401, 0x2}}, 0x4, &(0x7f00000011c0), &(0x7f0000001200)=0x3}, 0xa, &(0x7f00000039c0)=[{0x1, 0xb, &(0x7f0000001240)='\x00', &(0x7f0000001280)="5be603946d7f4409a479ddbb7243da7da24ddb054538bbbc50c50a938e725e02be5be23d88b96addb3c3e476f37e993b9629009cf3400f00047fe05c3c012c52f2d60fa631a6b9bd3469b048128aafcb0556ba29f9", 0x55, 0x32}, {0x1, 0xfffff81d, &(0x7f0000001300)='[#-},,\x00', &(0x7f0000001340)="c6812b39b54d5d33201fbc04e94121d63d6d31ca5019e0bf5e85c72637edd69400be2d6c0da65b01dfa2a1fd56cd3ccedbcfa5d39c00dd952e491bf49e9950262c98b522a271dd870a8a9a64784931fda9c2bcf2015ddc2dd77527a93d0e27af2c107710df7c25a1a9ea730eb28035f85d8a2a706de6ae1e4a2a8e603a8d71e7a4be99d5c98f95cab7d0d8e6d7519737e6c866d912f4147b3c05af0f72ce1dc573ed71da5a3715b2663c569f7977483130923bf9102badab8a0b2942eb66705f8a653590ffa055b405e29ed809004718a5", 0xd1, 0x10}, {0x2, 0x9, &(0x7f0000001440)='&)+[:!\xc3\x00', &(0x7f0000001480)="fedb562a962d1d1b407947cb55171224d6f8a0acf50b51ac5ca2fde230515aebafcd788999fe6be4571984e207d6c45ec4c13b3bf27fdbe15ab1d53eaee458d993a65c8f745440df7c8fb2c6fc", 0x4d}, {0x3, 0xd, &(0x7f0000001500)='!+^M\x00', &(0x7f0000001540)="b106708914a6869c6ef0d94add5e106cc3c610d4601e3d22bea533a325496453547d8773d11b8633c43401bb394d3c3c", 0x30, 0x20}, {0x1, 0x7, &(0x7f0000001580)='\x00', &(0x7f00000015c0)="87c2e3a48eca3478971a6827bfffa02cb91f6d8c0988e5449b804068e0607fd98e81e3fe74f79bd4cf13dff911029848eee7bd0e542422f334ef03dc852446e6f3d8d91d0e3d6c7eace3297863d952d94936a3a888a475f0893aa77a49bde82877da8ef4417c7491c1c02eba0f818848d0d4f76e61d824f39ecb1af8dd025bba169a02a2fe397c448eefb894dea2ec54f5026ec95165ff520b5739793a375fed47e7093ad0d1ff7fa898db2a9bd23b86fecd2cf347dd14d58dfdaaf90767516f46cceab9ee31f4927c7523887a87fb02205049722b4ec2a6deafdfdd1d3dd8d06d6cd540c0df2014736f7201190a27f07d65080064", 0xf5, 0x18}, {0x3, 0x80, &(0x7f00000016c0)='&]}\x00', &(0x7f0000001700)="b6747287bfca9537361080a9dfc117767c9698c4d1799ef20a", 0x19}, {0x1, 0x7c, &(0x7f0000001740)='\x00', &(0x7f0000001780)="d861d783b275de2c0afa45cb27eaa4ebfe58db07531523be4cde4dcaa99d65d4b3ad105fe80ae4df44ee67d16cd80d85b6f954248519006abf60f83120b81f441188e82689fd5100b12ef3e6e3c0faba51bab77935fc33ff441292010d592bfa9b5cee0afca0df3e30de1748183df785fb7698c534081526fc95adc6b41ca3e29e919e10f202ece78909e1dfa9079b044a82c1a0b8998666ba8d90e75a7aa1fe6903d8e5af0d336789b5", 0xaa, 0x2}, {0x3, 0x394c, &(0x7f0000001840)='%./!\\&@\x00', &(0x7f0000001880)="6ef2b9a7f22f986c6809765688a74dbc641eda01fbfc21540afdfe3a3522ca3cea1bddf24688595f91572661ed3758929b8e38c05ace618193248967b306be601249932086e1851bbeabe2e05836e4f9b6f1689c06016dcc7eebf192c923e06fa7394c398c5e447a3823fa109c3f8f74d72a31bbb78c006fa634dd2274f4e51ef7c269e440a14492909744399f7ef1f6bc7971337ed3e49392b3", 0x9a, 0x18}, {0x3, 0x4, &(0x7f0000001940)='\x00', &(0x7f0000001980)="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", 0x1000, 0x2}, {0x3, 0x8000, &(0x7f0000002980)='^&]}\x00', &(0x7f00000029c0)="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", 0x1000, 0x10}]}) sendmsg$AUDIT_TTY_GET(r3, &(0x7f0000003c40)={&(0x7f0000003b80), 0xc, &(0x7f0000003c00)={&(0x7f0000003bc0)={0x10, 0x3f8, 0x1, 0x70bd2b, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8005}, 0x4c050) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000003c80)) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000003d80)={0x1, &(0x7f0000003cc0)=[{}]}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003e00), r3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000003ec0)={'ip6gre0\x00', &(0x7f0000003e40)={'syztnl0\x00', 0x0, 0x71, 0xb0, 0x8, 0x10, 0x38, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x20, 0x0, 0x81}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000041c0)={r3, 0xe0, &(0x7f00000040c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000003f00)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000003f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003f80)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x19, &(0x7f0000003fc0)=[{}], 0x8, 0x10, &(0x7f0000004000), &(0x7f0000004040), 0x8, 0xa2, 0x8, 0x8, &(0x7f0000004080)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000004280)={'syztnl2\x00', &(0x7f0000004200)={'syztnl1\x00', 0x0, 0x2f, 0xab, 0xfb, 0x3, 0x3e, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', 0x20, 0x7800, 0x7fffffff, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000004340)={'syztnl1\x00', &(0x7f00000042c0)={'ip6tnl0\x00', 0x0, 0x4, 0x6, 0x4, 0x8, 0x8, @loopback, @empty, 0x20, 0x80, 0x0, 0x7ff}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000004400)={'erspan0\x00', &(0x7f0000004380)={'syztnl0\x00', 0x0, 0x8000, 0x7, 0x2, 0xf6, {{0x11, 0x4, 0x1, 0x2f, 0x44, 0x65, 0x0, 0x8, 0x29, 0x0, @loopback, @multicast2, {[@timestamp_prespec={0x44, 0x2c, 0x5d, 0x3, 0xe, [{@dev={0xac, 0x14, 0x14, 0xe}, 0xffff6e2e}, {@local, 0x4}, {@private=0xa010100, 0x7}, {@multicast2, 0x8}, {@rand_addr=0x64010101, 0x71f4}]}, @noop]}}}}}) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000004440)={@mcast1, 0x0}, &(0x7f0000004480)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000004540)={'syztnl2\x00', &(0x7f00000044c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0xdb, 0x5, 0x24, @dev={0xfe, 0x80, '\x00', 0x14}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x7, 0x8, 0x19a}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000004740)={&(0x7f0000003dc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000004700)={&(0x7f0000004580)={0x15c, r4, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x4}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x981994c89f0f387b}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000004880)={0x1, 0x5, &(0x7f0000004780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff2cb, 0x0, 0x0, 0x0, 0x400}, [@map_fd={0x18, 0x3, 0x1, 0x0, r3}]}, &(0x7f00000047c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x1a, '\x00', r6, @fallback=0xd, r3, 0x8, &(0x7f0000004800)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000004840)=[r3, 0x1, r3], 0x0, 0x10, 0x9}, 0x94) connect$nfc_raw(r3, &(0x7f0000004940)={0x27, 0x0, 0x0, 0x1}, 0x10) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000004980)={@none, 0x5}) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f00000049c0)=0x1, 0x4) ioctl$XFS_IOC_FREE_EOFBLOCKS(r1, 0x8080583a, &(0x7f0000004a00)={0x80000000, 0x8, 0x62, 0x120, 0x7a, 0x0, 0x7}) socket$packet(0x11, 0x3, 0x300) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000004a80)=0x909) socket$kcm(0x29, 0x5, 0x0) ioctl$XFS_IOC_DIOINFO(r2, 0x800c581e, &(0x7f0000004ac0)) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000004b00)='bic', 0x3) 4.348811844s ago: executing program 7 (id=7424): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94) 4.281547982s ago: executing program 0 (id=7425): r0 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x4880) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) socket$xdp(0x2c, 0x3, 0x0) r2 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r2, &(0x7f0000000580)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000300)="a905000000407464000100000000000000e5c0d8af7a6417e436a106993e1e5ad8311dab", 0x24}], 0x1}}], 0x1, 0x800) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9}, 0x20) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) close(0x3) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = openat$cgroup_int(r1, &(0x7f00000001c0)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x100000001, 0x12) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x1057, &(0x7f00000005c0)={@empty, @multicast, @void, {@llc={0x4, {@snap={0xaa, 0x0, "03", 'Y\nf', 0x0, "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"}}}}}, 0x0) sendto$l2tp6(r1, &(0x7f0000000100)="d132707d08010e891e801f48b3c3296589b479ae060b91fd0dbf20a594", 0x1d, 0x20048814, &(0x7f0000000140)={0xa, 0x0, 0x9, @local, 0x2, 0x4}, 0x20) syz_emit_ethernet(0x5e, &(0x7f0000002e40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd607428dd00283afffe8000000000000000000000000000bbff0200000000000000000000000000038900907800000000fe8800000000000000000000000000010002122b472e41e24b11f34b608816e5"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 4.090870098s ago: executing program 7 (id=7426): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x80, 0x800) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000000c0)={0x2, 0x1000, "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"}) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x58, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x11) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000001240)={0x3b, 0x8, 0x1, 0xd, 0x0, [@remote, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote]}, 0x48) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f00000012c0)={0x2e, 0x1, 0xa, 0x9, 0x2, 0x81}) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000001580)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001540)={&(0x7f0000001340)={0x1f0, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd6a8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x817}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x85a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4947}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x18d2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff0000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3bbb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x40050}, 0x90) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001600), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000001740)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x7c, r1, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8ffb, 0x36}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x7c}}, 0x20040001) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x50, r1, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x49}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x41}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x31}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2a}]}, 0x50}}, 0x4000000) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f00000018c0)={0x7e, "82c098ad226d9f8d3a0594f1638298d6b99b33f9f94c2925316caa6f133ed2b7d181261e7766dd651b5e31045fefa8d5602ac0a9feeb0fdcfc3b30e43f2da3a43dce6f93951156a3002d105bf5152e7ce2bbfe8f8aef796a7d1377210942fd9d531855f83a6cf8ddf067079b05faeb9710c4e12ac82055147aab0a9714cdc4b5"}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001a00)={'ip6_vti0\x00', &(0x7f0000001980)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x5, 0x6, 0x1, @mcast1, @local, 0x8000, 0x80, 0x8, 0x100}}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x28, r1, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xe15b, 0x39}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040010}, 0x40) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000001b40)) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x3}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x54, r1, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x1d, 0x2a, [@ssid={0x0, 0x17, @random="22d4238695238588f2260b5dd11a9a13af551ed64228fc"}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x5f}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x490) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000001cc0)={'icmp6\x00'}, &(0x7f0000001d00)=0x1e) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001d80), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x14, r3, 0x400, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x48c0) ioctl$FICLONE(r0, 0x40049409, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000001f80)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x68, r1, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_bond\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp0\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bond\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20090}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000002000), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000002040)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000002080)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000020c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000002100)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000002140)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000002180)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r4, &(0x7f00000022c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)={0x4c, r5, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x44) 4.040757309s ago: executing program 6 (id=7427): syz_emit_ethernet(0x7e, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r4, &(0x7f0000000040)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_TABLE(r6, 0x29, 0xcf, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x5}, @TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r11, 0x2e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000280)='U', 0x1}], 0x1}, 0x4) r12 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r12, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) 4.040058085s ago: executing program 2 (id=7428): r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x80000) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000080)={0x0, 0x1, 0x7fff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b00010067656e6576650000200002801400070020010000000000000000000000000000080001000100000008000a00", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 4.038462465s ago: executing program 5 (id=7429): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x14, 0xa, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4004881}, 0x40000) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla', 0x5) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r7, @ANYBLOB='\x00\x00g\x00\b\x00\b\x00', @ANYRES16=r5], 0x24}}, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 3.373845973s ago: executing program 7 (id=7430): unshare(0x20040600) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x6c}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x24, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000940)={0x0, 0x9}, 0xfc6d) r3 = socket(0x10, 0x3, 0x1000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000019080)={&(0x7f0000000440)={0x28, 0x25, 0x1, 0x70bd25, 0x25dfdbfc, {0x2}, [@nested={0xa, 0x61, 0x0, 0x1, [@generic="dce421a363db"]}, @typed={0x8, 0x3, 0x0, 0x0, @binary='3\x00\x00\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x3800c957}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e24, 0x41424344, r5, 0x0, 0x6, 0xe, 0x4, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x81000001, 0x56}, @timestamp={0x8, 0xa, 0x10000, 0xffffffff}, @window={0x3, 0x3, 0x5}, @sack={0x5, 0xa, [0x1, 0x5]}]}}}}}}}, 0x0) recvmmsg(r3, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x8}, {{&(0x7f0000000480)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/96, 0x60}, {&(0x7f0000000640)=""/33, 0x21}], 0x2, &(0x7f00000006c0)=""/151, 0x97}, 0x9}, {{&(0x7f0000000780)=@sco, 0x80, &(0x7f0000000800), 0x0, &(0x7f0000000840)=""/13, 0xd}, 0x1}], 0x3, 0x20, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x10010, r3, 0x11152000) 1.848903826s ago: executing program 5 (id=7431): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x541b, 0x0) listen(r0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a00000000000061118400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0xad1d, 0x1000}, &(0x7f00000000c0)=0xffffffffffffffff, &(0x7f0000000180)=0x2, 0x8a53, 0x2, 0x19, 0x2, 0x0, 0x4}}], 0x58}, 0x4040040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000240)=0x5, 0x4) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2400c841}, 0x1000) recvmmsg(r5, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}], 0x1}, 0x3f}], 0x1, 0x60, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f0000000080)=0x2, 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) listen(r1, 0x0) (async) ioctl$sock_SIOCSPGRP(r1, 0x541b, 0x0) (async) listen(r0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a00000000000061118400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async) socket$rds(0x15, 0x5, 0x0) (async) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r2, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0xad1d, 0x1000}, &(0x7f00000000c0)=0xffffffffffffffff, &(0x7f0000000180)=0x2, 0x8a53, 0x2, 0x19, 0x2, 0x0, 0x4}}], 0x58}, 0x4040040) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000240)=0x5, 0x4) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) accept4(r3, 0x0, 0x0, 0x0) (async) sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2400c841}, 0x1000) (async) recvmmsg(r5, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}], 0x1}, 0x3f}], 0x1, 0x60, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f0000000080)=0x2, 0x8) (async) 1.662207043s ago: executing program 0 (id=7432): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040006000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000068000000060a010400000000000000000a00000008000b400000000040000480100001800a000100696e6e65720000002c0001800c00010062697477697365001c00028008000340000000040800014000000014080002400000000b0900010073797a300000000014000000110ace19d538d743abe1b70ff7900bff5810ad9018b10c59"], 0xdc}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x3ec}, 0x1, 0x0, 0x0, 0x1}, 0x1) 1.582668123s ago: executing program 7 (id=7433): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000000)=0x8, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) sendto$inet6(r2, &(0x7f0000000480)="78b3cbe001e6d50ec51e7b3bda5e8adb6df449946922075a025badf2341b6556e09b8e8d12b67cfb6556a98d9a32840e1a1c3c1935ef5f28de110dc0873a575f91158b9e1721a690b9403ed7d50aaa", 0x4f, 0x4800, &(0x7f0000000500)={0xa, 0x4e22, 0x4a, @mcast2, 0x1}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000a72c961c89d89746c765628348d50817797e529e78e83123b88ad1bcf4fc4e532d9820d3fde2b987c19624e84e7b48ce0d8c05ea74ef99b22c0f83ebbe409653125d067f0bb0d55fed36d99886e68ca5441a31c07a72554c0f4fde12f482326413ba834f45c324c7704731a11b69ea5854c84a80f3698e67257e50ac044d9fcd4f06eb7f03f0b8a304d9a364ae1b8ae4aa262d65eb10d26b218d21ffda978737aa550180386e94e5d4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004dc0)={0x14, 0x1a, 0x229, 0x70bd2d, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x3dfa708e056562c6}, 0x48) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000004300)={0x2, 0x3, 0x0, 0x2, 0x13, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_lifetime={0x4, 0x3}]}, 0x98}, 0x1, 0x7}, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000080)={0x100, {0x0, 0xda73, 0x3c1, 0xffffffff, 0xb2d}}) 1.582141665s ago: executing program 6 (id=7434): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000b15f2da8de6bc16e130002000000000000000100008d00000000000000000200000000b123f1000000000070c52f28f3822c47a455027c1876535381112bb592dae5ed6910517f37056cc27ca72d3e4deee9406c"], &(0x7f0000000180)=""/190, 0x32, 0xbe, 0x1}, 0x28) getpeername$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001d0000012abd7000fedbdf9a00000000", @ANYRES32=r2, @ANYBLOB="040038020600050003000000060006004e210000060006004e200000"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x4815) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="8c00000010000304000000000000000000000000d31e4ee2562e568fd736937a94d506f1080e8e595b", @ANYRES32=0x0, @ANYRESDEC=r3, @ANYRES32, @ANYBLOB="08000500", @ANYRES16=r3], 0x8c}, 0x1, 0xba01, 0x0, 0x4014}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f00000003c0), &(0x7f0000000400)=0x4) 1.276559575s ago: executing program 7 (id=7435): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socket(0x400000000010, 0x3, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd2f, 0x10b52c, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x10002, 0x40, 0x20000000, 0x7, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) 909.158459ms ago: executing program 0 (id=7436): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) close(0x3) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0xbd, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x4) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) close(0x3) ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @random="0200ac7f7f00"}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r4], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="080008000700070000002b000000456f003100660000401190780a010102ac1414164e204e17001d907802ff000100000000c1963bf57e73e3279fdb8334fa"], 0x3f) 602.447941ms ago: executing program 6 (id=7437): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x6c, 0x2, 0x2, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x5}, @CTA_EXPECT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8d4}, 0x4008805) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)=""/230, 0xe6}], 0x15}, 0x2000000}], 0x2, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='-1'], 0x27) r4 = socket$kcm(0x11, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x0, 'dh\x00'}, 0x2c) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x0) sendmsg$sock(r4, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x0) recvmsg$kcm(r4, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2020) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) accept4(r2, 0x0, 0x0, 0x0) (async) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x6c, 0x2, 0x2, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x5}, @CTA_EXPECT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8d4}, 0x4008805) (async) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)=""/230, 0xe6}], 0x15}, 0x2000000}], 0x2, 0x0, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='-1'], 0x27) (async) socket$kcm(0x11, 0x2, 0x0) (async) socket$netlink(0x10, 0x3, 0x15) (async) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x0, 'dh\x00'}, 0x2c) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x0) (async) sendmsg$sock(r4, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x0) (async) recvmsg$kcm(r4, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2020) (async) 344.806194ms ago: executing program 6 (id=7438): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@gettaction={0x40, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4c800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x482000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x9}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7fffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x3d) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000008"], 0x50) poll(&(0x7f0000000000)=[{r10, 0x1000}], 0x1, 0x2) bind$bt_hci(r9, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, &(0x7f0000000440)={r7, &(0x7f0000000240)='++[7]$:,.\'}}\\,\x00', 0x580, &(0x7f0000000280)={@align=0x5, {0x2, 0x3c48, 0x6773, 0x7}}, 0x9, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)=0x7}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'gretap0\x00', &(0x7f0000000500)={'erspan0\x00', 0x0, 0x8000, 0x1, 0x2, 0x9, {{0xf, 0x4, 0x1, 0x3, 0x3c, 0x68, 0x0, 0xe, 0x2f, 0x0, @local, @empty, {[@timestamp_addr={0x44, 0x24, 0xfb, 0x1, 0x4, [{@multicast1, 0x5}, {@remote, 0x7}, {@multicast1, 0x401}, {@broadcast, 0x2c8}]}, @ra={0x94, 0x4}]}}}}}) recvfrom$packet(r11, &(0x7f0000000480)=""/116, 0x74, 0x40000020, &(0x7f00000005c0)={0x11, 0x1c, r12, 0x1, 0x3, 0x6, @remote}, 0x14) 337.506053ms ago: executing program 5 (id=7439): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000), 0x10) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r0, 0x0) unshare(0x22020400) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') read(r2, &(0x7f0000000200)=""/196, 0xc4) 118.950987ms ago: executing program 5 (id=7440): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x8}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x2c}}, 0xc0) 0s ago: executing program 2 (id=7441): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='-\x00', 0x40000, &(0x7f0000000040)={@align=0x7, {0x5, 0x3, 0x6, 0x7f}}, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x3}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x2, 0x9, 0x7fffffff, 0x6020, r0, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)={&(0x7f0000000140)="fabaf0adcbb17fa6ca4b1ad01c7d5b72c821e9", &(0x7f0000000180)=""/179, &(0x7f0000000240)="200cdc490c97b035c2b324d6c7b60e525265fecb689786a8ab5ae1316a7e7d754caf12c7ce494f6bb711a3aeec736c79ac9170bd9db4ad762d6a64595756fc34beee49ffddc013761e16f9ea941766be709901eee7991e50e36598eb575bdc3875c17e9f3f7a449698b1d3b7329d12061f9c8f18f429", &(0x7f00000002c0)="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", 0xd, r1, 0x4}, 0x38) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001580)={0x0, 0x6, 0x10}, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000015c0)={&(0x7f0000000480)="b676aa8c20aab7", &(0x7f00000004c0)=""/114, &(0x7f0000000540)="258d86793815d87521b6a649e3ba4e9fe36d48f1acd7e78a822afc408c5675a08d15cfca0990c657388bf6cd3b010a4cf4b3168bad", &(0x7f0000000580)="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", 0x2, r2, 0x4}, 0x38) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r2, 0x40106e8c, &(0x7f0000001600)=[0x7fffffffffffffff, 0x1]) getsockname$packet(0xffffffffffffffff, &(0x7f0000001640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001680)=0x14) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$phonet(0x23, 0x2, 0x1) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r5, 0x4018f50b, &(0x7f00000016c0)={0x1, 0x0, 0x4}) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840), 0x4) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001900)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001a40)=@bpf_tracing={0x1a, 0x10, &(0x7f0000001700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x793f, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0x2, 0x8, 0xa, 0x2, 0x400}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001780)='GPL\x00', 0xffffffff, 0x4d, &(0x7f00000017c0)=""/77, 0x41000, 0x18, '\x00', r3, 0x19, r6, 0x8, &(0x7f0000001880)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000018c0)={0x4, 0x3, 0x4, 0x4}, 0x10, 0x1f634, 0xffffffffffffffff, 0x8, &(0x7f0000001980)=[r7, r1, r1, r1], &(0x7f00000019c0)=[{0x5, 0x2}, {0x0, 0x4, 0xf, 0x6}, {0x3, 0x3, 0x9, 0xb}, {0x2, 0x2, 0xf, 0xc}, {0x4, 0x2, 0x5, 0x4}, {0x4, 0x2, 0x1, 0x3}, {0x4, 0x3, 0x7, 0x1}, {0x3, 0x4, 0x9, 0x2}], 0x10, 0x8}, 0x94) ioctl$XFS_IOC_GETBMAPX(r5, 0xc0205838, &(0x7f0000001b00)={0x26ef, 0xb, 0xeda, 0x8, 0xe5, 0x2, 0x2}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20010, 0xffffffffffffffff, 0x720bc000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) sendmsg$NL80211_CMD_RADAR_DETECT(r8, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x2c, r9, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x622}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8014}, 0xc0) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001cc0), r8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001d80)={r2, 0x58, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f0000001e80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x5c, r10, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6b9c}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x14}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0000}, 0x48000) ioctl$FS_IOC_GETFLAGS(r7, 0x80086601, &(0x7f0000001ec0)) ioctl$AUTOFS_IOC_FAIL(r7, 0x9361, 0x3) r12 = socket$inet(0x2, 0x800, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r12, 0x40309410, &(0x7f0000001f00)={0x7fe8, 0xd6dd, 0x2, 0x9, 0x2, [0x4, 0xf, 0x81, 0x7]}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001f80)=@generic={&(0x7f0000001f40)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$BTRFS_IOC_SYNC(r8, 0x9408, 0x0) kernel console output (not intermixed with test programs): fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.593534][T27410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.628185][T27410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.648202][T27410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.724475][T27568] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5932'. [ 568.741309][T27410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.762460][T27571] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5933'. [ 568.890072][T27578] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 568.928539][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 568.930680][T27580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5934'. [ 568.955892][T27410] hsr_slave_0: entered promiscuous mode [ 568.965953][T27410] hsr_slave_1: entered promiscuous mode [ 568.974082][T27410] debugfs: 'hsr0' already exists in 'hsr' [ 568.980846][T27410] Cannot create hsr debugfs directory [ 568.998504][T27584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5934'. [ 569.010172][T27578] team_slave_1: Caught tx_queue_len zero misconfig [ 569.231411][T27592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5938'. [ 569.698345][T27592] veth0_macvtap: left promiscuous mode [ 569.713799][T27592] macvlan0: left promiscuous mode [ 569.731194][T27592] validate_nla: 1 callbacks suppressed [ 569.731213][T27592] netlink: 'syz.2.5938': attribute type 1 has an invalid length. [ 569.830682][T27592] netlink: 'syz.2.5938': attribute type 2 has an invalid length. [ 569.867612][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3 [ 570.227902][T27410] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 570.250293][T27410] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 570.272020][T27410] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 570.284085][ T50] Bluetooth: hci6: command tx timeout [ 570.301067][T27410] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 570.315356][T27410] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 570.330320][T27410] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 570.340448][T27410] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 570.358313][T27410] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 570.512300][T27650] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5947'. [ 570.552183][T27410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.590415][T27410] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.619526][T13573] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.626831][T13573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.648007][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.655216][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.920810][T27667] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5951'. [ 571.055374][T27675] netlink: 'syz.2.5953': attribute type 1 has an invalid length. [ 571.080491][T27675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5953'. [ 571.115539][T27675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5953'. [ 571.187362][T27675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5953'. [ 571.218835][T27680] netlink: 'syz.0.5954': attribute type 1 has an invalid length. [ 571.256868][T27680] netlink: 'syz.0.5954': attribute type 1 has an invalid length. [ 571.449695][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 571.459395][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 571.471251][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 571.479972][ T5624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 571.490031][ T5624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 571.549572][T27700] netlink: 'syz.0.5958': attribute type 1 has an invalid length. [ 571.594409][T13577] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 571.616254][T13577] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 571.634832][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 571.845409][T12686] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 571.859859][T27410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 572.363620][ T50] Bluetooth: hci6: command tx timeout [ 572.453039][T27739] syzkaller1: entered promiscuous mode [ 572.463549][T27739] syzkaller1: entered allmulticast mode [ 572.653628][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 572.853417][T27410] veth0_vlan: entered promiscuous mode [ 572.902244][T27410] veth1_vlan: entered promiscuous mode [ 572.928729][T27695] lo speed is unknown, defaulting to 1000 [ 573.016637][T27410] veth0_macvtap: entered promiscuous mode [ 573.030264][T27410] veth1_macvtap: entered promiscuous mode [ 573.100495][T27410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 573.156165][T27410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 573.200766][T13564] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.259224][T13564] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.281694][T13564] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.333139][T13564] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.563594][ T50] Bluetooth: hci1: command tx timeout [ 573.684715][T13579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.734341][T13579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.794554][T27780] netlink: 'syz.5.5971': attribute type 6 has an invalid length. [ 573.819071][T27781] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 573.877210][T13577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.891077][T13577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.961608][ T9] IPVS: starting estimator thread 0... [ 573.976637][T27788] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 574.054834][T27788] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 574.071204][T27789] IPVS: using max 37 ests per chain, 88800 per kthread [ 574.235025][T27793] __nla_validate_parse: 5 callbacks suppressed [ 574.235048][T27793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5973'. [ 574.267988][T27797] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 574.279461][T27695] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.297960][T27695] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.316447][T27695] bridge_slave_0: entered allmulticast mode [ 574.326676][T27695] bridge_slave_0: entered promiscuous mode [ 574.341814][T27793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5973'. [ 574.351184][T27695] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.374615][T27695] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.394463][T27695] bridge_slave_1: entered allmulticast mode [ 574.412860][T27695] bridge_slave_1: entered promiscuous mode [ 574.510365][T27793] hsr_slave_1 (unregistering): left promiscuous mode [ 574.570827][T27811] pim6reg: entered allmulticast mode [ 574.633094][T27695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.766757][T27834] netlink: 'syz.0.5980': attribute type 1 has an invalid length. [ 574.818593][T27834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5980'. [ 574.837863][T27793] syzkaller0: entered promiscuous mode [ 574.851420][T27793] syzkaller0: entered allmulticast mode [ 574.868254][T27695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.870911][T27834] netlink: 658 bytes leftover after parsing attributes in process `syz.0.5980'. [ 574.891489][T27834] netlink: 'syz.0.5980': attribute type 1 has an invalid length. [ 574.957900][T27842] netlink: 'syz.0.5982': attribute type 32 has an invalid length. [ 574.966516][T27842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5982'. [ 575.038459][T27836] netlink: 284 bytes leftover after parsing attributes in process `syz.5.5981'. [ 575.070625][T27842] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 575.131211][T27695] team0: Port device team_slave_0 added [ 575.187919][T27695] team0: Port device team_slave_1 added [ 575.220997][T27853] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5983'. [ 575.294766][T27695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.302658][T27853] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5983'. [ 575.315232][T27695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.343161][T27853] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5983'. [ 575.352035][T27695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.363784][T27859] syz.4.5985: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 575.378626][T27853] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5983'. [ 575.394812][T27695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.401986][T27859] CPU: 0 UID: 0 PID: 27859 Comm: syz.4.5985 Not tainted syzkaller #0 PREEMPT(full) [ 575.402015][T27859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 575.402029][T27859] Call Trace: [ 575.402038][T27859] [ 575.402047][T27859] dump_stack_lvl+0xe8/0x150 [ 575.402077][T27859] warn_alloc+0x249/0x340 [ 575.402107][T27859] ? __pfx_stack_trace_save+0x10/0x10 [ 575.402139][T27859] ? __pfx_warn_alloc+0x10/0x10 [ 575.402170][T27859] ? __kasan_kmalloc+0x93/0xb0 [ 575.402198][T27859] ? __kmalloc_cache_noprof+0x318/0x660 [ 575.402226][T27859] ? xskq_create+0x56/0x170 [ 575.402251][T27859] ? xsk_init_queue+0x8a/0xe0 [ 575.402273][T27859] ? xsk_setsockopt+0x52a/0x960 [ 575.402295][T27859] ? do_sock_setsockopt+0x17c/0x1b0 [ 575.402324][T27859] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 575.402353][T27859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.402378][T27859] __vmalloc_node_range_noprof+0x12c/0x1730 [ 575.402421][T27859] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 575.402454][T27859] ? __kasan_kmalloc+0x93/0xb0 [ 575.402486][T27859] vmalloc_user_noprof+0xad/0xe0 [ 575.402513][T27859] ? xskq_create+0xbf/0x170 [ 575.402538][T27859] xskq_create+0xbf/0x170 [ 575.402565][T27859] xsk_init_queue+0x8a/0xe0 [ 575.402591][T27859] xsk_setsockopt+0x52a/0x960 [ 575.402616][T27859] ? __pfx_xsk_setsockopt+0x10/0x10 [ 575.402640][T27859] ? __pfx_aa_sk_perm+0x10/0x10 [ 575.402671][T27859] ? lock_release+0x4b/0x3c0 [ 575.402702][T27859] ? aa_sock_opt_perm+0xff/0x1a0 [ 575.402724][T27859] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 575.402750][T27859] ? __pfx_xsk_setsockopt+0x10/0x10 [ 575.402775][T27859] do_sock_setsockopt+0x17c/0x1b0 [ 575.402808][T27859] __x64_sys_setsockopt+0x13d/0x1b0 [ 575.402838][T27859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.402859][T27859] do_syscall_64+0x174/0x580 [ 575.402887][T27859] ? trace_irq_disable+0x3b/0x140 [ 575.402924][T27859] ? clear_bhb_loop+0x40/0x90 [ 575.402948][T27859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.402969][T27859] RIP: 0033:0x7fda7ab9ce59 [ 575.402989][T27859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.403008][T27859] RSP: 002b:00007fda7ba7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 575.403031][T27859] RAX: ffffffffffffffda RBX: 00007fda7ae16090 RCX: 00007fda7ab9ce59 [ 575.403047][T27859] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 575.403061][T27859] RBP: 00007fda7ac32e6f R08: 0000000000000004 R09: 0000000000000000 [ 575.403074][T27859] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.403088][T27859] R13: 00007fda7ae16128 R14: 00007fda7ae16090 R15: 00007ffc2ae6dc58 [ 575.403114][T27859] [ 575.403122][T27859] Mem-Info: [ 575.680552][T27695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.694357][ T50] Bluetooth: hci1: command tx timeout [ 575.712933][T27695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.748986][T27859] active_anon:6544 inactive_anon:0 isolated_anon:0 [ 575.748986][T27859] active_file:2760 inactive_file:40134 isolated_file:0 [ 575.748986][T27859] unevictable:768 dirty:40 writeback:0 [ 575.748986][T27859] slab_reclaimable:12941 slab_unreclaimable:126962 [ 575.748986][T27859] mapped:39653 shmem:1301 pagetables:1530 [ 575.748986][T27859] sec_pagetables:0 bounce:0 [ 575.748986][T27859] kernel_misc_reclaimable:0 [ 575.748986][T27859] free:1254316 free_pcp:26338 free_cma:0 [ 575.802346][T27859] Node 0 active_anon:25976kB inactive_anon:0kB active_file:11040kB inactive_file:160328kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:158612kB dirty:156kB writeback:0kB shmem:3668kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17208kB pagetables:5988kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 575.834395][T27862] syzkaller0: entered promiscuous mode [ 575.845313][T27859] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 575.878381][T27859] Node 0 DMA free:15352kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 575.912224][T27859] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 575.917748][T27862] syzkaller0: entered allmulticast mode [ 575.925463][T27859] Node 0 DMA32 free:1115356kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25976kB inactive_anon:0kB active_file:11040kB inactive_file:160328kB unevictable:1536kB writepending:156kB zspages:0kB present:3129332kB managed:2552584kB mlocked:0kB bounce:0kB free_pcp:54160kB local_pcp:20840kB free_cma:0kB [ 575.963780][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 575.972987][T27859] lowmem_reserve[]: 0 0 0 0 0 [ 575.980101][T27859] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:664kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 576.037789][T27859] lowmem_reserve[]: 0 0 0 0 0 [ 576.043347][T27859] Node 1 Normal free:3886756kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:51580kB local_pcp:26192kB free_cma:0kB [ 576.078091][T27859] lowmem_reserve[]: 0 0 0 0 0 [ 576.084699][T27859] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15352kB [ 576.119804][T27695] hsr_slave_0: entered promiscuous mode [ 576.137652][T27695] hsr_slave_1: entered promiscuous mode [ 576.154903][T27859] Node 0 DMA32: 8009*4kB (UM) 6827*8kB (UM) 3954*16kB (UM) 607*32kB (UM) 422*64kB (UM) 283*128kB (UME) 553*256kB (UME) 334*512kB (UM) 195*1024kB (UM) 106*2048kB (UE) 38*4096kB (U) = 1117564kB [ 576.178910][T27695] debugfs: 'hsr0' already exists in 'hsr' [ 576.185851][T27695] Cannot create hsr debugfs directory [ 576.206930][T27859] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 576.242413][T27859] Node 1 Normal: 3*4kB (U) 3*8kB (UM) 5*16kB (UM) 3*32kB (UM) 14*64kB (UM) 11*128kB (UM) 8*256kB (UM) 7*512kB (UM) 6*1024kB (UM) 1*2048kB (U) 945*4096kB (UM) = 3887060kB [ 576.266686][T27859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 576.277301][T27859] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 576.287640][T27859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 576.298202][T27859] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 576.309079][T27859] 44190 total pagecache pages [ 576.314147][T27859] 0 pages in swap cache [ 576.335090][T27859] Free swap = 124996kB [ 576.341255][T27859] Total swap = 124996kB [ 576.355272][T27859] 2097051 pages RAM [ 576.366728][T27859] 0 pages HighMem/MovableOnly [ 576.381452][T27859] 427124 pages reserved [ 576.399748][T27859] 0 pages cma reserved [ 576.753021][T27695] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 576.846999][T27695] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 576.894572][T27695] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 576.907902][T27695] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 576.945105][T27695] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 576.972618][T27695] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 576.997474][T27695] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 577.015954][T27695] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 577.029271][T27905] syzkaller0: entered promiscuous mode [ 577.045361][T27905] syzkaller0: entered allmulticast mode [ 577.190188][T27923] sctp: [Deprecated]: syz.0.6006 (pid 27923) Use of struct sctp_assoc_value in delayed_ack socket option. [ 577.190188][T27923] Use struct sctp_sack_info instead [ 577.326476][T27695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.351741][T27929] netlink: 'syz.5.6009': attribute type 1 has an invalid length. [ 577.411993][T27695] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.420958][T27926] IPVS: persistence engine module ip_vs_pe_À not found [ 577.439020][T13561] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.446191][T13561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.483219][T27929] bond1: (slave geneve2): making interface the new active one [ 577.494367][T27929] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 577.510597][T27937] netlink: 'syz.4.6007': attribute type 1 has an invalid length. [ 577.526580][T13561] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.533814][T13561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.550699][T13573] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 577.560369][T13573] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 577.630258][T13573] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 577.661157][T13573] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 577.725729][ T50] Bluetooth: hci1: command tx timeout [ 578.823818][T27695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.878355][T28014] syzkaller0: entered promiscuous mode [ 578.888440][T28014] syzkaller0: entered allmulticast mode [ 578.909761][T28012] netlink: 'syz.4.6031': attribute type 2 has an invalid length. [ 579.100896][T28030] openvswitch: netlink: EtherType 50e is less than min 600 [ 579.327240][T28043] netlink: 'syz.2.6040': attribute type 13 has an invalid length. [ 579.500920][T27695] veth0_vlan: entered promiscuous mode [ 579.557690][T27695] veth1_vlan: entered promiscuous mode [ 579.565723][T28054] __nla_validate_parse: 13 callbacks suppressed [ 579.565743][T28054] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6044'. [ 579.697222][T27695] veth0_macvtap: entered promiscuous mode [ 579.735749][T27695] veth1_macvtap: entered promiscuous mode [ 579.797842][T28062] syzkaller0: entered promiscuous mode [ 579.805451][T28062] syzkaller0: entered allmulticast mode [ 579.814314][ T50] Bluetooth: hci1: command tx timeout [ 579.822042][T28070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6047'. [ 579.900056][T28077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6050'. [ 579.909373][T28077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6050'. [ 580.016005][T28083] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6050'. [ 580.026523][T28082] netlink: zone id is out of range [ 580.039611][T28077] bond17: entered promiscuous mode [ 580.050165][T28082] netlink: zone id is out of range [ 580.056268][T28082] netlink: zone id is out of range [ 580.061907][T28082] netlink: zone id is out of range [ 580.079629][T28082] netlink: zone id is out of range [ 580.090402][T28082] netlink: zone id is out of range [ 580.098834][T27695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 580.107508][T28082] netlink: zone id is out of range [ 580.117946][T28082] netlink: zone id is out of range [ 580.147703][T28082] netlink: zone id is out of range [ 580.163656][T28077] macvlan4: entered promiscuous mode [ 580.178728][T28088] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6052'. [ 580.202947][T28077] macvlan4: entered allmulticast mode [ 580.213295][T28077] bond17: (slave macvlan4): Opening slave failed [ 580.353364][T28094] netlink: 'syz.2.6055': attribute type 1 has an invalid length. [ 580.391006][T28094] netlink: 'syz.2.6055': attribute type 2 has an invalid length. [ 580.441961][T27695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 580.482360][T13564] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.512704][T13564] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.542786][T13564] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.572737][T13564] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.797335][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.812312][T28118] netlink: 'syz.0.6062': attribute type 1 has an invalid length. [ 580.829565][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.860016][T28118] netlink: 280 bytes leftover after parsing attributes in process `syz.0.6062'. [ 580.902645][T28118] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6062'. [ 580.939100][T13564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.972541][T13564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.346329][T28153] xt_l2tp: v2 doesn't support IP mode [ 581.390242][T28158] netlink: 288 bytes leftover after parsing attributes in process `syz.4.6068'. [ 581.546702][ T5624] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 581.556419][ T5624] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 581.565637][ T5624] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 581.575044][ T5624] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 581.584386][ T5624] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 582.017636][ T5282] veth0_vlan: left promiscuous mode [ 582.038264][ T5282] veth0_vlan: entered promiscuous mode [ 582.244887][T13561] gretap0: left allmulticast mode [ 582.257746][T13561] bridge0: port 3(gretap0) entered disabled state [ 582.279920][T13561] bridge_slave_1: left allmulticast mode [ 582.288643][T13561] bridge_slave_1: left promiscuous mode [ 582.295004][T13561] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.312725][T13561] pim6reg527: left allmulticast mode [ 582.353307][T13561] bond13 (unregistering): (slave ip6gre2): Releasing backup interface [ 582.362710][T13561] ip6gre2 (unregistering): left promiscuous mode [ 582.415835][T13561] bond8 (unregistering): (slave gretap1): Releasing backup interface [ 582.458626][T13561] bond1 (unregistering): (slave geneve2): Releasing active interface [ 582.495720][T13561] bond3 (unregistering): (slave macvlan2): Removing an active aggregator [ 582.504874][T13561] bond3 (unregistering): (slave macvlan2): Releasing backup interface [ 582.519717][T13561] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.531150][T13561] bond0 (unregistering): Released all slaves [ 582.542536][T13561] bond1 (unregistering): Released all slaves [ 582.555326][T13561] bond2 (unregistering): Released all slaves [ 582.567364][T13561] bond3 (unregistering): Released all slaves [ 582.579399][T13561] bond4 (unregistering): Released all slaves [ 582.597120][T13561] bond5 (unregistering): Released all slaves [ 582.611643][T13561] bond6 (unregistering): Released all slaves [ 582.626605][T13561] bond7 (unregistering): Released all slaves [ 582.639360][T13561] bond8 (unregistering): (slave bond9): Releasing backup interface [ 582.650023][T13561] bond8 (unregistering): Released all slaves [ 582.667951][T13561] bond9 (unregistering): Released all slaves [ 582.680341][T13561] bond10 (unregistering): Released all slaves [ 582.693067][T13561] bond11 (unregistering): Released all slaves [ 582.711698][T13561] bond12 (unregistering): Released all slaves [ 582.724077][T13561] bond13 (unregistering): Released all slaves [ 582.736319][T13561] bond14 (unregistering): Released all slaves [ 582.753181][T13561] bond15 (unregistering): Released all slaves [ 582.766028][T13561] bond16 (unregistering): Released all slaves [ 582.777941][T13561] bond17 (unregistering): Released all slaves [ 582.792075][T28164] lo speed is unknown, defaulting to 1000 [ 582.878625][T13561] tipc: Left network mode [ 583.251807][T13561] hsr_slave_0: left promiscuous mode [ 583.258569][T13561] hsr_slave_1: left promiscuous mode [ 583.265812][T13561] veth1_vlan: left allmulticast mode [ 583.403020][T28164] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.411424][T28164] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.419378][T28164] bridge_slave_0: entered allmulticast mode [ 583.426797][T28164] bridge_slave_0: entered promiscuous mode [ 583.435147][T28164] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.442376][T28164] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.453190][T28164] bridge_slave_1: entered allmulticast mode [ 583.460479][T28164] bridge_slave_1: entered promiscuous mode [ 583.486183][T28164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.498650][T28164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.524983][T28164] team0: Port device team_slave_0 added [ 583.532404][T28164] team0: Port device team_slave_1 added [ 583.551038][T28164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.558161][T28164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.586973][T28164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.599787][T28164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.606997][T28164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.633646][T28164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.644603][ T5624] Bluetooth: hci7: command tx timeout [ 583.667745][T13561] IPVS: stop unused estimator thread 0... [ 583.681294][T28164] hsr_slave_0: entered promiscuous mode [ 583.688615][T28164] hsr_slave_1: entered promiscuous mode [ 583.696850][T28164] debugfs: 'hsr0' already exists in 'hsr' [ 583.702753][T28164] Cannot create hsr debugfs directory [ 584.161148][T28141] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 584.177543][T28164] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 584.226779][T28164] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 584.247055][T28164] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 584.280180][T28164] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 584.298205][T28164] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 584.317350][T28164] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 584.335097][T28164] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 584.356568][T28164] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 584.380521][ T5728] IPVS: starting estimator thread 0... [ 584.490797][T28235] block nbd6: not configured, cannot reconfigure [ 584.497307][T28227] IPVS: using max 40 ests per chain, 96000 per kthread [ 584.543066][T28164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.575585][T28243] netlink: 'syz.5.6084': attribute type 16 has an invalid length. [ 584.585472][T28243] netlink: 'syz.5.6084': attribute type 3 has an invalid length. [ 584.593360][T28243] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6084'. [ 584.622953][T28238] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6082'. [ 584.658533][T28164] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.670877][T28238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6082'. [ 584.703883][T13561] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.711063][T13561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.747525][T28244] netlink: 'syz.4.6083': attribute type 62 has an invalid length. [ 584.761942][T13564] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.769136][T13564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.778096][T28241] netlink: 'syz.4.6083': attribute type 62 has an invalid length. [ 584.787379][T28256] netlink: 'syz.5.6086': attribute type 16 has an invalid length. [ 584.822550][T28256] netlink: 'syz.5.6086': attribute type 17 has an invalid length. [ 584.844941][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 584.901824][T28256] erspan0: left promiscuous mode [ 585.069275][T28256] 8021q: adding VLAN 0 to HW filter on device bond1 [ 585.083835][ T11] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 585.108264][T28274] netlink: 'syz.6.6087': attribute type 4 has an invalid length. [ 585.139777][T28268] syzkaller1: entered promiscuous mode [ 585.171332][T28268] syzkaller1: entered allmulticast mode [ 585.276444][T28288] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.6092'. [ 585.287022][T28283] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6090'. [ 585.622722][T28308] validate_nla: 3 callbacks suppressed [ 585.622742][T28308] netlink: 'syz.4.6098': attribute type 2 has an invalid length. [ 585.656356][ T11] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 585.671892][T28315] netlink: 'syz.4.6098': attribute type 11 has an invalid length. [ 585.682507][T28310] bond0: Error: CAN devices cannot be enslaved [ 585.695042][T28315] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.6098'. [ 585.723664][ T5624] Bluetooth: hci7: command tx timeout [ 585.909472][T28331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6104'. [ 585.938646][T28333] xt_l2tp: invalid flags combination: 8 [ 586.090540][T28353] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.6109'. [ 586.123009][T28164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 586.168100][T28164] veth0_vlan: entered promiscuous mode [ 586.182550][T28164] veth1_vlan: entered promiscuous mode [ 586.226783][T28164] veth0_macvtap: entered promiscuous mode [ 586.238276][T28164] veth1_macvtap: entered promiscuous mode [ 586.262995][T28164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 586.279516][T28164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 586.299169][T13577] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.312594][T13577] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.324518][T13577] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.340588][T13577] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.540815][T28358] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 586.549499][T28358] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 586.557792][T28358] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 586.568048][T28358] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 586.576922][T28358] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 586.585799][T28358] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 586.595321][T28358] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 586.603949][T28358] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 586.611961][T28358] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 586.620239][T28358] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 586.994011][T28368] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6112'. [ 586.996139][T28367] netlink: 324 bytes leftover after parsing attributes in process `syz.4.6112'. [ 587.044978][T28371] netlink: 'syz.4.6113': attribute type 4 has an invalid length. [ 587.813666][ T5624] Bluetooth: hci7: command tx timeout [ 589.011883][T28343] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 589.141786][T13570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.169494][T13570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.192265][T28378] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 589.201019][T28378] bond1: option packets_per_slave: allowed values 0 - 65535 [ 589.211997][T28378] bond1 (unregistering): Released all slaves [ 589.265676][T28390] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 589.297036][T28392] veth0_macvtap: Caught tx_queue_len zero misconfig [ 589.319889][T13561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.342091][T13561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.442413][T28399] vlan1: entered allmulticast mode [ 589.453483][T28399] bond0: entered allmulticast mode [ 589.473416][T28407] IPv6: NLM_F_REPLACE set, but no existing node found! [ 589.634636][T28413] __nla_validate_parse: 2 callbacks suppressed [ 589.634656][T28413] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6126'. [ 589.684760][T28414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6127'. [ 589.706120][T28414] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6127'. [ 589.778098][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 589.790318][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 589.800898][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 589.811437][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 589.821834][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 589.863339][T28427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6129'. [ 589.883885][ T50] Bluetooth: hci7: command tx timeout [ 589.901924][T28430] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6131'. [ 590.162302][T28447] netlink: 'syz.0.6136': attribute type 1 has an invalid length. [ 590.204209][T28447] ip_vti0: entered promiscuous mode [ 590.436916][T13577] vlan0: left allmulticast mode [ 590.450873][T13577] geneve0: left allmulticast mode [ 590.463954][T13577] vlan0: left promiscuous mode [ 590.474182][T13577] geneve0: left promiscuous mode [ 590.485784][T13577] bridge0: port 3(vlan0) entered disabled state [ 590.514136][T13577] bridge_slave_1: left allmulticast mode [ 590.533331][T13577] bridge_slave_1: left promiscuous mode [ 590.550954][T13577] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.569005][T13577] bridge_slave_0: left allmulticast mode [ 590.580124][T13577] bridge_slave_0: left promiscuous mode [ 590.587461][T13577] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.626307][T13577] pim6reg527: left allmulticast mode [ 590.646140][T13577] pimreg3: left allmulticast mode [ 590.685663][T13577] bond2 (unregistering): (slave ip6gre3): Releasing backup interface [ 590.850881][T13577] bond0 (unregistering): Released all slaves [ 590.859714][T13577] bond1 (unregistering): Released all slaves [ 590.870821][T13577] bond2 (unregistering): Released all slaves [ 590.888073][T13577] bond3 (unregistering): Released all slaves [ 590.900914][T13577] bond4 (unregistering): Released all slaves [ 590.911836][T13577] bond5 (unregistering): Released all slaves [ 590.922686][T13577] bond6 (unregistering): Released all slaves [ 590.934177][T13577] bond7 (unregistering): Released all slaves [ 590.951942][T13577] bond8 (unregistering): Released all slaves [ 590.976461][T13577] bond9 (unregistering): Released all slaves [ 591.008133][T28469] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6142'. [ 591.017556][T28472] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6142'. [ 591.136581][T13577] : left promiscuous mode [ 591.206831][T28495] netlink: 'syz.4.6149': attribute type 11 has an invalid length. [ 591.239997][T28499] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6150'. [ 591.251913][T13577] tipc: Left network mode [ 591.257669][T28495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6149'. [ 591.360506][T28503] netlink: 'syz.6.6151': attribute type 1 has an invalid length. [ 591.419631][T28503] netlink: 2108 bytes leftover after parsing attributes in process `syz.6.6151'. [ 591.519908][T28421] lo speed is unknown, defaulting to 1000 [ 591.884968][ T50] Bluetooth: hci4: command tx timeout [ 591.940550][T28538] batadv_slave_0: entered promiscuous mode [ 591.964532][T28538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 592.060087][T28538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 592.119777][T28545] tipc: Started in network mode [ 592.128257][T28545] tipc: Node identity de7e2d18ce5e, cluster identity 4711 [ 592.136976][T28545] tipc: Enabled bearer , priority 0 [ 592.147402][T28550] syzkaller0: entered promiscuous mode [ 592.157122][T28550] syzkaller0: entered allmulticast mode [ 592.169793][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 592.250215][T28550] tipc: Resetting bearer [ 592.262516][T28550] tipc: Disabling bearer [ 593.115396][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 593.281928][T13577] hsr_slave_0: left promiscuous mode [ 593.288218][T13577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.324766][T28635] netlink: 'syz.0.6182': attribute type 10 has an invalid length. [ 593.381278][T28421] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.388595][T28421] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.396165][T28421] bridge_slave_0: entered allmulticast mode [ 593.403249][T28421] bridge_slave_0: entered promiscuous mode [ 593.426567][T28635] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 593.451262][T28421] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.470342][T28421] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.481882][T28421] bridge_slave_1: entered allmulticast mode [ 593.500404][T28421] bridge_slave_1: entered promiscuous mode [ 593.558938][T28421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.579875][T28421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.798786][T28421] team0: Port device team_slave_0 added [ 593.839644][T28421] team0: Port device team_slave_1 added [ 593.949416][T28421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.965602][ T50] Bluetooth: hci4: command tx timeout [ 593.981862][T28421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 594.008685][T28421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.033273][T28421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.052489][T28421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 594.114503][T28670] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 594.136859][T28421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.162987][T13577] IPVS: stop unused estimator thread 0... [ 594.318786][T28679] bond2: entered promiscuous mode [ 594.330627][T28679] bond2: entered allmulticast mode [ 594.386757][T28421] hsr_slave_0: entered promiscuous mode [ 594.402494][T28421] hsr_slave_1: entered promiscuous mode [ 594.416340][T28421] debugfs: 'hsr0' already exists in 'hsr' [ 594.430761][T28421] Cannot create hsr debugfs directory [ 594.573246][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3 [ 594.661924][T28701] __nla_validate_parse: 7 callbacks suppressed [ 594.661944][T28701] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6201'. [ 594.694126][T28701] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6201'. [ 594.765681][T28709] netlink: 'syz.5.6203': attribute type 1 has an invalid length. [ 594.787164][T28711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6204'. [ 594.947712][T28721] net_ratelimit: 47 callbacks suppressed [ 594.947737][T28721] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 595.085542][T28730] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6209'. [ 595.121420][T28730] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6209'. [ 595.201427][T28736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6212'. [ 595.381250][T28734] bridge0: port 3(gretap0) entered disabled state [ 595.584416][T28734] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.592028][T28734] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.662693][T28734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.676946][T28734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.787502][T28754] syzkaller1: entered promiscuous mode [ 595.796546][T28754] syzkaller1: entered allmulticast mode [ 595.805315][T13570] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.815821][T13570] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 595.825901][T13570] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.836101][T13570] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 595.857254][T13570] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.866495][T13570] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 595.893145][T13570] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.913663][T13570] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 595.959097][T28421] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 595.982919][T28421] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 596.016974][T28421] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 596.044070][ T50] Bluetooth: hci4: command tx timeout [ 596.069023][T28421] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 596.111016][T28421] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 596.161092][T28421] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 596.173144][T28776] netlink: 'syz.6.6218': attribute type 1 has an invalid length. [ 596.196820][T28421] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 596.204750][T28776] netlink: 224 bytes leftover after parsing attributes in process `syz.6.6218'. [ 596.218930][T28421] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 596.360524][T28790] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6219'. [ 596.366106][T13562] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 596.467726][T28421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.538482][T28803] team0: Port device team_slave_1 removed [ 596.582337][T28421] 8021q: adding VLAN 0 to HW filter on device team0 [ 596.612701][T13561] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.619919][T13561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 596.648288][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.655599][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.524517][T28421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.641323][T28421] veth0_vlan: entered promiscuous mode [ 597.693183][T28421] veth1_vlan: entered promiscuous mode [ 597.762199][T28898] netlink: 'syz.4.6237': attribute type 10 has an invalid length. [ 597.784028][T28421] veth0_macvtap: entered promiscuous mode [ 597.803293][T28899] syzkaller1: entered promiscuous mode [ 597.817297][T28899] syzkaller1: entered allmulticast mode [ 597.828365][T28898] veth1_macvtap: left promiscuous mode [ 597.848056][T28903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 597.859220][T28898] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 597.870715][T28899] tipc: Enabling of bearer rejected, failed to enable media [ 597.883825][T28906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 597.894693][T28421] veth1_macvtap: entered promiscuous mode [ 597.918836][T28421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 597.970816][T28421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 598.013136][T13573] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.045836][T13573] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.106797][T13573] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.125900][ T50] Bluetooth: hci4: command tx timeout [ 598.143912][T13573] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.210064][T28920] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 598.224799][T28915] netlink: 'syz.0.6243': attribute type 1 has an invalid length. [ 598.232832][T13570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.260447][T28915] netlink: 'syz.0.6243': attribute type 3 has an invalid length. [ 598.269025][T13570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.287072][T28925] bond0: (slave bond_slave_1): Releasing backup interface [ 598.297169][T28915] netlink: 172 bytes leftover after parsing attributes in process `syz.0.6243'. [ 598.311341][T28915] NCSI netlink: No device for ifindex 813332851 [ 598.320610][ T30] audit: type=1800 audit(1782334363.423:7): pid=28925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6246" name="memory.events" dev="tmpfs" ino=318 res=0 errno=0 [ 598.428451][T13570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.445152][T13570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.762737][T28959] netlink: 'syz.0.6253': attribute type 19 has an invalid length. [ 598.800288][T13561] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.811005][T28959] netlink: 'syz.0.6253': attribute type 19 has an invalid length. [ 598.827788][T28965] netlink: 100 bytes leftover after parsing attributes in process `syz.5.6255'. [ 598.838716][T13561] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.873233][T13561] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.913050][T13561] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.956857][T28972] Cannot find add_set index 0 as target [ 598.990565][T28977] netlink: 'syz.6.6256': attribute type 2 has an invalid length. [ 599.107287][T28986] syzkaller0: entered promiscuous mode [ 599.143232][T28986] syzkaller0: entered allmulticast mode [ 599.928611][T29034] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 600.011509][T29041] netlink: 'syz.2.6275': attribute type 1 has an invalid length. [ 600.209449][T29058] __nla_validate_parse: 1 callbacks suppressed [ 600.209471][T29058] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6279'. [ 600.516903][T29075] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 600.551883][T29077] FAULT_INJECTION: forcing a failure. [ 600.551883][T29077] name failslab, interval 1, probability 0, space 0, times 0 [ 600.564603][T29077] CPU: 0 UID: 0 PID: 29077 Comm: syz.2.6280 Not tainted syzkaller #0 PREEMPT(full) [ 600.564629][T29077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 600.564642][T29077] Call Trace: [ 600.564651][T29077] [ 600.564659][T29077] dump_stack_lvl+0xe8/0x150 [ 600.564688][T29077] should_fail_ex+0x40c/0x560 [ 600.564714][T29077] should_failslab+0xa8/0x100 [ 600.564744][T29077] kmem_cache_alloc_bulk_noprof+0x85/0x7c0 [ 600.564776][T29077] ? pfn_valid+0x125/0x4c0 [ 600.564800][T29077] bpf_test_run_xdp_live+0x16e9/0x1c20 [ 600.564838][T29077] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 600.564876][T29077] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 600.564919][T29077] ? 0xffffffffa0201688 [ 600.564951][T29077] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 600.564978][T29077] ? _copy_from_user+0x94/0xb0 [ 600.565005][T29077] ? bpf_test_init+0x113/0x150 [ 600.565033][T29077] ? xdp_convert_md_to_buff+0x5b/0x330 [ 600.565066][T29077] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 600.565097][T29077] ? lock_release+0x4b/0x3c0 [ 600.565130][T29077] ? rcu_is_watching+0x15/0xb0 [ 600.565153][T29077] ? lock_release+0x4b/0x3c0 [ 600.565183][T29077] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 600.565216][T29077] ? __fget_files+0x2a/0x420 [ 600.565242][T29077] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 600.565274][T29077] bpf_prog_test_run+0x2c5/0x340 [ 600.565307][T29077] __sys_bpf+0x643/0x950 [ 600.565335][T29077] ? __pfx___sys_bpf+0x10/0x10 [ 600.565371][T29077] ? ksys_write+0x242/0x270 [ 600.565401][T29077] ? __pfx_ksys_write+0x10/0x10 [ 600.565438][T29077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.565459][T29077] __x64_sys_bpf+0x7c/0x90 [ 600.565484][T29077] do_syscall_64+0x174/0x580 [ 600.565510][T29077] ? trace_irq_disable+0x3b/0x140 [ 600.565537][T29077] ? clear_bhb_loop+0x40/0x90 [ 600.565561][T29077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.565581][T29077] RIP: 0033:0x7f3e8cd9ce59 [ 600.565600][T29077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.565618][T29077] RSP: 002b:00007f3e8dc06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 600.565642][T29077] RAX: ffffffffffffffda RBX: 00007f3e8d015fa0 RCX: 00007f3e8cd9ce59 [ 600.565657][T29077] RDX: 0000000000000050 RSI: 00002000000006c0 RDI: 000000000000000a [ 600.565671][T29077] RBP: 00007f3e8dc06090 R08: 0000000000000000 R09: 0000000000000000 [ 600.565685][T29077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 600.565698][T29077] R13: 00007f3e8d016038 R14: 00007f3e8d015fa0 R15: 00007ffec36e4b58 [ 600.565723][T29077] [ 601.170114][T29114] geneve2: entered allmulticast mode [ 601.397568][T29132] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6292'. [ 601.409420][T29132] netlink: 'syz.0.6292': attribute type 1 has an invalid length. [ 601.474267][T29132] 8021q: adding VLAN 0 to HW filter on device bond1 [ 601.515550][T29137] bond1: (slave veth3): Enslaving as an active interface with a down link [ 601.547074][T29131] bond1: entered promiscuous mode [ 602.069153][T29183] bond2: (slave gre0): Device is not bonding slave [ 602.076672][T29183] bond2: option active_slave: invalid value (gre0) [ 602.084837][T29183] bond2 (unregistering): Released all slaves [ 602.715968][T29215] sit0: Master is either lo or non-ether device [ 604.942117][T29174] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 605.066884][T29234] netlink: 'syz.5.6317': attribute type 1 has an invalid length. [ 605.102102][T29234] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6317'. [ 605.157698][T29240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6319'. [ 605.180860][T29242] bridge_slave_1: left allmulticast mode [ 605.187825][T29242] bridge_slave_1: left promiscuous mode [ 605.194924][T29242] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.242823][T29251] netlink: 'syz.5.6317': attribute type 2 has an invalid length. [ 605.392893][T29262] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6326'. [ 605.407977][T29262] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6326'. [ 605.427460][T29262] netlink: 'syz.5.6326': attribute type 15 has an invalid length. [ 605.446404][T29262] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6326'. [ 605.472219][T29262] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6326'. [ 605.495562][T29266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6327'. [ 605.527952][T29262] netlink: 'syz.5.6326': attribute type 15 has an invalid length. [ 605.590460][T29265] 8021q: adding VLAN 0 to HW filter on device bond1 [ 605.614938][T29266] gre1: entered promiscuous mode [ 605.620183][T29266] gre1: entered allmulticast mode [ 605.767151][T29280] bond2: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 605.780709][T29280] bond2 (unregistering): Released all slaves [ 605.919704][T29296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6335'. [ 606.012666][T29304] : entered promiscuous mode [ 606.065688][T29309] netlink: 'syz.0.6339': attribute type 1 has an invalid length. [ 606.105138][T29309] 8021q: adding VLAN 0 to HW filter on device bond2 [ 606.349226][T29326] IPv6: NLM_F_CREATE should be specified when creating new route [ 606.357830][T29326] netlink: 'syz.6.6342': attribute type 1 has an invalid length. [ 606.373373][T29270] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 606.819027][T29368] netlink: 'syz.4.6353': attribute type 10 has an invalid length. [ 606.832514][T29368] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.842122][T29368] bond0: (slave team0): Enslaving as an active interface with an up link [ 606.931876][T29374] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6354'. [ 606.982482][T29380] SET target dimension over the limit! [ 606.996874][T29374] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6354'. [ 607.074291][T29390] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6359'. [ 607.107111][T29390] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6359'. [ 607.207349][T29402] tipc: Enabled bearer , priority 0 [ 607.401438][ T30] audit: type=1107 audit(1782334372.503:8): pid=29414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ׄáI¡ö‘+K;e”®bw{xÎQ+ükï?D+rÕ' [ 607.430671][T29418] netlink: 'syz.6.6365': attribute type 4 has an invalid length. [ 607.460457][T29418] netlink: 'syz.6.6365': attribute type 4 has an invalid length. [ 607.588101][T29435] bridge2: entered allmulticast mode [ 607.931095][T29461] netdevsim netdevsim6: Direct firmware load for . failed with error -2 [ 607.940586][T29461] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 608.323696][ T24] tipc: Node number set to 270544152 [ 610.486275][T29427] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 610.641328][T29494] __nla_validate_parse: 8 callbacks suppressed [ 610.641351][T29494] netlink: 808 bytes leftover after parsing attributes in process `syz.2.6388'. [ 610.711831][T29496] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 610.812324][T29503] netlink: 'syz.0.6391': attribute type 10 has an invalid length. [ 610.854756][T29505] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6392'. [ 610.872750][T29503] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 610.884612][T29510] netlink: 4552 bytes leftover after parsing attributes in process `syz.6.6394'. [ 610.896435][T29503] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 610.907344][T29510] netlink: 4552 bytes leftover after parsing attributes in process `syz.6.6394'. [ 610.961158][T29518] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 611.056432][T29527] netlink: 'syz.0.6400': attribute type 1 has an invalid length. [ 611.186407][T29540] SET target dimension over the limit! [ 611.201246][T29540] openvswitch: netlink: Key type 30 is not supported [ 611.216560][T29543] SET target dimension over the limit! [ 611.224414][T29540] openvswitch: netlink: Key type 30 is not supported [ 611.548244][T29570] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6413'. [ 611.569491][T29570] ip6erspan0: entered allmulticast mode [ 611.581577][T29575] vxcan0: tx address claim with different name [ 611.871767][T29590] IPv6: sit3: Disabled Multicast RS [ 611.976182][T29595] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 612.013021][T29587] netlink: 312 bytes leftover after parsing attributes in process `syz.4.6419'. [ 612.046399][T29598] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 612.068129][T29598] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6422'. [ 612.142257][T29601] syzkaller0: entered promiscuous mode [ 612.148537][T29601] syzkaller0: entered allmulticast mode [ 612.317990][T29609] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6426'. [ 612.551530][T29625] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6431'. [ 612.560980][T29625] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6431'. [ 612.571493][T29625] sctp: [Deprecated]: syz.6.6431 (pid 29625) Use of int in max_burst socket option. [ 612.571493][T29625] Use struct sctp_assoc_value instead [ 612.674844][T29628] team0: Device ipvlan2 failed to register rx_handler [ 612.708676][T29632] openvswitch: netlink: Missing key (keys=40, expected=100) [ 612.721922][T29630] batadv1: entered allmulticast mode [ 612.870626][T29641] bond2: entered promiscuous mode [ 612.898435][T29641] bond2: entered allmulticast mode [ 613.262476][T29680] bond2: left allmulticast mode [ 613.381580][T29677] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.389132][T29677] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.500792][T29677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 613.515476][T29677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 613.638355][T29677] bond1: left promiscuous mode [ 613.717834][T29693] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.725349][T29693] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.792148][T29693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 613.830705][T29693] veth0_vlan: left promiscuous mode [ 613.987648][T13561] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.012290][T13561] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.075373][T13561] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.110214][T13561] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.162274][T29733] netlink: 'syz.4.6458': attribute type 3 has an invalid length. [ 614.216790][T13561] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.230783][T29711] netlink: 'syz.6.6457': attribute type 1 has an invalid length. [ 614.240201][T13561] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.269603][T13561] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.271884][T29711] sctp: [Deprecated]: syz.6.6457 (pid 29711) Use of struct sctp_assoc_value in delayed_ack socket option. [ 614.271884][T29711] Use struct sctp_sack_info instead [ 614.305592][T13561] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.489905][T29761] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 614.747364][T29780] netlink: 'syz.4.6469': attribute type 24 has an invalid length. [ 617.319970][T29761] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 617.480025][T29831] __nla_validate_parse: 11 callbacks suppressed [ 617.480046][T29831] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6476'. [ 617.528804][T29831] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6476'. [ 617.539381][T29831] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6476'. [ 617.651596][T29845] sctp: [Deprecated]: syz.5.6480 (pid 29845) Use of int in maxseg socket option. [ 617.651596][T29845] Use struct sctp_assoc_value instead [ 617.680607][T29848] sctp: [Deprecated]: syz.5.6480 (pid 29848) Use of int in maxseg socket option. [ 617.680607][T29848] Use struct sctp_assoc_value instead [ 617.791723][T29863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6479'. [ 617.836655][T29867] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 617.908806][T29872] netlink: 'syz.0.6488': attribute type 20 has an invalid length. [ 617.936961][T29872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6488'. [ 617.946787][T29872] netlink: 'syz.0.6488': attribute type 20 has an invalid length. [ 617.955083][T29872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6488'. [ 617.966735][T29872] netlink: 'syz.0.6488': attribute type 19 has an invalid length. [ 617.983692][T29872] netlink: 'syz.0.6488': attribute type 19 has an invalid length. [ 618.110016][T29879] pim6reg527: entered allmulticast mode [ 618.150740][T29886] netlink: 'syz.0.6493': attribute type 4 has an invalid length. [ 618.530063][T29914] netlink: 'syz.2.6501': attribute type 1 has an invalid length. [ 618.558958][T29914] 8021q: adding VLAN 0 to HW filter on device bond2 [ 618.598372][T29914] bond2: (slave gretap1): making interface the new active one [ 618.610612][T29914] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 618.679012][T29926] syzkaller1: entered promiscuous mode [ 618.686327][T29926] syzkaller1: entered allmulticast mode [ 619.111439][T29973] netlink: 'syz.4.6518': attribute type 11 has an invalid length. [ 619.214469][T29980] pimreg: entered allmulticast mode [ 619.719641][T30027] openvswitch: netlink: IP tunnel TTL not specified. [ 619.736697][T30027] openvswitch: netlink: IP tunnel TTL not specified. [ 619.768270][T30034] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6538'. [ 619.787292][T30035] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6538'. [ 619.840949][T30040] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6540'. [ 619.997665][T30051] SET target dimension over the limit! [ 620.142156][T30061] bridge2: entered promiscuous mode [ 620.161630][T30061] bridge2: entered allmulticast mode [ 620.280524][T30070] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 620.437013][T30080] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6558'. [ 620.449321][T30083] IPv6: NLM_F_CREATE should be specified when creating new route [ 620.474695][T30083] netlink: 'syz.4.6557': attribute type 1 has an invalid length. [ 620.546562][T30080] geneve2: entered promiscuous mode [ 620.553062][T30080] geneve2: entered allmulticast mode [ 620.560774][T13573] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 620.572920][T13573] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 620.582894][T13573] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 620.592987][T13573] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 620.782990][T30112] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 620.792221][T30112] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 620.800962][T30112] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 621.384112][T30138] syz_tun: entered allmulticast mode [ 621.398380][T30138] pim6reg: entered allmulticast mode [ 621.564220][T30156] team0 (unregistering): Port device team_slave_0 removed [ 621.584700][T30156] team0 (unregistering): Port device team_slave_1 removed [ 621.702032][T30163] netlink: 'syz.0.6576': attribute type 1 has an invalid length. [ 621.717961][T30163] netlink: 'syz.0.6576': attribute type 3 has an invalid length. [ 621.727452][T30163] netlink: 'syz.0.6576': attribute type 7 has an invalid length. [ 621.737166][T30163] NCSI netlink: No device for ifindex 131092 [ 622.142907][T30206] syzkaller1: entered promiscuous mode [ 622.161114][T30206] syzkaller1: entered allmulticast mode [ 622.182021][T30204] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.199742][T30207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 622.508943][T30224] __nla_validate_parse: 6 callbacks suppressed [ 622.508964][T30224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6593'. [ 622.614474][T30232] macsec0: entered promiscuous mode [ 622.620074][T30232] macsec0: entered allmulticast mode [ 622.626770][T30232] veth1_macvtap: entered allmulticast mode [ 622.632890][T30232] macsec0: left promiscuous mode [ 622.642125][T30232] macsec0: left allmulticast mode [ 622.662078][T30232] veth1_macvtap: left allmulticast mode [ 622.738313][T30232] tap0: tun_chr_ioctl cmd 1074025672 [ 622.754164][T30232] tap0: ignored: set checksum disabled [ 622.987547][T30266] validate_nla: 5 callbacks suppressed [ 622.987580][T30266] netlink: 'syz.4.6608': attribute type 1 has an invalid length. [ 623.045274][T30266] 8021q: adding VLAN 0 to HW filter on device bond5 [ 623.054352][T30266] bond4: (slave bond5): making interface the new active one [ 623.062401][T30266] bond4: (slave bond5): Enslaving as an active interface with an up link [ 623.080210][T30266] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 623.097603][T30266] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6608'. [ 623.108737][T30266] 8021q: adding VLAN 0 to HW filter on device bond4 [ 623.162744][T30279] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6611'. [ 623.228568][T30284] nbd: illegal input index 2958377 [ 623.399581][T30302] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6619'. [ 623.417316][T30305] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6618'. [ 623.435619][T30306] netlink: 'syz.5.6618': attribute type 1 has an invalid length. [ 623.454182][T30305] netlink: 'syz.5.6618': attribute type 1 has an invalid length. [ 623.501067][T30306] 8021q: adding VLAN 0 to HW filter on device bond3 [ 623.535277][T30306] bond3: (slave geneve3): making interface the new active one [ 623.553275][T30306] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 623.585036][T13562] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.599546][T13562] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.611688][T13562] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.627644][T13562] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.650109][T30323] netlink: 'syz.4.6625': attribute type 4 has an invalid length. [ 623.659711][T30323] netlink: 'syz.4.6625': attribute type 4 has an invalid length. [ 623.684515][T30318] netlink: 92 bytes leftover after parsing attributes in process `syz.2.6624'. [ 623.829060][T30335] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6629'. [ 624.048443][T30354] tc action pedit offset must be on 32 bit boundaries [ 624.309137][T13573] nci: nci_rsp_packet: unknown rsp opcode 0xe [ 624.980822][T30358] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 624.990911][T30377] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6641'. [ 625.048207][T30393] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6645'. [ 625.061702][T30393] netlink: 'syz.6.6645': attribute type 3 has an invalid length. [ 625.176419][T30399] netlink: 'syz.4.6648': attribute type 11 has an invalid length. [ 625.186590][T30399] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6648'. [ 625.421856][T30431] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 625.647584][T30445] xt_CT: No such helper "snmp_trap" [ 625.749128][T30459] xt_l2tp: v2 doesn't support IP mode [ 626.328291][T30507] netlink: 'syz.0.6670': attribute type 13 has an invalid length. [ 626.661626][T30537] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 626.679488][T30537] bond3 (unregistering): Released all slaves [ 626.893916][T30553] geneve4: entered promiscuous mode [ 626.902329][T30553] geneve4: entered allmulticast mode [ 626.912078][T30497] lo speed is unknown, defaulting to 1000 [ 627.087722][T13564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.110564][T13564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.145120][T30575] netlink: 'syz.2.6691': attribute type 12 has an invalid length. [ 627.161157][T30575] netlink: 'syz.2.6691': attribute type 29 has an invalid length. [ 627.597697][T30606] __nla_validate_parse: 10 callbacks suppressed [ 627.597719][T30606] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6700'. [ 627.665542][T30606] bond4: (slave ip6gretap0): Device is not bonding slave [ 627.672951][T30606] bond4: option active_slave: invalid value (ip6gretap0) [ 627.687895][T30606] bond4 (unregistering): Released all slaves [ 627.857608][T30616] netlink: 'syz.6.6704': attribute type 1 has an invalid length. [ 627.877077][T30616] 8021q: adding VLAN 0 to HW filter on device bond2 [ 627.929463][T30616] bond2: (slave veth3): Enslaving as an active interface with a down link [ 627.954801][T30616] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 628.025419][T30616] bond2: (slave veth5): Enslaving as an active interface with a down link [ 628.038317][T30616] netlink: 'syz.6.6704': attribute type 1 has an invalid length. [ 628.046995][T30616] netlink: 'syz.6.6704': attribute type 2 has an invalid length. [ 628.068971][T30626] netlink: 404 bytes leftover after parsing attributes in process `syz.2.6707'. [ 628.079582][T30628] bond0: (slave bond_slave_0): Releasing backup interface [ 628.156816][T30635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6710'. [ 628.324670][T30657] Cannot find del_set index 3 as target [ 628.332380][T30657] Cannot find del_set index 3 as target [ 628.349651][T30661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6716'. [ 628.364679][T13564] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 628.372036][T30661] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6716'. [ 628.420009][T30663] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6718'. [ 628.715817][T30690] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20004 [ 628.814356][T30699] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6726'. [ 628.866425][T30701] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6727'. [ 628.900989][T30703] Unsupported ieee802154 address type: 0 [ 628.959057][T30705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.040820][T30713] netlink: 16215 bytes leftover after parsing attributes in process `syz.6.6732'. [ 629.100452][T30717] vcan1: entered promiscuous mode [ 629.112824][T30717] vcan1: entered allmulticast mode [ 629.229191][T30728] lo: Caught tx_queue_len zero misconfig [ 629.251979][T30728] netlink: 'syz.0.6736': attribute type 1 has an invalid length. [ 629.379091][T30728] syzkaller0: entered promiscuous mode [ 629.387754][T30728] syzkaller0: entered allmulticast mode [ 629.521644][T30751] syzkaller0: entered promiscuous mode [ 629.537124][T30751] syzkaller0: entered allmulticast mode [ 629.766849][T30774] macvtap1: entered promiscuous mode [ 629.787105][T30774] team0: Device macvtap1 failed to register rx_handler [ 629.815441][T30777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6747'. [ 629.886368][T30770] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.000801][T30791] sit1: entered promiscuous mode [ 630.018413][T30791] sit1: entered allmulticast mode [ 630.169690][T30801] netlink: 'syz.0.6759': attribute type 4 has an invalid length. [ 630.214037][T30805] tipc: Started in network mode [ 630.234737][T30805] tipc: Node identity 1a31ede25987, cluster identity 4711 [ 630.244897][T30805] tipc: Enabled bearer , priority 11 [ 630.278475][T30812] syzkaller0: entered promiscuous mode [ 630.299432][T30812] syzkaller0: entered allmulticast mode [ 630.586240][T30842] x_tables: duplicate underflow at hook 2 [ 630.636457][T30850] netlink: 'syz.5.6772': attribute type 13 has an invalid length. [ 630.665147][T30850] macsec0: entered allmulticast mode [ 630.985190][T30874] bond7: (slave gre0): Device is not bonding slave [ 631.010112][T30874] bond7: option active_slave: invalid value (gre0) [ 631.031632][T30874] bond7 (unregistering): Released all slaves [ 631.075948][T30877] bridge0: port 3(gretap0) entered blocking state [ 631.082656][T30877] bridge0: port 3(gretap0) entered forwarding state [ 631.094031][T30877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 631.123979][T30877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 631.192281][T30900] netlink: 'syz.6.6789': attribute type 11 has an invalid length. [ 631.194585][T30877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 631.206329][T30900] netlink: 'syz.6.6789': attribute type 4 has an invalid length. [ 631.218263][T30900] netlink: 'syz.6.6789': attribute type 6 has an invalid length. [ 631.227344][T30877] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 631.239576][T30877] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 631.264749][T30877] veth1_vlan: left promiscuous mode [ 631.271549][T30877] veth0_vlan: left promiscuous mode [ 631.281542][T30877] veth0_vlan: entered promiscuous mode [ 631.311605][T30877] veth1_vlan: entered promiscuous mode [ 631.320816][T30877] veth1_macvtap: left promiscuous mode [ 631.328085][T30877] veth0_macvtap: left promiscuous mode [ 631.346612][T30877] veth0_macvtap: entered promiscuous mode [ 631.358483][T30877] veth1_macvtap: entered promiscuous mode [ 631.364427][T30877] veth1_macvtap: entered allmulticast mode [ 631.376298][T30877] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 631.385333][T30877] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 631.406729][T30877] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 631.419312][T30877] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 631.451968][T30877] 8021q: adding VLAN 0 to HW filter on device bond1 [ 631.474892][T30877] 8021q: adding VLAN 0 to HW filter on device bond2 [ 631.532257][T13573] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.539509][T13573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 631.584812][T13573] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.591999][T13573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 631.652772][ T11] tipc: Node number set to 1136061922 [ 631.663891][T13570] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 631.687488][T13570] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 631.758081][T13570] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 631.775072][T13570] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 631.810831][T13562] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 631.824047][T13562] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 631.846246][ T11] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 631.936527][T30933] SET target dimension over the limit! [ 631.984110][ T11] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 632.057031][T30937] erspan0: entered promiscuous mode [ 632.094559][T30937] ip6tnl0: Caught tx_queue_len zero misconfig [ 632.095158][T30941] openvswitch: netlink: Missing key (keys=40, expected=80) [ 632.131589][T30940] syzkaller0: entered promiscuous mode [ 632.155642][T30940] syzkaller0: entered allmulticast mode [ 632.211345][T30951] mac80211_hwsim hwsim79 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 632.242037][T30951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 632.646688][T30994] __nla_validate_parse: 9 callbacks suppressed [ 632.646709][T30994] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6818'. [ 632.748904][T30994] ipvlan0: Caught tx_queue_len zero misconfig [ 632.765877][ T11] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 632.863889][T31014] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6823'. [ 632.968413][T31021] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 633.051980][T31023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6826'. [ 633.073012][T31023] bond0: (slave team0): Releasing backup interface [ 633.097712][T31023] team0 (unregistering): Port device team_slave_0 removed [ 633.109583][T31027] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 633.119288][T31023] team0 (unregistering): Port device team_slave_1 removed [ 633.189555][T31035] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 633.241855][T31037] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 633.341239][T31046] netlink: 184 bytes leftover after parsing attributes in process `syz.6.6834'. [ 633.356727][T31048] rdma_rxe: rxe_newlink: failed to add lo [ 633.363249][T31048] netlink: 'syz.0.6835': attribute type 10 has an invalid length. [ 633.371245][T31048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6835'. [ 633.462436][T31055] syzkaller0: entered promiscuous mode [ 633.468101][T31055] syzkaller0: entered allmulticast mode [ 633.477821][T31055] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6837'. [ 633.573058][T31063] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6840'. [ 633.618357][T31066] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6841'. [ 633.629251][T31067] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6841'. [ 633.790969][T31022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 633.959936][T31077] batadv_slave_1: entered promiscuous mode [ 634.143901][T31085] tipc: Started in network mode [ 634.149006][T31085] tipc: Node identity e0000001, cluster identity 4711 [ 634.158177][T31085] tipc: Enabling of bearer rejected, failed to enable media [ 634.191016][T31085] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6849'. [ 634.685351][T31126] syz_tun: entered allmulticast mode [ 634.737628][T31126] dvmrp8: entered allmulticast mode [ 634.787689][T31124] syz_tun: left allmulticast mode [ 635.098922][T31144] netlink: 'syz.6.6868': attribute type 29 has an invalid length. [ 635.109740][T31144] netlink: 'syz.6.6868': attribute type 29 has an invalid length. [ 635.247415][T31151] IPVS: Scheduler module ip_vs_sip not found [ 635.269424][T31161] xt_policy: too many policy elements [ 635.287436][T31161] netlink: 'syz.4.6873': attribute type 1 has an invalid length. [ 635.295740][T31161] netlink: 'syz.4.6873': attribute type 1 has an invalid length. [ 635.330499][T31165] netlink: 'syz.6.6875': attribute type 9 has an invalid length. [ 635.714709][T31192] netlink: 'syz.5.6882': attribute type 16 has an invalid length. [ 635.943202][T31209] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 635.997240][T31219] xt_CT: You must specify a L4 protocol and not use inversions on it [ 636.130245][T31230] netlink: 'syz.2.6894': attribute type 1 has an invalid length. [ 636.152384][T31225] netlink: 'syz.5.6892': attribute type 63 has an invalid length. [ 636.167433][T31230] bond3: (slave geneve3): making interface the new active one [ 636.176465][T31230] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 636.186643][ T48] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 636.197149][ T48] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 636.208873][T31226] netlink: 'syz.5.6892': attribute type 63 has an invalid length. [ 636.221037][ T48] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 636.235842][ T48] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 636.283780][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 636.342857][T31241] vlan1: entered allmulticast mode [ 636.359822][T31241] veth0_vlan: entered allmulticast mode [ 636.716525][T31265] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.910660][T31288] sock: sock_timestamping_bind_phc: sock not bind to device [ 637.024557][T31297] ip6tnl1: entered allmulticast mode [ 637.131410][T31306] macvtap0: entered allmulticast mode [ 637.137224][T31306] veth0_macvtap: entered allmulticast mode [ 637.448462][T31321] x_tables: unsorted entry at hook 1 [ 637.469178][T31321] geneve3: entered promiscuous mode [ 637.477279][T31321] geneve3: entered allmulticast mode [ 637.888094][T31341] ip6erspan0: entered allmulticast mode [ 637.972597][T31348] __nla_validate_parse: 16 callbacks suppressed [ 637.972619][T31348] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6930'. [ 637.991326][T31348] netlink: 76 bytes leftover after parsing attributes in process `syz.6.6930'. [ 638.004277][T31348] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6930'. [ 638.303307][T31364] gretap0: left allmulticast mode [ 638.309547][T31364] gretap0: left promiscuous mode [ 638.315408][T31364] bridge0: port 3(gretap0) entered disabled state [ 638.337932][T31364] bridge_slave_0: left allmulticast mode [ 638.345364][T31364] bridge_slave_0: left promiscuous mode [ 638.351174][T31364] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.364991][T31367] validate_nla: 3 callbacks suppressed [ 638.365026][T31367] netlink: 'syz.5.6938': attribute type 83 has an invalid length. [ 638.380835][T31364] bridge_slave_1: left promiscuous mode [ 638.392810][T31364] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.407398][T31364] bond0: (slave bond_slave_0): Releasing backup interface [ 638.428184][T31364] bond0: (slave bond_slave_1): Releasing backup interface [ 638.446328][T31364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 638.455503][T31364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 638.464748][T31364] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 638.488635][T31369] mac80211_hwsim hwsim73 syzkaller0: entered promiscuous mode [ 638.497048][T31369] mac80211_hwsim hwsim73 syzkaller0: entered allmulticast mode [ 638.755822][T31390] netlink: 'syz.5.6946': attribute type 1 has an invalid length. [ 638.769879][T31388] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 638.826608][T31390] bond5: entered promiscuous mode [ 638.840290][T31390] 8021q: adding VLAN 0 to HW filter on device bond5 [ 638.920202][T31400] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6950'. [ 638.927015][T31401] netlink: 'syz.6.6949': attribute type 1 has an invalid length. [ 638.962658][T31402] netlink: 'syz.6.6949': attribute type 1 has an invalid length. [ 638.979463][T31404] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6951'. [ 638.993118][T31402] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6949'. [ 639.007569][T31402] netlink: 43 bytes leftover after parsing attributes in process `syz.6.6949'. [ 639.016590][T31402] netlink: 'syz.6.6949': attribute type 6 has an invalid length. [ 639.024339][T31402] netlink: 'syz.6.6949': attribute type 5 has an invalid length. [ 639.044432][T31402] netlink: 43 bytes leftover after parsing attributes in process `syz.6.6949'. [ 639.054092][T31405] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6949'. [ 639.063075][T31405] netlink: 43 bytes leftover after parsing attributes in process `syz.6.6949'. [ 639.072178][T31405] netlink: 'syz.6.6949': attribute type 6 has an invalid length. [ 639.079935][T31405] netlink: 'syz.6.6949': attribute type 5 has an invalid length. [ 639.279417][T31429] netlink: 'syz.6.6960': attribute type 1 has an invalid length. [ 639.329267][T31435] xt_socket: unknown flags 0xe4 [ 639.355939][T31437] xt_CT: You must specify a L4 protocol and not use inversions on it [ 639.368080][T31435] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 639.792037][T31472] netlink: 'syz.5.6973': attribute type 1 has an invalid length. [ 639.895085][T31478] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 640.451761][T31518] xt_cgroup: xt_cgroup: no path or classid specified [ 640.808312][T31545] x_tables: duplicate underflow at hook 1 [ 641.475069][T31582] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 641.486846][T31582] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 641.495126][T31582] gretap1: entered promiscuous mode [ 641.500378][T31582] gretap1: entered allmulticast mode [ 641.547448][T31591] syz.2.7011: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 641.563082][T31591] CPU: 0 UID: 0 PID: 31591 Comm: syz.2.7011 Not tainted syzkaller #0 PREEMPT(full) [ 641.563114][T31591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 641.563129][T31591] Call Trace: [ 641.563139][T31591] [ 641.563148][T31591] dump_stack_lvl+0xe8/0x150 [ 641.563177][T31591] warn_alloc+0x249/0x340 [ 641.563208][T31591] ? __pfx_stack_trace_save+0x10/0x10 [ 641.563239][T31591] ? __pfx_warn_alloc+0x10/0x10 [ 641.563267][T31591] ? __resched_curr+0x23e/0x530 [ 641.563301][T31591] ? __kasan_kmalloc+0x93/0xb0 [ 641.563329][T31591] ? __kmalloc_cache_noprof+0x318/0x660 [ 641.563357][T31591] ? xskq_create+0x56/0x170 [ 641.563381][T31591] ? xsk_init_queue+0x8a/0xe0 [ 641.563403][T31591] ? xsk_setsockopt+0x52a/0x960 [ 641.563425][T31591] ? do_sock_setsockopt+0x17c/0x1b0 [ 641.563453][T31591] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 641.563481][T31591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.563504][T31591] __vmalloc_node_range_noprof+0x12c/0x1730 [ 641.563547][T31591] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 641.563575][T31591] ? __kasan_kmalloc+0x93/0xb0 [ 641.563605][T31591] vmalloc_user_noprof+0xad/0xe0 [ 641.563631][T31591] ? xskq_create+0xbf/0x170 [ 641.563656][T31591] xskq_create+0xbf/0x170 [ 641.563681][T31591] xsk_init_queue+0x8a/0xe0 [ 641.563705][T31591] xsk_setsockopt+0x52a/0x960 [ 641.563729][T31591] ? __pfx_xsk_setsockopt+0x10/0x10 [ 641.563751][T31591] ? __pfx_aa_sk_perm+0x10/0x10 [ 641.563784][T31591] ? lock_release+0x4b/0x3c0 [ 641.563815][T31591] ? aa_sock_opt_perm+0xff/0x1a0 [ 641.563836][T31591] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 641.563862][T31591] ? __pfx_xsk_setsockopt+0x10/0x10 [ 641.563885][T31591] do_sock_setsockopt+0x17c/0x1b0 [ 641.563916][T31591] __x64_sys_setsockopt+0x13d/0x1b0 [ 641.563959][T31591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.563980][T31591] do_syscall_64+0x174/0x580 [ 641.564009][T31591] ? clear_bhb_loop+0x40/0x90 [ 641.564033][T31591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.564053][T31591] RIP: 0033:0x7f3e8cd9ce59 [ 641.564073][T31591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.564092][T31591] RSP: 002b:00007f3e8dc06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 641.564116][T31591] RAX: ffffffffffffffda RBX: 00007f3e8d015fa0 RCX: 00007f3e8cd9ce59 [ 641.564132][T31591] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 641.564145][T31591] RBP: 00007f3e8ce32e6f R08: 0000000000000004 R09: 0000000000000000 [ 641.564159][T31591] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 641.564173][T31591] R13: 00007f3e8d016038 R14: 00007f3e8d015fa0 R15: 00007ffec36e4b58 [ 641.564198][T31591] [ 641.564302][T31591] Mem-Info: [ 641.872335][T31591] active_anon:6651 inactive_anon:0 isolated_anon:0 [ 641.872335][T31591] active_file:2953 inactive_file:40164 isolated_file:0 [ 641.872335][T31591] unevictable:768 dirty:68 writeback:0 [ 641.872335][T31591] slab_reclaimable:13095 slab_unreclaimable:129924 [ 641.872335][T31591] mapped:39771 shmem:1304 pagetables:1585 [ 641.872335][T31591] sec_pagetables:0 bounce:0 [ 641.872335][T31591] kernel_misc_reclaimable:0 [ 641.872335][T31591] free:1254865 free_pcp:19817 free_cma:0 [ 641.926105][T31591] Node 0 active_anon:26604kB inactive_anon:0kB active_file:11812kB inactive_file:160448kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:159084kB dirty:272kB writeback:0kB shmem:3680kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17248kB pagetables:6208kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 641.963125][T31591] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 642.030609][T31591] Node 0 DMA free:15352kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 642.070641][T31591] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 642.078851][T31591] Node 0 DMA32 free:1106716kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26580kB inactive_anon:0kB active_file:11812kB inactive_file:160448kB unevictable:1536kB writepending:296kB zspages:0kB present:3129332kB managed:2552584kB mlocked:0kB bounce:0kB free_pcp:38312kB local_pcp:17068kB free_cma:0kB [ 642.115171][T31591] lowmem_reserve[]: 0 0 0 0 0 [ 642.119965][T31591] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:664kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 642.149298][T31591] lowmem_reserve[]: 0 0 0 0 0 [ 642.154069][T31591] Node 1 Normal free:3897792kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:40492kB local_pcp:20396kB free_cma:0kB [ 642.186374][T31591] lowmem_reserve[]: 0 0 0 0 0 [ 642.191145][T31591] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15352kB [ 642.206462][T31591] Node 0 DMA32: 9007*4kB (UM) 7550*8kB (UM) 4755*16kB (UME) 502*32kB (UME) 308*64kB (UME) 417*128kB (UM) 634*256kB (UME) 372*512kB (UME) 217*1024kB (UME) 120*2048kB (UME) 6*4096kB (M) = 1106972kB [ 642.272147][T31591] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 642.295059][T31591] Node 1 Normal: 2*4kB (U) 2*8kB (UM) 7*16kB (UM) 5*32kB (UM) 14*64kB (UM) 11*128kB (UM) 8*256kB (UM) 6*512kB (UM) 5*1024kB (UM) 3*2048kB (U) 947*4096kB (UM) = 3897896kB [ 642.325065][T31600] syzkaller1: entered promiscuous mode [ 642.330606][T31600] syzkaller1: entered allmulticast mode [ 642.344179][T31591] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 642.355173][T31591] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 642.398498][T31591] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 642.434153][T31591] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 642.467543][T31591] 44416 total pagecache pages [ 642.476908][T31591] 0 pages in swap cache [ 642.481199][T31591] Free swap = 124996kB [ 642.489108][T31591] Total swap = 124996kB [ 642.495861][T31591] 2097051 pages RAM [ 642.499801][T31591] 0 pages HighMem/MovableOnly [ 642.524760][T31591] 427124 pages reserved [ 642.529002][T31591] 0 pages cma reserved [ 642.767434][T31627] 8021q: adding VLAN 0 to HW filter on device bond4 [ 642.801999][T31627] bond4: (slave veth5): Enslaving as an active interface with a down link [ 642.847365][T31627] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 642.855148][T31627] bond4: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 643.211292][T31665] __nla_validate_parse: 11 callbacks suppressed [ 643.211315][T31665] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7028'. [ 643.849878][T31699] validate_nla: 6 callbacks suppressed [ 643.849900][T31699] netlink: 'syz.6.7039': attribute type 1 has an invalid length. [ 643.864512][T31699] netlink: 224 bytes leftover after parsing attributes in process `syz.6.7039'. [ 644.148568][T31717] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7044'. [ 644.184876][T31721] netlink: 'syz.6.7045': attribute type 1 has an invalid length. [ 644.234448][T31721] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 644.271624][T31728] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7047'. [ 644.327102][T31728] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7047'. [ 644.585241][T31744] netlink: 'syz.6.7053': attribute type 1 has an invalid length. [ 644.606798][T31743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7052'. [ 644.632125][T31747] netlink: 212344 bytes leftover after parsing attributes in process `syz.5.7055'. [ 644.647219][T31743] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 644.659224][T31744] bond3: entered promiscuous mode [ 644.669737][T31744] 8021q: adding VLAN 0 to HW filter on device bond3 [ 644.697873][T31747] bond6 (unregistering): Released all slaves [ 644.750497][T31744] bond3: (slave bridge6): making interface the new active one [ 644.758898][T31744] bridge6: entered promiscuous mode [ 644.767919][T31744] bond3: (slave bridge6): Enslaving as an active interface with an up link [ 644.838144][T31761] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7057'. [ 644.887068][T31763] bond3: entered promiscuous mode [ 644.929718][T31761] vlan2: entered allmulticast mode [ 644.938470][T31761] syz_tun: entered allmulticast mode [ 645.308981][T31785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7065'. [ 645.319967][T31785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7065'. [ 645.450969][T31794] netlink: 'syz.2.7067': attribute type 25 has an invalid length. [ 645.578313][T31803] batadv_slave_0: entered promiscuous mode [ 645.644467][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 645.710097][T31806] syzkaller1: entered promiscuous mode [ 645.716625][T31806] syzkaller1: entered allmulticast mode [ 648.442094][T31795] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 648.750274][T31833] bond4 (unregistering): Released all slaves [ 648.958222][T31851] xt_hashlimit: size too large, truncated to 1048576 [ 648.976391][T31857] __nla_validate_parse: 2 callbacks suppressed [ 648.976412][T31857] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7085'. [ 649.053866][T31861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7089'. [ 649.072467][T31861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7089'. [ 649.100736][T31863] sctp: [Deprecated]: syz.5.7085 (pid 31863) Use of int in max_burst socket option deprecated. [ 649.100736][T31863] Use struct sctp_assoc_value instead [ 649.155108][T31863] netlink: 'syz.5.7085': attribute type 1 has an invalid length. [ 649.162911][T31863] netlink: 476 bytes leftover after parsing attributes in process `syz.5.7085'. [ 649.183738][T31863] netlink: 1041 bytes leftover after parsing attributes in process `syz.5.7085'. [ 649.223122][T31870] xfrm0 speed is unknown, defaulting to 1000 [ 649.230648][T31870] xfrm0 speed is unknown, defaulting to 1000 [ 649.261163][T31870] xfrm0 speed is unknown, defaulting to 1000 [ 649.314728][T31877] netlink: 'syz.6.7094': attribute type 1 has an invalid length. [ 649.337992][T31877] 8021q: adding VLAN 0 to HW filter on device bond4 [ 649.356599][T31877] bond4: (slave geneve4): making interface the new active one [ 649.366047][T31877] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 649.375875][T13561] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 649.389024][T13561] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 649.412779][T13561] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 649.433853][T13561] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 649.460924][T31870] infiniband syz1: set down [ 649.466458][T31870] infiniband syz1: added xfrm0 [ 649.470290][ T8670] xfrm0 speed is unknown, defaulting to 1000 [ 649.513229][T31881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7096'. [ 649.527600][T31870] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 649.542762][T31870] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 649.559951][T31870] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 649.589770][T31870] RDS/IB: syz1: added [ 649.593854][T31870] smc: adding ib device syz1 with port count 1 [ 649.600054][T31870] smc: ib device syz1 port 1 has no pnetid [ 649.613394][ T11] xfrm0 speed is unknown, defaulting to 1000 [ 649.620057][T31870] xfrm0 speed is unknown, defaulting to 1000 [ 649.753054][T31870] xfrm0 speed is unknown, defaulting to 1000 [ 649.920945][T31870] xfrm0 speed is unknown, defaulting to 1000 [ 650.119543][T31870] xfrm0 speed is unknown, defaulting to 1000 [ 650.270401][T31915] netlink: 'syz.0.7106': attribute type 1 has an invalid length. [ 650.298359][T31915] 8021q: adding VLAN 0 to HW filter on device bond4 [ 650.316205][T31915] bond4: (slave geneve2): making interface the new active one [ 650.325347][T31915] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 650.339152][T31870] xfrm0 speed is unknown, defaulting to 1000 [ 650.343446][T31915] netlink: 'syz.0.7106': attribute type 1 has an invalid length. [ 650.419943][T31923] xt_l2tp: v2 doesn't support IP mode [ 650.467972][T31870] xfrm0 speed is unknown, defaulting to 1000 [ 650.551878][T31870] xfrm0 speed is unknown, defaulting to 1000 [ 650.693649][T31870] xfrm0 speed is unknown, defaulting to 1000 [ 650.833116][T31870] xfrm0 speed is unknown, defaulting to 1000 [ 651.014285][T31945] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7112'. [ 651.087950][T31949] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7114'. [ 651.097984][T31949] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7114'. [ 651.246235][T31957] tipc: Started in network mode [ 651.261380][T31957] tipc: Node identity d63c669fcc4, cluster identity 4711 [ 651.277397][T31957] tipc: Enabled bearer , priority 0 [ 651.309595][T31957] syzkaller0: entered promiscuous mode [ 651.319990][T31957] syzkaller0: entered allmulticast mode [ 651.330252][T31961] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 651.338380][T31961] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 651.346985][T31961] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 651.356025][T31961] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 651.364517][T31961] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 651.388139][T31963] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 651.401516][T31965] netlink: 'syz.0.7119': attribute type 1 has an invalid length. [ 651.420952][T31965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7119'. [ 651.449898][T31957] tipc: Resetting bearer [ 651.509972][T31956] tipc: Resetting bearer [ 651.569149][T31956] tipc: Disabling bearer [ 652.100979][T31960] lo speed is unknown, defaulting to 1000 [ 652.302086][T32019] syzkaller1: entered promiscuous mode [ 652.325315][T32019] syzkaller1: entered allmulticast mode [ 652.498703][T31960] xfrm0 speed is unknown, defaulting to 1000 [ 652.903020][T32052] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 653.043891][T32059] 0·: renamed from hsr0 (while UP) [ 653.065001][T32059] 0·: entered allmulticast mode [ 653.085717][T32059] hsr_slave_0: entered allmulticast mode [ 653.091900][T32059] hsr_slave_1: entered allmulticast mode [ 653.099570][T32059] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 653.199368][T32068] netlink: 'syz.6.7145': attribute type 4 has an invalid length. [ 653.208511][T32068] netlink: 'syz.6.7145': attribute type 1 has an invalid length. [ 653.322937][T32070] geneve4: entered promiscuous mode [ 653.330222][T32070] geneve4: entered allmulticast mode [ 653.354261][T32077] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 653.415692][T31960] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.468812][T31961] Bluetooth: hci3: command tx timeout [ 653.482749][T31960] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.513058][T31960] bridge_slave_0: entered allmulticast mode [ 653.529376][T31960] bridge_slave_0: entered promiscuous mode [ 653.539403][T13573] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0 [ 653.554134][T13573] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 653.570066][T31960] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.579207][T31960] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.587278][T31960] bridge_slave_1: entered allmulticast mode [ 653.597628][T31960] bridge_slave_1: entered promiscuous mode [ 653.611163][T13560] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 653.648653][T13560] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 653.785097][T31960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 653.817376][T31960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 653.985906][T32124] openvswitch: netlink: Flow key attribute not present in set flow. [ 654.017093][T31960] team0: Port device team_slave_0 added [ 654.027335][T31960] team0: Port device team_slave_1 added [ 654.049868][T32112] __nla_validate_parse: 12 callbacks suppressed [ 654.049901][T32112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7159'. [ 654.078472][T32112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7159'. [ 654.121201][T31960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.133691][T31960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.201194][T31960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.237305][T32125] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7161'. [ 654.247345][T32126] IPVS: Error connecting to the multicast addr [ 654.257188][T31960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.267997][T31960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.308033][T31960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.347703][T32131] sit2: entered promiscuous mode [ 654.352718][T32131] sit2: entered allmulticast mode [ 654.421779][T32137] netlink: 'syz.2.7165': attribute type 1 has an invalid length. [ 654.445822][T32137] bond6: entered promiscuous mode [ 654.451430][T32137] 8021q: adding VLAN 0 to HW filter on device bond6 [ 654.469032][T32134] syzkaller1: entered promiscuous mode [ 654.475287][T32134] syzkaller1: entered allmulticast mode [ 654.496200][T31960] hsr_slave_0: entered promiscuous mode [ 654.502962][T31960] hsr_slave_1: entered promiscuous mode [ 654.509720][T31960] debugfs: 'hsr0' already exists in 'hsr' [ 654.515798][T31960] Cannot create hsr debugfs directory [ 654.689978][T32131] veth0: entered promiscuous mode [ 654.717243][T32142] netlink: 'syz.0.7166': attribute type 1 has an invalid length. [ 654.750054][T32141] 8021q: adding VLAN 0 to HW filter on device bond6 [ 654.758933][T32141] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 654.770225][T32141] bond6: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 654.786740][T32141] bond6: (slave ip6gre1): making interface the new active one [ 654.795749][T32141] ip6gre1: entered promiscuous mode [ 654.806704][T32141] bond6: (slave ip6gre1): Enslaving as an active interface with an up link [ 654.930462][T32142] 8021q: adding VLAN 0 to HW filter on device bond5 [ 655.086551][T32129] veth0: left promiscuous mode [ 655.310413][T31960] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 655.340391][T31960] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 655.365286][T31960] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 655.405093][T31960] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 655.434272][T31960] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 655.480787][T31960] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 655.511309][T31960] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 655.522369][T32161] netlink: 'syz.0.7171': attribute type 1 has an invalid length. [ 655.540177][T32164] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7170'. [ 655.553123][T31961] Bluetooth: hci3: command tx timeout [ 655.572476][T31960] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 655.588391][T32161] macvtap1: entered promiscuous mode [ 655.596243][T32161] team0: Device macvtap1 failed to register rx_handler [ 655.894215][T31960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.964565][T32175] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 655.986732][T31960] 8021q: adding VLAN 0 to HW filter on device team0 [ 656.029658][T13560] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.037156][T13560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 656.047296][T32178] netlink: 'syz.5.7174': attribute type 1 has an invalid length. [ 656.081962][T32178] 8021q: adding VLAN 0 to HW filter on device bond6 [ 656.097292][T13560] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.104612][T13560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.226289][T32178] bond6: (slave veth3): Enslaving as an active interface with a down link [ 656.241839][T32180] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 656.250616][T32180] bond6: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 657.563947][T31961] Bluetooth: hci3: command tx timeout [ 657.676934][T32202] macvlan0: entered promiscuous mode [ 657.727521][T32202] macsec1: entered promiscuous mode [ 658.475167][T32212] netlink: 52 bytes leftover after parsing attributes in process `syz.6.7181'. [ 658.500045][T32212] netlink: 52 bytes leftover after parsing attributes in process `syz.6.7181'. [ 658.519492][T32212] netlink: 52 bytes leftover after parsing attributes in process `syz.6.7181'. [ 658.551595][T32213] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7181'. [ 658.572188][T32213] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7181'. [ 658.620474][T32212] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7181'. [ 658.670057][T32212] netlink: 'syz.6.7181': attribute type 1 has an invalid length. [ 658.698569][T32212] netlink: 'syz.6.7181': attribute type 2 has an invalid length. [ 658.918686][T31960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 659.398600][T31960] veth0_vlan: entered promiscuous mode [ 659.420483][T31960] veth1_vlan: entered promiscuous mode [ 659.461139][T31960] veth0_macvtap: entered promiscuous mode [ 659.471424][T31960] veth1_macvtap: entered promiscuous mode [ 659.492802][T31960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 659.510174][T31960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 659.525319][T13562] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.540947][T13562] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.575606][T13562] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.602831][T13562] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.644547][T31961] Bluetooth: hci3: command tx timeout [ 659.793674][T13561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.831801][T13561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.918393][T13564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.932043][T13564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.179965][T32235] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7183'. [ 660.331366][T32240] netlink: 'syz.7.7185': attribute type 1 has an invalid length. [ 660.433953][T32242] syzkaller0: entered promiscuous mode [ 660.439583][T32242] syzkaller0: entered allmulticast mode [ 662.110661][T32255] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 662.118103][T32255] IPv6: NLM_F_CREATE should be set when creating new route [ 662.468290][T32272] netlink: get zone limit has 4 unknown bytes [ 662.528625][T32275] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7197'. [ 662.545647][T32275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7197'. [ 663.190043][T32291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7202'. [ 664.852781][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 666.476274][T32322] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.7208'. [ 666.567783][T32324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7209'. [ 666.672126][T32326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7210'. [ 668.056197][T32353] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7220'. [ 668.083082][T32354] syzkaller0: entered promiscuous mode [ 668.119538][T32354] syzkaller0: entered allmulticast mode [ 668.171454][T32362] vcan0: entered allmulticast mode [ 668.215265][T32365] tipc: Enabled bearer , priority 0 [ 668.256008][T32354] netlink: 'syz.5.7221': attribute type 1 has an invalid length. [ 668.388931][T32369] netlink: 11 bytes leftover after parsing attributes in process `syz.6.7225'. [ 668.428846][T32369] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7225'. [ 668.538900][T32374] netlink: 212336 bytes leftover after parsing attributes in process `syz.6.7227'. [ 668.667306][T32372] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7226'. [ 668.690484][T32378] netlink: 3 bytes leftover after parsing attributes in process `syz.6.7228'. [ 668.881873][T32381] Unsupported ieee802154 address type: 0 [ 669.067469][T32389] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7232'. [ 672.684136][ T50] Bluetooth: hci2: command 0x0405 tx timeout [ 673.880052][T32352] tipc: Resetting bearer [ 673.929662][T32352] tipc: Disabling bearer [ 674.316346][T32416] netlink: 'syz.2.7239': attribute type 1 has an invalid length. [ 674.461618][T32423] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7241'. [ 674.499949][T32425] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 674.527268][T32422] tipc: New replicast peer: 255.255.255.255 [ 674.533663][T32422] tipc: Enabled bearer , priority 10 [ 674.675584][T32435] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7241'. [ 674.816210][T32435] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7241'. [ 674.982977][T32416] veth7: entered promiscuous mode [ 674.993287][T32416] bond7: (slave veth7): Enslaving as a backup interface with a down link [ 675.232955][T32449] 8021q: VLANs not supported on ip6gre0 [ 675.334612][T32452] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7250'. [ 675.343625][T32452] openvswitch: netlink: Flow actions attr not present in new flow. [ 675.353080][T32453] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7251'. [ 675.570142][T32459] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7255'. [ 676.322880][T32470] gtp0: entered promiscuous mode [ 676.329018][T32470] gtp0: entered allmulticast mode [ 676.626198][T32474] : entered promiscuous mode [ 676.669759][T32478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7258'. [ 677.394028][T32495] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7266'. [ 677.640071][T32501] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7268'. [ 677.727529][T32497] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7267'. [ 678.260617][T32524] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 678.386416][T32524] No such timeout policy "syz1" [ 678.543610][T32533] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 678.769163][T32539] netlink: 'syz.0.7279': attribute type 20 has an invalid length. [ 678.826538][T32543] netlink: 'syz.0.7279': attribute type 20 has an invalid length. [ 679.023472][T32539] netlink: 'syz.0.7279': attribute type 20 has an invalid length. [ 679.050728][T32543] netlink: 'syz.0.7279': attribute type 20 has an invalid length. [ 679.917703][T32576] netlink: 'syz.6.7288': attribute type 25 has an invalid length. [ 680.270499][T32583] netlink: 'syz.6.7290': attribute type 3 has an invalid length. [ 680.796277][T32597] syzkaller0: entered promiscuous mode [ 680.819639][T32597] syzkaller0: entered allmulticast mode [ 681.015848][T32604] __nla_validate_parse: 40 callbacks suppressed [ 681.015891][T32604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7296'. [ 681.468439][T32616] netlink: 'syz.2.7296': attribute type 1 has an invalid length. [ 681.484782][T32615] netlink: 'syz.6.7298': attribute type 8 has an invalid length. [ 681.533883][T32616] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7296'. [ 681.611634][T32620] netlink: 'syz.7.7299': attribute type 1 has an invalid length. [ 684.248588][T32618] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 684.260103][T32618] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 684.456187][T32618] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 684.501544][T32618] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 684.589905][T32618] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 684.629683][T32618] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 684.826872][T32618] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 684.862565][T32618] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 684.960203][T32618] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 684.979485][T32618] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 685.070101][T32618] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 685.102208][T32618] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 685.128897][T32652] syzkaller0: entered promiscuous mode [ 685.141571][T32652] syzkaller0: entered allmulticast mode [ 685.188619][T32618] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 685.219988][T32618] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 685.597044][T32661] netlink: 'syz.6.7311': attribute type 7 has an invalid length. [ 685.658517][T32661] netlink: 'syz.6.7311': attribute type 7 has an invalid length. [ 685.668113][T13570] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 685.697357][T13570] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 685.729744][T13570] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 685.756527][T13570] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 686.025876][T32677] netlink: 'syz.6.7316': attribute type 2 has an invalid length. [ 686.171665][T32682] mac80211_hwsim hwsim73 syzkaller0: left promiscuous mode [ 686.183132][T32682] mac80211_hwsim hwsim73 syzkaller0: left allmulticast mode [ 687.185343][T32708] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7327'. [ 687.313125][T32713] netlink: 'syz.6.7329': attribute type 10 has an invalid length. [ 687.342941][T32713] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7329'. [ 690.472512][T32755] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7343'. [ 690.551056][T32757] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7344'. [ 690.821183][T32764] Bluetooth: MGMT ver 1.23 [ 691.018250][ T305] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7351'. [ 691.320124][ T318] netlink: 'syz.7.7353': attribute type 2 has an invalid length. [ 692.445744][ T305] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7351'. [ 692.460625][ T311] bridge3: entered promiscuous mode [ 692.465901][ T311] bridge3: entered allmulticast mode [ 693.795735][ T349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7359'. [ 694.178943][ T360] netlink: 64 bytes leftover after parsing attributes in process `syz.7.7361'. [ 694.823701][ T367] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7362'. [ 697.575970][ T399] bridge_slave_0: left allmulticast mode [ 697.686360][ T399] bridge_slave_0: left promiscuous mode [ 697.780206][ T399] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.958586][ T399] bridge_slave_1: left promiscuous mode [ 698.102206][ T399] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.394113][ T399] bond2: (slave veth0_to_bond): Releasing active interface [ 698.456158][ T399] bond0: (slave bond_slave_0): Releasing backup interface [ 698.567684][ T399] bond0: (slave bond_slave_1): Releasing backup interface [ 698.671524][ T399] team0: Port device team_slave_0 removed [ 698.730968][ T399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 698.758608][ T399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 698.810083][ T399] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 698.934013][ T413] netlink: 'syz.5.7370': attribute type 3 has an invalid length. [ 699.039822][ T422] batadv0: entered promiscuous mode [ 699.103520][ T422] macsec1: entered promiscuous mode [ 699.206215][ T422] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 699.307447][ T422] batadv0: left promiscuous mode [ 699.369259][ T434] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7373'. [ 699.445244][ T420] syzkaller1: entered promiscuous mode [ 699.482643][ T420] syzkaller1: entered allmulticast mode [ 699.502484][ T434] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7373'. [ 700.282364][ T441] Bluetooth: MGMT ver 1.23 [ 700.430271][ T450] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7374'. [ 700.467039][ T449] netlink: 'syz.2.7377': attribute type 1 has an invalid length. [ 700.609254][ T449] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7377'. [ 700.733345][ T459] netlink: 72 bytes leftover after parsing attributes in process `syz.7.7378'. [ 700.876363][ T462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7379'. [ 701.325696][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 702.219140][ T485] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7385'. [ 702.867474][ T506] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 703.712904][ T518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 704.105122][ T525] bond6: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 704.220232][ T525] bond6 (unregistering): Released all slaves [ 704.679390][ T30] audit: type=1800 audit(1782334469.783:9): pid=535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7401" name="memory.events" dev="tmpfs" ino=1819 res=0 errno=0 [ 705.719489][ T553] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7406'. [ 705.775497][ T546] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7405'. [ 705.937078][ T553] smc: net device nr0 applied user defined pnetid SYZ2 [ 705.967385][ T557] xt_ecn: cannot match TCP bits for non-tcp packets [ 706.213294][ T557] netlink: 'syz.7.7405': attribute type 1 has an invalid length. [ 706.677660][ T566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7410'. [ 708.338876][ T573] netlink: 'syz.5.7411': attribute type 11 has an invalid length. [ 708.791508][ T591] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 708.805669][ T594] netlink: 'syz.5.7419': attribute type 1 has an invalid length. [ 708.839906][ T594] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 709.683284][ T624] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7429'. [ 709.730571][ T625] netlink: 'syz.6.7427': attribute type 1 has an invalid length. [ 709.815485][ T625] netlink: 96 bytes leftover after parsing attributes in process `syz.6.7427'. [ 709.923031][ T625] netlink: 1 bytes leftover after parsing attributes in process `syz.6.7427'. [ 710.089223][ T625] netlink: 658 bytes leftover after parsing attributes in process `syz.6.7427'. [ 710.257630][ T632] netlink: 'syz.7.7430': attribute type 97 has an invalid length. [ 711.525906][ T633] mac80211_hwsim hwsim73 syzkaller0: entered promiscuous mode [ 711.540082][ T633] mac80211_hwsim hwsim73 syzkaller0: entered allmulticast mode [ 711.875505][ T643] netlink: 'syz.6.7434': attribute type 1 has an invalid length. [ 711.982790][ T647] netlink: 108 bytes leftover after parsing attributes in process `syz.6.7434'. [ 712.075304][ T643] bond6: entered promiscuous mode [ 712.160287][ T643] 8021q: adding VLAN 0 to HW filter on device bond6 [ 712.312840][ T648] bond6: (slave bridge9): making interface the new active one [ 712.388278][ T648] bridge9: entered promiscuous mode [ 712.439731][ T648] bond6: (slave bridge9): Enslaving as an active interface with an up link [ 712.829645][ T674] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7437'. [ 712.946621][ T679] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7436'. [ 716.066070][ T31] INFO: task syz.3.5769:26968 blocked for more than 143 seconds. [ 716.074041][ T31] Not tainted syzkaller #0 [ 716.079139][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 716.089010][ T31] task:syz.3.5769 state:D stack:27296 pid:26968 tgid:26959 ppid:17494 task_flags:0x400040 flags:0x00080002 [ 716.101495][ T31] Call Trace: [ 716.107177][ T31] [ 716.112816][ T31] __schedule+0x17d9/0x56c0 [ 716.126783][ T31] ? trace_irq_enable+0x3b/0x140 [ 716.131944][ T31] ? __kmalloc_node_track_caller_noprof+0x4d7/0x7b0 [ 716.141193][ T31] ? netlink_rcv_skb+0x226/0x4a0 [ 716.147020][ T31] ? genl_rcv+0x28/0x40 [ 716.151453][ T31] ? __pfx___schedule+0x10/0x10 [ 716.156787][ T31] ? rcu_is_watching+0x15/0xb0 [ 716.161809][ T31] ? rcu_is_watching+0x15/0xb0 [ 716.167510][ T31] ? lock_release+0x4b/0x3c0 [ 716.172368][ T31] ? rcu_is_watching+0x15/0xb0 [ 716.177953][ T31] schedule+0x164/0x360 [ 716.182282][ T31] schedule_preempt_disabled+0x13/0x30 [ 716.188526][ T31] __mutex_lock+0x7bf/0x1550 [ 716.193587][ T31] ? __mutex_lock+0x5d4/0x1550 [ 716.198540][ T31] ? nfsd_nl_threads_get_doit+0x1c0/0x790 [ 716.205503][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 716.210738][ T31] ? __nlmsg_put+0xef/0x1b0 [ 716.217018][ T31] ? genlmsg_put+0x137/0x2e0 [ 716.245871][ T31] nfsd_nl_threads_get_doit+0x1c0/0x790 [ 716.289677][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 716.298474][ T31] ? __nla_parse+0x40/0x60 [ 716.303121][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 716.310196][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 716.317565][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 716.325613][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 716.331906][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 716.338403][ T31] genl_rcv_msg+0x614/0x7a0 [ 716.343187][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 716.350901][ T31] ? ref_tracker_free+0x689/0x830 [ 716.356722][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 716.371516][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 716.379556][ T31] netlink_rcv_skb+0x226/0x4a0 [ 716.385727][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 716.390996][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 716.397394][ T31] ? down_read+0x2be/0x330 [ 716.402118][ T31] genl_rcv+0x28/0x40 [ 716.406799][ T31] netlink_unicast+0x7bb/0x940 [ 716.411800][ T31] netlink_sendmsg+0x813/0xb40 [ 716.417452][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 716.423089][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 716.431031][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 716.438242][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 716.445467][ T31] ____sys_sendmsg+0x9b9/0xa20 [ 716.450486][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 716.458868][ T31] ? lock_release+0x4b/0x3c0 [ 716.464011][ T31] ? import_iovec+0x73/0xa0 [ 716.468728][ T31] ___sys_sendmsg+0x2a5/0x360 [ 716.474331][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 716.479771][ T31] ? futex_wake+0x51b/0x5f0 [ 716.484939][ T31] ? __fget_files+0x2a/0x420 [ 716.489778][ T31] ? __fget_files+0x3a2/0x420 [ 716.495398][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 716.500607][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 716.507042][ T31] ? rcu_is_watching+0x15/0xb0 [ 716.512107][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.519151][ T31] do_syscall_64+0x174/0x580 [ 716.524540][ T31] ? trace_irq_disable+0x3b/0x140 [ 716.529804][ T31] ? clear_bhb_loop+0x40/0x90 [ 716.535381][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.541483][ T31] RIP: 0033:0x7f58e2d9ce59 [ 716.548115][ T31] RSP: 002b:00007f58e0ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 716.557840][ T31] RAX: ffffffffffffffda RBX: 00007f58e3016090 RCX: 00007f58e2d9ce59 [ 716.568702][ T31] RDX: 0000000004040090 RSI: 0000200000000000 RDI: 0000000000000006 [ 716.577220][ T31] RBP: 00007f58e2e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 716.585831][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 716.594596][ T31] R13: 00007f58e3016128 R14: 00007f58e3016090 R15: 00007ffd4ff48b98 [ 716.602806][ T31] [ 716.614096][ T31] INFO: lockdep is turned off. [ 716.619214][ T31] NMI backtrace for cpu 1 [ 716.619233][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 716.619255][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 716.619267][ T31] Call Trace: [ 716.619276][ T31] [ 716.619284][ T31] dump_stack_lvl+0xe8/0x150 [ 716.619308][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 716.619329][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 716.619359][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 716.619381][ T31] sys_info+0x135/0x170 [ 716.619397][ T31] watchdog+0xfd7/0x1030 [ 716.619425][ T31] ? watchdog+0x1c7/0x1030 [ 716.619450][ T31] kthread+0x388/0x470 [ 716.619467][ T31] ? __pfx_watchdog+0x10/0x10 [ 716.619488][ T31] ? __pfx_kthread+0x10/0x10 [ 716.619504][ T31] ret_from_fork+0x514/0xb70 [ 716.619522][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 716.619539][ T31] ? __switch_to+0xc89/0x1420 [ 716.619565][ T31] ? __pfx_kthread+0x10/0x10 [ 716.619582][ T31] ret_from_fork_asm+0x1a/0x30 [ 716.619611][ T31] [ 716.619618][ T31] Sending NMI from CPU 1 to CPUs 0: [ 716.738688][ C0] NMI backtrace for cpu 0 [ 716.738706][ C0] CPU: 0 UID: 0 PID: 13562 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT(full) [ 716.738727][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 716.738740][ C0] Workqueue: events_unbound bpf_map_free_deferred [ 716.738771][ C0] RIP: 0010:lock_acquire+0x21d/0x350 [ 716.738801][ C0] Code: 00 00 e9 32 ff ff ff e8 e1 22 06 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 db 8d 98 11 48 3b 44 24 58 75 33 fb <48> 83 c4 60 5b 41 5c 41 5d 41 5e 41 5f 5d e9 40 22 09 0a cc 48 8d [ 716.738818][ C0] RSP: 0018:ffffc900000067a0 EFLAGS: 00000246 [ 716.738832][ C0] RAX: a7c788f17d1fc300 RBX: 0000000000000000 RCX: 0000000000000102 [ 716.738845][ C0] RDX: 0000000000000000 RSI: ffffffff8c291100 RDI: ffffffff8c2910c0 [ 716.738858][ C0] RBP: ffffffff8176a21f R08: 0000000000000000 R09: 0000000000000000 [ 716.738870][ C0] R10: ffffc90000006938 R11: ffffffff81b10630 R12: 0000000000000002 [ 716.738882][ C0] R13: ffffffff8e959a20 R14: 0000000000000000 R15: 0000000000000000 [ 716.738894][ C0] FS: 0000000000000000(0000) GS:ffff88812527b000(0000) knlGS:0000000000000000 [ 716.738909][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 716.738922][ C0] CR2: 00002000003f3000 CR3: 000000000e746000 CR4: 00000000003526f0 [ 716.738938][ C0] Call Trace: [ 716.738945][ C0] [ 716.738955][ C0] ? rcu_is_watching+0x15/0xb0 [ 716.738975][ C0] ? lock_release+0x4b/0x3c0 [ 716.739000][ C0] ? unwind_next_frame+0x1baf/0x2550 [ 716.739021][ C0] ? deref_stack_reg+0x18e/0x220 [ 716.739040][ C0] ? ip_route_output_flow+0x2a/0x150 [ 716.739061][ C0] ? unwind_next_frame+0x8f/0x2550 [ 716.739081][ C0] unwind_next_frame+0xac/0x2550 [ 716.739101][ C0] ? unwind_next_frame+0x8f/0x2550 [ 716.739122][ C0] ? ip_route_output_key_hash+0x18d/0x2a0 [ 716.739145][ C0] ? unwind_next_frame+0x8f/0x2550 [ 716.739172][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 716.739198][ C0] arch_stack_walk+0x11b/0x150 [ 716.739221][ C0] ? ip_route_output_flow+0x2a/0x150 [ 716.739244][ C0] stack_trace_save+0xa9/0x100 [ 716.739267][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 716.739291][ C0] ? unwind_next_frame+0x1baf/0x2550 [ 716.739313][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 716.739335][ C0] kasan_save_track+0x3e/0x80 [ 716.739358][ C0] ? kasan_save_track+0x3e/0x80 [ 716.739379][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 716.739402][ C0] ? __kmalloc_cache_noprof+0x318/0x660 [ 716.739426][ C0] ? ref_tracker_alloc+0x15b/0x4b0 [ 716.739445][ C0] ? dst_init+0xbe/0x470 [ 716.739462][ C0] ? dst_alloc+0x12a/0x170 [ 716.739478][ C0] ? ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 716.739501][ C0] ? ip_route_output_key_hash+0x18d/0x2a0 [ 716.739523][ C0] ? ip_route_output_flow+0x2a/0x150 [ 716.739564][ C0] __kasan_kmalloc+0x93/0xb0 [ 716.739589][ C0] __kmalloc_cache_noprof+0x318/0x660 [ 716.739612][ C0] ? arena_map_free+0xf7/0x130 [ 716.739636][ C0] ? ref_tracker_alloc+0x15b/0x4b0 [ 716.739655][ C0] ? __kmalloc_cache_noprof+0x157/0x660 [ 716.739681][ C0] ref_tracker_alloc+0x15b/0x4b0 [ 716.739702][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 716.739726][ C0] ? rcu_is_watching+0x15/0xb0 [ 716.739744][ C0] ? trace_kmem_cache_alloc+0x29/0xe0 [ 716.739769][ C0] dst_init+0xbe/0x470 [ 716.739785][ C0] ? dst_alloc+0x112/0x170 [ 716.739803][ C0] dst_alloc+0x12a/0x170 [ 716.739819][ C0] ? fib_lookup+0x35f/0x440 [ 716.739841][ C0] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 716.739868][ C0] ? ip_route_output_key_hash+0xd8/0x2a0 [ 716.739890][ C0] ip_route_output_key_hash+0x18d/0x2a0 [ 716.739914][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 716.739939][ C0] ? ip_route_me_harder+0x52e/0xfe0 [ 716.739959][ C0] ? rcu_is_watching+0x15/0xb0 [ 716.739978][ C0] ? rcu_is_watching+0x15/0xb0 [ 716.739998][ C0] ip_route_output_flow+0x2a/0x150 [ 716.740017][ C0] ? ip_route_me_harder+0x74b/0xfe0 [ 716.740039][ C0] ip_route_me_harder+0x762/0xfe0 [ 716.740058][ C0] ? kthread+0x388/0x470 [ 716.740073][ C0] ? ret_from_fork+0x514/0xb70 [ 716.740089][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 716.740113][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 716.740142][ C0] ? __cookie_v4_init_sequence+0x273/0x510 [ 716.740176][ C0] ? __pfx___cookie_v4_init_sequence+0x10/0x10 [ 716.740205][ C0] synproxy_send_tcp+0x347/0x670 [ 716.740227][ C0] synproxy_send_client_synack+0x89b/0xde0 [ 716.740254][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 716.740274][ C0] ? synproxy_pernet+0x45/0x270 [ 716.740298][ C0] nft_synproxy_eval_v4+0x37b/0x530 [ 716.740322][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 716.740342][ C0] ? __ip_vs_conn_in_get+0x2db/0x10f0 [ 716.740366][ C0] ? nf_ip_checksum+0x13c/0x510 [ 716.740392][ C0] nft_synproxy_do_eval+0x335/0x550 [ 716.740412][ C0] ? __ip_vs_service_find+0x1c0/0x8d0 [ 716.740431][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 716.740451][ C0] ? nft_trace_init+0x280/0x4d0 [ 716.740475][ C0] ? rcu_is_watching+0x15/0xb0 [ 716.740492][ C0] ? __ip_vs_service_find+0x1c0/0x8d0 [ 716.740509][ C0] ? trace_irq_enable+0x3b/0x140 [ 716.740535][ C0] nft_do_chain+0x48d/0x1b10 [ 716.740565][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 716.740590][ C0] ? __pfx_ip_vs_fill_iph_skb_off+0x10/0x10 [ 716.740620][ C0] nft_do_chain_inet+0x360/0x4b0 [ 716.740643][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 716.740669][ C0] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 716.740698][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 716.740721][ C0] nf_hook_slow+0xc5/0x220 [ 716.740741][ C0] NF_HOOK+0x21f/0x3c0 [ 716.740757][ C0] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 716.740778][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 716.740795][ C0] ? NF_HOOK+0x9e/0x3c0 [ 716.740810][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 716.740827][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 716.740848][ C0] ? ip_local_deliver+0x113/0x190 [ 716.740866][ C0] NF_HOOK+0x336/0x3c0 [ 716.740882][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 716.740899][ C0] ? NF_HOOK+0x9e/0x3c0 [ 716.740914][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 716.740932][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 716.740947][ C0] ? ip_rcv_core+0x88d/0xd50 [ 716.740966][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 716.740982][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 716.740998][ C0] process_backlog+0xa34/0x1860 [ 716.741023][ C0] ? process_backlog+0x3c3/0x1860 [ 716.741051][ C0] __napi_poll+0xaa/0x330 [ 716.741072][ C0] net_rx_action+0x61d/0xf50 [ 716.741100][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 716.741120][ C0] ? xfrm_dev_backlog+0x24b/0x3c0 [ 716.741143][ C0] ? rcu_is_watching+0x15/0xb0 [ 716.741174][ C0] ? net_tx_action+0xbff/0xc30 [ 716.741198][ C0] handle_softirqs+0x225/0x840 [ 716.741222][ C0] ? __irq_exit_rcu+0xca/0x220 [ 716.741248][ C0] __irq_exit_rcu+0xca/0x220 [ 716.741270][ C0] irq_exit_rcu+0x9/0x30 [ 716.741291][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 716.741315][ C0] [ 716.741321][ C0] [ 716.741328][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 716.741347][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 716.741370][ C0] Code: f7 e8 9d ca f7 f5 f7 c3 00 02 00 00 74 05 e8 10 87 23 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 e4 e1 e8 f5 65 8b 05 2d b4 8f 07 85 c0 74 18 5b 41 5e e9 91 48 [ 716.741385][ C0] RSP: 0018:ffffc90004e07978 EFLAGS: 00000206 [ 716.741399][ C0] RAX: 0000000000000046 RBX: 0000000000000286 RCX: 0000000080000002 [ 716.741411][ C0] RDX: 0000000000000000 RSI: ffffffff8c291100 RDI: 0000000000000001 [ 716.741423][ C0] RBP: ffff88823beac928 R08: ffffffff903114f7 R09: 1ffffffff206229e [ 716.741436][ C0] R10: dffffc0000000000 R11: fffffbfff206229f R12: 00000000002c484a [ 716.741449][ C0] R13: ffffc900bc88e000 R14: ffffffff9a6e3b18 R15: 0000000000000000 [ 716.741470][ C0] debug_check_no_obj_freed+0x39e/0x450 [ 716.741497][ C0] remove_vm_area+0x1c4/0x2f0 [ 716.741520][ C0] free_vm_area+0x36/0x60 [ 716.741540][ C0] arena_map_free+0xf7/0x130 [ 716.741565][ C0] bpf_map_free_deferred+0x23b/0x4b0 [ 716.741589][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 716.741611][ C0] process_scheduled_works+0xa8e/0x14e0 [ 716.741646][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 716.741668][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 716.741693][ C0] ? assign_work+0x3cf/0x5d0 [ 716.741716][ C0] worker_thread+0xa47/0xfb0 [ 716.741745][ C0] ? __kthread_parkme+0x71/0x1f0 [ 716.741774][ C0] kthread+0x388/0x470 [ 716.741790][ C0] ? __pfx_worker_thread+0x10/0x10 [ 716.741811][ C0] ? __pfx_kthread+0x10/0x10 [ 716.741828][ C0] ret_from_fork+0x514/0xb70 [ 716.741846][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 716.741862][ C0] ? __switch_to+0xc89/0x1420 [ 716.741888][ C0] ? __pfx_kthread+0x10/0x10 [ 716.741905][ C0] ret_from_fork_asm+0x1a/0x30 [ 716.741932][ C0] [ 717.719610][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 717.726551][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 717.735705][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 717.745808][ T31] Call Trace: [ 717.749292][ T31] [ 717.752258][ T31] vpanic+0x56c/0xa60 [ 717.756303][ T31] ? __pfx___schedule+0x10/0x10 [ 717.761195][ T31] ? __pfx_vpanic+0x10/0x10 [ 717.765739][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 717.771940][ T31] panic+0xc5/0xd0 [ 717.775707][ T31] ? __pfx_panic+0x10/0x10 [ 717.780166][ T31] ? preempt_schedule_common+0x82/0xd0 [ 717.785667][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 717.791084][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 717.797280][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 717.803477][ T31] watchdog+0x1030/0x1030 [ 717.807864][ T31] ? watchdog+0x1c7/0x1030 [ 717.812328][ T31] kthread+0x388/0x470 [ 717.816433][ T31] ? __pfx_watchdog+0x10/0x10 [ 717.821169][ T31] ? __pfx_kthread+0x10/0x10 [ 717.825814][ T31] ret_from_fork+0x514/0xb70 [ 717.830452][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 717.835604][ T31] ? __switch_to+0xc89/0x1420 [ 717.840327][ T31] ? __pfx_kthread+0x10/0x10 [ 717.844961][ T31] ret_from_fork_asm+0x1a/0x30 [ 717.849771][ T31] [ 717.853455][ T31] Kernel Offset: disabled [ 717.857793][ T31] Rebooting in 86400 seconds..