last executing test programs: 2.661641269s ago: executing program 3 (id=4580): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x8001, 0x8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0xc9f2, 0x5, 0x7, 0x7ef9bffa64809756, r2, 0xf, '\x00', r1, 0xffffffffffffffff, 0x5, 0x3, 0x3}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r1, 0x25, 0x0, @void}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd602a84350014060000000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="58a2000000000000000000af5c3cf78c66e6e2f9201eb922f4c34c3a8fdf4b68b5eaa399715a89059fc7270123f6e514a5ba0b8a12c8eb4a355c41a98707be9881df5926a2a6dfa5b184afc84d5433388a2d6d431c5885bc2ca1e919c04e11ce3ba2b5234d929b272ed145c1cd01e746afdeae1f169c5320a0ae35795d9e1a31ff1119d1cf31f7a842ddb2ae6e601f117bebccc264f29910e83293258eee8086040cb352290766965ed6203f70248f46cb3720a883565d5b883730b98d39091e26a123c505f6857426376ac3c6bb26a4f4d815"], 0x0) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x8001, 0x8}, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0xc9f2, 0x5, 0x7, 0x7ef9bffa64809756, r2, 0xf, '\x00', r1, 0xffffffffffffffff, 0x5, 0x3, 0x3}, 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r1, 0x25, 0x0, @void}, 0x10) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd602a84350014060000000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="58a2000000000000000000af5c3cf78c66e6e2f9201eb922f4c34c3a8fdf4b68b5eaa399715a89059fc7270123f6e514a5ba0b8a12c8eb4a355c41a98707be9881df5926a2a6dfa5b184afc84d5433388a2d6d431c5885bc2ca1e919c04e11ce3ba2b5234d929b272ed145c1cd01e746afdeae1f169c5320a0ae35795d9e1a31ff1119d1cf31f7a842ddb2ae6e601f117bebccc264f29910e83293258eee8086040cb352290766965ed6203f70248f46cb3720a883565d5b883730b98d39091e26a123c505f6857426376ac3c6bb26a4f4d815"], 0x0) (async) 2.322125s ago: executing program 3 (id=4586): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, r1, 0x1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x18000}, 0x0) (async) r2 = socket(0x1, 0x5, 0x0) sendto(r2, &(0x7f00000000c0)="a6d8172f4a9857b797ae7dc03c042d1c55c88fecdf4d25a0dc2b4a020919dd6235a9", 0x22, 0xc004, &(0x7f0000000100)=@tipc=@id={0x1e, 0x3, 0xb629f52a0fdea748, {0x4e21, 0x2}}, 0x80) socket(0x10, 0x3, 0x0) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) (async) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) (async) close(0x3) (async) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, 0x0) (async) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84000000050601020000000000000000070000000900020073797a320000000005000100070000000900020073797a3000000000090003"], 0x84}, 0x1, 0x0, 0x0, 0xd4}, 0x4000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1d, 0x0, &(0x7f00000006c0)="e460cdfbef2408002900119343056a0f000000072beb3014cd3ec8a755", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$tipc(0x1e, 0x5, 0x0) (async) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10500, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02"], 0x10}}, 0x40044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008001e"], 0x44}, 0x1, 0x2000000000000000}, 0x0) splice(r3, 0x0, r6, 0x0, 0x10d00, 0xf) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRESOCT=r2, @ANYBLOB="140001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000020c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4051}, 0x40044) 2.254002674s ago: executing program 3 (id=4588): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000001740)={r4, 0x1}, &(0x7f0000001780)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={r4, 0xfffb}, 0x8) (async) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, r5}, 0x94) (async) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="081500000005110400000000000000000100000554020100"], 0x1508}}, 0x80d0) (async) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f0000000100)={'mangle\x00', 0x0, [0x9, 0xffffffff, 0x0, 0x2, 0xfffffffb]}, &(0x7f0000000080)=0x54) 2.12610371s ago: executing program 3 (id=4590): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f00000004c0)=0x8, 0x4) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xfffffff7}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xc}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200040f0}, 0x4890) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000cc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000d00)=ANY=[@ANYBLOB="50010000", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fedbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="f000028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400080000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000e00000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000900000008000600", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040008000000"], 0x150}, 0x1, 0x0, 0x0, 0x4008010}, 0x40440c5) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r6, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_ext={0x1c, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x11d, 0x0, 0x0, 0x0, 0x7}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x1f, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x26103, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x65a1}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r9, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x1c}}, 0x8040) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010000180040003000800", @ANYRESDEC], 0x44}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000940)={@fallback=r6, 0x0, 0x0, 0x3, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000880)=[0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="2ed7d50cf17efc73ed9ca221cc7ea54a9884dcd983a29bb178747a193d6f86065a11459e5b658c4e4dd83a54b16b4ad7183654872cc7", @ANYRES16, @ANYBLOB="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"], 0x180}, 0x1, 0x0, 0x0, 0x810}, 0x8000) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0xb0, 0x0, 0x0, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x71, 0x0, [{0x6, 0xc, "e2ffb28c599d1681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x6, 0xa, "6580a9e97612fe86"}, {0x0, 0x12, "240011000300"/16}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x3, [{0x0, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) 1.9877085s ago: executing program 2 (id=4594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) sendmmsg$inet(r1, &(0x7f00000002c0)=[{{&(0x7f0000000100)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1000"], 0x10}}], 0x1, 0x4000040) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 1.862946108s ago: executing program 2 (id=4595): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x5c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0xc, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x2}]}}, @CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x4}]}, 0x5c}}, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'gretap0\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x1, 0x10, 0x101, 0x1000, {{0xf, 0x4, 0x3, 0x31, 0x3c, 0x65, 0x0, 0x2, 0x4, 0x0, @multicast2, @multicast1, {[@timestamp={0x44, 0x1c, 0x58, 0x0, 0x2, [0x6, 0x5, 0x1, 0x172d, 0x9, 0x889]}, @generic={0x88, 0xa, "365746fc8b68da81"}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'gretap0\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x1, 0x10, 0x101, 0x1000, {{0xf, 0x4, 0x3, 0x31, 0x3c, 0x65, 0x0, 0x2, 0x4, 0x0, @multicast2, @multicast1, {[@timestamp={0x44, 0x1c, 0x58, 0x0, 0x2, [0x6, 0x5, 0x1, 0x172d, 0x9, 0x889]}, @generic={0x88, 0xa, "365746fc8b68da81"}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000540), &(0x7f0000000580)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x6, 0x308, {0x10005, 0xb}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x9, 0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) (async) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x6, 0x308, {0x10005, 0xb}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x9, 0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'syztnl0\x00', &(0x7f00000005c0)={'sit0\x00', 0x0, 0x700, 0xff40, 0x6, 0x1, {{0x6, 0x4, 0x0, 0x30, 0x18, 0x67, 0x0, 0xc, 0x29, 0x0, @loopback, @broadcast, {[@end]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa, &(0x7f0000000680)=[0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf5, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x84, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000009c0)={'tunl0\x00', &(0x7f0000000940)={'syztnl2\x00', 0x0, 0x1, 0x7800, 0x8, 0xb9d5, {{0x15, 0x4, 0x0, 0x1, 0x54, 0x67, 0x0, 0x4, 0x29, 0x0, @multicast1, @broadcast, {[@ssrr={0x89, 0x2b, 0x8, [@private=0xa010102, @broadcast, @remote, @local, @broadcast, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @empty, @empty]}, @generic={0x0, 0x12, "d38f159f512deff3ccba7bd42a231c8c"}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000a00)=0x0, &(0x7f0000000a40)=0x4) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000bc0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xe8, r4, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000bc0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xe8, r4, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xf0, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_ADT={0x7c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_to_batadv\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x4}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x7}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x24000000) (async) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xf0, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_ADT={0x7c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_to_batadv\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x4}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x7}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x24000000) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0xd6}, @IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x40}}, 0x40008c1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r14 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r14, 0x8946, &(0x7f0000000a00)="4749c2368bb8dd2c7f17323cf53a") setsockopt$bt_BT_SECURITY(r14, 0x112, 0x4, &(0x7f0000000c00)={0x9, 0x1}, 0x2) r15 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r15, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x1404, 0x400, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000050) 1.837601357s ago: executing program 0 (id=4597): unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) socket$kcm(0x10, 0x2, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x104, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xd4, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xc}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0xc}}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0xbc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xb0, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0xfffffffffffffc3e, 0x3, 0x0, 0x0, {{0x8000, 0x7, 0x8}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x7}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x401, 0x3, 0x8001}, {0x4, 0x4, 0x9, 0x81}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1577, 0x1, 0xfffc}, {0x4e3b238, 0x7, 0xf566, 0x4, 0x5, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x1}, {{0x2, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x7fff}, {0x4, 0x5, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x7}, {0xe1d, 0xd, 0x0, 0x1, 0x9, 0x1, 0x2}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x2, 0xa}, {0x5, 0x9, 0x1, "abc00e12181f79fbda"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x104}}, 0x2000c800) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8000}, 0x4) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x1, 0x7}, 0x4) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000780)={'filter\x00', 0x0, 0x0, 0x0, [0x3, 0x1, 0xfffffffffffffff5, 0x80, 0x2, 0x9], 0x0, 0x0}, 0x78) 1.677760119s ago: executing program 1 (id=4598): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0xf6) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, 0x15, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4}, @nested={0x14, 0x2, 0x0, 0x1, [@generic="bf74a7dffdd8f83b1ba40dfabcc81c75"]}]}, 0x2c}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='io.stat\x00', 0x275a, 0x0) splice(r3, &(0x7f0000000040)=0x7ffffffffffffffe, r2, 0x0, 0x800000000ff, 0x8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x29, 0x2, 0x3, 0x2, 0x12, @empty, @loopback, 0x11, 0x8021, 0x7, 0x9}}) (async) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) accept4$packet(r4, 0x0, 0x0, 0x80000) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r4) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r5, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x91}, 0x20000010) 1.571263966s ago: executing program 3 (id=4599): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x3c, r2, 0x1, 0x3, 0x0, {0x33}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x20000040) syz_emit_ethernet(0x5a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "081200", 0x24, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[@fragment={0xff, 0x0, 0xc, 0x0, 0x0, 0x4, 0x64}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}}, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x82, &(0x7f0000001200)=@assoc_value, 0x8) write$nci(r1, &(0x7f0000001240)=@NCI_OP_CORE_INIT_RSP_V2={0x0, 0x0, 0x2, 0x1, 0x7, {0x9, 0x1, 0x40, 0x9, 0x10, 0x1, 0x1, 0x0, 0x1000, "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"}}, 0x1011) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000840)={'dummy0\x00', 0x0}) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000140)) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, {0x2, 0x7}, {0xffff, 0xffff}, {0x6}}}, 0x24}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000340), 0x11000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r9) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="0f0700000000fcffffff0c00000008000300", @ANYRES64=r10], 0x1c}, 0x1, 0x0, 0x0, 0x4005}, 0x4) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r10, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044080}, 0x8080) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000040000100fcff070004000000010000000800cb8004000880100001800c0010800400088004000b800c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) 1.552937489s ago: executing program 2 (id=4600): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) unshare(0x600) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)={@cgroup=r3, r3, 0x2f, 0x4, 0x4, @void, @value=r3}, 0x20) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)={0x38, r2, 0x1, 0xf00, 0x300, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x38}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40055}, 0x4) 1.513199118s ago: executing program 1 (id=4601): r0 = socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000ff", 0x43}], 0x1) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x60) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x30bd25, 0x0, {}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7}, @IFLA_EXT_MASK={0x8, 0x1d, 0x9}]}, 0x30}}, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x11, r5, 0x3cd30000) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000040)={0x1100, 0x2, 0x8, 0x10003}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x7, 0x6a, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000440)={r7, 0x0, &(0x7f0000000400)=""/55}, 0x20) socket$inet(0x2, 0x2, 0x1) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x48) splice(r3, 0x0, r6, 0x0, 0x3000, 0x100000000000000d) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) r9 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x298, 0x168, 0x0, 0x0, 0x298, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x200}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x2, 0x4, 0x3, 0x3]}}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) 1.40268612s ago: executing program 2 (id=4602): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000700000aa0000000060a0b0400000000000200000200000074000480700001800a0001006d617463680000006000028008000240000000000c0001007068797364657600460003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470580800000900010073797a30000000000900020073797a32"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x200}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000700000aa0000000060a0b0400000000000200000200000074000480700001800a0001006d617463680000006000028008000240000000000c0001007068797364657600460003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470580800000900010073797a30000000000900020073797a32"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x200}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (async) 1.354449116s ago: executing program 2 (id=4603): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@private=0xa010102, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x8}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff, 0xfffffffffffffffc, 0xebe5}, {0x2}, 0x70bd2c, 0x0, 0xa, 0x1, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e20, @in=@dev={0xac, 0x14, 0x14, 0x2e}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x2004c805}, 0x40880) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x5d708bf5, 0xd4f, 0x1, 0x8080, 0xffffffffffffffff, 0x3, '\x00', 0x0, r2, 0x4, 0x0, 0x5, 0x1, @value=r3}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000022d70000000000000500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000db003000a0000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x7}, 0x94) accept$unix(r0, &(0x7f0000000240)=@abs, &(0x7f0000000100)=0x6e) mmap(&(0x7f0000434000/0x4000)=nil, 0x4000, 0x8, 0x1010, r1, 0x341df000) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2711, &(0x7f0000000600)=""/102389, &(0x7f0000000000)=0x18ff5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) socket$inet6_udp(0xa, 0x2, 0x0) 1.344917657s ago: executing program 1 (id=4604): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", '@\x00', "12772541f8eb02bb"}, 0x28) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x8008, 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) 1.214202653s ago: executing program 4 (id=4605): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042800c00018006000600800a0000140002800d001480080018"], 0x38}, 0x1, 0x0, 0x0, 0x48855}, 0xc000) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x20, 0x19, 0x1, 0x0, 0x25dfdbff, {0xa, 0xd601, 0x9}, [@nested={0x8, 0x9, 0x0, 0x1, [@nested={0x4, 0xce}]}, @nested={0x4, 0x12}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000) 1.103698912s ago: executing program 4 (id=4606): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000051c00002c0012800e00010069703665727370616e000000180002800400120006001800030000000500160002000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x12) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000080)=0x3, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) close(0x3) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r4, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0x4, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005, 0x0, 0x24080040}, 0x24000000) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000426bd7000fbdbdf25050000001f00070073797374656d5f753a6f626a6563745f723a746d705f743a7330000008000500ac1414aa55f3563fcee7d0668d140fb139a3b41fb58ac4c15a58567fc1d53ed6b1b0a6f765fc294c513fd500e5cccf48b1684fce8cb40d7f2c25a78e2edf0dcab2b537fbd439bc66306ac4d80df98fd005c810a1cf10b06006335404f8f6565809"], 0x3c}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000080) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000051c00002c0012800e00010069703665727370616e000000180002800400120006001800030000000500160002000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x12) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000080)=0x3, 0x4) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) (async) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) close(0x3) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r3) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r4, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0x4, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005, 0x0, 0x24080040}, 0x24000000) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000426bd7000fbdbdf25050000001f00070073797374656d5f753a6f626a6563745f723a746d705f743a7330000008000500ac1414aa55f3563fcee7d0668d140fb139a3b41fb58ac4c15a58567fc1d53ed6b1b0a6f765fc294c513fd500e5cccf48b1684fce8cb40d7f2c25a78e2edf0dcab2b537fbd439bc66306ac4d80df98fd005c810a1cf10b06006335404f8f6565809"], 0x3c}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000080) (async) 1.069565013s ago: executing program 4 (id=4607): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80a00080}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x1, 0x6, 0x0, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x481c}, 0xc004041) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x3, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x18, 0x1}, 0x50) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r0, &(0x7f0000000000)="0c000000010001", 0x7) 1.017132099s ago: executing program 4 (id=4608): r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, 0x0, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, 0x0, 0x0) connect$unix(r1, &(0x7f0000000100)=@abs={0x27}, 0x6e) socket(0x1d, 0x2, 0x6) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=ANY=[@ANYBLOB='0'], 0x30}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x7, &(0x7f0000001580)=""/4096, &(0x7f0000000400)=0x1000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380100001"], 0x44}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r9, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r9, 0x3) getsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x7, &(0x7f0000000200)=0x1, &(0x7f0000000380)=0x4) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380080015"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000048000000480000000500000000000000000000090300000000000000000000010500000008000000000000000000000300000000020000000200000000000000000000000100000d03000000030000000300000000005f2e"], 0x0, 0x65}, 0x28) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r10, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028bd70000000000008000000180001801400020073797a5f74756e0000000000000000001c00028018"], 0x48}}, 0x0) 911.895359ms ago: executing program 0 (id=4609): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000020000100fcfffffffedbdf250a00400000000003000000f5130002"], 0x38}, 0x1, 0x0, 0x0, 0xc011}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 899.551523ms ago: executing program 0 (id=4610): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x1000, 0x28, 0x401}, &(0x7f0000000140)=0x10) r2 = socket(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r2, 0x0, 0x0, 0x48890, &(0x7f0000000100)={0x2, 0x4e24, @broadcast}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000840)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x280000}, 0xc, &(0x7f0000000800)={&(0x7f0000000280)={0x56c, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x14, 0x2, [{0x5}, {0x2, 0x3}, {0x6, 0x6}, {0x7, 0x2}, {0x7}, {0x7, 0x7}, {0x7, 0x7}, {0x5, 0x8}, {0x0, 0xa}, {0x1}, {0x2, 0x1}, {0x3, 0xa}, {0x6, 0xa}, {0x0, 0x2}, {0x4, 0x7}, {0x0, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x21c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfff6, 0x40, 0x6, 0x1ff, 0xfff, 0x2, 0x6, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x0, 0x2}, {0x1, 0x1}, {0x0, 0x7}, {0x7, 0x9}, {0x5}, {0x7, 0x7}, {0x1, 0x5}, {0x5, 0x2}, {0x6, 0x9}, {0x0, 0x9}, {0x7, 0x6}, {0x7}, {0x1, 0x8}, {0x6, 0x9}, {0x2, 0xa}, {0x5, 0x1}, {0x4}, {0x1}, {0x6, 0x7}, {0x7, 0x7}, {0x6, 0xa}, {0x6, 0x6}, {0x2}, {0x4, 0x4}, {0x2, 0xa}, {0x7, 0x2}, {0x1, 0x3}, {0x4, 0x8}, {0x7, 0xa}, {0x6, 0x3}, {0x0, 0x2}, {0x5, 0x8}, {0x7, 0x4}, {0x2, 0x8}, {0x1, 0x4}, {0x4, 0x2}, {0x7, 0x4}, {0x0, 0x9}, {0x6, 0x4}, {0x6, 0x5}, {0x0, 0x9}, {0x3, 0x4}, {0x5, 0x8}, {0x5, 0x4}, {0x1, 0x8}, {0x2, 0x3}, {0x1, 0xa}, {0x0, 0xa}, {0x3}, {0x0, 0x8}, {0x5, 0x2}, {0x2, 0x6}, {0x6, 0x7}, {0x3, 0x3}, {0x4, 0x5}, {0x5}, {0x0, 0x5}, {0x3, 0x3}, {0x7}, {0x7, 0x6}, {0x0, 0x8}, {0x4, 0x6}, {0x3, 0x8}, {0x7, 0x8}, {0x3, 0x1}, {0x6}, {0x7, 0x4}, {0x4}, {0x1, 0x8}]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x7, 0x8, 0x6, 0x2, 0xfffd, 0x0, 0xf12]}}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x4, 0xc, 0x36, 0x60, 0x2, 0x0, 0x1, 0xc, 0x1, 0x60]}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x2, 0xb, 0x5, 0x2, 0x16, 0x4, 0x16, 0x48, 0x48, 0xc, 0x4, 0x12, 0x6, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x4, 0x2, 0x5, 0x31, 0x22b, 0x9, 0xc]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0x0, 0x3, 0x4, 0x3, 0x20, 0x9]}}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x27, 0x2, [{0x5, 0x4}, {0x5, 0x7}, {0x1, 0x2}, {0x5}, {0x1, 0x4}, {0x2}, {0x4, 0x6}, {}, {0x6, 0x7}, {0x1, 0x1}, {0x6, 0xa}, {0x3, 0x2}, {0x2, 0x9}, {0x2, 0x4}, {0x4, 0x1}, {0x7, 0xa}, {0x4, 0x6}, {0x1, 0x6}, {0x7, 0x3}, {0x4, 0x7}, {0x6, 0x3}, {0x4, 0x6}, {0x1}, {0x0, 0x2}, {0x3, 0x3}, {0x4, 0x8}, {0x7, 0x1}, {0x0, 0x1}, {0x1, 0x7}, {0x5, 0x9}, {0x0, 0x7}, {0x6, 0x4}, {0x2, 0x9}, {0x0, 0x4}, {0x2, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfff7, 0x601c, 0x0, 0x8, 0x7fb, 0x40, 0x1, 0x2]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x50, 0x2, [{0x4, 0x3}, {0x3}, {0x0, 0x7}, {0x0, 0x8}, {0x5, 0x7}, {0x5, 0x3}, {0x6, 0x5}, {0x5, 0x1}, {0x6, 0x8}, {0x3, 0x9}, {0x6, 0x8}, {0x7, 0x4}, {0x3, 0x1}, {0x3, 0x3}, {0x2, 0x8}, {0x7, 0x5}, {0x5, 0x8}, {0x6, 0x7}, {0x0, 0xa}, {0x4}, {0x6, 0x9}, {0x3, 0x4}, {0x2, 0xa}, {0x1, 0x3}, {0x3, 0x7}, {0x2, 0x2}, {0x1, 0xa}, {0x0, 0x7}, {0x5, 0x4}, {0x0, 0x6}, {}, {0x7, 0x7}, {0x3, 0x2}, {0x1}, {0x2}, {0x0, 0xa}, {0x1, 0x4}, {0x6, 0x6}, {0x4, 0x6}, {0x2, 0x9}, {0x0, 0xa}, {0x2, 0x9}, {0x1, 0x5}, {0x3, 0x7}, {0x0, 0x1}, {0x1, 0x4}, {0x2}, {0x5, 0xa}, {0x7, 0x7}, {0x1, 0x1}, {0x7}, {0x3, 0x9}, {0x2, 0x2}, {0x0, 0xa}, {0x1, 0x1}, {0x6, 0x6}, {0x0, 0x9}, {0x7, 0x7}, {0x6, 0x3}, {0x0, 0x1}, {0x6, 0xa}, {0x7, 0xa}, {0x6, 0x2}, {0x2}, {0x4, 0x6}, {0x6, 0x1}, {0x5, 0xa}, {0x3, 0x5}, {0x1}, {0x5}, {0x2, 0x1}, {0x3, 0xa}, {0x4, 0x4}, {0x7}, {0x4, 0x7}, {}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x5, 0x2, 0x0, 0x800, 0x7, 0x1, 0xe240]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x36, 0x1b, 0x0, 0x18, 0x36, 0xc, 0x60, 0x24, 0x18, 0x36, 0x18, 0x60, 0x30, 0xb, 0x0, 0x36, 0x36, 0x4, 0x48, 0x36, 0x30, 0x6, 0x3, 0xb, 0x0, 0x36, 0x6c, 0x4, 0x2, 0x4, 0x3, 0x1b]}]}]}, @NL80211_ATTR_TX_RATES={0x58, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x18, 0x30, 0x5, 0xb, 0x2, 0x16, 0x5, 0x6, 0x4, 0x76, 0x9, 0x24, 0x24, 0x5, 0x30, 0xc, 0x5]}]}]}, @NL80211_ATTR_TX_RATES={0xb0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x7, 0x9, 0x8, 0x0, 0x8001, 0x9, 0x401]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x0, 0x1}, {0x7, 0x6}, {0x5, 0x1}, {0x3, 0x7}, {0x6, 0x5}, {0x7, 0x7}, {0x1, 0x3}, {0x3, 0x9}, {0x3, 0x2}, {0x0, 0x8}, {0x5, 0x9}, {0x3, 0x4}, {0x1, 0x7}, {0x1, 0x9}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x6, 0x8}, {0x6, 0x9}, {0x6, 0xa}, {0x6, 0x1}, {0x4, 0x8}, {0x5, 0x8}, {0x1, 0x8}, {0x5, 0x7}, {0x5, 0x1}, {0x1, 0xa}, {0x1, 0x4}, {0x3, 0x4}, {0x1, 0x2}, {0x0, 0x2}, {0x1, 0x6}, {0x4, 0x5}, {0x0, 0xa}, {0x7, 0x6}, {0x3, 0x8}, {0x1, 0x3}, {0x2, 0x9}, {0x7, 0x4}, {0x2, 0x5}, {0x3}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x36, 0x2d, 0x0, 0xa09af61ee88b801b, 0x36, 0x36, 0xc, 0x9, 0x3, 0x5, 0xc, 0x1b, 0x2, 0xb, 0x18, 0x1, 0x1b, 0x4, 0x16, 0x12, 0xb, 0x6c, 0x4, 0x0, 0x48, 0x2, 0x60, 0x24, 0x12, 0x48, 0x24, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x1, 0x8001, 0xc2c, 0x8, 0x1000, 0x4, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x12, 0x24, 0x1b, 0xc, 0xc, 0x24, 0x5, 0x5, 0x36, 0x3, 0xc, 0x1, 0x1, 0x48, 0x16, 0x4, 0x48, 0x1b, 0x12, 0x16, 0x18, 0x1, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x1c8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x104, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x1}, {0x1, 0x1}, {0x3, 0x9}, {0x6, 0x4}, {0x1, 0x7}, {0x5, 0x2}, {0x7, 0xa}, {0x0, 0x6}, {0x5, 0x6}, {0x0, 0x8}, {0x1, 0x4}, {0x4, 0x3}, {0x2, 0x8}, {0x1, 0x2}, {0x3, 0x6}, {0x4, 0x9}, {0x4, 0x4}, {0x2, 0x5}, {0x5, 0x1}, {0x6, 0x4}, {0x7, 0x4}, {0x4}, {0x1, 0x4}, {0x1, 0x6}, {0x5, 0x2}, {0x7, 0xa}, {0x7}, {0x2, 0x1}, {0x5}, {0x0, 0x3}, {0x6, 0x6}, {0x0, 0x8}, {0x3, 0x7}, {0x4, 0xa}, {0x2, 0x2}, {0x1, 0x7}, {0x2, 0x6}, {0x4, 0x5}, {0x6, 0xa}, {0x3, 0x1}, {0x5}, {0x0, 0x9}, {0x6}, {0x2, 0x8}, {0x2, 0x8}, {0x2, 0x4}, {0x5}, {0x1, 0x8}, {0x3, 0xa}, {0x0, 0x6}, {0x4, 0x6}, {0x5, 0x6}, {0x3, 0x5}, {0x0, 0x8}, {0x0, 0xa}, {0x2, 0x3}, {0x1, 0x6}, {0x3, 0x8}, {0x0, 0x4}, {0x1, 0x8}, {0x0, 0x8}, {0x2, 0x1}, {0x3, 0x4}, {0x5, 0x5}, {0x6, 0x7}, {0x1, 0xa}, {0x2, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0xfff9, 0x84, 0x7b5, 0x4, 0x8, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xfff, 0xf3, 0x7, 0x2, 0x40, 0x4, 0xbd]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xda, 0x2a5, 0x5, 0x81, 0x2, 0x708, 0x101, 0x100]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb051, 0x45, 0x4, 0x100, 0x8, 0x6, 0x2, 0x3]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x24, 0x1, 0x5, 0x12, 0x3, 0x60, 0x9, 0x5, 0xc, 0x12, 0x48, 0x0, 0x6, 0x2, 0x9, 0xb, 0x61, 0x72, 0x24, 0x16, 0x9, 0xb, 0x36, 0x3, 0x12, 0x6, 0x4, 0x6, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6, 0x3ff, 0x3ff, 0x8, 0x5a1, 0x37fa, 0x880]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x16, 0xc, 0x16, 0x12, 0x3, 0x2, 0x4, 0xa, 0x6c, 0x1, 0x12, 0x48, 0x5, 0x2, 0x12, 0x12, 0x60, 0xb, 0x36, 0x2, 0x3, 0x48, 0x36, 0x3, 0x3, 0x6]}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4b, 0x5a, 0xbfd1, 0xddd, 0x4, 0x4, 0x80, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x40, 0x3c, 0xe59, 0x800, 0xbab, 0xcc7, 0x7ff]}}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x2, 0x9}, {0x4, 0x5}, {0x5, 0x8}, {0x1, 0x3}, {0x0, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x3, 0x3}, {0x6, 0x3}, {0x6, 0x5}, {0x2, 0x3}, {}, {0x2}, {0x4, 0x5}, {0x5, 0x7}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x1, 0x7}, {0x5, 0x7}, {0x4, 0x8}, {0x2, 0x1}, {0x5, 0x2}, {0x3, 0x5}, {0x3, 0x3}, {0x4, 0x5}, {0x3, 0x7}, {0x7, 0x3}, {0x0, 0x7}, {0x7, 0x8}, {0x4, 0x1}, {0x6, 0x7}, {0x1, 0x3}, {0x1, 0x6}, {0x6, 0x4}, {0x1, 0xa}, {0x4, 0x1}, {0x2, 0x8}, {0x1, 0x5}, {0x1, 0xa}, {0x1, 0x9}, {0x3, 0x5}, {0x2, 0x5}, {0x0, 0x8}, {0x4, 0x5}, {0x7, 0xa}, {0x5, 0x5}, {0x6, 0x8}, {0x0, 0x1}, {0x3, 0xa}, {0x3, 0x8}, {0x6, 0x1}]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x6, 0x3}, {0x5}, {0x7, 0x1}, {0x6, 0x3}, {0x2, 0x2}, {0x1, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7ff, 0x2, 0x5, 0x7f, 0x4, 0xc, 0x3]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x1b, 0x6, 0x36, 0x0, 0xb, 0x30, 0x16, 0x9, 0x6c, 0x60, 0x60, 0x2, 0x6c, 0x4, 0x1]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_TX_RATES={0x3c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x36, 0xb, 0x60, 0xb, 0x30, 0x60, 0x16, 0xc, 0x24, 0x24, 0x60, 0x36, 0x2, 0x2, 0x6, 0x18, 0x1b, 0x36, 0x2, 0x16, 0x1, 0x9, 0x1, 0x6c, 0x48, 0x5, 0x5, 0xb, 0x24, 0x4, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, 0x56c}, 0x1, 0x0, 0x0, 0x4}, 0x800) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x20000, 0x0) ioctl$TUNSETLINK(r4, 0x400454cd, 0x17) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipmr_newroute={0xbc, 0x18, 0x400, 0x70bd29, 0x25dfdbfb, {0x80, 0x0, 0x20, 0xc, 0xfc, 0x3, 0xff, 0xa, 0x100}, [@RTA_ENCAP={0x90, 0x16, 0x0, 0x1, @SEG6_LOCAL_SRH={0x8c, 0x2, {0x3c, 0x10, 0x4, 0x8, 0x6, 0x10, 0xe, [@loopback, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0xd}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2]}}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_FLOW={0x8, 0xb, 0x2}]}, 0xbc}}, 0x0) 635.807671ms ago: executing program 3 (id=4611): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3400000012000100dfa59a889004baed20ae39a906e8a40000000000000000c20000f3ffffffff"], 0x34}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x24, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x10, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x8}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4084}, 0x200080c0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000100)=0x40000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r4, 0x0, r1, 0x0, 0x10000008ebc, 0x0) close(0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xffffffffffffffc8, &(0x7f0000000040)={&(0x7f0000000280)={0x144, 0x25, 0x200, 0x70bd2b, 0x25dfdbfe, {0xb}, [@typed={0x8, 0x8e, 0x0, 0x0, @fd=r0}, @generic="4e37bd816c1de34ffa2e36124027e5a1eff81aded4e76c155ca51631b18d28e90430cc8f5bc8afc3507f57b95d86f5eec890c18fedc82622c1", @generic="6e7db24d019ed5e4911ff72e42f0dcea45d98c2f9bdc96600223d273cfef41f0054d396b775313ad1237292d1b0c24cce1902d4ff6e2def5a18debf9b51f596007194646bc1088a2effb2d191e564056463d0f484b694d51ade60fb490d1c65df5512cca69ddf525fa0d1904e1b325b46433cc259dda2340e1a6ceced7e8f19d6ab0741115f9a5f78366e0c0b0ccd2e454373310d93d42a7cd924a6fd685b29c62776a307fe29d1b95e66d85683f6d807fed4b38f0ff58a5923dc1b1b50c19c8ec5fbd2fe6e47e7af381c1003a4b10cd06220d430d0f90b9d089321b61b70b60e28310955892649dcd25066c511f"]}, 0x144}, 0x1, 0x0, 0x0, 0x400c880}, 0x8010) 567.774399ms ago: executing program 1 (id=4612): tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114e00000000008510000002000000850000000d00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 555.848709ms ago: executing program 0 (id=4613): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00020000808200001400122f3f000100e1d26c4a7e766574680000000004000280080003000000000008002000080000008040d2a34c7c2b3ad867339bff77886b1d7af9995fb65ab0b3a23ecc9ad8e6d5"], 0x44}}, 0x8000) 518.102093ms ago: executing program 4 (id=4614): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) read$alg(r4, &(0x7f0000000080)=""/47, 0x2f) sendmmsg$unix(r4, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)="0a690b6528a1f42d548655afb9", 0xd}, {&(0x7f0000000300)="dd5722a4ada647acf96f7778f3ab8a7dd0ecdc630c69655dff751cbf8e247fdab005", 0x22}], 0x2, 0x0, 0x0, 0x200400c4}}], 0x1, 0xc000) setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)={0x2c, r1, 0x11, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x4}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) writev(r6, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) unshare(0x20000400) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r10, &(0x7f0000000000)={0x1f, 0x8003}, 0xe) sendmmsg(r5, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="120000000000000029"], 0x108}}], 0x2, 0xc040) 423.002129ms ago: executing program 2 (id=4615): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r3) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000940)={{r3, &(0x7f0000000100)='&^', 0x200000, &(0x7f00000001c0)={@_ha_fsid={[0xfff, 0xffffffff]}, {0x2, 0x6, 0x0, 0xf90d}}, 0x0, &(0x7f0000000200), &(0x7f0000000240)}, 0x6, &(0x7f0000000880)=[{0x2, 0x7, &(0x7f0000000280)='\x00', &(0x7f0000000340)="04b90feb872e95694cc13a3736c8ee81b1de3d15b5548d69a32ecf483fec76138871deda4f7a3a375777ad5e5b011d29cf2b93fffbcac7599f9d1180926a029085627157d6dc210e9d2c068ef951af78ee28c58da2023f05654674bf", 0x5c}, {0x1, 0x3, &(0x7f00000002c0)='netdevsim\x00', &(0x7f00000003c0)="2fa9730269", 0x5, 0x2}, {0x1, 0x2, &(0x7f0000000400)='\x00', &(0x7f0000000440)="edefbf0c4f35e0b3a8df316d7aee84abeb6a7c9dddb1306ba5a84463a777256f8edf1f7693b99952ff5bcb9dff58064790c98da929fb72234dd3a7e1f1e9ebe47579361d6a04b691048a11fcdddc7b69dcfd24ba5ba8c8d10f065e51a3cc9d62ef6a8c1a685d3e22f3938344eeb67d2703ad66395d938b7bb76c34abf7fc5906b1f070b588ec5a95de3b9d6c8189fe42d8e9ac61cf57cbacebefd1cb5dd00f2e20e3d4059c107599e1baa5cfcb83a8460708de35b290473015c36eea148b1f63c5088dae18ec491765fcf3d897c486575dd62b745503398eabc21e025ba37d1aa842466b", 0xe4, 0xa}, {0x2, 0x8, &(0x7f0000000540)='netdevsim\x00', &(0x7f0000000580)="4ccc3d8ee1645539abfe3c1b1619f7adb9165099693ccd9488f99253b9f0dfc90cad44c1b830136430eb7743be1ca438fa335e13c07d8f6e713a596c7c835edc3073c356ffd40dfa13a8002c6b428f317e972edf788b2061c8d9d99058ff4730e84eda3d046b6012d5556b0b89abcc36a346bd8b84cb008b6edc3b9111f2f976c64bbda6d384f55fb67fa157139faddf7b7fe0e305d76c918aeb", 0x9a, 0x72}, {0x2, 0x1, &(0x7f0000000640)='-)}/.^+:^*\'[\x00', &(0x7f0000000680)="edb10f2a93134250dd51d471df8b6c95c0173e71c474b0a0b43ae092d0fccfb00f5de0c52c8b43a0a6f9e25a7fbc4f3ba4eb6726c99b69f50cb9746450037357dbb928998918bba7d6fcdb94a471aa073080bf7fd81abb2533e97dbeb5676ff1dc8a32db651b9b0127e4476b79c832", 0x6f, 0x10}, {0x2, 0x1, &(0x7f0000000740)='netdevsim', &(0x7f0000000780)="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", 0xfd, 0xf90ef2c4ef139954}]}) r5 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000a80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x60, r2, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x60}}, 0x840) 371.866993ms ago: executing program 0 (id=4616): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) (async) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000000), 0x4) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) r8 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r9 = socket$unix(0x1, 0x5, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="68020000210001000000000000000000ff0200000000000000000000000000017f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000a001000060000000000000008000b00000000002c001300e0000001000000000000000000000000fc0000000000000000000000000000000000000000000000cc0111"], 0x268}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r13 = socket$unix(0x1, 0x1, 0x0) r14 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r15, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r14, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r15, {0x3, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x8, 0xa, 0x3}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) (async, rerun: 64) r16 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r17 = syz_genetlink_get_family_id$gtp(&(0x7f0000000740), r16) (async) sendmsg$GTP_CMD_ECHOREQ(r16, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r16, @ANYRESOCT=r11, @ANYRES16=r0, @ANYRES64=r13, @ANYRESOCT=r12], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x0) sendmsg$GTP_CMD_ECHOREQ(r14, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r17, @ANYBLOB="00012abd7000fedbdf250300000014000700fe8008000400ac1e010100"/42], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async) r18 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r18, &(0x7f0000000000)={0x1f, 0x8003}, 0xe) (async) recvmmsg(r2, &(0x7f0000001140), 0x74e, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x13, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000071187c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001}, 0x94) 238.868376ms ago: executing program 1 (id=4617): socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf250100", @ANYRES64=r0], 0x18}}, 0x2080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x38, r2, 0x701, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x1, 0x75}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 98.293503ms ago: executing program 4 (id=4618): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) (async) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000001800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r5) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r5) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newchain={0x580, 0x64, 0x100, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x9}, {0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x550, 0x2, [@TCA_ROUTE4_ACT={0x54c, 0x6, [@m_police={0x548, 0xd, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x64a9, 0x10, 0xfffffffe, 0x7fffffff, 0x8, 0x3, 0x1, 0xfffff45b, 0xf3, 0x2, 0x9, 0xa, 0x8, 0x9, 0x1a3b, 0x4, 0x464, 0x800, 0x7fff, 0x9, 0x8, 0x4, 0x0, 0x3, 0x605, 0x9, 0xc, 0x2, 0x13, 0x8001, 0x10000, 0x8, 0x8, 0xdb7, 0x51b, 0x5, 0x8472, 0x240, 0xffff8001, 0x2, 0xb54, 0xfc7, 0x7, 0x9, 0x8000, 0x3, 0x6e, 0x5, 0x4, 0xa45, 0x3, 0xd7b9, 0xde, 0x1, 0x40, 0x6c, 0x6, 0x6f81636b, 0x0, 0x8bda, 0xb020, 0xaae, 0x1, 0xffffffef, 0x4, 0x1, 0x3, 0x8, 0x9, 0x5, 0x6, 0x1, 0x401, 0x7, 0x5, 0x6, 0x3, 0x5, 0x2, 0x3, 0x7, 0x200, 0xffffffff, 0x80000001, 0x3, 0xd, 0x58b, 0x3, 0x100, 0xe59, 0xfa, 0x80000000, 0x3a6, 0x1, 0x9, 0x3, 0x6, 0x1, 0x8, 0x3, 0xa00, 0x0, 0x5, 0x0, 0x8, 0xea1, 0xb57, 0x9, 0x6, 0x5, 0x24, 0x9, 0x5, 0x4, 0x6, 0x9a, 0x1, 0x9, 0x5, 0x0, 0x7fffffff, 0xb641, 0x2, 0x3, 0xffffffc2, 0x8, 0xfffffff5, 0x31a0, 0x18000000, 0x6, 0x80000000, 0xd, 0x1, 0x7, 0x2, 0x9, 0x4, 0xa4, 0x0, 0x1, 0x9, 0x4bc6, 0x1000, 0x8, 0x40, 0x6, 0x1, 0x1, 0x0, 0x3, 0x2, 0x8000, 0xfffffff9, 0x101, 0x602, 0x8000, 0x5, 0x4, 0x4, 0xffff0001, 0x93af, 0x53b8, 0x1, 0x419, 0x9, 0x9, 0x3, 0x4, 0x7000, 0x4, 0xb, 0x6, 0x97, 0x3, 0x0, 0x401, 0x0, 0x7, 0xffff3bc8, 0x2, 0xffff0001, 0x6, 0x643, 0xf, 0x1000, 0x6, 0x7, 0xfffff9ad, 0x6, 0x7ff, 0x60, 0x1, 0x7, 0x0, 0x3, 0x8, 0x2, 0x3, 0x7, 0x2, 0x8, 0x8, 0x1ff, 0x4, 0xfffffff8, 0xd4ba, 0x1, 0x658, 0xa47, 0x32, 0xfffffffe, 0x9, 0x3, 0x4, 0x2, 0x8, 0x4, 0x0, 0x0, 0x9, 0x3, 0x4, 0x3, 0xc191, 0x7, 0x8000, 0x6, 0x1ff, 0x9, 0xfffff800, 0x2c800000, 0x1, 0xe, 0x50, 0x8, 0x100, 0x6b, 0x7, 0xa, 0x80000000, 0x65, 0x79, 0x10, 0x7, 0x13f, 0x2, 0x0, 0x3, 0x4c, 0x9, 0xfffffff9, 0x0, 0x19a8, 0x10001, 0x9]}]]}, {0x115, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x580}, 0x1, 0x0, 0x0, 0x800}, 0x20844) bind$l2tp(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x8, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x8, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) (async) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00\x00', 0x26, 0x1000c001, 0x0, 0x0) close(0x3) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000020701030000000000000000000000041400068008000240000000010800014000000001"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 7.626742ms ago: executing program 0 (id=4619): sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x19c, 0x13, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_OBJ_USERDATA={0x94, 0x8, "74164e51c4b69a37c9c384f131db86cfb2052070556d37dc03c6357f48c2bb1aa62ee61277930dde5e61daeda99779bf1364c8a731c3502dc9f3809902b50f6d46890a52096daf52397761c876a834a35e4c19d0fd6daa330887fb3a45c54556848017e2cd14d96ae05d8c2f3e4d0bb18371899a77914b814c0aa78f359105af0862fcf4a897154c6212fdcff8bd8157"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0xe5, 0x8, "916e92967b2af1f129e73edba38feafb980137c77ca50f36e32364e85d03677db7684f069f34eafe3b28e22c847be927ae8964b5812feb3f8ab1a42f65acab34b34f2f29317a1ba5c38360d42c86a22957c0323d24efc514d03872a4dc3e40d72e1f9c3043cdd5ad7eee8b2d60efc0743046a725c1e4fe8001e836b3e7aa2ac8ad13db6d23de3ece74ee71a7eb26fae737ecd545156fb085b3479135ad5467c6f00fa7aa38e94cd3ea24c196b94c650d69989cf1cfc2c25ffe647da0fef229b45667767982f581f91f02b24389ccaacb969baa8714901ac8507400da50e2b0da35"}]}, 0x19c}, 0x1, 0x0, 0x0, 0x400}, 0x40048c1) r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @netrom}, [@rose, @null, @null, @remote, @netrom, @rose, @netrom, @default]}, &(0x7f0000000300)=0x48, 0x80c00) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000340)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x4, 'syz1\x00', @bcast, 0x5, 0x4, [@null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000003c0)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x3, 0x80000001, 0x0, 0x0, 0x0, 0x1}, {0x7, 0xf, 0x9, 0x8a4a, 0x800, 0x8}], ['\x00']}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)='%pi6 \x00'}, 0x20) ioctl$XFS_IOC_GET_RESBLKS(r2, 0x80105873, &(0x7f0000000580)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r4, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), r3) sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x3c, r6, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f00000009c0)={{r5, &(0x7f0000000840)='%pi6 \x00', 0x10000, &(0x7f0000000880)={@align=0x5, {0x200, 0x8000, 0x7, 0x7}}, 0x400, &(0x7f00000008c0)={@_ha_fsid}, &(0x7f0000000900)}, {[0x1f, 0x7b19, 0x7, 0xdcb2]}, 0x4, 0x6b, &(0x7f0000000940)=""/107}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000b40)={'syztnl1\x00', &(0x7f0000000a80)={'ip_vti0\x00', 0x0, 0x20, 0x8, 0x1ff, 0x7, {{0x1d, 0x4, 0x1, 0x2c, 0x74, 0x64, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010100, @multicast1, {[@ra={0x94, 0x4}, @rr={0x7, 0x2b, 0x7, [@multicast1, @broadcast, @rand_addr=0x64010101, @rand_addr=0x64010100, @private=0xa010102, @local, @multicast1, @empty, @loopback, @multicast1]}, @end, @lsrr={0x83, 0x1b, 0x21, [@multicast1, @remote, @broadcast, @broadcast, @remote, @empty]}, @cipso={0x86, 0x12, 0x0, [{0x2685565748e0f2a6, 0xc, "0b030596e8d94bf7c8ff"}]}]}}}}}) sendmsg$nl_route_sched(r7, &(0x7f0000000c80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)=@delchain={0xa0, 0x65, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x7, 0x13}, {0xc, 0x4}, {0x8, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x40}}, @filter_kind_options=@f_flower={{0xb}, {0x68, 0x2, [@TCA_FLOWER_KEY_TCP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0x8}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xff}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @local}}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0x101}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @remote}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}, @TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x81}, @TCA_FLOWER_KEY_IP_TOS={0x5, 0x49, 0x6}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), r7) sendmsg$TIPC_NL_MEDIA_GET(r7, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d40)={0xcc, r9, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x416adaf7}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6d1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x810}, 0x0) setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={r7, 0xe0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000010c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000001100)=[0x0, 0x0], &(0x7f0000001140)=[0x0], 0x0, 0xe2, &(0x7f0000001180)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000011c0), &(0x7f0000001200), 0x8, 0x6a, 0x8, 0x8, &(0x7f0000001240)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x2, 0x1, &(0x7f0000000fc0)=@raw=[@jmp={0x5, 0x0, 0x1, 0x8, 0x9, 0xfffffffffffffff4, 0x8}], &(0x7f0000001000)='GPL\x00', 0x40198393, 0x0, 0x0, 0x41100, 0x28, '\x00', r8, @fallback=0x2b, r7, 0x8, &(0x7f0000001040)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000001080)={0x2, 0x5, 0x40}, 0x10, r11, 0xffffffffffffffff, 0x2, &(0x7f00000013c0)=[r7], &(0x7f0000001400)=[{0x2, 0x1, 0x5, 0xb}, {0x0, 0x5, 0x6, 0x9}], 0x10, 0x7}, 0x94) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x6caf5f0a90344ea3}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x78, r6, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'xfrm0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x78}}, 0x8000) ioctl$XFS_IOC_SET_RESBLKS(r7, 0xc0105872, &(0x7f0000001640)={0x37d, 0xffffffffffffffff}) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001680)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3d, '\x00', r10, r7, 0x4, 0x5, 0x5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@bloom_filter={0x1e, 0x3, 0x9, 0x4, 0x1, r12, 0xc5ad, '\x00', r8, r7, 0x1, 0x0, 0x1, 0x2}, 0x50) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r13 = accept4$unix(r5, &(0x7f0000001780), &(0x7f0000001800)=0x6e, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r13, 0xc0286687, &(0x7f0000001880)={0x1, 0x1ff, 0x2e, &(0x7f0000001840)=""/46}) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000001a80)={&(0x7f00000018c0), 0xc, &(0x7f0000001a40)={&(0x7f0000001940)={0xf8, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8040}, 0x40010) 0s ago: executing program 1 (id=4620): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) unshare(0x64000600) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r4, 0x20, &(0x7f0000000640)={&(0x7f0000000500)=""/139, 0x8b, 0x0, &(0x7f0000000400)=""/43, 0x2b}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r7 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000240)={r0, r3}) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f00000001c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="f2102363836a11b8337ee8d0b42537ffe2f9f43daffaad5ad97f7148624ca449025a7d08d9b91151e7567d253a902a325499327278647d934dbed7917916f1d91b232545d599114f73eb1e37522ab6d5556ab023661917e1a31f255343798dc025dccf13ee1c0c4cadca61ab5d0afc175a013516fd209601b7eaa84efa0a7d753dea136e55e4a1339be1e0c41d3ed3310e0f7d123ea0b5cc8e5176c121fc4c53011004e283b6be6f68acf08e2da57cdeb82dbb930ae575f95fef291fd8e60dddeaaf44ee5032b5b6b59fc6e12893c52716ff88c9547118b4da5b46f721380c20c4fb6b92163e8b672c3e805adb6b7d70b84a137e9c8e56bfc3a6b35763c4e609ad05a2137c632df0c94efad0acc845b39e0fa3e3d84f47a888be245d2156796f60780295be6a9881f8299930a0b0948a76dbf6e3a845dd930ada06af7df1d64e1c86bfc830d8450fc869e4cc2cbcc14e9704551bb1d51e3cf21bc399130f4ac1f7c438196e0da95b694d5f5efdcaac82a8d2b4e9e94e660e9ba80df83771484f18287185822c3210ecdd063d245ca0f03d4c33b68b49c6c3fd2a2a83db81744f"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) gettid() (async) r10 = gettid() r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000004900010028bd700000dcf4250a000000", @ANYRES32, @ANYBLOB="060000001400010000000000000000000000000000000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x20040044}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x74, 0x30, 0x871a15abc695fa3d, 0x0, 0x80000, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x10001, 0x3, 0x8, 0x1, 0x99ad}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc44}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) socket(0x10, 0x803, 0x0) (async) r13 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r1, @ANYBLOB="049c01000750050008001300", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) (async) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r1, @ANYBLOB="049c01000750050008001300", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) kernel console output (not intermixed with test programs): atman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.567330][T17764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.597489][T17764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.612821][T17863] tipc: Resetting bearer [ 392.688711][T17764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.704234][T17764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.753109][T17764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.778035][T17847] tipc: Resetting bearer [ 392.808639][T17847] tipc: Disabling bearer [ 392.962743][T17764] hsr_slave_0: entered promiscuous mode [ 392.969435][T17764] hsr_slave_1: entered promiscuous mode [ 392.976251][T17764] debugfs: 'hsr0' already exists in 'hsr' [ 392.981999][T17764] Cannot create hsr debugfs directory [ 393.138794][T17868] tipc: Enabling of bearer rejected, failed to enable media [ 393.262454][T17892] openvswitch: netlink: Message has 592 unknown bytes. [ 393.275648][T17892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.717612][T17923] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3158'. [ 393.734639][T17920] netlink: 192 bytes leftover after parsing attributes in process `syz.3.3157'. [ 393.995142][ T5831] Bluetooth: hci0: command tx timeout [ 394.041417][T17924] lo speed is unknown, defaulting to 1000 [ 394.184216][T17932] 8021q: VLANs not supported on vxcan0 [ 394.217239][ T6584] hsr_slave_0: left promiscuous mode [ 394.231597][ T6584] hsr_slave_1: left promiscuous mode [ 394.722879][ T6584] team_slave_1 (unregistering): left allmulticast mode [ 394.731029][ T6584] team0 (unregistering): Port device team_slave_1 removed [ 394.759092][ T6584] C (unregistering): left allmulticast mode [ 394.766060][ T6584] team0 (unregistering): Port device C removed [ 394.880004][ T6584] team0 (unregistering): Port device dummy0 removed [ 394.925814][T17924] virt_wifi0 speed is unknown, defaulting to 1000 [ 394.946590][T17924] lo speed is unknown, defaulting to 1000 [ 395.313649][T17964] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 395.379446][T17764] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 395.483942][T17764] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 395.523455][T17977] netlink: 644 bytes leftover after parsing attributes in process `syz.4.3167'. [ 395.578431][T17764] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 395.688538][T17764] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 395.933455][ T6584] IPVS: stop unused estimator thread 0... [ 396.074576][ T5831] Bluetooth: hci0: command tx timeout [ 396.138204][T17764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.183055][T17764] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.199942][T15474] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.207101][T15474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.262083][ T9337] lec:lec_start_xmit: lec0:No lecd attached [ 396.282632][T18007] 8021q: VLANs not supported on ip6gre0 [ 396.349560][ T542] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.356736][ T542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.556951][T17764] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 396.613963][T18025] lo speed is unknown, defaulting to 1000 [ 396.831522][T18045] x_tables: duplicate underflow at hook 2 [ 396.865862][T18044] C: renamed from team_slave_0 (while UP) [ 396.925948][T18044] netlink: 'syz.0.3181': attribute type 2 has an invalid length. [ 396.943000][T18044] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3181'. [ 396.966657][T18044] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 397.146300][T17764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.233191][T18058] IPVS: set_ctl: invalid protocol: 108 172.30.0.1:20001 [ 397.257662][T17764] veth0_vlan: entered promiscuous mode [ 397.384072][T17764] veth1_vlan: entered promiscuous mode [ 397.414509][T18061] netlink: 'syz.2.3185': attribute type 6 has an invalid length. [ 397.480252][T17764] veth0_macvtap: entered promiscuous mode [ 397.526391][T17764] veth1_macvtap: entered promiscuous mode [ 397.587512][T17764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.642840][T17764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.705681][ T6105] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.744550][ T6105] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.791791][T18025] virt_wifi0 speed is unknown, defaulting to 1000 [ 397.801860][ T6105] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.836990][ T6105] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.868184][T18025] lo speed is unknown, defaulting to 1000 [ 397.947801][T18036] delete_channel: no stack [ 398.154480][ T5831] Bluetooth: hci0: command tx timeout [ 398.212253][ T6583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.260045][ T6583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.370724][T18095] netlink: 'syz.2.3191': attribute type 4 has an invalid length. [ 398.374775][T15474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.396944][T15474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.668251][T18113] vlan2: entered allmulticast mode [ 398.673406][T18113] bridge_slave_0: entered allmulticast mode [ 398.725697][T18113] bridge0: port 1(vlan2) entered blocking state [ 398.753300][T18113] bridge0: port 1(vlan2) entered disabled state [ 398.773501][T18113] vlan2: entered promiscuous mode [ 398.791852][T18113] bridge_slave_0: entered promiscuous mode [ 399.010785][T18129] syzkaller1: entered promiscuous mode [ 399.025400][T18129] syzkaller1: entered allmulticast mode [ 399.527623][T18158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3210'. [ 399.705286][T18165] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3207'. [ 399.708939][T18168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3211'. [ 399.727185][T18168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3211'. [ 399.778221][T17765] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 399.790517][T17765] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 399.801510][T17765] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 399.815860][T17765] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 399.824045][T17765] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 399.902837][T18170] lo speed is unknown, defaulting to 1000 [ 400.016849][ T5825] syz_tun (unregistering): left allmulticast mode [ 400.195228][T18177] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3213'. [ 400.253276][T18170] virt_wifi0 speed is unknown, defaulting to 1000 [ 400.274708][T18184] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 400.275695][T18170] lo speed is unknown, defaulting to 1000 [ 400.332555][T18184] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 400.400429][T18184] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 400.461103][T18184] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 400.555155][T18184] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 400.567192][T18184] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 400.621743][T18184] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 400.655624][T18184] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 400.668521][T18184] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 400.681436][T18184] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 400.809009][T18191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3216'. [ 400.838202][T18197] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3218'. [ 400.838914][T18170] chnl_net:caif_netlink_parms(): no params data found [ 400.945249][T18200] netlink: 'syz.3.3219': attribute type 1 has an invalid length. [ 401.132208][T18170] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.142381][T18170] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.150576][T18170] bridge_slave_0: entered allmulticast mode [ 401.160375][T18170] bridge_slave_0: entered promiscuous mode [ 401.168777][T18170] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.177373][T18170] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.186314][T18170] bridge_slave_1: entered allmulticast mode [ 401.195803][T18170] bridge_slave_1: entered promiscuous mode [ 401.204830][T18226] netlink: 'syz.3.3224': attribute type 1 has an invalid length. [ 401.283028][T18218] Bluetooth: MGMT ver 1.23 [ 401.292693][T18223] tipc: Started in network mode [ 401.298241][T18223] tipc: Node identity 7e9a0f4cbf8c, cluster identity 4711 [ 401.315967][T18223] tipc: Enabled bearer , priority 0 [ 401.333093][T18223] netlink: 'syz.0.3222': attribute type 4 has an invalid length. [ 401.352645][T18232] veth0: entered promiscuous mode [ 401.359079][T18230] syzkaller0: entered promiscuous mode [ 401.366721][T18230] syzkaller0: entered allmulticast mode [ 401.380556][T18170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.393049][T18232] veth0: left promiscuous mode [ 401.402206][T18170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.463728][T18170] team0: Port device team_slave_0 added [ 401.493731][T18170] team0: Port device team_slave_1 added [ 401.552427][T18170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.571638][T18170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.618122][T18170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.641003][T18170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.648174][T18170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.677093][T18170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.758055][T18170] hsr_slave_0: entered promiscuous mode [ 401.765749][T18170] hsr_slave_1: entered promiscuous mode [ 401.772337][T18170] debugfs: 'hsr0' already exists in 'hsr' [ 401.778379][T18170] Cannot create hsr debugfs directory [ 401.834368][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5570 ms [ 401.842449][ C1] lec:lec_tx_timeout: lec0 [ 401.896292][T18252] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3231'. [ 401.914459][T17765] Bluetooth: hci1: command tx timeout [ 401.945226][T18253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3231'. [ 401.961962][T18256] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 402.192019][T18268] netlink: 'syz.3.3237': attribute type 7 has an invalid length. [ 402.240155][T18235] tipc: Resetting bearer [ 402.276634][T18235] tipc: Disabling bearer [ 402.386946][T18276] netlink: 'syz.2.3239': attribute type 1 has an invalid length. [ 402.404416][T18274] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3239'. [ 402.416382][T18270] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.434371][T18276] netlink: 'syz.2.3239': attribute type 3 has an invalid length. [ 402.487799][T18276] netlink: 'syz.2.3239': attribute type 2 has an invalid length. [ 402.737419][T18170] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 402.757427][T18170] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 402.806600][T18170] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 402.858153][T18170] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 403.061606][T18290] netlink: 'syz.0.3242': attribute type 1 has an invalid length. [ 403.084511][T18290] netlink: 'syz.0.3242': attribute type 2 has an invalid length. [ 403.123999][T18170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.173190][T18170] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.195015][ T6583] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.202263][ T6583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.238792][ T6583] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.245996][ T6583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.368720][T18322] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 403.995658][T17765] Bluetooth: hci1: command tx timeout [ 404.339196][T18170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.049745][T18408] netlink: 'syz.1.3269': attribute type 2 has an invalid length. [ 405.088334][T18408] : entered promiscuous mode [ 405.095379][T18170] veth0_vlan: entered promiscuous mode [ 405.161439][T18170] veth1_vlan: entered promiscuous mode [ 405.327993][T18170] veth0_macvtap: entered promiscuous mode [ 405.344552][T18170] veth1_macvtap: entered promiscuous mode [ 405.391759][T18170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.423748][T18170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.452963][ T6583] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.526202][ T6583] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.590934][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.602213][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.794893][T18450] __nla_validate_parse: 4 callbacks suppressed [ 405.794912][T18450] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3282'. [ 405.857147][ T6584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.873549][ T6584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.941676][T18459] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3283'. [ 406.077938][T18457] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 406.093533][ T5831] Bluetooth: hci1: command tx timeout [ 406.135331][ T542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.155359][ T542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.174844][T18468] netlink: 'syz.1.3285': attribute type 1 has an invalid length. [ 406.184225][T18468] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3285'. [ 406.467260][T18485] ipvlan2: entered allmulticast mode [ 406.472579][T18485] veth0_vlan: entered allmulticast mode [ 406.576871][T18493] netlink: 'syz.4.3291': attribute type 1 has an invalid length. [ 406.591103][T18495] netlink: 'syz.3.3294': attribute type 1 has an invalid length. [ 406.604793][T18493] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3291'. [ 406.668734][T18490] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3292'. [ 406.762055][T18498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3293'. [ 406.777215][T18495] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3294'. [ 406.832622][T18491] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 406.935934][T18507] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3292'. [ 406.947168][T18490] syzkaller0: entered promiscuous mode [ 406.958953][T18490] syzkaller0: entered allmulticast mode [ 406.983306][T18502] veth3: entered promiscuous mode [ 406.987270][T18510] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3295'. [ 406.995665][T18502] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 407.004326][T18510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3295'. [ 407.042824][T18495] 8021q: adding VLAN 0 to HW filter on device bond3 [ 407.051165][ T542] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 407.179955][ T6583] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 408.154767][ T5831] Bluetooth: hci1: command tx timeout [ 408.566389][T18522] netlink: zone id is out of range [ 408.572005][T18522] netlink: zone id is out of range [ 408.588208][T18523] FAULT_INJECTION: forcing a failure. [ 408.588208][T18523] name failslab, interval 1, probability 0, space 0, times 0 [ 408.588292][T18522] netlink: zone id is out of range [ 408.636340][T18523] CPU: 0 UID: 0 PID: 18523 Comm: syz.2.3299 Not tainted syzkaller #0 PREEMPT(full) [ 408.636364][T18523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 408.636373][T18523] Call Trace: [ 408.636380][T18523] [ 408.636387][T18523] dump_stack_lvl+0xe8/0x150 [ 408.636416][T18523] should_fail_ex+0x412/0x560 [ 408.636444][T18523] should_failslab+0xa8/0x100 [ 408.636466][T18523] __kvmalloc_node_noprof+0x178/0x8a0 [ 408.636486][T18523] ? page_pool_create_percpu+0x2dd/0xb80 [ 408.636511][T18523] ? page_pool_create_percpu+0xaf/0xb80 [ 408.636540][T18523] page_pool_create_percpu+0x2dd/0xb80 [ 408.636565][T18523] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 408.636588][T18523] bpf_test_run_xdp_live+0x23d/0x1cf0 [ 408.636615][T18523] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 408.636648][T18523] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 408.636683][T18523] ? __pfx_autoremove_wake_function+0x10/0x10 [ 408.636705][T18523] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 408.636745][T18523] ? 0xffffffffa0201a5c [ 408.636761][T18523] ? 0xffffffffa0203178 [ 408.636774][T18523] ? 0xffffffffa0203248 [ 408.636811][T18523] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 408.636842][T18523] ? _copy_from_user+0x94/0xb0 [ 408.636865][T18523] ? bpf_test_init+0x113/0x150 [ 408.636882][T18523] ? xdp_convert_md_to_buff+0x5b/0x330 [ 408.636904][T18523] bpf_prog_test_run_xdp+0x81c/0x1160 [ 408.636938][T18523] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 408.636962][T18523] ? __fget_files+0x2a/0x420 [ 408.636989][T18523] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 408.637010][T18523] bpf_prog_test_run+0x2c7/0x340 [ 408.637031][T18523] __sys_bpf+0x643/0x950 [ 408.637057][T18523] ? __pfx___sys_bpf+0x10/0x10 [ 408.637096][T18523] ? ksys_write+0x242/0x270 [ 408.637116][T18523] ? __pfx_ksys_write+0x10/0x10 [ 408.637140][T18523] __x64_sys_bpf+0x7c/0x90 [ 408.637162][T18523] do_syscall_64+0x14d/0xf80 [ 408.637184][T18523] ? trace_irq_disable+0x3b/0x150 [ 408.637206][T18523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.637224][T18523] ? clear_bhb_loop+0x40/0x90 [ 408.637244][T18523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.637259][T18523] RIP: 0033:0x7fea7a39c629 [ 408.637275][T18523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.637289][T18523] RSP: 002b:00007fea7b2ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 408.637308][T18523] RAX: ffffffffffffffda RBX: 00007fea7a615fa0 RCX: 00007fea7a39c629 [ 408.637320][T18523] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 408.637331][T18523] RBP: 00007fea7b2ec090 R08: 0000000000000000 R09: 0000000000000000 [ 408.637342][T18523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.637352][T18523] R13: 00007fea7a616038 R14: 00007fea7a615fa0 R15: 00007ffd3beb0d48 [ 408.637380][T18523] [ 408.657978][T18522] netlink: zone id is out of range [ 408.666019][T18523] page_pool_create_percpu() gave up with errno -12 [ 408.688577][T18522] netlink: zone id is out of range [ 408.696078][ T6583] bond3: (slave ip6gretap1): link status up again after 0 ms [ 408.719609][ T12] bond3: (slave ip6gretap1): link status up again after 0 ms [ 408.719646][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 409.062489][T18536] netlink: 'syz.0.3304': attribute type 2 has an invalid length. [ 409.100941][T18538] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 409.117312][T18542] dvmrp1: tun_chr_ioctl cmd 1074025673 [ 409.122860][T18543] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 409.378603][T18564] netlink: 'syz.4.3308': attribute type 2 has an invalid length. [ 409.643146][T18577] lo speed is unknown, defaulting to 1000 [ 410.031076][T18602] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 410.038442][T18577] virt_wifi0 speed is unknown, defaulting to 1000 [ 410.051363][T18577] lo speed is unknown, defaulting to 1000 [ 410.212207][T18609] netlink: 'syz.4.3324': attribute type 22 has an invalid length. [ 410.222907][T18609] netlink: 'syz.4.3324': attribute type 22 has an invalid length. [ 410.929067][T18633] __nla_validate_parse: 4 callbacks suppressed [ 410.929084][T18633] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3331'. [ 411.120661][T18652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3336'. [ 411.180403][T18626] netlink: 'syz.1.3329': attribute type 2 has an invalid length. [ 411.247715][T18628] Bluetooth: MGMT ver 1.23 [ 411.269923][T18658] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3338'. [ 411.361285][T18626] wg1 speed is unknown, defaulting to 1000 [ 411.386159][T18626] wg1 speed is unknown, defaulting to 1000 [ 411.423141][T18626] wg1 speed is unknown, defaulting to 1000 [ 411.441373][T18626] infiniband sy+Û: RDMA CMA: cma_listen_on_dev, error -98 [ 411.482534][T18626] wg1 speed is unknown, defaulting to 1000 [ 411.499784][T18626] wg1 speed is unknown, defaulting to 1000 [ 411.541772][T18626] wg1 speed is unknown, defaulting to 1000 [ 411.549039][T18676] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3341'. [ 411.567247][T18626] wg1 speed is unknown, defaulting to 1000 [ 411.585276][T18626] wg1 speed is unknown, defaulting to 1000 [ 411.619267][T18626] wg1 speed is unknown, defaulting to 1000 [ 411.656403][T18626] wg1 speed is unknown, defaulting to 1000 [ 411.676150][T18626] wg1 speed is unknown, defaulting to 1000 [ 411.897990][T18706] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3348'. [ 412.133131][T18719] syzkaller0: entered promiscuous mode [ 412.159457][T18719] syzkaller0: entered allmulticast mode [ 413.214811][T18759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3359'. [ 413.224720][T18759] netlink: 312 bytes leftover after parsing attributes in process `syz.3.3359'. [ 413.234040][T18759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3359'. [ 413.256770][T18759] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3359'. [ 414.006694][T18744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3358'. [ 414.023241][T18744] net_ratelimit: 91 callbacks suppressed [ 414.023248][T18744] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 414.114457][T15474] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 414.197536][T18764] pimreg: entered allmulticast mode [ 414.254962][T15474] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 414.272864][T18767] syzkaller0: entered promiscuous mode [ 414.326003][T18767] syzkaller0: entered allmulticast mode [ 414.464829][T15474] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 414.566926][T18788] smc: net device wlan0 applied user defined pnetid SYZ0 [ 414.584301][ T6584] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 414.622308][T18795] syzkaller0: entered promiscuous mode [ 414.647479][T18795] syzkaller0: entered allmulticast mode [ 414.744245][ T6587] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 414.867110][T15474] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 414.987395][ T6584] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 415.018732][T18812] netlink: 'syz.1.3375': attribute type 1 has an invalid length. [ 415.113649][T18812] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 415.181362][T18812] bond1: (slave geneve2): making interface the new active one [ 415.201280][T18812] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 415.210322][ T6587] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 415.239342][ T6587] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 415.239398][T18820] netlink: 'syz.2.3377': attribute type 21 has an invalid length. [ 415.257019][ T6587] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 415.274317][ T6587] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 415.297766][T18820] netlink: 'syz.2.3377': attribute type 21 has an invalid length. [ 415.310991][ T6587] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 415.410219][T18826] syzkaller0: entered promiscuous mode [ 415.436912][T18826] syzkaller0: entered allmulticast mode [ 415.458735][T18820] lo speed is unknown, defaulting to 1000 [ 415.501808][T18824] team0: Device veth3 is up. Set it down before adding it as a team port [ 415.992889][T18861] ipvlan2: entered promiscuous mode [ 416.117714][T18820] virt_wifi0 speed is unknown, defaulting to 1000 [ 416.156033][T18820] lo speed is unknown, defaulting to 1000 [ 416.186413][T18820] wg1 speed is unknown, defaulting to 1000 [ 416.686028][T18901] tipc: Started in network mode [ 416.693754][T18901] tipc: Node identity fe800000000000000000000000000018, cluster identity 4711 [ 416.737830][T18901] tipc: Enabled bearer , priority 10 [ 417.179531][T18929] __nla_validate_parse: 22 callbacks suppressed [ 417.179551][T18929] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3411'. [ 417.316357][T18935] xt_limit: Overflow, try lower: 268435456/134217728 [ 417.644551][T18949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3416'. [ 417.695100][T18949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3416'. [ 417.783908][T18940] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 417.828062][T18965] vcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 417.854630][T11056] tipc: Node number set to 4269801496 [ 417.956717][T18971] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3424'. [ 417.983918][T18976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3425'. [ 417.994850][T18969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3423'. [ 418.017965][T18969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.018204][T18971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3424'. [ 418.067161][T18969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.174533][T18971] chnl_net:caif_netlink_parms(): no params data found [ 418.211598][T18978] tap0: tun_chr_ioctl cmd 1074025680 [ 418.578667][T19008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3433'. [ 418.586220][T19009] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3434'. [ 418.595987][T19008] netlink: 'syz.0.3433': attribute type 5 has an invalid length. [ 418.614504][T19008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3433'. [ 418.679827][T19008] geneve2: entered promiscuous mode [ 418.699492][T19008] geneve2: entered allmulticast mode [ 418.712540][ T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 53881 - 0 [ 418.733184][ T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 53881 - 0 [ 418.765095][ T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 53881 - 0 [ 418.792842][ T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 53881 - 0 [ 418.884205][T19015] lo speed is unknown, defaulting to 1000 [ 418.919442][T19028] netlink: 'syz.1.3439': attribute type 3 has an invalid length. [ 419.087122][T19032] tipc: Enabled bearer , priority 0 [ 419.107795][T19032] syzkaller0: entered promiscuous mode [ 419.113297][T19032] syzkaller0: entered allmulticast mode [ 419.140971][T19032] tipc: Resetting bearer [ 419.193067][T19031] tipc: Resetting bearer [ 419.249094][T19031] tipc: Disabling bearer [ 419.293179][T19015] virt_wifi0 speed is unknown, defaulting to 1000 [ 419.299931][T15474] net_ratelimit: 27 callbacks suppressed [ 419.299948][T15474] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 419.341530][T19015] lo speed is unknown, defaulting to 1000 [ 419.386150][T19015] wg1 speed is unknown, defaulting to 1000 [ 419.994451][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 420.053391][T19065] xt_check_target: 23 callbacks suppressed [ 420.053414][T19065] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 420.159098][ T6105] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 420.177563][T19062] syzkaller1: entered promiscuous mode [ 420.184261][T19062] syzkaller1: entered allmulticast mode [ 420.314266][ T6105] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 420.424238][T19068] lo speed is unknown, defaulting to 1000 [ 420.444845][T15474] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 420.503638][T19072] bond2: (slave bond_slave_1): Device is not our slave [ 420.514374][T19072] bond2: option active_slave: invalid value (bond_slave_1) [ 420.523532][T19072] bond2 (unregistering): Released all slaves [ 420.574318][ T6583] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 420.685210][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 420.917144][T19080] pim6reg: entered allmulticast mode [ 420.954649][ T6583] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 421.010129][T19085] pim6reg: left allmulticast mode [ 421.029793][T19068] virt_wifi0 speed is unknown, defaulting to 1000 [ 421.044380][T19068] lo speed is unknown, defaulting to 1000 [ 421.064241][T15474] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 421.097299][T19068] wg1 speed is unknown, defaulting to 1000 [ 421.171622][T19089] syzkaller0: entered promiscuous mode [ 421.179141][T19089] syzkaller0: entered allmulticast mode [ 421.188988][T19091] lo speed is unknown, defaulting to 1000 [ 421.467387][T19091] virt_wifi0 speed is unknown, defaulting to 1000 [ 422.920264][T19091] lo speed is unknown, defaulting to 1000 [ 422.927880][T19091] wg1 speed is unknown, defaulting to 1000 [ 423.044663][T19130] __nla_validate_parse: 9 callbacks suppressed [ 423.044681][T19130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3466'. [ 423.061109][T19130] netlink: 'syz.3.3466': attribute type 20 has an invalid length. [ 423.069631][T19130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3466'. [ 423.100424][ T6587] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 423.165167][T19112] lo speed is unknown, defaulting to 1000 [ 423.286927][T19135] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 423.547892][T19112] virt_wifi0 speed is unknown, defaulting to 1000 [ 423.576873][T19112] lo speed is unknown, defaulting to 1000 [ 423.602270][T19112] wg1 speed is unknown, defaulting to 1000 [ 423.785912][T19142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3470'. [ 423.930551][T19146] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3472'. [ 424.018719][T19152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3473'. [ 424.286774][T19159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3475'. [ 424.311802][T19159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3475'. [ 424.372995][T19161] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3476'. [ 424.422949][T19159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3475'. [ 424.433122][ T6587] net_ratelimit: 7 callbacks suppressed [ 424.433139][ T6587] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 424.455027][ T6105] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.463847][T19159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3475'. [ 424.485769][ T6105] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.514815][ T6105] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.557214][ T6105] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.604512][ T6105] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 424.723397][ T6583] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 424.807034][ T6583] wlan1: Trigger new scan to find an IBSS to join [ 424.851047][ T6584] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 424.988181][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 425.104220][ T6105] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 425.234221][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 425.347072][ T6105] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 425.398405][T19212] tipc: Enabling of bearer rejected, failed to enable media [ 425.465727][ T6105] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 425.492797][T19217] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 425.545616][T19221] netlink: 'syz.0.3489': attribute type 1 has an invalid length. [ 425.684070][T19225] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 425.701662][T19225] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 425.730733][T19226] bond1: (slave bridge2): Enslaving as an active interface with a down link [ 425.777067][T19221] 8021q: adding VLAN 0 to HW filter on device bond1 [ 425.820597][T19225] macvlan0: entered promiscuous mode [ 425.841594][T19225] macvlan0: entered allmulticast mode [ 425.871254][T19225] bond1: entered promiscuous mode [ 425.897559][T19225] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 425.919291][T19239] IPVS: set_ctl: invalid protocol: 22 172.20.20.187:20004 [ 425.932857][T19237] IPVS: set_ctl: invalid protocol: 22 172.20.20.187:20004 [ 425.942473][T19225] bond1: left promiscuous mode [ 425.964388][T19242] x_tables: duplicate underflow at hook 2 [ 425.975988][T19242] x_tables: duplicate underflow at hook 1 [ 425.984649][ T6584] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 426.193338][T19259] netlink: 'syz.0.3502': attribute type 3 has an invalid length. [ 426.511477][T19275] syzkaller0: entered promiscuous mode [ 426.525675][T19275] syzkaller0: entered allmulticast mode [ 426.595817][T19286] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.603454][T19286] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.319253][T19335] block nbd0: reconnected socket [ 427.319511][T17765] block nbd0: Receive control failed (result -107) [ 427.332474][T15268] block nbd0: Send control failed (result -32) [ 427.339272][T15268] block nbd0: Request send failed, requeueing [ 427.350574][T15268] block nbd0: Dead connection, failed to find a fallback [ 427.438431][T19340] netlink: 'syz.3.3524': attribute type 13 has an invalid length. [ 427.468213][T19341] netlink: 'syz.3.3524': attribute type 13 has an invalid length. [ 427.468472][T19340] netlink: 'syz.3.3524': attribute type 17 has an invalid length. [ 427.479529][T19341] netlink: 'syz.3.3524': attribute type 17 has an invalid length. [ 427.732520][T19340] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.838094][ T12] wlan1: Trigger new scan to find an IBSS to join [ 428.056053][T19368] __nla_validate_parse: 17 callbacks suppressed [ 428.056070][T19368] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3528'. [ 428.347335][ T6105] dvmrp12 (unregistering): left allmulticast mode [ 428.358953][T19384] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3535'. [ 428.382591][ T6105] bond2 (unregistering): (slave geneve2): Releasing active interface [ 428.410877][T19385] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3535'. [ 428.428277][T19385] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3535'. [ 428.635604][ T6105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.646808][ T6105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.657163][ T6105] bond0 (unregistering): Released all slaves [ 428.669753][ T6105] bond1 (unregistering): (slave veth3): Releasing active interface [ 428.679209][ T6105] bond1 (unregistering): Released all slaves [ 428.692099][ T6105] bond2 (unregistering): Released all slaves [ 428.705663][ T6105] bond3 (unregistering): Released all slaves [ 428.721399][ T6105] bond4 (unregistering): Released all slaves [ 428.749488][ T6583] wlan1: Creating new IBSS network, BSSID 46:8d:bd:14:88:ab [ 428.794314][T17765] Bluetooth: hci0: command 0x0405 tx timeout [ 428.800448][ T5831] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 428.883267][ T6105] : left promiscuous mode [ 428.970782][ T6105] æÿîÿ: left promiscuous mode [ 429.033972][T19391] lo speed is unknown, defaulting to 1000 [ 429.118479][ T6105] tipc: Left network mode [ 429.344025][T19409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3543'. [ 429.613269][T19418] syzkaller0: entered promiscuous mode [ 429.638710][T19418] syzkaller0: entered allmulticast mode [ 429.741069][ T6583] net_ratelimit: 18 callbacks suppressed [ 429.741088][ T6583] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 430.068568][T19432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3548'. [ 430.118535][T19434] netlink: del zone limit has 4 unknown bytes [ 430.167546][T15481] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 430.334390][ T6587] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 430.360889][T19446] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3552'. [ 430.441173][T19391] virt_wifi0 speed is unknown, defaulting to 1000 [ 430.510371][T19391] lo speed is unknown, defaulting to 1000 [ 430.516231][ T6587] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 430.530192][T19391] wg1 speed is unknown, defaulting to 1000 [ 430.708448][ T542] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 430.768225][T19458] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3557'. [ 430.818102][T19458] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3557'. [ 430.870041][ T6587] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 431.024364][T15481] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 431.045354][T19469] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3560'. [ 431.162552][T15481] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 431.414590][ T6105] hsr_slave_0: left promiscuous mode [ 431.457338][ T6105] hsr_slave_1: left promiscuous mode [ 431.467237][ T6105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.492785][ T6105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.086057][T15481] smc: removing ib device syz0 [ 432.125240][T11056] lo speed is unknown, defaulting to 1000 [ 432.136879][T11056] syz2: Port: 1 Link DOWN [ 432.145403][ T6587] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 432.231934][T19481] virt_wifi0 speed is unknown, defaulting to 1000 [ 432.255805][T19481] wg1 speed is unknown, defaulting to 1000 [ 433.177977][T19515] syzkaller0: entered promiscuous mode [ 433.203888][T19515] syzkaller0: entered allmulticast mode [ 433.369583][T19536] bond1: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 433.398997][T19536] bond1 (unregistering): Released all slaves [ 433.937894][T19548] __nla_validate_parse: 3 callbacks suppressed [ 433.937913][T19548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3575'. [ 435.264914][ T6587] net_ratelimit: 4 callbacks suppressed [ 435.264932][ T6587] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 435.384573][T15476] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 435.399649][T19556] geneve2: entered promiscuous mode [ 435.414722][T19552] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3577'. [ 435.423720][T19552] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3577'. [ 435.497206][ T542] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 435.626026][T19569] netlink: 'syz.0.3583': attribute type 1 has an invalid length. [ 435.642140][ T6105] IPVS: stop unused estimator thread 0... [ 435.649420][T19572] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3583'. [ 435.651846][T15476] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 435.685575][T19569] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3583'. [ 435.719097][T19572] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3583'. [ 435.730944][T19574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3584'. [ 435.767341][T19572] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3583'. [ 435.818296][T19572] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3583'. [ 435.821491][T19582] virt_wifi0 speed is unknown, defaulting to 1000 [ 435.829033][T19572] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3583'. [ 435.848901][T19574] geneve2: entered promiscuous mode [ 435.854447][T19574] geneve2: entered allmulticast mode [ 435.894905][T19582] wg1 speed is unknown, defaulting to 1000 [ 435.911260][T19587] ip6gretap2: entered promiscuous mode [ 435.925766][T19587] ip6gretap2: entered allmulticast mode [ 436.034521][ T6105] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 436.159825][T19597] can: request_module (can-proto-0) failed. [ 436.324400][T15476] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 436.378982][T19612] xt_hashlimit: max too large, truncated to 1048576 [ 436.435104][T19615] netlink: 'syz.2.3596': attribute type 12 has an invalid length. [ 436.483698][T19615] netlink: 'syz.2.3596': attribute type 29 has an invalid length. [ 436.634751][T19625] tipc: Enabled bearer , priority 0 [ 436.642179][T19625] syzkaller0: entered promiscuous mode [ 436.649150][T19625] syzkaller0: entered allmulticast mode [ 436.724226][ T6105] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 436.836193][ T6587] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 436.957299][ T6587] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 436.994922][T19648] 8021q: VLANs not supported on sit0 [ 437.032032][T19653] virt_wifi0 speed is unknown, defaulting to 1000 [ 437.053107][T19653] wg1 speed is unknown, defaulting to 1000 [ 437.060067][T19660] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.269253][T19665] bond1: entered promiscuous mode [ 437.287479][T19665] 8021q: adding VLAN 0 to HW filter on device bond1 [ 437.388986][T19616] tipc: Resetting bearer [ 437.410801][T19616] tipc: Disabling bearer [ 437.461162][T19677] 8021q: adding VLAN 0 to HW filter on device bond2 [ 437.522459][T19679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.562911][T19679] bond2: (slave bond0): Enslaving as an active interface with an up link [ 437.919342][T19705] xt_TCPMSS: Only works on TCP SYN packets [ 438.251446][T19720] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 438.264634][T19720] netlink: 'syz.0.3626': attribute type 31 has an invalid length. [ 438.706622][T19722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.735375][T19722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.945196][ T542] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.967202][ T542] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.990428][ T542] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.002865][ T542] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.012412][ T542] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.022496][ T542] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.031563][ T542] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.040822][ T542] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.085735][T19734] syzkaller0: entered promiscuous mode [ 439.091206][T19734] syzkaller0: entered allmulticast mode [ 439.998633][ T1295] lec:lec_start_xmit: lec0:No lecd attached [ 440.277854][T19669] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 440.580585][T19759] __nla_validate_parse: 68 callbacks suppressed [ 440.580602][T19759] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3636'. [ 440.626863][T19762] netlink: 'syz.2.3637': attribute type 2 has an invalid length. [ 440.677706][T19743] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.685394][T19743] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.761629][T19743] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.773289][T19743] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.797900][T19775] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 440.881169][T19743] geneve2: left promiscuous mode [ 440.887161][T19743] geneve2: left allmulticast mode [ 440.909905][ T6583] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.939157][ T6583] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 53881 - 0 [ 440.985152][ T6583] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.998240][ T6583] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 53881 - 0 [ 441.021009][T19778] syzkaller0: entered promiscuous mode [ 441.026579][T19778] syzkaller0: entered allmulticast mode [ 441.037187][ T6583] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.049943][ T6583] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 53881 - 0 [ 441.099405][ T6583] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.109028][ T6583] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 53881 - 0 [ 441.160432][T19788] syzkaller0: entered promiscuous mode [ 441.178211][T19788] syzkaller0: entered allmulticast mode [ 441.309282][T19795] tipc: Enabling of bearer rejected, failed to enable media [ 441.388600][T19803] team0: Device gtp0 is of different type [ 441.629249][T19818] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3651'. [ 441.743020][T19823] syzkaller0: entered promiscuous mode [ 441.748690][T19823] syzkaller0: entered allmulticast mode [ 442.342083][T19847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3658'. [ 443.178181][T19838] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 443.185209][T19838] syzkaller1: linktype set to 778 [ 443.191254][T19839] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 443.487485][T19869] netlink: 'syz.1.3663': attribute type 5 has an invalid length. [ 443.552241][T19879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3666'. [ 443.580006][T19878] syzkaller0: entered promiscuous mode [ 443.618115][T19878] syzkaller0: entered allmulticast mode [ 443.807024][T19892] net_ratelimit: 8 callbacks suppressed [ 443.807042][T19892] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 443.823756][T19892] openvswitch: netlink: Message has 16 unknown bytes. [ 443.924831][T19901] netlink: 'syz.1.3673': attribute type 29 has an invalid length. [ 443.937014][T19897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3676'. [ 443.938111][T19899] syzkaller0: entered promiscuous mode [ 443.964242][T19899] syzkaller0: entered allmulticast mode [ 444.035693][T19904] team_slave_0: entered promiscuous mode [ 444.041715][T19904] team_slave_1: entered promiscuous mode [ 444.047989][T19904] macsec1: entered promiscuous mode [ 444.053279][T19904] team0: entered promiscuous mode [ 444.059611][T19904] macsec1: entered allmulticast mode [ 444.067636][T19904] team0: entered allmulticast mode [ 444.072953][T19904] team_slave_0: entered allmulticast mode [ 444.080369][T19904] team_slave_1: entered allmulticast mode [ 444.109303][T19904] team0: Device macsec1 is already an upper device of the team interface [ 444.130754][T19904] team0: left allmulticast mode [ 444.138963][T19904] team_slave_0: left allmulticast mode [ 444.144852][T19904] team_slave_1: left allmulticast mode [ 444.150420][T19904] team0: left promiscuous mode [ 444.156288][T19904] team_slave_0: left promiscuous mode [ 444.161668][T19904] team_slave_1: left promiscuous mode [ 444.600443][T19934] syzkaller0: entered promiscuous mode [ 444.612712][T19934] syzkaller0: entered allmulticast mode [ 444.624045][T19936] netlink: 'syz.2.3687': attribute type 2 has an invalid length. [ 444.713412][T19941] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3687'. [ 444.828770][T19952] x_tables: duplicate underflow at hook 2 [ 444.843675][T19952] x_tables: duplicate underflow at hook 2 [ 444.856505][T19952] x_tables: duplicate underflow at hook 2 [ 444.877331][T19952] x_tables: duplicate underflow at hook 2 [ 444.893678][T19957] x_tables: duplicate underflow at hook 1 [ 444.899181][T19952] x_tables: duplicate underflow at hook 2 [ 444.906795][T19957] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20001 [ 445.003301][T19963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3697'. [ 445.014694][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 445.022737][ C1] lec:lec_tx_timeout: lec0 [ 445.157427][T19971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3698'. [ 445.240045][T19979] syzkaller0: entered promiscuous mode [ 445.245596][T19979] syzkaller0: entered allmulticast mode [ 445.342845][T19973] netlink: 'syz.0.3699': attribute type 1 has an invalid length. [ 445.351915][T19977] tipc: New replicast peer: 255.255.255.255 [ 445.386663][T19977] tipc: Enabled bearer , priority 10 [ 445.476006][T19973] 8021q: adding VLAN 0 to HW filter on device bond2 [ 445.508707][T19995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3707'. [ 445.520519][T20001] netlink: 'syz.4.3706': attribute type 1 has an invalid length. [ 445.523894][T19995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3707'. [ 445.591712][T19999] bond2: (slave gretap1): making interface the new active one [ 445.609326][T19999] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 445.619563][T20004] __nla_validate_parse: 1 callbacks suppressed [ 445.619579][T20004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3708'. [ 445.734011][T20004] geneve2: entered promiscuous mode [ 445.736608][T20014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3708'. [ 445.740695][T20004] geneve2: entered allmulticast mode [ 445.768171][T20015] x_tables: duplicate underflow at hook 2 [ 445.800541][T20014] ip6gretap2: entered promiscuous mode [ 445.806515][T20014] ip6gretap2: entered allmulticast mode [ 445.851001][T20023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3712'. [ 445.860139][T20024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3712'. [ 445.869891][T20023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3712'. [ 445.880307][T20023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3712'. [ 445.890751][T20023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3712'. [ 445.900059][T20023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3712'. [ 445.909711][T20023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3712'. [ 445.919325][T20023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3712'. [ 446.112789][T20035] syzkaller0: entered promiscuous mode [ 446.118454][T20035] syzkaller0: entered allmulticast mode [ 446.263936][T20037] netlink: 'syz.2.3717': attribute type 3 has an invalid length. [ 446.360248][T20046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 446.390911][T20042] virt_wifi0 speed is unknown, defaulting to 1000 [ 446.399776][T20042] wg1 speed is unknown, defaulting to 1000 [ 446.469239][T20048] netlink: 'syz.2.3719': attribute type 66 has an invalid length. [ 446.508864][T11061] tipc: Node number set to 512360242 [ 446.922729][T20073] syzkaller0: entered promiscuous mode [ 446.930211][T20073] syzkaller0: entered allmulticast mode [ 447.243800][T20088] 8021q: adding VLAN 0 to HW filter on device bond3 [ 447.757940][T20112] pimreg: left allmulticast mode [ 447.787386][T20114] virt_wifi0 speed is unknown, defaulting to 1000 [ 447.808699][T20114] wg1 speed is unknown, defaulting to 1000 [ 448.284930][T20138] nbd: must specify a size in bytes for the device [ 448.658560][T20167] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 448.837733][T20175] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.899732][T20174] syzkaller0: entered promiscuous mode [ 448.912694][T20174] syzkaller0: entered allmulticast mode [ 448.937383][T20175] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.030947][T20175] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.037159][T20175] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.166330][T20207] virt_wifi0 speed is unknown, defaulting to 1000 [ 451.186972][T20207] wg1 speed is unknown, defaulting to 1000 [ 451.203681][T20209] __nla_validate_parse: 67 callbacks suppressed [ 451.203699][T20209] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3758'. [ 451.237048][T20214] netlink: 'syz.2.3761': attribute type 7 has an invalid length. [ 451.252741][T15481] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.264975][T20212] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3759'. [ 451.279181][T20214] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3761'. [ 451.309387][T20209] ipvlan1: entered promiscuous mode [ 451.316659][T20209] ipvlan1: left promiscuous mode [ 451.342648][T15481] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.430028][ T6587] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.467133][ T6587] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.614636][T20228] virt_wifi0 speed is unknown, defaulting to 1000 [ 451.663240][T20228] wg1 speed is unknown, defaulting to 1000 [ 451.681622][T20244] bridge_slave_0: default FDB implementation only supports local addresses [ 452.088257][T20261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3771'. [ 452.167399][T20261] hsr_slave_1 (unregistering): left promiscuous mode [ 452.243344][T20273] veth0: entered promiscuous mode [ 452.355096][T20279] syzkaller0: entered promiscuous mode [ 452.360597][T20279] syzkaller0: entered allmulticast mode [ 452.417033][T20268] veth0: left promiscuous mode [ 452.570122][T20280] tipc: Started in network mode [ 452.579621][T20280] tipc: Node identity 26d07d48553d, cluster identity 4711 [ 452.587397][T20280] tipc: Enabled bearer , priority 0 [ 452.610070][ T12] bond0: (slave bond_slave_0): interface is now down [ 452.611546][T20285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.626722][ T12] bond0: (slave bond_slave_1): interface is now down [ 452.655479][T20278] tipc: Resetting bearer [ 452.665545][T20293] netlink: 'syz.3.3777': attribute type 61 has an invalid length. [ 452.695681][T20293] netlink: 'syz.3.3777': attribute type 62 has an invalid length. [ 452.695995][T20278] tipc: Disabling bearer [ 452.740679][T20290] IPv6: : Disabled Multicast RS [ 452.775823][ T6105] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 452.799316][ T6105] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 452.839877][ T6105] bond0: now running without any active interface! [ 452.875259][T20297] netlink: 'syz.0.3780': attribute type 1 has an invalid length. [ 452.908648][T20295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3777'. [ 453.085913][T20306] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3784'. [ 453.116848][T20304] virt_wifi0 speed is unknown, defaulting to 1000 [ 453.139272][T20314] netlink: 'syz.2.3784': attribute type 30 has an invalid length. [ 453.150761][T20304] wg1 speed is unknown, defaulting to 1000 [ 453.215528][T20306] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3784'. [ 453.672202][T20348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3792'. [ 453.833883][T20360] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3794'. [ 453.867130][T20362] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3796'. [ 453.934427][T20364] syzkaller0: entered promiscuous mode [ 453.982823][T20364] syzkaller0: entered allmulticast mode [ 453.996842][T20368] netlink: 'syz.3.3798': attribute type 5 has an invalid length. [ 454.015775][T20369] 0: reclassify loop, rule prio 0, protocol 800 [ 454.145669][T20374] syzkaller0: entered promiscuous mode [ 454.151237][T20374] syzkaller0: entered allmulticast mode [ 454.809053][T20404] syzkaller0: entered promiscuous mode [ 454.838985][T20404] syzkaller0: entered allmulticast mode [ 455.050286][T20414] bond5: entered promiscuous mode [ 455.062155][T20414] 8021q: adding VLAN 0 to HW filter on device bond5 [ 455.150901][T20414] 8021q: adding VLAN 0 to HW filter on device bond5 [ 455.165031][T20414] bond5: (slave sit1): The slave device specified does not support setting the MAC address [ 455.186026][T20414] bond5: (slave sit1): Error -95 calling set_mac_address [ 455.272823][T20420] geneve3: entered promiscuous mode [ 455.286573][T20420] geneve3: entered allmulticast mode [ 455.332846][T20426] virt_wifi0 speed is unknown, defaulting to 1000 [ 455.341842][T20426] wg1 speed is unknown, defaulting to 1000 [ 455.676747][T20448] pimreg: entered allmulticast mode [ 455.722467][T20448] bond6: option lacp_rate: invalid value (192) [ 455.730344][T20448] bond6 (unregistering): Released all slaves [ 455.769946][T20450] batadv_slave_0: entered promiscuous mode [ 456.288938][T20470] virt_wifi0 speed is unknown, defaulting to 1000 [ 456.319522][T20470] wg1 speed is unknown, defaulting to 1000 [ 456.490737][T20455] batadv_slave_0: left promiscuous mode [ 456.498451][T20489] virt_wifi0 speed is unknown, defaulting to 1000 [ 456.543111][T20489] wg1 speed is unknown, defaulting to 1000 [ 456.631009][T20506] __nla_validate_parse: 11 callbacks suppressed [ 456.631028][T20506] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3829'. [ 457.102794][T20527] syzkaller0: entered promiscuous mode [ 457.116183][T20527] syzkaller0: entered allmulticast mode [ 457.342086][T20546] netlink: 'syz.2.3839': attribute type 3 has an invalid length. [ 457.357794][T20546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3839'. [ 458.663176][T20545] team0: entered promiscuous mode [ 458.679461][T20545] team_slave_0: entered promiscuous mode [ 458.687495][T20545] team_slave_1: entered promiscuous mode [ 458.808427][T20557] macsec1: entered promiscuous mode [ 458.813671][T20557] macsec1: entered allmulticast mode [ 458.836006][ T542] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 458.853905][T20561] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3843'. [ 458.891048][T20565] xt_l2tp: v2 doesn't support IP mode [ 459.205712][T20585] virt_wifi0 speed is unknown, defaulting to 1000 [ 459.217764][T20585] wg1 speed is unknown, defaulting to 1000 [ 459.218934][T20587] syzkaller0: entered promiscuous mode [ 459.229272][T20587] syzkaller0: entered allmulticast mode [ 459.296628][T20590] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3850'. [ 459.591703][T20605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3857'. [ 459.605120][T20605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.672687][T20605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.706889][T20615] netlink: 'syz.1.3862': attribute type 12 has an invalid length. [ 459.714959][T20615] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3862'. [ 459.728915][T20612] veth0_to_hsr: entered promiscuous mode [ 459.740501][T20612] veth0_to_hsr: entered allmulticast mode [ 459.920133][T20624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3864'. [ 459.997177][T20632] sctp: [Deprecated]: syz.2.3866 (pid 20632) Use of int in maxseg socket option. [ 459.997177][T20632] Use struct sctp_assoc_value instead [ 460.083097][T20636] netlink: 'syz.3.3870': attribute type 21 has an invalid length. [ 460.100294][T20636] netlink: 'syz.3.3870': attribute type 21 has an invalid length. [ 460.111967][T20639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3869'. [ 460.123853][T20639] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3869'. [ 460.133142][T20636] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3870'. [ 460.179636][T20639] netlink: 'syz.0.3869': attribute type 5 has an invalid length. [ 460.287496][T20651] virt_wifi0 speed is unknown, defaulting to 1000 [ 460.312104][T20651] wg1 speed is unknown, defaulting to 1000 [ 460.435465][T20660] sit1: entered promiscuous mode [ 460.589862][ T6583] ip6gretap0: left allmulticast mode [ 460.606336][ T6583] ip6gretap0: left promiscuous mode [ 460.637066][ T6583] bridge0: port 1(ip6gretap0) entered disabled state [ 460.647254][ T9337] lec:lec_start_xmit: lec0:No lecd attached [ 460.811158][ T6583] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 460.839356][ T6583] bond8 (unregistering): (slave ip6gretap3): Releasing active interface [ 460.913042][ T6583] bond6 (unregistering): (slave vti0): Releasing backup interface [ 460.931181][ T6583] vti0 (unregistering): left promiscuous mode [ 461.037712][ T6583] bond3 (unregistering): (slave geneve3): Releasing active interface [ 461.248852][ T6583] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.259718][ T6583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.269074][ T6583] bond0 (unregistering): Released all slaves [ 461.279606][ T6583] bond1 (unregistering): Released all slaves [ 461.294635][ T6583] bond2 (unregistering): Released all slaves [ 461.307430][ T6583] bond3 (unregistering): Released all slaves [ 461.321260][ T6583] bond4 (unregistering): Released all slaves [ 461.333830][ T6583] bond5 (unregistering): Released all slaves [ 461.354472][ T6583] bond6 (unregistering): Released all slaves [ 461.368992][ T6583] bond7 (unregistering): Released all slaves [ 461.381569][ T6583] bond8 (unregistering): Released all slaves [ 461.400986][ T6583] bond9 (unregistering): Released all slaves [ 461.414321][ T6583] bond10 (unregistering): (slave batadv1): Releasing backup interface [ 461.423625][ T6583] bond10 (unregistering): Released all slaves [ 461.444072][ T6583] bond11 (unregistering): Released all slaves [ 461.458212][ T6583] bond12 (unregistering): Released all slaves [ 461.470508][ T6583] bond13 (unregistering): Released all slaves [ 461.483706][ T6583] bond14 (unregistering): Released all slaves [ 461.567024][T20666] virt_wifi0 speed is unknown, defaulting to 1000 [ 461.635787][T20666] wg1 speed is unknown, defaulting to 1000 [ 461.748538][ T6583] æÿîÿ: left promiscuous mode [ 461.799085][T20692] netlink: 'syz.4.3883': attribute type 5 has an invalid length. [ 461.928497][T20693] tipc: Enabled bearer , priority 10 [ 461.954351][ T6583] : left promiscuous mode [ 462.087960][T20704] bond3: option mode: unable to set because the bond device is up [ 462.103372][ T6583] æÿîÿE: left promiscuous mode [ 462.147247][T20704] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 462.175455][T20704] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 462.217092][ T6583] tipc: Disabling bearer [ 462.268513][ T6583] tipc: Left network mode [ 462.318724][T20719] __nla_validate_parse: 9 callbacks suppressed [ 462.318743][T20719] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3889'. [ 462.557595][T20729] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3892'. [ 462.584245][T20729] netlink: 'syz.2.3892': attribute type 12 has an invalid length. [ 462.704007][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.732277][T20729] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3892'. [ 462.760985][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.779127][T20729] netlink: 'syz.2.3892': attribute type 12 has an invalid length. [ 462.791257][ T6105] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.828299][ T6105] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.055247][ T6041] tipc: Node number set to 3239448396 [ 463.531224][T20768] tipc: Enabled bearer , priority 0 [ 463.539880][T20768] syzkaller0: entered promiscuous mode [ 463.546727][T20768] syzkaller0: entered allmulticast mode [ 463.578459][T20771] netlink: 'syz.3.3905': attribute type 2 has an invalid length. [ 463.597208][T20771] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3905'. [ 463.605764][T20768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3904'. [ 463.620976][T20768] tipc: Resetting bearer [ 463.642421][T20768] tipc: Resetting bearer [ 463.662155][T20768] tipc: Disabling bearer [ 463.902965][T20784] netlink: 'syz.0.3909': attribute type 2 has an invalid length. [ 463.968411][T20784] 9: entered promiscuous mode [ 463.972213][T20788] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3909'. [ 464.206192][T20802] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3915'. [ 464.288028][T20804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3916'. [ 464.410893][T20814] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3918'. [ 464.534414][T20811] lo speed is unknown, defaulting to 1000 [ 464.540258][T20816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3919'. [ 464.578399][T20811] lo speed is unknown, defaulting to 1000 [ 464.674398][T20811] lo speed is unknown, defaulting to 1000 [ 464.706962][T20811] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 464.860441][T20811] lo speed is unknown, defaulting to 1000 [ 464.869583][T20811] lo speed is unknown, defaulting to 1000 [ 464.903848][T20811] lo speed is unknown, defaulting to 1000 [ 464.938490][T20811] lo speed is unknown, defaulting to 1000 [ 464.947815][T20811] lo speed is unknown, defaulting to 1000 [ 464.959258][T20811] lo speed is unknown, defaulting to 1000 [ 464.959564][T20836] netlink: 'syz.1.3926': attribute type 1 has an invalid length. [ 464.967107][T20811] lo speed is unknown, defaulting to 1000 [ 464.981482][T20832] tap0: tun_chr_ioctl cmd 2147767521 [ 465.019418][T20811] lo speed is unknown, defaulting to 1000 [ 465.170446][ T6583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.247313][ T6583] veth1_macvtap: left promiscuous mode [ 465.834201][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5190 ms [ 465.842312][ C1] lec:lec_tx_timeout: lec0 [ 466.071972][ T6583] ` (unregistering): Port device team_slave_1 removed [ 466.098908][ T6583] ` (unregistering): Port device team_slave_0 removed [ 466.266215][T20883] netlink: 'syz.1.3935': attribute type 22 has an invalid length. [ 466.284442][T20856] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 466.312362][T20860] bond6: entered promiscuous mode [ 466.319392][T20860] 8021q: adding VLAN 0 to HW filter on device bond6 [ 466.457114][T20888] xt_nfacct: accounting object `syz0' does not exist [ 467.328134][T20942] tipc: Enabled bearer , priority 0 [ 467.407496][T20941] tipc: Disabling bearer [ 467.598392][ T6583] IPVS: stop unused estimator thread 0... [ 467.605202][T20962] __nla_validate_parse: 6 callbacks suppressed [ 467.605220][T20962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3949'. [ 467.675924][T20964] vti0: entered allmulticast mode [ 467.922259][T20979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3954'. [ 467.956926][ T30] audit: type=1804 audit(1771622154.640:8): pid=20978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3953" name="/newroot/125/cgroup.controllers" dev="tmpfs" ino=653 res=1 errno=0 [ 467.975564][T20982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3955'. [ 468.025394][ T30] audit: type=1800 audit(1771622154.650:9): pid=20978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3953" name="cgroup.controllers" dev="tmpfs" ino=653 res=0 errno=0 [ 468.196663][T20988] tipc: Started in network mode [ 468.202708][T20988] tipc: Node identity e273d2e8c55b, cluster identity 4711 [ 468.212196][T20988] tipc: Enabled bearer , priority 0 [ 468.223341][T20988] syzkaller0: entered promiscuous mode [ 468.269997][T20988] syzkaller0: entered allmulticast mode [ 468.300204][T20951] xt_hashlimit: size too large, truncated to 1048576 [ 468.354172][T20951] xt_hashlimit: max too large, truncated to 1048576 [ 468.553476][T20989] tipc: Resetting bearer [ 468.581066][T21006] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3961'. [ 468.649958][T20989] tipc: Disabling bearer [ 468.709756][T21006] veth1: entered promiscuous mode [ 468.928550][T21025] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3967'. [ 468.935258][T21027] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3966'. [ 468.983718][T21029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3965'. [ 469.093059][T21027] bond4: entered promiscuous mode [ 469.130653][T21027] 8021q: adding VLAN 0 to HW filter on device bond4 [ 469.207159][T21027] bond4 (unregistering): Released all slaves [ 469.247697][T21018] veth1: entered allmulticast mode [ 469.253901][T21049] netlink: 'syz.4.3969': attribute type 1 has an invalid length. [ 469.266491][T21043] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3969'. [ 469.300165][T21049] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 469.360243][T21044] syzkaller0: entered promiscuous mode [ 469.365897][T21044] syzkaller0: entered allmulticast mode [ 469.573655][T21060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.635864][T21066] netlink: 'syz.3.3974': attribute type 5 has an invalid length. [ 469.721612][T21060] veth3: entered promiscuous mode [ 470.851985][T21096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3978'. [ 470.930896][T21097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3978'. [ 471.375621][T21096] bridge_slave_1: left allmulticast mode [ 471.389631][T21096] bridge_slave_1: left promiscuous mode [ 471.405226][T21096] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.429017][T21096] bridge_slave_0: left allmulticast mode [ 471.455543][T21096] bridge_slave_0: left promiscuous mode [ 471.466203][T21096] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.660047][T15476] bridge_slave_0: left allmulticast mode [ 471.668728][T15476] bridge_slave_0: left promiscuous mode [ 471.688272][T15476] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.762260][T15476] ip6gretap3: left allmulticast mode [ 471.783283][T15476] ip6gretap3: left promiscuous mode [ 471.796912][T15476] bridge5: port 1(ip6gretap3) entered disabled state [ 471.842563][T15476] veth7: left allmulticast mode [ 471.860198][T15476] veth7: left promiscuous mode [ 471.870241][T15476] bridge8: port 1(veth7) entered disabled state [ 472.407465][T15476] team0: Port device bridge1 removed [ 472.517788][T15476] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 472.768813][T15476] bond1 (unregistering): Released all slaves [ 472.781057][T15476] bond2 (unregistering): Released all slaves [ 472.793131][T15476] bond3 (unregistering): Released all slaves [ 472.799293][ T5831] Bluetooth: hci5: command 0x0406 tx timeout [ 472.815640][T15476] bond4 (unregistering): Released all slaves [ 472.829480][T15476] bond5 (unregistering): Released all slaves [ 472.852061][T15476] bond6 (unregistering): (slave veth5): Releasing active interface [ 472.860702][T15476] bond6 (unregistering): Released all slaves [ 472.877852][T21147] tipc: Enabling of bearer rejected, failed to enable media [ 473.013849][T21145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.027612][T21145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.157286][T15476] æÿîÿ: left promiscuous mode [ 473.195109][ T5909] wg1 speed is unknown, defaulting to 1000 [ 473.200951][ T5909] sy+Û: Port: 1 Link DOWN [ 473.203932][ T6583] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.227605][ T6583] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 473.251075][ T6583] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.256640][T21181] netlink: 'syz.1.3991': attribute type 1 has an invalid length. [ 473.275791][ T6583] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 473.301176][T15476] hmac(sha224): left promiscuous mode [ 473.380003][T21189] __nla_validate_parse: 5 callbacks suppressed [ 473.380020][T21189] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3994'. [ 473.424380][T21195] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 473.424849][T21193] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3991'. [ 473.468338][T21186] debugfs: 'netdev:nicvf0' already exists in 'phy53' [ 473.487190][ T6583] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.487410][T21181] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3991'. [ 473.496552][ T6583] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 473.514678][ T6583] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.524345][ T6583] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 473.543888][T21181] 8021q: adding VLAN 0 to HW filter on device bond2 [ 473.556916][T21181] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 473.572803][T21181] macvlan2: entered promiscuous mode [ 473.644799][T21181] macvlan2: entered allmulticast mode [ 473.695727][T21188] bond2: (slave vxcan3): refused to change device type [ 473.714414][T21200] netlink: 'syz.3.3998': attribute type 7 has an invalid length. [ 473.743874][T15476] tipc: Left network mode [ 473.772649][T21193] bond2: (slave bridge0): making interface the new active one [ 473.802241][T21193] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 474.178894][T21219] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 474.184983][T21217] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4003'. [ 474.252875][T21224] netlink: 636 bytes leftover after parsing attributes in process `syz.0.4004'. [ 474.295761][T21226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4006'. [ 474.403771][T21224] IPVS: Scheduler module ip_vs_sip not found [ 474.438653][T21238] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4007'. [ 474.491497][T21236] bond3: option primary_reselect: invalid value (4) [ 474.500542][T21236] bond3 (unregistering): Released all slaves [ 474.843273][T21262] netlink: 'syz.0.4017': attribute type 1 has an invalid length. [ 474.871867][T21264] dvmrp2: entered allmulticast mode [ 474.877405][T21268] netlink: 'syz.1.4018': attribute type 1 has an invalid length. [ 474.895326][T21261] dvmrp2: left allmulticast mode [ 475.017767][T21262] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4017'. [ 475.051931][T21269] 8021q: adding VLAN 0 to HW filter on device bond5 [ 475.067189][T21269] bond4: (slave bond5): making interface the new active one [ 475.099509][T21269] bond4: (slave bond5): Enslaving as an active interface with an up link [ 475.233176][T21262] 8021q: adding VLAN 0 to HW filter on device bond4 [ 475.272468][T21280] vlan1: entered promiscuous mode [ 475.282019][T21280] bond4: entered promiscuous mode [ 475.287567][T21287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4022'. [ 475.314434][T21280] bond5: entered promiscuous mode [ 475.338337][T21288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4022'. [ 475.418780][T21287] 8021q: adding VLAN 0 to HW filter on device bond8 [ 475.466937][T17765] Bluetooth: hci1: link tx timeout [ 475.473265][T17765] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 475.564187][T21300] block nbd1: Unsupported socket: should be TCP or UNIX. [ 475.586349][T21303] netlink: 'syz.3.4028': attribute type 8 has an invalid length. [ 475.633510][T21305] netlink: 'syz.4.4030': attribute type 11 has an invalid length. [ 475.846597][T21317] syzkaller0: entered promiscuous mode [ 475.852097][T21317] syzkaller0: entered allmulticast mode [ 475.881466][T21327] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 475.953368][T15476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.990781][T15476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.140560][T21353] netlink: 'syz.1.4037': attribute type 2 has an invalid length. [ 476.234021][T15476] team0 (unregistering): Port device team_slave_1 removed [ 476.247798][T15476] team0 (unregistering): Port device C removed [ 476.408393][T21351] batadv_slave_0: entered promiscuous mode [ 476.479701][T21351] batadv_slave_0: left promiscuous mode [ 476.705101][T21365] tipc: Enabled bearer , priority 0 [ 476.712431][T21365] syzkaller0: entered promiscuous mode [ 476.718145][T21365] syzkaller0: entered allmulticast mode [ 476.757380][T21364] tipc: Resetting bearer [ 476.857713][T21364] tipc: Disabling bearer [ 476.911393][T21378] debugfs: 'netdev:nicvf0' already exists in 'phy61' [ 477.037815][T21392] xt_hashlimit: max too large, truncated to 1048576 [ 477.051406][T21392] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 477.136639][T21392] netlink: 'syz.4.4054': attribute type 4 has an invalid length. [ 477.189282][T21404] netlink: 'syz.4.4054': attribute type 4 has an invalid length. [ 477.371829][T21414] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 477.477299][T21420] veth0: entered promiscuous mode [ 477.483049][T21407] veth0: left promiscuous mode [ 477.514495][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 477.621416][T21430] SET target dimension over the limit! [ 477.669035][T21436] debugfs: 'netdev:nicvf0' already exists in 'phy53' [ 477.820536][T21443] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 477.911950][T21426] pim6reg: entered allmulticast mode [ 478.050453][T21425] pim6reg: left allmulticast mode [ 478.333153][T21470] netlink: 'syz.0.4072': attribute type 1 has an invalid length. [ 478.359820][T21472] openvswitch: netlink: Missing key (keys=40, expected=80) [ 478.593929][T21482] debugfs: 'netdev:nicvf0' already exists in 'phy59' [ 478.667560][T21482] __nla_validate_parse: 24 callbacks suppressed [ 478.667586][T21482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4076'. [ 479.012797][T21511] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4086'. [ 479.041420][T21511] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4086'. [ 479.061813][T21517] sctp: [Deprecated]: syz.3.4087 (pid 21517) Use of int in max_burst socket option. [ 479.061813][T21517] Use struct sctp_assoc_value instead [ 479.083362][T21506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4084'. [ 479.092415][T21506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4084'. [ 479.150476][T21506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4084'. [ 479.168301][T21506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4084'. [ 479.246288][T21530] siw: device registration error -23 [ 479.345761][T21538] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4091'. [ 479.364243][T21538] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4091'. [ 479.373218][T21538] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 479.376629][T21536] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4090'. [ 479.600450][T21548] hsr_slave_1 (unregistering): left promiscuous mode [ 479.785648][T21569] wg1 speed is unknown, defaulting to 1000 [ 479.793256][T21569] lo speed is unknown, defaulting to 1000 [ 480.185044][T21576] : entered promiscuous mode [ 480.234913][T21596] pim6reg: entered allmulticast mode [ 480.251438][T21596] pim6reg: left allmulticast mode [ 480.697683][T21596] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.705339][T21596] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.978014][T21619] netlink: 'syz.0.4113': attribute type 13 has an invalid length. [ 481.139476][T21596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.471013][T21606] IPv6: sit1: Disabled Multicast RS [ 481.571286][ T6584] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.598325][ T6584] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.636362][ T6584] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.656608][ T6584] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.827654][T21651] IPv6: NLM_F_CREATE should be specified when creating new route [ 481.904985][T21663] sctp: [Deprecated]: syz.0.4123 (pid 21663) Use of int in maxseg socket option. [ 481.904985][T21663] Use struct sctp_assoc_value instead [ 481.940316][T21655] sctp: [Deprecated]: syz.0.4123 (pid 21655) Use of int in maxseg socket option. [ 481.940316][T21655] Use struct sctp_assoc_value instead [ 482.148975][T21679] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 482.236537][T21683] vlan1: entered allmulticast mode [ 482.242260][T21683] veth0_to_bond: entered allmulticast mode [ 482.250852][T21685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 482.987523][T21724] FAULT_INJECTION: forcing a failure. [ 482.987523][T21724] name failslab, interval 1, probability 0, space 0, times 0 [ 483.000200][T21724] CPU: 0 UID: 0 PID: 21724 Comm: syz.1.4142 Not tainted syzkaller #0 PREEMPT(full) [ 483.000221][T21724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 483.000230][T21724] Call Trace: [ 483.000236][T21724] [ 483.000243][T21724] dump_stack_lvl+0xe8/0x150 [ 483.000270][T21724] should_fail_ex+0x412/0x560 [ 483.000295][T21724] should_failslab+0xa8/0x100 [ 483.000317][T21724] kmem_cache_alloc_bulk_noprof+0x8d/0x7e0 [ 483.000337][T21724] ? pfn_valid+0x125/0x4c0 [ 483.000395][T21724] bpf_test_run_xdp_live+0x179c/0x1cf0 [ 483.000432][T21724] ? bpf_test_run_xdp_live+0x438/0x1cf0 [ 483.000460][T21724] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 483.000496][T21724] ? 0xffffffffa02019d0 [ 483.000531][T21724] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 483.000557][T21724] ? _copy_from_user+0x94/0xb0 [ 483.000576][T21724] ? bpf_test_init+0x113/0x150 [ 483.000591][T21724] ? xdp_convert_md_to_buff+0x5b/0x330 [ 483.000611][T21724] bpf_prog_test_run_xdp+0x81c/0x1160 [ 483.000643][T21724] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 483.000667][T21724] ? __fget_files+0x2a/0x420 [ 483.000692][T21724] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 483.000711][T21724] bpf_prog_test_run+0x2c7/0x340 [ 483.000731][T21724] __sys_bpf+0x643/0x950 [ 483.000755][T21724] ? __pfx___sys_bpf+0x10/0x10 [ 483.000791][T21724] ? ksys_write+0x242/0x270 [ 483.000810][T21724] ? __pfx_ksys_write+0x10/0x10 [ 483.000832][T21724] __x64_sys_bpf+0x7c/0x90 [ 483.000853][T21724] do_syscall_64+0x14d/0xf80 [ 483.000876][T21724] ? trace_irq_disable+0x3b/0x150 [ 483.000897][T21724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.000913][T21724] ? clear_bhb_loop+0x40/0x90 [ 483.000932][T21724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.000947][T21724] RIP: 0033:0x7f341f39c629 [ 483.000961][T21724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.000973][T21724] RSP: 002b:00007f3420192028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 483.000991][T21724] RAX: ffffffffffffffda RBX: 00007f341f615fa0 RCX: 00007f341f39c629 [ 483.001002][T21724] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 483.001013][T21724] RBP: 00007f3420192090 R08: 0000000000000000 R09: 0000000000000000 [ 483.001022][T21724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 483.001031][T21724] R13: 00007f341f616038 R14: 00007f341f615fa0 R15: 00007ffc87254698 [ 483.001059][T21724] [ 483.041902][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 483.290085][T21733] netlink: 'syz.4.4144': attribute type 1 has an invalid length. [ 483.397604][T21733] 8021q: adding VLAN 0 to HW filter on device bond3 [ 483.525274][T21745] xt_HMARK: spi-set and port-set can't be combined [ 483.540771][ T5987] IPVS: starting estimator thread 0... [ 483.648582][T21751] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 483.649787][T21748] IPVS: using max 31 ests per chain, 74400 per kthread [ 483.664274][T21752] --map-set only usable from mangle table [ 483.682899][T21752] __nla_validate_parse: 22 callbacks suppressed [ 483.682915][T21752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4149'. [ 483.922632][T21767] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4151'. [ 483.982463][T21769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4154'. [ 484.025076][T21769] netlink: 'syz.0.4154': attribute type 1 has an invalid length. [ 484.063787][T21771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4155'. [ 484.133298][T21771] netlink: 'syz.3.4155': attribute type 8 has an invalid length. [ 484.325983][T21782] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4158'. [ 484.344280][T21782] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4158'. [ 484.982461][T21821] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4171'. [ 485.235243][T21844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4176'. [ 485.360683][T21850] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4178'. [ 485.396915][T21854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4179'. [ 485.567598][T21858] syzkaller0: entered promiscuous mode [ 485.573093][T21858] syzkaller0: entered allmulticast mode [ 486.991362][T21860] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 487.007877][T21874] geneve2: entered promiscuous mode [ 487.087357][T21883] debugfs: 'netdev:nicvf0' already exists in 'phy61' [ 487.167429][T21888] geneve2: entered promiscuous mode [ 487.188780][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.211512][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.249989][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.269221][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.287796][T21895] batman_adv: batadv0: Adding interface: dummy0 [ 487.313195][T21895] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.371329][T21895] batman_adv: batadv0: Interface activated: dummy0 [ 487.569857][T21920] netlink: 'syz.1.4200': attribute type 13 has an invalid length. [ 487.622678][T21924] bond9 (unregistering): Released all slaves [ 487.678049][T21934] vlan0: entered promiscuous mode [ 487.806037][T21930] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 487.846195][T21920] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 487.883008][T21957] netlink: 'syz.3.4208': attribute type 47 has an invalid length. [ 487.981293][T21968] netlink: 'syz.2.4211': attribute type 3 has an invalid length. [ 488.026680][T21966] netlink: 'syz.4.4212': attribute type 10 has an invalid length. [ 488.109691][T21972] netlink: 'syz.3.4213': attribute type 1 has an invalid length. [ 488.164054][T21972] 8021q: adding VLAN 0 to HW filter on device bond4 [ 488.216524][T21984] bridge2: entered promiscuous mode [ 488.240683][T21983] debugfs: 'netdev:nicvf0' already exists in 'phy57' [ 488.309176][T21988] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 488.443023][T22003] bridge5: entered promiscuous mode [ 488.462645][T22003] bridge5: entered allmulticast mode [ 488.473027][T22006] x_tables: duplicate underflow at hook 2 [ 488.483961][T22003] team0: Port device bridge5 added [ 488.522560][T22006] bond5: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 488.533346][T22006] bond5: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 488.547589][T22009] bridge0: port 3(team0) entered blocking state [ 488.556194][T22009] bridge0: port 3(team0) entered disabled state [ 488.562822][T22009] team0: entered allmulticast mode [ 488.574561][T22009] C: entered allmulticast mode [ 488.579489][T22009] team_slave_1: entered allmulticast mode [ 488.596197][T22009] team0: entered promiscuous mode [ 488.617230][T22009] C: entered promiscuous mode [ 488.622083][T22009] team_slave_1: entered promiscuous mode [ 488.773702][T22025] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 488.787178][T22025] bond6 (unregistering): Released all slaves [ 488.988639][T22030] __nla_validate_parse: 12 callbacks suppressed [ 488.988656][T22030] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4226'. [ 489.448196][T22037] bond9: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 489.459888][T22037] bond9 (unregistering): Released all slaves [ 491.394250][T21998] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 491.535513][T22045] debugfs: 'netdev:nicvf0' already exists in 'phy57' [ 491.579591][T22045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4230'. [ 491.779425][T22064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4237'. [ 491.863470][T22069] wg1 speed is unknown, defaulting to 1000 [ 491.925446][T22069] lo speed is unknown, defaulting to 1000 [ 492.002783][T22079] x_tables: duplicate underflow at hook 4 [ 492.147657][T22082] IPVS: Error connecting to the multicast addr [ 492.345313][T22090] bridge5: entered promiscuous mode [ 492.352500][T22093] debugfs: 'netdev:nicvf0' already exists in 'phy59' [ 492.375933][T22093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4246'. [ 492.416940][T22095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4244'. [ 492.707282][T22108] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 492.720040][T22110] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4252'. [ 492.734576][T22110] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4252'. [ 492.737868][T22069] IPVS: length: 132 != 8 [ 492.753248][T22114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4253'. [ 492.783029][T22114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4253'. [ 492.836283][T22069] pimreg: entered allmulticast mode [ 492.865941][T22069] pimreg: left allmulticast mode [ 492.892685][T22119] FAULT_INJECTION: forcing a failure. [ 492.892685][T22119] name failslab, interval 1, probability 0, space 0, times 0 [ 492.905354][T22119] CPU: 1 UID: 0 PID: 22119 Comm: syz.0.4254 Not tainted syzkaller #0 PREEMPT(full) [ 492.905377][T22119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 492.905387][T22119] Call Trace: [ 492.905394][T22119] [ 492.905401][T22119] dump_stack_lvl+0xe8/0x150 [ 492.905430][T22119] should_fail_ex+0x412/0x560 [ 492.905456][T22119] should_failslab+0xa8/0x100 [ 492.905475][T22119] ? skb_clone+0x212/0x3a0 [ 492.905499][T22119] kmem_cache_alloc_noprof+0x87/0x650 [ 492.905527][T22119] ? run_filter+0x23/0x270 [ 492.905552][T22119] skb_clone+0x212/0x3a0 [ 492.905574][T22119] ? packet_rcv+0x567/0x1720 [ 492.905598][T22119] packet_rcv+0x65b/0x1720 [ 492.905630][T22119] __netif_receive_skb_core+0x194c/0x31a0 [ 492.905649][T22119] ? is_bpf_text_address+0x26/0x2b0 [ 492.905672][T22119] ? is_bpf_text_address+0x292/0x2b0 [ 492.905698][T22119] ? unwind_get_return_address+0x4d/0x90 [ 492.905722][T22119] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 492.905745][T22119] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 492.905788][T22119] ? kasan_save_track+0x4f/0x80 [ 492.905804][T22119] ? kasan_save_track+0x3e/0x80 [ 492.905819][T22119] ? __kasan_slab_alloc+0x6c/0x80 [ 492.905835][T22119] ? kmem_cache_alloc_bulk_noprof+0x570/0x7e0 [ 492.905858][T22119] __netif_receive_skb_list_core+0x24d/0x810 [ 492.905890][T22119] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 492.905920][T22119] netif_receive_skb_list_internal+0x995/0xcf0 [ 492.905954][T22119] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 492.905974][T22119] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 492.906003][T22119] ? __xdp_build_skb_from_frame+0x34b/0x730 [ 492.906031][T22119] netif_receive_skb_list+0x55/0x4b0 [ 492.906054][T22119] ? bpf_test_run_xdp_live+0x1921/0x1cf0 [ 492.906077][T22119] bpf_test_run_xdp_live+0x1946/0x1cf0 [ 492.906116][T22119] ? bpf_test_run_xdp_live+0x438/0x1cf0 [ 492.906152][T22119] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 492.906192][T22119] ? 0xffffffffa0201a5c [ 492.906234][T22119] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 492.906265][T22119] ? _copy_from_user+0x94/0xb0 [ 492.906288][T22119] ? bpf_test_init+0x113/0x150 [ 492.906305][T22119] ? xdp_convert_md_to_buff+0x5b/0x330 [ 492.906328][T22119] bpf_prog_test_run_xdp+0x81c/0x1160 [ 492.906364][T22119] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 492.906390][T22119] ? __fget_files+0x2a/0x420 [ 492.906418][T22119] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 492.906440][T22119] bpf_prog_test_run+0x2c7/0x340 [ 492.906461][T22119] __sys_bpf+0x643/0x950 [ 492.906488][T22119] ? __pfx___sys_bpf+0x10/0x10 [ 492.906527][T22119] ? ksys_write+0x242/0x270 [ 492.906546][T22119] ? __pfx_ksys_write+0x10/0x10 [ 492.906571][T22119] __x64_sys_bpf+0x7c/0x90 [ 492.906594][T22119] do_syscall_64+0x14d/0xf80 [ 492.906617][T22119] ? trace_irq_disable+0x3b/0x150 [ 492.906639][T22119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.906657][T22119] ? clear_bhb_loop+0x40/0x90 [ 492.906678][T22119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.906695][T22119] RIP: 0033:0x7f8361f9c629 [ 492.906711][T22119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.906725][T22119] RSP: 002b:00007f8362f16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 492.906744][T22119] RAX: ffffffffffffffda RBX: 00007f8362215fa0 RCX: 00007f8361f9c629 [ 492.906756][T22119] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 492.906767][T22119] RBP: 00007f8362f16090 R08: 0000000000000000 R09: 0000000000000000 [ 492.906778][T22119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 492.906788][T22119] R13: 00007f8362216038 R14: 00007f8362215fa0 R15: 00007ffdaa6bb048 [ 492.906818][T22119] [ 493.369660][T22122] tipc: Enabled bearer , priority 0 [ 493.403793][T22125] netlink: 'syz.4.4256': attribute type 1 has an invalid length. [ 493.472181][T22122] syzkaller0: entered promiscuous mode [ 493.479740][T22122] syzkaller0: entered allmulticast mode [ 493.490932][T22122] tipc: Resetting bearer [ 493.500866][T22121] tipc: Resetting bearer [ 493.568482][T22139] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4258'. [ 494.954532][T22121] tipc: Disabling bearer [ 495.009586][T22147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4262'. [ 495.109750][T22150] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.144974][T22152] Cannot find del_set index 49151 as target [ 495.257395][T22162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4265'. [ 495.291560][T22158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4265'. [ 495.638840][T22180] netlink: 'syz.4.4275': attribute type 1 has an invalid length. [ 496.130305][T22205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.305215][T22213] wg1 speed is unknown, defaulting to 1000 [ 496.312646][T22213] lo speed is unknown, defaulting to 1000 [ 496.356153][T22217] vlan3: entered promiscuous mode [ 496.363582][T22217] erspan0: entered promiscuous mode [ 496.365089][T22209] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 496.376483][T22209] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 496.383712][T22209] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 496.390984][T22209] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 496.398234][T22209] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 496.405492][T22209] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 496.412757][T22209] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 496.420044][T22209] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 496.427306][T22209] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 496.879940][T22244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4294'. [ 496.891231][T22245] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4292'. [ 496.920222][T22244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4294'. [ 497.109725][T22252] syzkaller0: entered promiscuous mode [ 497.133622][T22252] syzkaller0: entered allmulticast mode [ 497.498647][T22285] netlink: 'syz.4.4309': attribute type 4 has an invalid length. [ 497.514262][T22285] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4309'. [ 497.583711][T22290] tipc: Enabled bearer , priority 0 [ 497.585383][T22285] netlink: 'syz.4.4309': attribute type 1 has an invalid length. [ 497.607600][T22292] syzkaller0: entered promiscuous mode [ 497.613624][T22292] syzkaller0: entered allmulticast mode [ 497.716599][T22291] tipc: Resetting bearer [ 497.765245][T22291] tipc: Disabling bearer [ 498.320304][T22336] macvtap0: entered promiscuous mode [ 498.396248][T17765] Bluetooth: hci2: command 0x0406 tx timeout [ 498.443700][T22346] debugfs: 'netdev:nicvf0' already exists in 'phy49' [ 498.478127][T22352] syzkaller1: entered promiscuous mode [ 498.483623][T22352] syzkaller1: entered allmulticast mode [ 498.579325][T22359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4328'. [ 498.707647][T22366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4335'. [ 498.720450][T22366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4335'. [ 499.285098][T22402] FAULT_INJECTION: forcing a failure. [ 499.285098][T22402] name failslab, interval 1, probability 0, space 0, times 0 [ 499.297766][T22402] CPU: 1 UID: 0 PID: 22402 Comm: syz.0.4340 Not tainted syzkaller #0 PREEMPT(full) [ 499.297790][T22402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 499.297799][T22402] Call Trace: [ 499.297806][T22402] [ 499.297813][T22402] dump_stack_lvl+0xe8/0x150 [ 499.297842][T22402] should_fail_ex+0x412/0x560 [ 499.297865][T22402] should_failslab+0xa8/0x100 [ 499.297883][T22402] ? skb_clone+0x212/0x3a0 [ 499.297907][T22402] kmem_cache_alloc_noprof+0x87/0x650 [ 499.297931][T22402] ? run_filter+0x23/0x270 [ 499.297955][T22402] skb_clone+0x212/0x3a0 [ 499.297977][T22402] ? packet_rcv+0x567/0x1720 [ 499.297999][T22402] packet_rcv+0x65b/0x1720 [ 499.298032][T22402] __netif_receive_skb_core+0x194c/0x31a0 [ 499.298050][T22402] ? is_bpf_text_address+0x26/0x2b0 [ 499.298073][T22402] ? is_bpf_text_address+0x292/0x2b0 [ 499.298100][T22402] ? unwind_get_return_address+0x4d/0x90 [ 499.298123][T22402] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 499.298146][T22402] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 499.298191][T22402] ? kasan_save_track+0x4f/0x80 [ 499.298206][T22402] ? kasan_save_track+0x3e/0x80 [ 499.298221][T22402] ? __kasan_slab_alloc+0x6c/0x80 [ 499.298237][T22402] ? kmem_cache_alloc_bulk_noprof+0x570/0x7e0 [ 499.298260][T22402] __netif_receive_skb_list_core+0x24d/0x810 [ 499.298293][T22402] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 499.298325][T22402] netif_receive_skb_list_internal+0x995/0xcf0 [ 499.298350][T22402] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 499.298371][T22402] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 499.298400][T22402] ? __xdp_build_skb_from_frame+0x34b/0x730 [ 499.298430][T22402] netif_receive_skb_list+0x55/0x4b0 [ 499.298447][T22402] ? bpf_test_run_xdp_live+0x1921/0x1cf0 [ 499.298472][T22402] bpf_test_run_xdp_live+0x1946/0x1cf0 [ 499.298511][T22402] ? bpf_test_run_xdp_live+0x438/0x1cf0 [ 499.298547][T22402] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 499.298588][T22402] ? 0xffffffffa02019cc [ 499.298631][T22402] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 499.298662][T22402] ? _copy_from_user+0x94/0xb0 [ 499.298685][T22402] ? bpf_test_init+0x113/0x150 [ 499.298702][T22402] ? xdp_convert_md_to_buff+0x5b/0x330 [ 499.298725][T22402] bpf_prog_test_run_xdp+0x81c/0x1160 [ 499.298761][T22402] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 499.298785][T22402] ? __fget_files+0x2a/0x420 [ 499.298814][T22402] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 499.298835][T22402] bpf_prog_test_run+0x2c7/0x340 [ 499.298857][T22402] __sys_bpf+0x643/0x950 [ 499.298883][T22402] ? __pfx___sys_bpf+0x10/0x10 [ 499.298923][T22402] ? ksys_write+0x242/0x270 [ 499.298944][T22402] ? __pfx_ksys_write+0x10/0x10 [ 499.298968][T22402] __x64_sys_bpf+0x7c/0x90 [ 499.298992][T22402] do_syscall_64+0x14d/0xf80 [ 499.299014][T22402] ? trace_irq_disable+0x3b/0x150 [ 499.299037][T22402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.299054][T22402] ? clear_bhb_loop+0x40/0x90 [ 499.299076][T22402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.299093][T22402] RIP: 0033:0x7f8361f9c629 [ 499.299109][T22402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.299122][T22402] RSP: 002b:00007f8362f16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 499.299141][T22402] RAX: ffffffffffffffda RBX: 00007f8362215fa0 RCX: 00007f8361f9c629 [ 499.299153][T22402] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 499.299164][T22402] RBP: 00007f8362f16090 R08: 0000000000000000 R09: 0000000000000000 [ 499.299175][T22402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 499.299185][T22402] R13: 00007f8362216038 R14: 00007f8362215fa0 R15: 00007ffdaa6bb048 [ 499.299215][T22402] [ 500.032072][T22411] debugfs: 'netdev:nicvf0' already exists in 'phy53' [ 500.056623][T22422] team0: left allmulticast mode [ 500.063209][T22422] C: left allmulticast mode [ 500.072427][T22422] team_slave_1: left allmulticast mode [ 500.079472][T22422] team0: left promiscuous mode [ 500.085503][T22422] C: left promiscuous mode [ 500.090190][T22422] team_slave_1: left promiscuous mode [ 500.096811][T22422] bridge0: port 3(team0) entered disabled state [ 500.151440][T22422] bridge_slave_1: left allmulticast mode [ 500.166536][T22422] bridge_slave_1: left promiscuous mode [ 500.192670][T22422] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.267320][T22422] bridge_slave_0: left allmulticast mode [ 500.291369][T22422] bridge_slave_0: left promiscuous mode [ 500.315721][T22422] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.376039][T22422] tipc: Disabling bearer [ 500.689827][T22455] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.723075][T22455] net_ratelimit: 3258 callbacks suppressed [ 500.723085][T22455] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 500.925150][T22462] __nla_validate_parse: 12 callbacks suppressed [ 500.925169][T22462] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4355'. [ 500.966497][T22462] veth0: Caught tx_queue_len zero misconfig [ 501.112705][T22475] netlink: 'syz.4.4358': attribute type 1 has an invalid length. [ 501.143057][T22481] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4360'. [ 501.284771][T22475] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 501.357706][T22496] wg1 speed is unknown, defaulting to 1000 [ 501.428073][T22496] lo speed is unknown, defaulting to 1000 [ 501.440366][ T1295] lec:lec_start_xmit: lec0:No lecd attached [ 501.707089][T22507] ipvlan3: entered promiscuous mode [ 501.713159][T22507] bridge0: port 3(ipvlan3) entered blocking state [ 501.720520][T22507] bridge0: port 3(ipvlan3) entered disabled state [ 501.731427][T22507] ipvlan3: entered allmulticast mode [ 501.737028][T22507] bridge0: entered allmulticast mode [ 501.761123][T22507] ipvlan3: left allmulticast mode [ 501.766386][T22507] bridge0: left allmulticast mode [ 505.029060][ T5190] udevd[5190]: worker [5823] /devices/virtual/block/nbd0 timeout; kill it [ 505.037896][ T5190] udevd[5190]: seq 18016 '/devices/virtual/block/nbd0' killed [ 506.794141][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5350 ms [ 506.802157][ C1] lec:lec_tx_timeout: lec0 [ 524.747431][ T9337] lec:lec_start_xmit: lec0:No lecd attached [ 529.834167][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5090 ms [ 529.842170][ C1] lec:lec_tx_timeout: lec0 [ 553.489647][T22521] syzkaller0: entered promiscuous mode [ 553.504763][T22521] syzkaller0: entered allmulticast mode [ 553.521311][T22521] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 553.546151][T22521] xfrm0: Caught tx_queue_len zero misconfig [ 553.820954][T22549] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4377'. [ 553.904472][T22550] netlink: 'syz.1.4377': attribute type 4 has an invalid length. [ 553.964435][T22551] netlink: 'syz.1.4377': attribute type 4 has an invalid length. [ 554.129849][T22532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.656286][ T6105] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.675456][ T6105] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.730459][ T6105] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.740569][ T6105] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.755462][T22560] IPv6: NLM_F_CREATE should be specified when creating new route [ 554.798719][ T6105] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.816268][ T6105] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.829757][T22565] netlink: 'syz.4.4382': attribute type 32 has an invalid length. [ 554.838539][T22560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4381'. [ 554.844444][T22565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4382'. [ 554.859006][ T6105] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.868264][ T6105] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.907904][T22568] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4382'. [ 554.940673][T22565] bond4: Setting coupled_control to off (0) [ 555.054568][T22558] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.4379'. [ 555.070459][T22558] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 555.135003][T22583] netlink: 'syz.1.4385': attribute type 3 has an invalid length. [ 555.136868][T22587] netlink: 544 bytes leftover after parsing attributes in process `syz.4.4387'. [ 555.245229][T22589] æÿîÿ: entered promiscuous mode [ 555.281075][T22593] openvswitch: netlink: IP tunnel dst address not specified [ 555.355920][T22593] x_tables: duplicate underflow at hook 1 [ 555.441061][T22600] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4389'. [ 555.465454][T22591] vlan3: entered promiscuous mode [ 555.472723][T22591] hsr0: entered promiscuous mode [ 555.491881][T22596] wg1 speed is unknown, defaulting to 1000 [ 555.502872][T22596] lo speed is unknown, defaulting to 1000 [ 555.551814][T22604] lo speed is unknown, defaulting to 1000 [ 555.565684][T22604] lo speed is unknown, defaulting to 1000 [ 555.595638][T22607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4394'. [ 555.624791][T22604] lo speed is unknown, defaulting to 1000 [ 555.813515][T22614] syzkaller0: entered promiscuous mode [ 555.820104][T22614] syzkaller0: entered allmulticast mode [ 555.891787][T22618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4397'. [ 555.930893][T22623] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4400'. [ 556.086572][T22604] infiniband syz0: set active [ 556.091381][ T9063] lo speed is unknown, defaulting to 1000 [ 556.097780][T22604] infiniband syz0: added lo [ 556.188048][T22604] RDS/IB: syz0: added [ 556.190171][T22638] IPVS: Error connecting to the multicast addr [ 556.192229][T22604] smc: adding ib device syz0 with port count 1 [ 556.210297][T22604] smc: ib device syz0 port 1 has no pnetid [ 556.220563][T11061] lo speed is unknown, defaulting to 1000 [ 556.228582][T22604] lo speed is unknown, defaulting to 1000 [ 556.654839][T22658] wg1 speed is unknown, defaulting to 1000 [ 556.672308][T22658] lo speed is unknown, defaulting to 1000 [ 556.708848][T22663] bridge5: port 1(ip6gretap3) entered blocking state [ 556.722149][T22663] bridge5: port 1(ip6gretap3) entered disabled state [ 556.739789][T22663] ip6gretap3: entered allmulticast mode [ 556.755350][T22663] ip6gretap3: entered promiscuous mode [ 556.775498][T22604] lo speed is unknown, defaulting to 1000 [ 556.845662][T22666] bridge5: port 2(veth5) entered blocking state [ 556.852594][T22666] bridge5: port 2(veth5) entered disabled state [ 556.871006][T22666] veth5: entered allmulticast mode [ 556.883736][T22666] veth5: entered promiscuous mode [ 556.900188][T22666] bridge5: port 2(veth5) entered blocking state [ 556.906803][T22666] bridge5: port 2(veth5) entered forwarding state [ 557.338052][T22683] geneve3: entered promiscuous mode [ 557.356189][T15481] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.371968][T15481] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.391553][T22658] lo speed is unknown, defaulting to 1000 [ 557.400266][T15481] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.424408][T15481] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.564460][T22693] netlink: 'syz.2.4419': attribute type 1 has an invalid length. [ 557.571517][T22690] xt_CT: No such helper "netbios-ns" [ 557.681139][T22697] sctp: [Deprecated]: syz.2.4421 (pid 22697) Use of struct sctp_assoc_value in delayed_ack socket option. [ 557.681139][T22697] Use struct sctp_sack_info instead [ 557.721099][ T542] bridge5: port 2(veth5) entered disabled state [ 557.789805][T22604] lo speed is unknown, defaulting to 1000 [ 557.816430][T22681] C: renamed from team_slave_0 [ 557.847141][T22681] netlink: 'syz.3.4415': attribute type 4 has an invalid length. [ 557.864372][T22681] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 557.979717][T22681] wg1 speed is unknown, defaulting to 1000 [ 558.047016][T22681] lo speed is unknown, defaulting to 1000 [ 558.156702][T22604] lo speed is unknown, defaulting to 1000 [ 558.404296][T22681] lo speed is unknown, defaulting to 1000 [ 558.676073][T22604] lo speed is unknown, defaulting to 1000 [ 559.080726][T22722] wg1 speed is unknown, defaulting to 1000 [ 559.099032][T22722] lo speed is unknown, defaulting to 1000 [ 559.120393][T22722] lo speed is unknown, defaulting to 1000 [ 559.177111][T22744] bond0: Caught tx_queue_len zero misconfig [ 559.216433][T22744] xfrm1: entered promiscuous mode [ 559.221635][T22744] xfrm1: entered allmulticast mode [ 560.278378][T22790] __nla_validate_parse: 4 callbacks suppressed [ 560.278396][T22790] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4440'. [ 560.710711][T22796] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4442'. [ 560.865423][T22804] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4443'. [ 560.923846][T22798] wg1 speed is unknown, defaulting to 1000 [ 560.939606][T22798] lo speed is unknown, defaulting to 1000 [ 560.996380][T22798] lo speed is unknown, defaulting to 1000 [ 561.562366][T22812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4446'. [ 562.062380][ T5831] block nbd1: Receive control failed (result -32) [ 562.803521][T22843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4456'. [ 562.871085][T22851] syzkaller0: entered promiscuous mode [ 562.891648][ T1295] lec:lec_start_xmit: lec0:No lecd attached [ 562.905993][T22851] syzkaller0: entered allmulticast mode [ 563.164606][T22867] syzkaller0: entered promiscuous mode [ 563.170194][T22867] syzkaller0: entered allmulticast mode [ 563.259194][T22869] veth7: entered promiscuous mode [ 563.407129][T22878] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4467'. [ 563.428846][T22878] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4467'. [ 563.567184][T22882] wg1 speed is unknown, defaulting to 1000 [ 563.588304][T22882] lo speed is unknown, defaulting to 1000 [ 563.601136][T22884] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4468'. [ 563.601779][T22882] lo speed is unknown, defaulting to 1000 [ 563.619366][T22884] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4468'. [ 563.640555][T22884] netlink: 'syz.3.4468': attribute type 1 has an invalid length. [ 563.762357][T22884] bond7: entered promiscuous mode [ 563.795408][T22884] 8021q: adding VLAN 0 to HW filter on device bond7 [ 563.968969][T22908] netlink: 'syz.1.4475': attribute type 61 has an invalid length. [ 563.977057][T22908] netlink: 'syz.1.4475': attribute type 62 has an invalid length. [ 564.138918][T22914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4478'. [ 564.164159][T22914] nbd: illegal input index -1113835520 [ 564.309607][T22923] tc_dump_action: action bad kind [ 564.327278][T22928] bridge6: entered promiscuous mode [ 564.332639][T22928] bridge6: entered allmulticast mode [ 564.613994][ T6584] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.627672][ T6584] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.663513][ T6584] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.694502][T22947] tipc: Enabled bearer , priority 0 [ 564.714855][T22931] syzkaller0: entered promiscuous mode [ 564.754207][T22931] syzkaller0: entered allmulticast mode [ 564.771865][ T6584] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.956904][T22930] tipc: Resetting bearer [ 564.996784][T22930] tipc: Disabling bearer [ 565.013446][T22967] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 565.023969][T22967] tipc: Enabled bearer , priority 0 [ 565.031720][T22967] syzkaller0: entered promiscuous mode [ 565.038022][T22967] syzkaller0: entered allmulticast mode [ 565.051460][T22967] tipc: Resetting bearer [ 565.079165][T22965] tipc: Resetting bearer [ 565.098737][T22965] tipc: Disabling bearer [ 565.133352][T22978] 8021q: VLANs not supported on ip_vti0 [ 565.478928][T22991] wg1 speed is unknown, defaulting to 1000 [ 565.487083][T22991] lo speed is unknown, defaulting to 1000 [ 565.502804][T22991] lo speed is unknown, defaulting to 1000 [ 565.711696][T23004] __nla_validate_parse: 185 callbacks suppressed [ 565.711717][T23004] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4501'. [ 565.769487][T23004] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4501'. [ 565.869037][T23006] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 565.905341][T23006] veth0: entered promiscuous mode [ 565.916717][T23005] veth0: left promiscuous mode [ 565.946684][T23009] netlink: 'syz.3.4503': attribute type 1 has an invalid length. [ 565.971609][T23009] netlink: 232 bytes leftover after parsing attributes in process `syz.3.4503'. [ 566.490775][T23052] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 566.498097][T23052] IPv6: NLM_F_CREATE should be set when creating new route [ 566.505392][T23052] IPv6: NLM_F_CREATE should be set when creating new route [ 566.686296][T23065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4515'. [ 566.713324][T23064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4515'. [ 566.745193][T23065] netlink: 'syz.3.4515': attribute type 1 has an invalid length. [ 566.844932][T23065] bond8: entered promiscuous mode [ 566.851281][T23065] 8021q: adding VLAN 0 to HW filter on device bond8 [ 566.982934][T23083] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 567.013544][T23084] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 567.143089][T23091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4522'. [ 567.211025][T23089] wg1 speed is unknown, defaulting to 1000 [ 567.251685][T23089] lo speed is unknown, defaulting to 1000 [ 567.275085][T23089] lo speed is unknown, defaulting to 1000 [ 567.345020][T23099] openvswitch: netlink: Key type 135 is out of range max 32 [ 567.405526][T23101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4526'. [ 567.414675][T23101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4526'. [ 567.423823][T23101] netlink: 'syz.0.4526': attribute type 18 has an invalid length. [ 567.474880][T23105] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.4527'. [ 567.484022][T23105] openvswitch: netlink: EtherType 0 is less than min 600 [ 567.507381][T23106] tipc: Enabled bearer , priority 0 [ 567.543680][T23110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4529'. [ 567.652243][T23106] tipc: Disabling bearer [ 567.904549][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 567.912576][ C1] lec:lec_tx_timeout: lec0 [ 568.146908][T23139] netlink: 'syz.3.4535': attribute type 8 has an invalid length. [ 568.159416][T23139] sch_fq: defrate 0 ignored. [ 568.404131][T23158] vlan2: left promiscuous mode [ 568.409339][T23158] bridge0: port 1(vlan2) entered disabled state [ 568.432012][T23149] xt_nfacct: accounting object `syz0' does not exist [ 568.878418][T23181] veth0_to_hsr: mtu less than device minimum [ 569.062170][T23189] xt_hashlimit: size too large, truncated to 1048576 [ 569.287483][T23191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.316488][T23191] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.364764][T23191] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 569.922007][T23232] syzkaller0: entered promiscuous mode [ 569.935256][T23232] syzkaller0: entered allmulticast mode [ 569.974712][T23233] syz.2.4561 uses old SIOCAX25GETINFO [ 570.728093][T23261] __nla_validate_parse: 10 callbacks suppressed [ 570.728112][T23261] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4567'. [ 572.983391][T23263] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4567'. [ 573.122107][T23269] netlink: 'syz.4.4572': attribute type 1 has an invalid length. [ 573.230561][T23269] bond5: entered promiscuous mode [ 573.267603][T23269] 8021q: adding VLAN 0 to HW filter on device bond5 [ 573.339062][T23280] bond5: (slave bridge2): making interface the new active one [ 573.365105][T23280] bridge2: entered promiscuous mode [ 573.392398][T23280] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 573.448228][T23294] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4574'. [ 574.102330][T23346] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4587'. [ 574.135475][T23346] netlink: 'syz.2.4587': attribute type 7 has an invalid length. [ 574.139597][T23352] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.4588'. [ 574.143598][T23346] netlink: 'syz.2.4587': attribute type 8 has an invalid length. [ 574.190977][T23346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4587'. [ 574.223413][T23346] gretap0: entered promiscuous mode [ 574.247583][T23346] gretap0: left promiscuous mode [ 574.375944][T23369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4591'. [ 574.423504][T23372] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4593'. [ 574.502906][T23378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4595'. [ 574.539925][T23377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4595'. [ 574.627081][T23378] vlan1: entered promiscuous mode [ 574.640979][T23378] bridge0: entered promiscuous mode [ 574.711258][T23377] vlan1: entered promiscuous mode [ 574.723236][T23393] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 574.756326][T23395] lo: Caught tx_queue_len zero misconfig [ 574.812565][T11061] lo speed is unknown, defaulting to 1000 [ 574.819259][T23392] wg1 speed is unknown, defaulting to 1000 [ 574.836454][T23392] lo speed is unknown, defaulting to 1000 [ 574.863625][T23392] lo speed is unknown, defaulting to 1000 [ 575.157199][T23417] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 575.358056][T23431] netlink: 'syz.4.4608': attribute type 1 has an invalid length. [ 575.471686][T23431] bond6: entered promiscuous mode [ 575.516832][T23431] bond6: entered allmulticast mode [ 575.527940][T23437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 575.540553][T23431] 8021q: adding VLAN 0 to HW filter on device bond6 [ 575.568647][T23434] macvlan2: entered promiscuous mode [ 575.587435][T23434] macvlan2: entered allmulticast mode [ 575.640710][T23434] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 575.753834][T23443] __nla_validate_parse: 2 callbacks suppressed [ 575.753853][T23443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4611'. [ 575.832134][T23445] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4613'. [ 576.166874][T23457] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.268841][T23464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4617'. [ 576.315804][ T31] INFO: task kworker/1:2H:15268 blocked for more than 143 seconds. [ 576.326496][ T31] Not tainted syzkaller #0 [ 576.331539][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 576.365649][T23457] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.376118][ T31] task:kworker/1:2H state:D stack:25992 pid:15268 tgid:15268 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 576.388554][ T31] Workqueue: kblockd blk_mq_requeue_work [ 576.395039][ T31] Call Trace: [ 576.398332][ T31] [ 576.401337][ T31] __schedule+0x1585/0x5340 [ 576.406309][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 576.411346][ T31] ? __pfx___schedule+0x10/0x10 [ 576.416390][ T31] ? schedule+0x90/0x360 [ 576.420644][ T31] schedule+0x164/0x360 [ 576.424872][ T31] schedule_timeout+0x158/0x2c0 [ 576.429741][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 576.435248][ T31] ? __pfx_process_timeout+0x10/0x10 [ 576.440556][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 576.446805][ T31] ? prepare_to_wait_event+0x436/0x480 [ 576.452265][ T31] nbd_queue_rq+0x857/0x1100 [ 576.457003][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 576.462037][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 576.468195][ T31] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 576.473764][ T31] ? sbitmap_get+0x229/0x390 [ 576.478503][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 576.484547][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 576.490366][ T31] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 576.496837][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 576.503624][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 576.509953][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 576.515378][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 576.520503][ T31] blk_mq_run_hw_queues+0x26c/0x3f0 [ 576.525798][ T31] blk_mq_requeue_work+0x71c/0x780 [ 576.530919][ T31] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 576.536727][ T31] ? process_scheduled_works+0xa25/0x1830 [ 576.542541][ T31] ? process_scheduled_works+0xa25/0x1830 [ 576.548395][ T31] process_scheduled_works+0xb02/0x1830 [ 576.554002][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 576.560028][ T31] ? assign_work+0x3d5/0x5e0 [ 576.564849][ T31] worker_thread+0xa50/0xfc0 [ 576.569497][ T31] kthread+0x388/0x470 [ 576.573571][ T31] ? __pfx_worker_thread+0x10/0x10 [ 576.578750][ T31] ? __pfx_kthread+0x10/0x10 [ 576.583347][ T31] ret_from_fork+0x51e/0xb90 [ 576.588075][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 576.593197][ T31] ? __switch_to+0xc7d/0x1450 [ 576.598023][ T31] ? __pfx_kthread+0x10/0x10 [ 576.607076][ T31] ret_from_fork_asm+0x1a/0x30 [ 576.611882][ T31] [ 576.615229][ T31] [ 576.615229][ T31] Showing all locks held in the system: [ 576.622954][ T31] 1 lock held by khungtaskd/31: [ 576.629459][ T31] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 576.639492][ T31] 2 locks held by getty/5582: [ 576.646430][ T31] #0: ffff8880321310a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 576.657917][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 576.668170][ T31] 1 lock held by udevd/5823: [ 576.672757][ T31] #0: ffff888025f5a358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 576.682188][ T31] 4 locks held by kworker/1:2H/15268: [ 576.687589][ T31] #0: ffff88801e2bd548 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 576.698794][ T31] #1: ffffc9000fa0fc40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 576.711853][ T31] #2: ffff888025aa8118 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 576.721846][ T31] #3: ffff888026428180 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 576.730876][ T31] 6 locks held by kworker/u8:36/15481: [ 576.736416][ T31] #0: ffff88801b6d6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 576.747394][ T31] #1: ffffc9000549fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 576.758014][ T31] #2: ffffffff8fbbcff0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 576.767408][ T31] #3: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: caif_exit_net+0x6a/0x4a0 [ 576.776525][ T31] #4: ffff888032b4b380 (&caifn->caifdevs.lock){+.+.}-{4:4}, at: caif_exit_net+0x7d/0x4a0 [ 576.786580][ T31] #5: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 576.797600][ T31] 4 locks held by syz.2.4615/23457: [ 576.802819][ T31] #0: ffffffff8fc39470 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 576.811152][ T31] #1: ffff8880350df0e8 (&dev->mutex){....}-{4:4}, at: devlink_get_from_attrs_lock+0x246/0x3b0 [ 576.821638][ T31] #2: ffff8880350de250 (&devlink->lock_key#6){+.+.}-{4:4}, at: devlink_get_from_attrs_lock+0x255/0x3b0 [ 576.832930][ T31] #3: ffffffff8e766440 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 576.842930][ T31] 1 lock held by syz.4.4618/23466: [ 576.848104][ T31] #0: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 576.857272][ T31] 2 locks held by syz.1.4620/23473: [ 576.862471][ T31] #0: ffffffff8fbbcff0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 576.871937][ T31] #1: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 576.887753][ T31] [ 576.890098][ T31] ============================================= [ 576.890098][ T31] [ 576.905081][ T31] NMI backtrace for cpu 0 [ 576.905098][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 576.905118][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 576.905128][ T31] Call Trace: [ 576.905135][ T31] [ 576.905142][ T31] dump_stack_lvl+0xe8/0x150 [ 576.905170][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 576.905191][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 576.905214][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 576.905237][ T31] sys_info+0x135/0x170 [ 576.905254][ T31] watchdog+0xfd9/0x1030 [ 576.905283][ T31] ? watchdog+0x21a/0x1030 [ 576.905317][ T31] kthread+0x388/0x470 [ 576.905333][ T31] ? __pfx_watchdog+0x10/0x10 [ 576.905355][ T31] ? __pfx_kthread+0x10/0x10 [ 576.905373][ T31] ret_from_fork+0x51e/0xb90 [ 576.905396][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 576.905416][ T31] ? __switch_to+0xc7d/0x1450 [ 576.905438][ T31] ? __pfx_kthread+0x10/0x10 [ 576.905456][ T31] ret_from_fork_asm+0x1a/0x30 [ 576.905493][ T31] [ 576.905500][ T31] Sending NMI from CPU 0 to CPUs 1: [ 577.017515][ C1] NMI backtrace for cpu 1 [ 577.017532][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 577.017548][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 577.017557][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 577.017582][ C1] Code: 8e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 4d 1c 00 fb f4 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 577.017595][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 577.017609][ C1] RAX: 0000000000177381 RBX: ffffffff819a80dd RCX: 0000000080000001 [ 577.017619][ C1] RDX: 0000000000000001 RSI: ffffffff8def18d2 RDI: ffffffff8c27a480 [ 577.017629][ C1] RBP: ffffc90000197f10 R08: ffff8880b873395b R09: 1ffff110170e672b [ 577.017640][ C1] R10: dffffc0000000000 R11: ffffed10170e672c R12: ffffffff901172b0 [ 577.017650][ C1] R13: 1ffff11003b5b000 R14: 0000000000000001 R15: 0000000000000001 [ 577.017659][ C1] FS: 0000000000000000(0000) GS:ffff888125566000(0000) knlGS:0000000000000000 [ 577.017677][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 577.017687][ C1] CR2: 000000110c3c3a7a CR3: 00000000759a2000 CR4: 00000000003526f0 [ 577.017700][ C1] Call Trace: [ 577.017707][ C1] [ 577.017713][ C1] default_idle+0x9/0x20 [ 577.017727][ C1] default_idle_call+0x72/0xb0 [ 577.017744][ C1] do_idle+0x1bd/0x500 [ 577.017761][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 577.017780][ C1] ? __pfx_do_idle+0x10/0x10 [ 577.017802][ C1] cpu_startup_entry+0x43/0x60 [ 577.017820][ C1] start_secondary+0x101/0x110 [ 577.017837][ C1] common_startup_64+0x13e/0x147 [ 577.017858][ C1] [ 577.184568][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 577.191432][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 577.200544][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 577.210597][ T31] Call Trace: [ 577.213866][ T31] [ 577.216786][ T31] vpanic+0x56c/0xa60 [ 577.220765][ T31] ? __pfx___schedule+0x10/0x10 [ 577.225607][ T31] ? __pfx_vpanic+0x10/0x10 [ 577.230101][ T31] ? __pfx_console_unlock+0x10/0x10 [ 577.235293][ T31] panic+0xc5/0xd0 [ 577.239002][ T31] ? __pfx_panic+0x10/0x10 [ 577.243406][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 577.248767][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 577.254916][ T31] watchdog+0x1023/0x1030 [ 577.259243][ T31] ? watchdog+0x21a/0x1030 [ 577.263654][ T31] kthread+0x388/0x470 [ 577.267708][ T31] ? __pfx_watchdog+0x10/0x10 [ 577.272374][ T31] ? __pfx_kthread+0x10/0x10 [ 577.276945][ T31] ret_from_fork+0x51e/0xb90 [ 577.281525][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 577.286636][ T31] ? __switch_to+0xc7d/0x1450 [ 577.291304][ T31] ? __pfx_kthread+0x10/0x10 [ 577.295880][ T31] ret_from_fork_asm+0x1a/0x30 [ 577.300649][ T31] [ 577.303998][ T31] Kernel Offset: disabled [ 577.308304][ T31] Rebooting in 86400 seconds..