last executing test programs: 4.045610335s ago: executing program 4 (id=7355): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x3c, &(0x7f0000000140)=[@in={0x2, 0x4e20, @private=0xa010100}, @in6={0xa, 0x4e23, 0x9, @remote, 0x400}, @in={0x2, 0x4e24, @private=0xa010102}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000200)={r2, 0x2a00, 0xc0, 0x49d3, 0x8, 0xea15}, &(0x7f00000002c0)=0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@un=@abs, 0x80, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000380)=""/70, 0x46}, {0x0}, {0x0}, {&(0x7f0000000540)=""/11, 0xb}, {&(0x7f0000000600)=""/6, 0x6}], 0x7, &(0x7f00000006c0)=""/111, 0x6f}, 0x1}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000007c0)=""/184, 0xb8}, {&(0x7f0000000880)=""/67, 0x43}], 0x2, &(0x7f0000000940)=""/20, 0x14}, 0x1}, {{&(0x7f0000000980)=@alg, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000a00)=""/43, 0x2b}], 0x1, &(0x7f0000000a80)=""/86, 0x56}, 0x8}], 0x3, 0x2103, &(0x7f0000000bc0)={0x0, 0x989680}) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000000007010100000000000400001e0000080c000640001fffe000000000080005"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7400ffdbdf250c00000008000b00030000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600020000000000000008000b00c20d00000c00060000000000000000000800"], 0x60}, 0x1, 0x0, 0x0, 0x2001}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000600)=0x1) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x37, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x8054) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a000004090001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={0x0, {0x2, 0x4e24, @local}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x2, 0x4e24, @loopback}, 0x88, 0x0, 0x0, 0x0, 0xf34, &(0x7f0000000640)='veth0\x00', 0xbdbd, 0x1, 0x2}) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0800010027000000270000004600fd5e00020020ac1414aa00"/38, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0007009078001809c4000502ffffff07000000000002d588380003c1000000"], 0xfd6c) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r7, 0x0, 0x48f, &(0x7f0000000040)={0x89, @rand_addr, 0x0, 0x0, 'wrr\x00', 0x0, 0x0, 0x800000}, 0x2c) 3.930597869s ago: executing program 0 (id=7357): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null]}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async) r2 = socket(0x2, 0xa, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x2c, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r5, 0x80, 0x7e, 0x6}, [@NDA_NH_ID={0x8, 0xd, 0xff}, @NDA_FLAGS_EXT={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc804}, 0x4040000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40) (async) write(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003ac0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000003b80)={0x0, 0x28, &(0x7f0000003b40)={&(0x7f0000000080)={0x14, r7, 0x315, 0x70bd26, 0x25dfdbfe}, 0x14}}, 0x20004804) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r3) (async) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000006600b4808de19e79fbd6c6759937037a70f6780805fb1897ee03bf6d8fe3f011687c642e150c3f", @ANYRES16=0x0, @ANYBLOB="010080ffffff000000000100000008000100ffffffff04000480"], 0x20}}, 0x20000000) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000240)={0xe0}, 0x1) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r10, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="00042cbd7000fddbdf255300000008000300", @ANYRES32=0x0, @ANYBLOB="0bd41e965058"], 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x24000080) pipe(&(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000008f080000000000000500001018110000", @ANYRES32=r1, @ANYRESDEC=r1], &(0x7f0000000080)='GPL\x00', 0xa, 0xffe, &(0x7f0000001cc0)=""/4094, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) 3.464658664s ago: executing program 4 (id=7362): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) r2 = socket(0x10, 0x2, 0x0) sendto$inet6(r2, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) (async) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r0, 0x946b000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$XFS_IOC_FSBULKSTAT(r3, 0xc0205865, &(0x7f0000000500)={&(0x7f0000000440)=0x2, 0x5, &(0x7f0000000480), &(0x7f00000004c0)}) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f0000000040)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) (async) syz_emit_ethernet(0x1ba, &(0x7f0000000280)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x6, 0x6, "6a1016", 0x184, 0x11, 0x1, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, {[@srh={0x95, 0x2, 0x4, 0x1, 0x5, 0x78, 0x8000, [@private0={0xfc, 0x0, '\x00', 0x1}]}, @routing={0x11, 0xc, 0x1, 0xc0, 0x0, [@empty, @mcast1, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @local]}, @routing={0x5e, 0xc, 0x2, 0x9b, 0x0, [@local, @local, @remote, @private1, @mcast2, @loopback]}], {0x4e20, 0x4e23, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "4c0297363c151ecdedae1494d6270fb76382c7e47b2da1d131a335dc8a36cc4f", "475f7922f3b9b54644744b3652c783aef1f10260dcbd8efb89ea3657ab3b3ff60845ec28732733bcbe8e698f727f2239", "5fa6189c390a3d91b0964a525addf43b62e224dd8d7a5464f6d9a3b1", {"d0ef3a07a6b50000000000000500", "3235a476847f6fd0ae585a9900a44e7d"}}}}}}}}, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)=""/12, 0x48, 0xc, 0x1, 0xfffffffb}, 0x28) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000003f0007010000000000000000037c000018003780130003007172283414f6bba9197360c9f0"], 0x2c}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x81, 0x8000003, 0x5, 0x116, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, r5, 0x0, 0x0, 0x1}, 0x50) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x0) (async) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [0xff, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'batadv0\x00', 'pimreg1\x00', {}, {0xff}, 0x62, 0x4, 0x4, 0x4}, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x4000000, 0x9, 0x0, 0xfffffffe, 0x7, 0x3ff, 0x18, 0x88}}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3a0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) (async) socket(0x2a, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_ext={0x1c, 0x1, &(0x7f0000000300)=@raw=[@alu={0x4, 0x1, 0xf3767c68fa0481d3, 0x4, 0x7, 0x20, 0x8}], 0x0, 0xfffffc00, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2469, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x878}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) 3.008835627s ago: executing program 2 (id=7368): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000001800010000000000fd0000250200000000000009000c00000600150004000000100016800c000180070002002e210000"], 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000001800010000000000fd0000250200000000000009000c00000600150004000000100016800c000180070002002e210000"], 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async) 2.81779718s ago: executing program 2 (id=7370): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x33fe0}, 0x33fe0}}, 0x0) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x10, &(0x7f0000000600)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x87000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x1f00}, 0x94) (async) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x10, 0x3f8, 0x0, 0x1}, 0x37}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) (async) r2 = socket$l2tp6(0xa, 0x2, 0x73) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x34040805}, 0x0) (async) getsockopt$inet6_buf(r2, 0x29, 0x2c, &(0x7f00000012c0)=""/4096, &(0x7f0000001280)=0x1000) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r4, 0x0) (async) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000300)=@generic={0x2, 0x3, 0x1}) (async) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000003060103000000000000000003000000050001000700000005000100070000000900020073797a3100000000050001bd52c62bc9"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 2.607836423s ago: executing program 2 (id=7372): r0 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) read(r0, &(0x7f0000000000)=""/4096, 0x1000) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000001000)={0x2}) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000011c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001180)={&(0x7f00000010c0)={0xb8, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10000}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0xb8}}, 0x4008010) write$tun(r1, &(0x7f0000001200)={@void, @val={0x1, 0x0, 0xa, 0x7f, 0x6, 0x2}, @mpls={[{0x8}, {0x1}, {0x8, 0x0, 0x1}, {0xff}, {0x43f3, 0x0, 0x1}, {0x6}, {0xffffc}, {0xffffa, 0x0, 0x1}], @ipv6=@gre_packet={0xf, 0x6, "aa942c", 0x554, 0x2f, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, {[@routing={0x21, 0x6, 0x1, 0x9, 0x0, [@empty, @mcast2, @remote]}, @routing={0x2f, 0xa, 0x0, 0x4, 0x0, [@loopback, @remote, @dev={0xfe, 0x80, '\x00', 0x3e}, @dev={0xfe, 0x80, '\x00', 0x1d}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @fragment={0x33, 0x0, 0xb, 0x0, 0x0, 0x14, 0x65}, @hopopts={0x6, 0x15, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @ra={0x5, 0x2, 0x4}, @generic={0x5d, 0xa0, "9d3c1f6a6da415dd16aa84d47ea37b6b1d1ea920e430cd7221aeaadc3a0767d7e9d80d358d70382b15ba868380ac37f4fb8aa762173873061ef399d6d7d138f4b8fe05c5bc116160bae63d5e2d4fd2f75624ae9005fe7955b7f150285ef16cff017affa41d59fbd59de308dd1f2a538fd9fc00dc03a19109ab3a2562f7d0b921ae4188f92aef4005a105e0284d409b44fd4b858729efca1fb791e5586199b448"}]}, @dstopts={0x6, 0x0, '\x00', [@pad1, @padn={0x1, 0x2, [0x0, 0x0]}]}, @hopopts={0x2f, 0xc, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x98, 0x6, "7501554c40ab"}, @calipso={0x7, 0x50, {0x2, 0x12, 0x7, 0x4, [0x7, 0x2, 0x7fff, 0x6, 0x3, 0x96f, 0x9, 0x8000000000000000, 0x5]}}]}, @srh={0x0, 0x8, 0x4, 0x4, 0xc, 0x8, 0xf, [@private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x40}, @ipv4={'\x00', '\xff\xff', @remote}]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xef, 0x0, [], "c9e87754f412246be79d0eac9302898a662977463d4c9021e7069473d51c136a70dbd5ea935ea90f571f26352eea4b254b40727abc0f2f8d36ae1def573f89cb3340ee7716d4952edfd78eecfe3d399ee34923f466104e219fb66d608f8381f88eff273342723a8685e872ed015733a458a2d3464551ced142a489e110836e60a4c694ff9deb5c4a0ff65086cd011c49236854b8952966745467dd1d4d0214aa898ef3eba588e6508a44b5fe22b88c68cba39debddb81c014f373fb2dde28adf0821622b3ecd67604395d3a61f139679ec760091427bd7522b4bf5683020cf278e482ba8d248887947f6cded1bbfa3"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x4, 0x9, 0x6], "12a8e07e2404a6ff22d9c990c8e753bb2d55b3e7ba57d94a26f11a879888bff06c800aa984a39cf0907116de56474b1bb1dc90018398525e661392e600c52b661bf41dfc9b2d93fbd5b57502e500d72eb39a8e423818390114448f6e408e9fb8e76033a1dbf3649c0b3c1f9165d914c26eedde5ad435614e0d6ca8489f8a6352ca6a0aad5ea1aa689adfc6389de654f49c0b542a0c134220e59eed8b00289c10b072db9cb21ae2b08a88f57a518263efb86232f1c27f740db14f22bf9203a484805d7229a7dfdbc5951d5e243061bc125c0304ccb62ae95bc58981a7143c73a4b11c964c840f72a95b"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [], "f48d0916154253f00aaf2e36755b64d772b33a5657c9c0141c0841c9494151a25b7dc7c31f3150"}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x1, 0x2, 0x1, 0x1, 0x3, 0x7}, 0x1, {0x10001}}}, {0x8, 0x22eb, 0x3, {{0x2, 0x2, 0x8, 0x3, 0x0, 0x0, 0x7, 0x9}, 0x2, {0x3, 0x401, 0x0, 0x6, 0x1, 0x1, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x0, "d32ab14116f3fdc37cff3af450f00f96d6496552ba52031ef401368c869503ccd3ce6e74da63807aa93327b242df5e204df01f7ea2f0efeff5fb7c1991f2b33040d612035e4fe4cc97354c3421525961ada1def74bda3044f5dc4156c720367ae9b85098a199323fd2f6d029fde9d3ab96f5b7cadb83cd79aea912b9876170823b96aa729dcf8155731471f9bf950d5881849bf49ff31b54a4e2e268bf938e132d35a2b545dfd24f73af6b36ae5cbdab99116c84c7c1b978a2c73d3e3cd9759cde6f82abb67159e76e3915368f9499adf841aea75abf46483c7734a0b227815bbc9bf8730eef9d039bfbaab4c347c7068f0375"}}}}}}, 0x5a6) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000a, 0x50, r2, 0xa56fb000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x12, 0xc, &(0x7f00000017c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @generic={0xa, 0x8, 0x5, 0x8000, 0x6}, @ldst={0x0, 0x1, 0x6, 0x4, 0x8, 0x50, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0xb8}], &(0x7f0000001840)='syzkaller\x00', 0xae88, 0x8e, &(0x7f0000001880)=""/142, 0x40f00, 0x7d, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000001940)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000001980)={0x1, 0x0, 0x7f, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f00000019c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff], &(0x7f0000001a00)=[{0x2, 0x3, 0x7, 0xb}, {0x3, 0x4, 0x1, 0xc}], 0x10, 0x713}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002cc0)={r5, 0x0, 0x1000, 0x3b, &(0x7f0000001b00)="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", &(0x7f0000002b00)=""/59, 0x0, 0x0, 0xeb, 0x57, &(0x7f0000002b40)="2240d1b0b8d0475c491700539d8e19e55d46b3bad4567bc9c64ff1c08722f22e8e1085cad0f8d483456fdcc54526f8535349832deee7d325ca0068fa67016686c0cf539da7c3c1d4738c64a27ca569239e7f06ad76a7a8ab60cac8f401e77d3697f45baa8a2190f6cbf849feb92e220232b1b99edb32d0ab5266acb6ca7dda6c72f917b6d47f57bc6ea75821f60c930bf770a14e0de6d23371d0bea68782420462674b8bd3c8df7b035ac382d9f65e486f61e6b4692761a61bd2d13d83834eb3097e47d38122f7e31369a627d498de99c72ded43ae4fa0836d7d27460dc5706a2611cce51af5d0fd35a85c", &(0x7f0000002c40)="08174a18e4e174dd85f65689953467f4d836cf4c62bd0ee922672ac5138ac48deab1742676cc37113534e98c56c11c5bcaa7a085fceb01b6ddf20aad231969606f924a013384afd59bc7728cd4758d091eaf3bc2f2e476", 0x2, 0x0, 0x8}, 0x50) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000002d40)=""/4096, &(0x7f0000003d40)=0x1000) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000003d80)="72b360545a2335be7f", 0x9) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000003e80)={&(0x7f0000003dc0), 0xc, &(0x7f0000003e40)={&(0x7f0000003e00)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc5e6dd589dac0a18}, 0x24000080) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, &(0x7f0000003ec0)=""/105, 0x69, 0x40010020, &(0x7f0000003f40)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000003f80)={0x4, {{0x2, 0x4e23, @rand_addr=0x64010101}}, 0x0, 0x2, [{{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e21, @empty}}]}, 0x190) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000004240)={&(0x7f0000004140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000004200)={&(0x7f0000004180)={0x60, 0x3, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x1) r7 = accept$packet(0xffffffffffffffff, &(0x7f0000004280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000042c0)=0x14) getpeername$packet(r7, &(0x7f0000004300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004340)=0x14) r10 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000004380)='devices.allow\x00', 0x2, 0x0) read(r10, &(0x7f00000043c0)=""/4096, 0x1000) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000005400), r2) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000005740)={&(0x7f00000053c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000005700)={&(0x7f0000005440)={0x298, r11, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x228, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x39, 0x5, "d673cc6f1ba318071ecf95d3cab57c6fbe2b24f06cd1e0af19b4ac5fad98b77de2724060860d178eebf1d386f8eae64c5cb37dc7f0"}, @ETHTOOL_A_BITSET_MASK={0x96, 0x5, "1e02cda043d109ca6658e20f7263baa1afe29f7971318645c5d8ef3cd3d800f26dfd7b951d4cbfc8b80d2528b76ee75a9ce899dcd153a784db97d11943263df36a9024acc18e95705e78653eee64a77a762dc2a2b40365f23e2b3adb1aced844441b2d7a26b52911de48ff43f7b1a7a969dd4c956ff9ca7a22a2e513de21e8bc49a1417bf0c92acfc6ede37b97f4020559de"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x13c, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#!c\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '!\'$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbd3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '}\x0f*%)@,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6f}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{!#\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xd7}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x800}, 0x40c0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000005780)={'team_slave_0\x00', 0x4000}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000005880)={&(0x7f00000057c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000005840)={&(0x7f0000005800)=@ipv6_getmulticast={0x14, 0x3a, 0x300, 0x70bd26, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0xc000) 2.598850675s ago: executing program 3 (id=7373): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8008) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001400210100000000000000000200b000", @ANYRES32=r6, @ANYBLOB="9b97118a11312412c75f960f7d47fe4b59c635dfe4df248182dc1c84e6e6a14dd5105f0dcbe39989a5632e6eb55acec1b512f068428c113133861a9b645d642ff5e87d92fe441433b20fb33d4845e3bbbf66ba06d6fa4c42371d1377c8de62"], 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1800000015000100000000000000100002000000", @ANYRES32=r6], 0x18}}, 0x0) 2.506747537s ago: executing program 0 (id=7374): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000400000002000000000000110400000000000000000000000000000200000000020000000000000602000000020000000000000e0300000000000000000061"], 0x0, 0x54}, 0x28) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r2) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000780)={0x14, r3, 0xf81, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4000010) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x20}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000071401"], 0x18}}, 0x0) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f00000008c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000001600)={0x4d8, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x27, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x4, 0xab, 0x2}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @mic={0x8c, 0x18, {0x2ae, "5a04fe9f1d08", @long="59ea66c153c1ea6c92ac2153611fd5c0"}}]}, @NL80211_ATTR_IE={0x1be, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x2}, @gcr_ga={0xbd, 0x6}, @chsw_timing={0x68, 0x4, {0x1, 0x6}}, @gcr_ga={0xbd, 0x6}, @perr={0x84, 0xf4, {0x9, 0xe, [{{}, @device_a, 0x9, @void, 0x37}, {{}, @device_b, 0x0, @void, 0x2a}, {{0x0, 0x1}, @broadcast, 0x2e, @value, 0x25}, {{0x0, 0x1}, @device_a, 0x1, @value, 0x24}, {{0x0, 0x1}, @device_a, 0xd27a, @value=@broadcast, 0x2}, {{0x0, 0x1}, @device_b, 0x7, @value, 0x1b}, {{0x0, 0x1}, @device_b, 0xa4, @value, 0x25}, {{0x0, 0x1}, @device_b, 0x4, @value=@device_b, 0x21}, {{}, @device_a, 0x6, @void, 0x7}, {{0x0, 0x1}, @broadcast, 0xd, @value=@device_b, 0x4}, {{0x0, 0x1}, @broadcast, 0x40, @value=@broadcast, 0x29}, {{}, @device_a, 0x6, @void, 0x37}, {{0x0, 0x1}, @broadcast, 0x80, @value, 0x42}, {{0x0, 0x1}, @device_a, 0x0, @value=@broadcast, 0x26}]}}, @measure_req={0x26, 0x17, {0x1, 0x1, 0x6, "13531fe1e6b5c5e40f6f003f70a9dea4bd912b2f"}}, @cf={0x4, 0x6, {0x3, 0x6, 0x7, 0xbf00}}, @measure_req={0x26, 0x88, {0x80, 0x3, 0x7a, "9991320ef117919b2e2dd29750b907a4fc27f7d867d77c9cf2a20448b8163f39f53a74f7b3eb099ac18b1fdd691226b8b827de85c8c0ac1a989b2719c5f39b924f53c7dfc009d54897da8d16e12492ac103550140b0f667e4376d64a3b4150b291fbeaa99293dbbaedcc61e8128eb90988b2f0894ce996e0020efd4cd26e6125a28b8530bc"}}]}, @fils_params, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x19, 0xfa, "a0e532e60a06c35e29d19d8c80c9e566151c9f58e8"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x4}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x200}, @NL80211_ATTR_FILS_ERP_REALM={0xdd, 0xfa, "244610260b3f2934405fad90d9e95fdf54242fcb22bb2c129dae007afc8a8ae9e73167e628fe80b7a02a25be9c715e39a91ac3548c6f3c03decb70e10dfb95c3f10723017448791ca4eab08fdbd0568691fab1676c05e3eee3ae3e851a3948c0bdd5feb5b4604ee003bd9d607d83a62bd2b21eeb1e8fc6e0944d2630f3eb60ca607c974c600a19f3cac6d2a6516ddda1c41a05cb80711b88d944c233f20707a38912316022ff3ffcc181942dbdab3e534ddedc281f4f8226061da00004778659130dcd9b830be716d80cd94fcfb0f15caaf709ecb18b5626d0"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}], @NL80211_ATTR_IE={0x7, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}]}, @NL80211_ATTR_IE={0x8e, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x1, 0x30, @device_a, 0x4, 0x5, 0x80000001}}, @tim={0x5, 0x6e, {0x4, 0xb6, 0xa4, "96cb02de15aff1f0725b20d3f68861b9bd7bcaab0047f82c1f75f426e23474080d7cb8465265c8de458d37ab04dd1ed894d6766aa612aae4cc8db23a73e8f8d20a8f3ae1627674aa2830205677cdb489bb60b3d8bd0a40b26d5ba2d736828b2a0a2e87d915cf4470bf0f13"}}]}, @fils_params, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x4b, 0xfa, "51e16586acf4e57f6234b8b43acabb7202db3b42f588e7619c60ce2e02796c88718ee50b2ddf761b7f14dc29959d8e4f2936c4ac45524c1270121c9a6d33010413ef7d50584826"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "07bfc90ed662c6651c64b3"}, @NL80211_ATTR_FILS_ERP_REALM={0x69, 0xfa, "05b2eef7dad93e19f5675e636c95a9e8672af55ddf5f736e9ddbda5148918abbdf708c6ad2c9d985d1f69f7b051ef60380172480340632f90e940ead1d36c1bf97ef583fa5b55739a856a66b1eda287aaf529430ff1bd729e1193ce972b6886721c27faf32"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "309692f04a39cf491ac1"}], @NL80211_ATTR_IE={0x42, 0x2a, [@ht={0x2d, 0x1a, {0x8, 0x1, 0x1, 0x0, {0x2, 0x4, 0x0, 0x7, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x800, 0x7}}, @supported_rates={0x1, 0x4, [{0x48, 0x1}, {0x5, 0x1}, {0x24, 0x1}, {0xb, 0x1}]}, @link_id={0x65, 0x12, {@random="cbbc59f49b65", @device_b}}, @mesh_id={0x72, 0x6}]}]}, 0x4d8}, 0x1, 0x0, 0x0, 0x60004011}, 0x880) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r1}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x7800, 0x40, 0x9, 0x6, {{0xa, 0x4, 0x0, 0xa, 0x28, 0x65, 0x0, 0x8, 0x2f, 0x0, @rand_addr=0x64010100, @loopback, {[@lsrr={0x83, 0x7, 0xce, [@dev={0xac, 0x14, 0x14, 0x11}]}, @generic={0x6ba77cfb30895758, 0x8, "481c40c0346c"}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@o_path={&(0x7f0000000640)='./file0\x00', 0x0, 0x0, r4}, 0x18) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000200000000000800000000000000", @ANYRES32=r4, @ANYBLOB="0f00"/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="000000000400"/28], 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b40)={r4, 0x20, &(0x7f0000000b00)={&(0x7f0000000a80)=""/51, 0x33, 0x0, &(0x7f0000000ac0)=""/50, 0x32}}, 0x10) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_lsm={0x1d, 0x10, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2d}}, @jmp={0x5, 0x1, 0x0, 0x1, 0x3, 0x100, 0x1}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0xa, 0x1, 0x0, r8}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x95, &(0x7f0000000980)=""/149, 0x41000, 0x0, '\x00', 0x0, 0x1b, r4, 0x8, &(0x7f0000000440)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000a40)={0x3, 0xf, 0x7, 0x7}, 0x10, r9, 0x0, 0x2, 0x0, &(0x7f0000000b80)=[{0x1, 0x2, 0xa, 0xc}, {0x5, 0x1, 0xd, 0x6}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)={0x3, 'wg1\x00', {0x10001}, 0xfffa}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x11) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x1f, 0x4, 0x3f, 0x2003208, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x19}, @private=0xa010104}, 0x10) 2.336983553s ago: executing program 4 (id=7376): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x3, 0x1, 0x7fff000, 0xfffffffa, 0xd67}, &(0x7f0000000140)=0x14) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000001400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200f9ffffff0006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 2.303822731s ago: executing program 1 (id=7377): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000300)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_FAMILY={0x8}, @NFTA_NAT_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x6, 0x200, 0x4, 0x6, 0x8, 0x6, 0x2, r2}, &(0x7f00000000c0)=0x20) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000001300"/28], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', r4}, 0x18) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x8}, {0x4}}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x38, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xc, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x0, 0x1, {0xf, 0xfff1}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4884}, 0x24000840) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x24000000) 2.22059683s ago: executing program 3 (id=7378): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0, 0x33, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xa4, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xb20, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xb, 0x4}, {0x618f2a16fc306fb8, 0x4}, {0x1, 0xfff3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7c5f}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x6, 0x9, 0x4000000, 0x0, 0x800, 0xfffffff7, 0x2}}, {0x8, 0x2, [0x6f8, 0x3]}}]}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x5}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004880}, 0x40) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000004200010a000000f01f38e1d39338"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r5, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050009000000140004"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a0, r4, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_RULES={0x118, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xd23}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80000000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x101}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffff7fff}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x100}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xf}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xb6b}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x800}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xef}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x26}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x19ccbdeb}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x76}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffffff8b}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x15c, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1f}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffff65a}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x100}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xe64}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x200}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3ff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x100}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xb5}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x61}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfe}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8fd}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x200}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xac6d}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x27}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x10}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x61338ea0}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}]}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x28004081}, 0x4040800) 2.032124126s ago: executing program 3 (id=7379): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x4, 0x0, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$XFS_IOC_SET_RESBLKS(0xffffffffffffffff, 0xc0105872, &(0x7f0000000240)={0x202, 0x80}) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x80000, {0x0, 0x0, 0x0, r4, {}, {0xffe6, 0xb}, {0xfffe, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x6}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x3}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x850}, 0x48084) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) 2.004921757s ago: executing program 1 (id=7380): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) (async) r1 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x56, &(0x7f0000000440)={@random="d10000000004", @link_local, @void, {@canfd={0xd, {{0x1, 0x0, 0x1}, 0x2, 0x0, 0x0, 0x0, "130cd643073afd3d97d7b0664c8417f99e52f22facf4fa25ee8fd37f4c5726d371b11c9d641b50bac7ab713ec586703faa7559e7755e20882c61cb1cfc5348d4"}}}}, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYRES64=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRESHEX], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$tipc(r3, &(0x7f0000003200)=@name={0x1e, 0x2, 0x1, {{0x2, 0x3}}}, 0x8) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) (async) syz_emit_ethernet(0x32, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x6}}}}}}}, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000040)={@empty, @initdev}, &(0x7f00000000c0)=0xc) 1.888916511s ago: executing program 4 (id=7381): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000006c0)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x4e1e, @private=0xa010101}]}, &(0x7f0000000700)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000200)={r5, 0x6}, &(0x7f0000000240)=0x8) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000200)={r5, 0x6}, &(0x7f0000000240)=0x8) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000020c0)={0x24, r1, 0x10, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x40800) 1.82635926s ago: executing program 1 (id=7382): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async, rerun: 32) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) close(0x4) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000ff4e0000001f5ed21c53093c58e1ddabf36928436037b1bede9cb5b60000000000"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000001080)="31602f18700be91a699780b039da199c130ef066449e799a6799296b8e451c860aee08f4ea10a240a6118d07005689dc1f288413da920b95d57656781fa85030a8e3e461e09a453e193e1c97c3104e8aa0c737", &(0x7f0000000080)=@udp, 0x2000000}, 0x20) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001900010025bd7000fcdbdf250a800000ff0136000008001e00060004000800100009000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x24040884) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket(0x10, 0x800, 0x1) (rerun: 64) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[], 0x2c}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000f80)=@rose={'rose', 0x0}, 0x10) (async) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) unshare(0x2c020400) (async) r8 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x8916, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async, rerun: 64) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0x1f7a, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) 1.62443035s ago: executing program 1 (id=7383): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x78a}, @NL80211_ATTR_MAC={0xa, 0x6, @random="69b6c360b870"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0x1d, 0x34, @random="442c5ca8814334894d39faa166202df1e2e57a1b818dee0021"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0x21, 0x34, @random="97a9e84141f6ce597acdaa2e5f2dc994d07c4f471c036e90d084bc5653"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}]}, 0x88}, 0x1, 0x0, 0x0, 0x40080}, 0x4008800) 1.623687897s ago: executing program 2 (id=7384): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0xfffffffe, 0x8, 0x5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x0, 0x3, 0x8, 0x9d0}, 0x50) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000c00)={0x2f4, r1, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x92}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x888b}]}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x349}]}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}]}, @TIPC_NLA_NODE={0x98, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x93, 0x3, "6728a8f052e6b90e7786279f56baf95ae39b44a0af9ac812e3f85c3739a9ea44aea388413c4e4c3603275b0b3486334558dd766fa14de4479d9014347c913c71f189e300070ebca38279dd736247dbd6d8eadcd05a8731efb3fd623a1318666abc0a67eec65acaed8164d0a56c988c418391aaec14ab861afffba84e2b83d1ce0b24fab3916d9626d0acfeade4182e"}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9a6d}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x39}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1570fdb0}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x4}, 0x80) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0500000000000000000000005887240875f0b6efc01f3e928bd63a0b8745024bf1ff6a95f63f9457473c4786e65379efd109c859c740ddd2c5a1883a8c314235fc1c34faf9632a0596e457ec99dd00"/92, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r3, &(0x7f00000007c0)}, 0x20) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000140)={@private2}, &(0x7f0000000180)=0x14) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @bcast, @bpq0, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @default, @default]}) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xe, &(0x7f0000000200)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010000000000140000001100010000000000000000000100000aa940124db55050522fa2c80ac8c2fbd0b641f656e8341f251960629ed12fc314a79a7390143436fbdbf4ff2ac5752f06f15a677edbc8809c1cf47490d7cd27c8c0160e2ea5a955e7017731eb5e888b32e1819ef31a13629526e027a7eb61dc9700c642d85df781a44806706d1bdf0aa2dbf67552ddaee0af0d4e321f55da56cbcf630634c35334f80000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.572580688s ago: executing program 3 (id=7385): syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x24040040) (async) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x24040040) socket$igmp6(0xa, 0x3, 0x2) unshare(0x20000400) epoll_create1(0x0) (async) r6 = epoll_create1(0x0) epoll_pwait(r6, 0xfffffffffffffffc, 0x40, 0x8000005, 0x0, 0x0) (async) epoll_pwait(r6, 0xfffffffffffffffc, 0x40, 0x8000005, 0x0, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012cbd7000fcdbdf25660000000800030027f6e250a21a05ac467382110eec7e5ba2792a02186ab8d166331f4c10f805b752abed5232897586b6099280fedbec4ff3297210964967c863004ce0209854", @ANYRES32=r5, @ANYBLOB="1400b9800800ba00020046000600ba00060000000400b8000400b8000400b8000800a000060000000800a100f1e40000"], 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x80) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_virt_wifi\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x1}}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) ioctl$sock_netrom_SIOCADDRT(r8, 0x890b, &(0x7f0000000680)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x7, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x9, 0x3, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @bcast]}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0xfffffffffffffffe, r9) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1c, 0x0, 0x80, 0x2, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000085}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000000000000900000000000000000000000900800000080000000000000b040000000000000000000000000001000000000000003cfb931222aad654ac4bc5616df9cc50878837af50d1"], 0x0, 0x96}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000000000000900000000000000000000000900800000080000000000000b040000000000000000000000000001000000000000003cfb931222aad654ac4bc5616df9cc50878837af50d1"], 0x0, 0x96}, 0x28) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000d65c08986c275acf0000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000d65c08986c275acf0000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) 1.490512957s ago: executing program 0 (id=7386): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x89a, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, @in={0x2, 0x4e20, @private=0xa010102}], 0x2c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@mcast2, 0x200000, 0x0, 0xff, 0x1, 0x22d, 0x40}, 0x2f) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x29, 0x4b, 0x9, 0x7, 0x14, @empty, @loopback, 0x7, 0xd0392a9336cdcb54, 0xca4c, 0x10}}) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x9, 0x0, @vifc_lcl_ifindex=r3, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) write$tun(r1, &(0x7f0000000000)={@val={0x70, 0x11}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x1b, 0x4, 0x0, 0x0, 0x84, 0x0, 0x4000, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@ssrr={0x89, 0x27, 0x7c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @rand_addr=0x64010102, @multicast2, @broadcast, @rand_addr=0x64010100, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @rr={0x7, 0x3, 0xc1}, @ra={0x94, 0x4}, @generic={0x83, 0x6, "3f2535a3"}, @ssrr={0x89, 0xb, 0x16, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @lsrr={0x83, 0x17, 0xd9, [@dev={0xac, 0x14, 0x14, 0x41}, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x24}, @loopback]}]}}, {0x18, 0x88be, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffd986}}}}}}}, 0x96) 1.468834848s ago: executing program 3 (id=7387): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x270f, @local}, 0x10) listen(r1, 0x0) r2 = accept(r1, 0x0, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) recvfrom$l2tp(r2, &(0x7f0000000980)=""/4096, 0x1000, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r3, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000340)="98cf5662e3a59a584bfc665b00100000665d6b0335d3d4048b32012be088c0ed331cbc0eebbeadbc77ab44c1fab0f98f4745f845dae64ed39e804ba5b71b65495313634d40d4b9523dc36bb79e1f4cffdfb6c47c71e3c58dd7615ded744557f5ee5778a1d8b4d9c9bc00"/116, &(0x7f00000002c0)=@tcp=r2}, 0x20) r5 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f0000001980)=""/242, &(0x7f00000005c0)=0xf2) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}, {&(0x7f0000000780)="5b06c70461fab92b3d952a0a0b5eca7d6b21f62c4f56ea9109a00b742eab4a7fdac90ab7c51a813cc4d693127d10c4e7234944e9410ad19c43ca9751c1b97aca344e5bf77fde23184af0b7e160e7a9a681f6391270dedc2978f7d1b9a913801beaa52e1eedf0ae71021e0d40864fc63603f1d6d94f55d23fb15eebc780292ee4be48a9036dcb83345a4285e043439e95b3f23b6edf199cea092725d6f7fab0f975cc42bd279f5de21d08a38091edbb34b32c6cd53373651fd3343aa6b228a996d957c556694dc3a26b68b38093a92eb192aa973bda1b51c61b6cc2b49a54550085e8d8270d889cefe65f62c975815b1b1208ed"}], 0x3f}], 0x1, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x20, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x72}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20040080}, 0x8004) accept4$llc(r6, 0x0, 0x0, 0x0) recvmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r7, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="22f395993cb4"}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008041}, 0x48005) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="5c71f91b05c413550230b4c817a6", 0x0, 0x1, 0x0, 0x1, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x50) 1.30387055s ago: executing program 2 (id=7388): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000014c0)={{0xffffffffffffffff, &(0x7f0000000000)='/&,}=-\\\xad\x00', 0x10000, &(0x7f0000000040)={@align=0x40, {0x6, 0x7f, 0x80000001, 0x6}}, 0x1, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xa33}, 0x5, &(0x7f0000001400)=[{0x2, 0xfffffffc, &(0x7f0000000100)='@:\x00', &(0x7f0000000140)="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", 0x1000, 0x30}, {0x3, 0x3, &(0x7f0000001140)='%*{-\x00', &(0x7f0000001180)="92e5835e4b2205540dce2718b041c07afcddd673bdfe835720878312f8934f031a5b72aa68cfb978f92fcb9494b934b8e89f09c771718229d75997023ed4b347ab6ac76f438606e595917686de592f85488c16", 0x53, 0xa}, {0x3, 0xd66, &(0x7f0000001200)='\xd5}\x00', &(0x7f0000001240)="1018b2d9c826491d8654c6410c61175eb89cb732b07ce9b75bbe2b04232dc8a1f2498e3c8a1c042ee0d5bd4789f93c2993769404872cd9e48a40c46c1cc858223ac6467e39d0928b733330b18902c86e9bb84b8b807e6312d0198ebec05fbc17ebfc64d490f0b72de4b800eaecf680c60a1ab8afef8782bd64c02e3750e02b6930094ec4e347fec4", 0x88, 0x10}, {0x3, 0xf9638e5, &(0x7f0000001300)='\x00', &(0x7f0000001340)="d50b6c9dc3b39d14119554458b", 0xd, 0x2}, {0x0, 0xa6, &(0x7f0000001380)='\x00', &(0x7f00000013c0)="4515201af83388ac5fe394029ef772ba7b7c6585e3ffc07c3777ce", 0x1b}]}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000015c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x24, r1, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x5}, @val={0x8, 0x3, r2}, @void}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000004}, 0x24040811) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000001800)={&(0x7f00000016c0), 0xc, &(0x7f00000017c0)={&(0x7f0000001700)={0x88, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xaa}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_OPER_CLASS={0x5}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x3}, @NL80211_ATTR_MAC={0xa}]}, 0x88}, 0x1, 0x0, 0x0, 0x200040c5}, 0x40810) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000001840)) vmsplice(r0, &(0x7f0000003880)=[{&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000002880)="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", 0x1000}], 0x2, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000038c0)=0x1480a, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000003900), r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000039c0)={'erspan0\x00', &(0x7f0000003940)={'gre0\x00', 0x0, 0x700, 0x8000, 0x7, 0xabe, {{0xf, 0x4, 0x1, 0x3, 0x3c, 0x66, 0x0, 0xc7, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x32}, {[@ssrr={0x89, 0x1b, 0x65, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @remote, @loopback, @rand_addr=0x64010100]}, @ssrr={0x89, 0xb, 0x0, [@dev={0xac, 0x14, 0x14, 0x2c}, @local]}, @end]}}}}}) bind$l2tp6(r0, &(0x7f0000003a00)={0xa, 0x0, 0xfffffffe, @private2, 0x6, 0x3}, 0x20) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003a80), r0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000003b40)={&(0x7f0000003a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003b00)={&(0x7f0000003ac0)={0x3c, r3, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x76}, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x80}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x92984e3326ed708f}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003c00)={&(0x7f0000003bc0)={0x2c, r1, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x3e}}}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20000001) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000003c80)) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000003d80)={&(0x7f0000003cc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003d40)={&(0x7f0000003d00)={0x3c, r1, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x6a}}}}, [@NL80211_ATTR_IE={0x14, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0xaf, 0x41}}, @supported_rates={0x1, 0x5, [{0x6c, 0x1}, {0xb, 0x1}, {0x9}, {0x30}, {0x34}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000003dc0)=0x5, 0x4) socket$key(0xf, 0x3, 0x2) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000003e00)={{{@in, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000003f00)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000003f40)={{{@in=@remote, @in=@remote, 0x4e23, 0x1, 0x4e21, 0x6, 0x2, 0x20, 0x0, 0x2b, 0x0, r4}, {0x0, 0xfffffffffffffffe, 0xb3, 0x0, 0x1, 0x9, 0x9bdb, 0xc08e}, {0x80, 0x7, 0x3, 0xf23}, 0x84, 0x6e6bb7, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast1, 0x4d4, 0x2b}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3504, 0x1, 0x3, 0x6, 0x0, 0x7f, 0x3}}, 0xe8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000004040)={'geneve1\x00', 0x200}) r5 = socket(0x18, 0x5, 0xa783) connect$pppl2tp(r0, &(0x7f0000004080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x1, {0xa, 0x4e24, 0x1ff, @mcast2, 0x9}}}, 0x32) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004100), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r6, &(0x7f00000041c0)={&(0x7f00000040c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000004180)={&(0x7f0000004140)={0x20, r7, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x10004}, 0x80) r8 = accept4(r5, &(0x7f0000004200)=@sco={0x1f, @fixed}, &(0x7f0000004280)=0x80, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r8, 0x119, 0x1, &(0x7f00000042c0)=0xff, 0x4) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000043c0)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000004380)={&(0x7f0000004340)={0x20, 0xd, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x200448c1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r8, &(0x7f0000004540)={&(0x7f0000004400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)={0x58, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c1) 1.258630442s ago: executing program 0 (id=7389): unshare(0x20000400) bpf$PROG_LOAD(0x25, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x4040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x20040084) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010320000000000000000c00000008000400"], 0x1c}}, 0x4000000) 1.247065242s ago: executing program 2 (id=7390): r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x24, r2, 0xacf5e67dd0b583a1, 0x2, 0x0, {{0x5}, {@val={0x8}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9f}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000c1}, 0x0) sendto$unix(r0, &(0x7f00000000c0)="7decaf992388c593289509ec92faa9d5bfa781ae7ef5860fc34b19b51929b44ff441b3", 0x23, 0x4000800, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x89, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1da762e704000000ff0f005d49e48d"], 0x48) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x80010, r9, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000500)=ANY=[@ANYRESDEC=r4, @ANYRESDEC=r9, @ANYRES8=r3, @ANYBLOB="ca6c5874e64a829bb493c01dc4eec63908d9c28721e2fa60ff3ce31855143e84f8e7ca89c677149994967cf51d4adbf3ca2b4e2a544fb87589ac728b23bc0222879f961494db57fa0555b92a7675c4f11d253431726d6c90f32f63", @ANYRESHEX, @ANYRES16=r8, @ANYRESDEC=r6, @ANYRES64, @ANYRES64=r8], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r5) bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r11, &(0x7f0000000400)={0x18, 0x0, {0x4, @link_local, 'lo\x00'}}, 0x1e) socket(0x2, 0x3, 0xff) 1.048777011s ago: executing program 0 (id=7391): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1800000025006f5100"/23, @ANYRES8=r0, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c0002"], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000224bd7000fbdbdf250200000005003d000600008008000b01"], 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x20040000) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r4, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="04002abd7000fedbdf02c5b182ecb22ace05", @ANYRES32=r8, @ANYBLOB], 0x1c}}, 0x24008014) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r15, {0xfff3, 0x7}, {}, {0x10, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x8, 0x7, 0x8}, {{0x0, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x84d}, 0x40010) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000480)=""/143, 0x8f}, {&(0x7f0000001780)=""/4104, 0x1008}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000240)=""/84, 0x54}, {&(0x7f0000000540)=""/141, 0x8d}], 0x5}, 0x40) 971.655323ms ago: executing program 4 (id=7392): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@newlinkprop={0x38, 0x6c, 0x800, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x100, 0x40000}, [@IFLA_OPERSTATE={0x5, 0x10, 0x9}, @IFLA_WEIGHT={0x8, 0xf, 0xd7fa}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x80) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e"], 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x18, r7, 0x400, 0x70bd27, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x34, r5, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x34}}, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 731.343893ms ago: executing program 0 (id=7393): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff00c}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) unshare(0x28000600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) close(r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000050000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="05"], 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x88}}, 0x0) 532.80217ms ago: executing program 1 (id=7394): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a3200000000090001"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r2 = socket(0x15, 0x5, 0x0) connect$netrom(r2, &(0x7f00000000c0)={{0xa, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x400d0}, 0x14) getsockname$tipc(r2, 0x0, &(0x7f0000000140)=0xfffffffffffffe99) 509.547273ms ago: executing program 3 (id=7395): socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000003c0)=0xffffffffffffffff, 0x12) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2800006, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x29, 0x7, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000006000000bca30000000000002403000020feffff620af8fff8ffffff71a4f2ff000000000f03000000000000e5000300000000002604fdffff02000016010000033800001d13f8ff000000007a0a30ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x43) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f00000001c0)=@req={0x28, &(0x7f0000000040)={'wg0\x00', @ifru_hwaddr}}) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@int=0x8, 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000003c0)) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x6, 0x8, 0x9962, 0x3ff, 0xa2, 0xc, 0xa, {0x0, @in6={{0xa, 0x4e20, 0x7, @mcast1, 0xd1a}}, 0x1, 0x65, 0x0, 0x4, 0x10}}, &(0x7f0000000300)=0xb0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000080)={0x800, 0x43c, 0x0, 0xffff0001, 0x7a21, 0xfffffff8, 0x6, 0x2831, r6}, 0x20) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@dev={0xfe, 0x80, '\x00', 0x36}, 0x4e20, 0x5, 0x4e23, 0x2de, 0xa, 0x20, 0x0, 0x2b, 0x0, 0xffffffffffffffff}, {0x8, 0xee, 0x9, 0xff, 0x2, 0x3, 0x200, 0x2}, {0x7, 0xffffffff, 0xc, 0x7}, 0xc, 0x6e6bba, 0x1, 0x1, 0x1, 0x2}, {{@in=@loopback, 0x4d5, 0x3c}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3504, 0x3, 0x3, 0x2, 0x0, 0x884, 0x1}}, 0xe8) 411.460834ms ago: executing program 1 (id=7396): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071107e000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000002637850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r3, 0xffffffffffffffff, 0x5, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x2, 0x0, &(0x7f00000004c0)=[0x4, 0x6], 0x518c}}, 0x30) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r4, r2, 0x4, r3}, 0x10) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x40040) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_ife={0xc0, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x7, 0x4, 0x5, 0x1}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0x64, 0x6, "5e0414e038c9e1369f5112d764f4be00d248c391b25cf893efeb54d4bc0086e413e7a2ae7b79d7e2cd6196c1daaf0748635704393ec9628afb074d28635eeec0baf48f70b72ed07acf11018ef06e064366fad40b94f0fb2dd3c692c078cffe75"}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x200, 0x4, 0x2, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7, 0x10008}}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000040) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b03"], 0xfdef) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001800)=@deltfilter={0x585, 0x2d, 0x800, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0x4, 0xffe0}, {0x1, 0x2}, {0xb, 0x7}}, [@TCA_RATE={0x6, 0x5, {0xff, 0x69}}, @TCA_CHAIN={0x8, 0xb, 0x2a6}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8, 0xb, 0xfffffffe}, @TCA_RATE={0x6, 0x5, {0x4, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0xfff}, @TCA_RATE={0x6, 0x5, {0x7, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x53d5}, @TCA_RATE={0x6, 0x5, {0xd, 0x1}}, @filter_kind_options=@f_u32={{0x8}, {0x4d8, 0x2, [@TCA_U32_SEL={0x324, 0x5, {0x2, 0x4, 0xaa, 0x800, 0x1d5, 0x0, 0xa29, 0x2, [{0x7, 0x3ff, 0x355b80d7, 0x2}, {0xb2d, 0x4, 0x9, 0x80}, {0x8, 0x0, 0x8, 0xb}, {0x401, 0x1ff, 0x80, 0x8}, {0x0, 0x6, 0x4, 0x7}, {0x2, 0x0, 0x0, 0x2}, {0x4, 0x8, 0x1, 0x2}, {0x9, 0x8e4, 0x81}, {0x4, 0x6, 0x3, 0x8}, {0xfffffffa, 0x9, 0x20000000, 0x8}, {0x1, 0x0, 0x200}, {0x7, 0xdf, 0x8e0, 0x4}, {0x6, 0x0, 0x9, 0xa0c}, {0x7ff, 0x4, 0x6, 0x9}, {0x7ff, 0xc, 0xfffffffe, 0x8}, {0x7, 0x3, 0x2, 0x6}, {0x5, 0x4, 0x0, 0x401}, {0x100, 0x3, 0x5, 0xffffd665}, {0x6, 0xfffffffa, 0x3, 0xd90}, {0x2, 0x4, 0x2, 0x4}, {0x5, 0xfffffffe, 0x7, 0x1}, {0xb, 0xffffcd19, 0xbdff, 0x20000006}, {0x8, 0x400, 0x1, 0x6}, {0xfffffc01, 0xecb7, 0x8, 0x5}, {0x3d5, 0x80000000, 0x5, 0x10001}, {0x4, 0xfffffffa, 0x2, 0x4}, {0x9, 0x280, 0xffff, 0x6566}, {0x5, 0x3, 0x8001, 0x80000001}, {0x1, 0xd33c, 0x2, 0x8000}, {0xd8d3, 0xcda, 0x0, 0x400}, {0x100, 0x6, 0x79522948, 0x8}, {0x5, 0x1, 0x0, 0x7}, {0x1, 0x7f, 0xbe, 0x1}, {0x5, 0xfffffff1, 0x6, 0x2}, {0x9, 0x2, 0x5, 0x2}, {0x0, 0x3, 0x1000, 0x1}, {0x400, 0xfffffff7, 0x6, 0x4}, {0x3, 0x101, 0x3, 0x5}, {0x63f, 0xc, 0xfffffff7, 0x8}, {0x2, 0xda1, 0x2, 0x7}, {0x3, 0xa4, 0x2, 0x1}, {0x3, 0xf, 0x4, 0x7}, {0xe0, 0x68, 0x1, 0x1}, {0x3, 0x81, 0x0, 0x6}, {0xed, 0x4, 0x8000, 0x4981}, {0x2, 0xd45, 0x2a, 0x5}, {0x3, 0x7fff, 0x2, 0xa}, {0x2, 0x40, 0x3, 0xd}, {0x8, 0x1, 0x2, 0x5}]}}, @TCA_U32_ACT={0x1b0, 0x7, [@m_ife={0xec, 0x7, 0x0, 0x0, {{0x8}, {0x94, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x93}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x5a}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_METALST={0x20, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x3}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_METALST={0x38, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xfffffffd}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x6}, @IFE_META_PRIO={0x8, 0x3, @val=0x7f}, @IFE_META_PRIO={0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x6, 0x0, 0x6, 0x8}}}]}, {0x34, 0x6, "2c817c907d057e8f948e13401fec1bc4e1a9bc39c46f5ca523ec70ce989a6adc3ceb8424260e8794f92168cbe14437e2"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_gact={0xc0, 0x15, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1caa, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x252c, 0x20000000}}, @TCA_GACT_PARMS={0x0, 0x2, {0x1ff, 0xfffffff9, 0x3, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x3, 0x10000000, 0x9, 0x2}}]}, {0x56, 0x6, "5b2b72e27afb17d6998a6df52b19765f3ab34b9500f28b0be3a2c12fc9addfb7b59e0f373d2adc3e5a61f8b34da28afcb7d8e0bd8227917ca7cc72de791b404a69c5096b3adcc0cef0c467d799ab6a6b7e6f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x54c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r10, r12, 0xf, 0x0) socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(r11, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0400001200000825bd7000fedbdf25070053089b7a0f0000ffffffffec70960e000102000000060073ad68db1049b800000400"/65, @ANYRES64=r3, @ANYRESDEC=r12], 0x43c}, 0x1, 0x0, 0x0, 0x40d1}, 0x800) 0s ago: executing program 4 (id=7397): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') unshare(0x6a040000) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x12) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002980)={&(0x7f00000028c0)=ANY=[@ANYBLOB='0\x00'], 0x30}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$kcm(0x10, 0x2, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x6, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(0x3) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac141410bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x2008884c) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x144, 0x10, 0x713, 0x70bd22, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x8000, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast2, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x5, 0x0, 0xac}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}, @tfcpad={0x8, 0x29, 0x4}]}, 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="070000000400000000090028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000001a80)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b0000004c5861a15db7000000000000000000950000000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000073012e000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r8, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="02002cbd7000fcdbdf251d00000008000300", @ANYRES32=r10, @ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)) kernel console output (not intermixed with test programs): 109'. [ 731.101420][ T5838] Bluetooth: hci5: command tx timeout [ 731.427428][T21237] gretap0 (unregistering): left promiscuous mode [ 731.553726][T21237] bridge0 (unregistering): left promiscuous mode [ 731.803517][T21237] bond0 (unregistering): left promiscuous mode [ 731.810544][T21237] bond_slave_0: left promiscuous mode [ 731.816151][T21237] bond_slave_1: left promiscuous mode [ 731.827732][T21237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 731.840823][T21237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 731.851403][T21237] bond0 (unregistering): Released all slaves [ 731.862391][T21237] bond1 (unregistering): Released all slaves [ 731.878253][T21237] bond2 (unregistering): (slave veth3): Releasing active interface [ 731.888195][T21237] bond2 (unregistering): Released all slaves [ 731.910434][T21237] bond3 (unregistering): Released all slaves [ 731.925654][T21237] bond4 (unregistering): Released all slaves [ 731.940390][T21237] bond5 (unregistering): (slave veth7): Releasing active interface [ 731.950627][T21237] bond5 (unregistering): Released all slaves [ 731.966520][T21237] bond6 (unregistering): Released all slaves [ 731.989543][T21237] bond7 (unregistering): Released all slaves [ 732.005091][T21237] bond8 (unregistering): Released all slaves [ 732.095310][T31101] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6113'. [ 732.223038][T21237] tipc: Disabling bearer [ 732.243279][T21237] tipc: Left network mode [ 732.633452][T31127] gtp0: entered promiscuous mode [ 732.638561][T31127] gtp0: entered allmulticast mode [ 733.148742][T31010] chnl_net:caif_netlink_parms(): no params data found [ 733.179225][ T5838] Bluetooth: hci5: command tx timeout [ 733.369753][T31155] netlink: 'syz.3.6125': attribute type 4 has an invalid length. [ 733.377549][T31155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6125'. [ 733.535966][T31164] erspan0: entered allmulticast mode [ 733.730655][T21235] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 733.741873][T21235] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 733.759388][T22442] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 733.802281][T31183] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6129'. [ 733.950490][T22442] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 734.097488][T31177] lo speed is unknown, defaulting to 1000 [ 734.112331][T31010] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.139027][T31010] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.152725][T31010] bridge_slave_0: entered allmulticast mode [ 734.165247][T31010] bridge_slave_0: entered promiscuous mode [ 734.178103][T31010] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.190259][T31010] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.197815][T31010] bridge_slave_1: entered allmulticast mode [ 734.215890][T31010] bridge_slave_1: entered promiscuous mode [ 734.349398][T22442] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 734.380433][T31203] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6133'. [ 734.383381][T31010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 734.427952][T31010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 734.523947][T31010] team0: Port device team_slave_0 added [ 734.554541][T31010] team0: Port device team_slave_1 added [ 734.672183][T31010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 734.696805][T31010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.728071][T31010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 734.777180][T31212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6137'. [ 734.780352][T31010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 734.820929][T31010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.878228][T31010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 734.889718][T31215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 735.004840][T31219] netlink: 'syz.0.6137': attribute type 1 has an invalid length. [ 735.028882][T31219] netlink: 236 bytes leftover after parsing attributes in process `syz.0.6137'. [ 735.259270][ T5838] Bluetooth: hci5: command tx timeout [ 735.293200][T31177] lo speed is unknown, defaulting to 1000 [ 735.499777][T31235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6141'. [ 735.625337][T31239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6142'. [ 735.631753][T31010] hsr_slave_0: entered promiscuous mode [ 735.655133][T31010] hsr_slave_1: entered promiscuous mode [ 735.683985][T31010] debugfs: 'hsr0' already exists in 'hsr' [ 735.692463][T31244] Cannot find set identified by id 0 to match [ 735.703108][T31010] Cannot create hsr debugfs directory [ 736.205588][T31264] __nla_validate_parse: 1 callbacks suppressed [ 736.205608][T31264] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6145'. [ 736.555338][T31274] netlink: 'syz.2.6147': attribute type 83 has an invalid length. [ 736.570766][T31010] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.582399][T31010] netdevsim netdevsim4 eth4 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 736.622198][T31277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6147'. [ 736.673729][T31277] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6147'. [ 736.695310][T31277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6147'. [ 736.719601][T21237] hsr_slave_0: left promiscuous mode [ 736.734812][T21237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 736.736721][T31277] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6147'. [ 736.771618][T21237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.339250][ T5838] Bluetooth: hci5: command tx timeout [ 737.443283][T21237] ` (unregistering): Port device team_slave_1 removed [ 737.509415][T21237] ` (unregistering): Port device team_slave_0 removed [ 737.736197][T31010] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.747655][T31010] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 737.789759][T31298] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 737.907659][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 737.995146][T31010] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.019436][T31010] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 738.257584][T31010] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.277056][T31010] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 738.317446][T31323] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 738.452214][T21237] IPVS: stop unused estimator thread 0... [ 738.685540][T31348] netlink: 'syz.1.6164': attribute type 1 has an invalid length. [ 738.721333][T31348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6164'. [ 738.730866][T31348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6164'. [ 738.747443][T31350] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6162'. [ 738.787198][T31346] bond11: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 738.800779][T31346] bond11 (unregistering): Released all slaves [ 738.836451][T31356] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6164'. [ 738.866279][T31356] bond9: (slave bridge9): making interface the new active one [ 738.892662][T31356] bond9: (slave bridge9): Enslaving as an active interface with an up link [ 738.950538][T31348] bond9: (slave bridge10): Enslaving as an active interface with a down link [ 738.984355][T31348] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6164'. [ 739.202796][T31368] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 739.599335][T31390] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 739.940987][T31395] veth1_macvtap: renamed from veth0_vlan [ 740.043525][T31402] xt_hashlimit: max too large, truncated to 1048576 [ 740.050412][T31402] xt_hashlimit: overflow, try lower: 13/0 [ 741.425432][ T6136] lec:lec_start_xmit: lec0:No lecd attached [ 741.440742][T31328] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 741.460699][T31010] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 741.512569][T31010] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 741.593507][T31010] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 741.623377][T31422] __nla_validate_parse: 2 callbacks suppressed [ 741.623395][T31422] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6175'. [ 741.648694][T31423] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6175'. [ 741.687105][T31010] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 741.755070][T31437] sctp: [Deprecated]: syz.1.6176 (pid 31437) Use of struct sctp_assoc_value in delayed_ack socket option. [ 741.755070][T31437] Use struct sctp_sack_info instead [ 741.793497][T31437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6176'. [ 741.884513][T31452] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.6181'. [ 742.027928][T31458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 742.087986][T31458] tipc: Resetting bearer [ 742.101414][T31458] tipc: Resetting bearer [ 742.134027][ T9] lo speed is unknown, defaulting to 1000 [ 742.159789][ T9] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 742.180305][T31010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.216329][T31010] 8021q: adding VLAN 0 to HW filter on device team0 [ 742.250786][T10496] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.258267][T10496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 742.311665][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.318922][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 742.633800][ T9] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 742.656724][T31478] lo speed is unknown, defaulting to 1000 [ 742.833089][T31010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 743.130524][T31502] netlink: 'syz.0.6193': attribute type 13 has an invalid length. [ 743.138581][T31502] netlink: 'syz.0.6193': attribute type 17 has an invalid length. [ 743.348496][T31502] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 743.442305][T31512] lo speed is unknown, defaulting to 1000 [ 743.511676][T31518] Cannot find del_set index 4 as target [ 743.623219][T31478] lo speed is unknown, defaulting to 1000 [ 743.712800][T31010] veth0_vlan: entered promiscuous mode [ 743.762831][T31010] veth1_vlan: entered promiscuous mode [ 743.860903][T31010] veth0_macvtap: entered promiscuous mode [ 743.886391][T31010] veth1_macvtap: entered promiscuous mode [ 743.950484][T31010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 743.985586][T31010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 744.018365][ T1090] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.050706][ T1090] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.082649][ T1090] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.093497][ T1090] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.108078][T31512] lo speed is unknown, defaulting to 1000 [ 744.354201][T21237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.377803][T21237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.457611][ T1007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.492360][ T1007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.719640][T31539] lo speed is unknown, defaulting to 1000 [ 745.155170][T31557] netlink: 'syz.4.6206': attribute type 1 has an invalid length. [ 745.359001][T31563] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 745.369737][T31563] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 745.378219][T31563] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 745.400417][T31563] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 745.412675][T31563] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 745.605956][T31542] dvmrp0: entered allmulticast mode [ 745.785110][T31568] can: request_module (can-proto-4) failed. [ 745.904129][T31539] lo speed is unknown, defaulting to 1000 [ 745.974630][T31578] netlink: 'syz.2.6211': attribute type 10 has an invalid length. [ 745.993308][T31578] bond9: (slave dummy0): Releasing active interface [ 746.002397][T31578] dummy0: left allmulticast mode [ 746.023124][T31578] dummy0: entered allmulticast mode [ 746.032855][T31578] team0: Port device dummy0 added [ 746.049971][T31584] netlink: 'syz.2.6211': attribute type 10 has an invalid length. [ 746.080964][T31584] dummy0: left allmulticast mode [ 746.155608][T31584] team0: Port device dummy0 removed [ 746.590388][T31560] lo speed is unknown, defaulting to 1000 [ 746.779411][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 747.019085][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5590 ms [ 747.027260][ C1] lec:lec_tx_timeout: lec0 [ 747.039905][T31584] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 747.432094][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 747.448860][T31607] netlink: 'syz.2.6215': attribute type 2 has an invalid length. [ 747.459253][T31606] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 747.477110][T31607] 9: entered promiscuous mode [ 747.488884][T31608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 747.504673][ T5838] Bluetooth: hci4: command tx timeout [ 747.582809][T31560] lo speed is unknown, defaulting to 1000 [ 747.601205][T31612] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6217'. [ 747.656380][T31612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6217'. [ 747.892416][T31619] netlink: 'syz.1.6220': attribute type 10 has an invalid length. [ 747.942638][T31619] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 748.154381][T31633] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6222'. [ 748.178429][T31633] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6222'. [ 748.639678][T31560] chnl_net:caif_netlink_parms(): no params data found [ 748.747865][T31640] vlan6: entered allmulticast mode [ 748.755777][T31646] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6225'. [ 748.880414][T31652] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6229'. [ 748.895499][T31560] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.903373][T31560] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.920121][T31560] bridge_slave_0: entered allmulticast mode [ 748.928740][T31560] bridge_slave_0: entered promiscuous mode [ 748.942937][T31560] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.945323][T31652] netlink: 'syz.1.6229': attribute type 1 has an invalid length. [ 748.959364][T31560] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.966974][T31560] bridge_slave_1: entered allmulticast mode [ 748.978635][T31560] bridge_slave_1: entered promiscuous mode [ 749.003492][T31660] batadv1: entered promiscuous mode [ 749.008850][T31660] batadv1: entered allmulticast mode [ 749.017089][T31660] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 749.027445][T31655] lo speed is unknown, defaulting to 1000 [ 749.124035][T31560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 749.458607][T31560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 749.508141][T31671] syzkaller1: entered promiscuous mode [ 749.514373][T31671] syzkaller1: entered allmulticast mode [ 749.524422][T31655] lo speed is unknown, defaulting to 1000 [ 749.579684][ T5838] Bluetooth: hci4: command tx timeout [ 749.644146][T31560] team0: Port device team_slave_0 added [ 749.673123][T31560] team0: Port device team_slave_1 added [ 749.833198][T31560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 749.849342][T31560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.912123][T31560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 749.932520][T31560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 749.945710][T31560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.996603][T31560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 750.158813][T31689] lo speed is unknown, defaulting to 1000 [ 750.222481][T31560] hsr_slave_0: entered promiscuous mode [ 750.257354][T31704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6239'. [ 750.391680][T31560] hsr_slave_1: entered promiscuous mode [ 750.406438][T31560] debugfs: 'hsr0' already exists in 'hsr' [ 750.422246][T31560] Cannot create hsr debugfs directory [ 750.538255][T31704] erspan0: entered promiscuous mode [ 750.557562][T31704] macvtap1: entered promiscuous mode [ 750.564816][T31704] macvtap1: entered allmulticast mode [ 750.571140][T31704] erspan0: entered allmulticast mode [ 750.583215][T31689] lo speed is unknown, defaulting to 1000 [ 750.673828][T22442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.942016][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.130113][T31560] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.269814][T31560] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.422490][T31560] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.539529][T31733] netlink: 740 bytes leftover after parsing attributes in process `syz.2.6245'. [ 751.548806][T31733] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6245'. [ 751.554388][T31730] lo speed is unknown, defaulting to 1000 [ 751.588124][T31560] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.659729][ T5838] Bluetooth: hci4: command tx timeout [ 751.752562][T22442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.043190][T31560] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 752.097829][T31560] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 752.127810][T31560] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 752.198312][T31560] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 752.382821][T31754] team0 (unregistering): left allmulticast mode [ 752.391886][T31754] team_slave_0: left allmulticast mode [ 752.409240][T31754] team_slave_1: left allmulticast mode [ 752.415033][T31754] bridge0: port 1(team0) entered disabled state [ 752.461021][T31754] team0 (unregistering): Failed to send options change via netlink (err -105) [ 752.475444][T31754] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 752.497846][T31754] team0 (unregistering): Port device team_slave_0 removed [ 752.511267][T31754] team0 (unregistering): Failed to send options change via netlink (err -105) [ 752.520633][T31754] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 752.535227][T31754] team0 (unregistering): Port device team_slave_1 removed [ 752.545827][T31754] team0 (unregistering): Failed to send options change via netlink (err -105) [ 752.558798][T31754] team0 (unregistering): Failed to send port change of device bridge8 via netlink (err -105) [ 752.571492][T31754] team0 (unregistering): Port device bridge8 removed [ 752.587255][T31730] lo speed is unknown, defaulting to 1000 [ 752.712461][T31768] lo speed is unknown, defaulting to 1000 [ 752.785693][T22442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.795237][T31560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 752.868489][T31560] 8021q: adding VLAN 0 to HW filter on device team0 [ 752.934681][T31783] netlink: 'syz.2.6257': attribute type 8 has an invalid length. [ 752.950975][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.958397][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 753.020232][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5590 ms [ 753.028304][ C1] lec:lec_tx_timeout: lec0 [ 753.051429][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.058775][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.180162][T31790] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6259'. [ 753.188834][T31560] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 753.189470][T31790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6259'. [ 753.215185][T31560] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 753.285929][T31794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6259'. [ 753.332406][T31794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6259'. [ 753.373400][T31798] mac80211_hwsim hwsim54 wlan0: default FDB implementation only supports local addresses [ 753.549498][T31768] lo speed is unknown, defaulting to 1000 [ 753.737445][T31560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 753.739585][ T5838] Bluetooth: hci4: command tx timeout [ 753.793005][T31812] netlink: 'syz.1.6265': attribute type 1 has an invalid length. [ 753.827448][T22442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.846165][T31812] netlink: 'syz.1.6265': attribute type 11 has an invalid length. [ 753.883243][T31560] veth0_vlan: entered promiscuous mode [ 753.896940][T31560] veth1_vlan: entered promiscuous mode [ 753.909884][T31812] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6265'. [ 753.964794][T31560] veth0_macvtap: entered promiscuous mode [ 753.992290][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.002539][T31560] veth1_macvtap: entered promiscuous mode [ 754.048150][T31560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 754.093361][T31560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 754.111301][T31821] netlink: 'syz.1.6268': attribute type 1 has an invalid length. [ 754.139662][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.149156][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.259620][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.286352][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.375704][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.409245][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.459870][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.468768][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.713238][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.724031][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.861272][T22442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.928273][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.937779][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.109422][T22442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.375696][T31849] xt_TCPMSS: Only works on TCP SYN packets [ 755.617862][T31563] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 755.633152][T31563] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 755.649237][T31563] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 755.657870][T31563] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 755.679454][T31563] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 755.765564][T31853] lo speed is unknown, defaulting to 1000 [ 755.778371][T31852] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.6278'. [ 755.792810][T31852] netlink: Unknown conntrack attr (0) [ 755.895063][T31861] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20000 [ 755.938050][T31862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6279'. [ 756.082818][T31865] x_tables: duplicate underflow at hook 1 [ 756.172514][T31853] lo speed is unknown, defaulting to 1000 [ 756.299268][T31867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6282'. [ 756.308317][T31867] tipc: Started in network mode [ 756.319236][T31867] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 756.326694][T31867] tipc: Enabled bearer , priority 0 [ 756.334795][T31873] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6284'. [ 756.359781][T31870] lo speed is unknown, defaulting to 1000 [ 756.374141][T31871] xt_CT: No such helper "netbios-ns" [ 756.607912][T31883] netlink: 'syz.4.6287': attribute type 1 has an invalid length. [ 756.704351][T31883] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 756.728677][T31886] xfrm1: entered allmulticast mode [ 756.914679][T31870] lo speed is unknown, defaulting to 1000 [ 757.215399][T31903] lo speed is unknown, defaulting to 1000 [ 757.439190][T11022] tipc: Node number set to 10005162 [ 757.561913][T31853] chnl_net:caif_netlink_parms(): no params data found [ 757.740977][ T5838] Bluetooth: hci1: command tx timeout [ 757.847020][T31923] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6295'. [ 757.986169][T11022] net_ratelimit: 3 callbacks suppressed [ 757.986191][T11022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.990890][T31903] lo speed is unknown, defaulting to 1000 [ 758.043970][T31853] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.051545][T31853] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.059276][T31853] bridge_slave_0: entered allmulticast mode [ 758.067673][T31853] bridge_slave_0: entered promiscuous mode [ 758.077318][T31853] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.084789][T31853] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.092782][T31853] bridge_slave_1: entered allmulticast mode [ 758.101221][T31853] bridge_slave_1: entered promiscuous mode [ 758.139900][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.166129][T31904] bridge0: entered promiscuous mode [ 758.241697][T31853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 758.281791][T31853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 758.391189][T31853] team0: Port device team_slave_0 added [ 758.442706][T31853] team0: Port device team_slave_1 added [ 758.546306][T31853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 758.563650][T31853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 758.630110][T31853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 758.764012][T31853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 758.799240][T31853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 758.869268][T31853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 759.033877][T11022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.090027][T31949] netlink: 'syz.3.6301': attribute type 1 has an invalid length. [ 759.129269][T31949] nbd: error processing sock list [ 759.264362][T31853] hsr_slave_0: entered promiscuous mode [ 759.273296][T31853] hsr_slave_1: entered promiscuous mode [ 759.306954][T31853] debugfs: 'hsr0' already exists in 'hsr' [ 759.325548][T31853] Cannot create hsr debugfs directory [ 759.822038][ T5838] Bluetooth: hci1: command tx timeout [ 759.896684][T31970] delete_channel: no stack [ 759.907632][T31968] netlink: 'syz.0.6306': attribute type 4 has an invalid length. [ 759.916342][T31968] netlink: 17 bytes leftover after parsing attributes in process `syz.0.6306'. [ 760.072414][T11022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.128331][T31853] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.155623][T31853] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 760.324467][T31853] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.354486][T31853] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 760.519015][T31853] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.543972][T31853] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 760.590988][T31996] bridge0: entered allmulticast mode [ 760.606651][T31996] netlink: 'syz.3.6314': attribute type 1 has an invalid length. [ 760.615248][T31996] netlink: 'syz.3.6314': attribute type 2 has an invalid length. [ 760.626571][T31995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6312'. [ 760.655277][T31853] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.697452][T31853] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 760.730410][T32002] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6315'. [ 760.756853][T32003] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 760.787507][ T30] audit: type=1800 audit(1772427073.318:19): pid=31998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6315" name="e" dev="tmpfs" ino=3145 res=0 errno=0 [ 760.818732][T32001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6314'. [ 760.840100][T32001] bridge_slave_1: left allmulticast mode [ 760.849137][T32001] bridge_slave_1: left promiscuous mode [ 760.855010][T32001] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.908761][T32001] bridge_slave_0: left allmulticast mode [ 760.926612][T32001] bridge_slave_0: left promiscuous mode [ 760.928382][T32009] netlink: 'syz.0.6317': attribute type 1 has an invalid length. [ 760.941057][T32001] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.969852][T32012] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6318'. [ 761.026994][T32001] bridge0 (unregistering): left allmulticast mode [ 761.065657][T32016] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6317'. [ 761.164391][T22442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.179522][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.219291][T32013] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 761.231319][T32013] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 761.319227][T32016] bond3: (slave bridge3): Enslaving as an active interface with a down link [ 761.523311][T31853] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 761.546891][T31853] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 761.580507][T31853] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 761.657517][T31853] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 761.844737][T32030] lo speed is unknown, defaulting to 1000 [ 761.859852][T32037] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6320'. [ 761.873393][T32039] tipc: Bearer : already 2 bearers with priority 10 [ 761.889244][T32039] tipc: Bearer : trying with adjusted priority [ 761.906777][T32039] tipc: Enabled bearer , priority 9 [ 761.919143][ T5838] Bluetooth: hci1: command tx timeout [ 762.226907][T11022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.263907][T31853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 762.307641][T31853] 8021q: adding VLAN 0 to HW filter on device team0 [ 762.348583][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.355855][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 762.419736][T10495] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.426958][T10495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 762.950012][T32030] lo speed is unknown, defaulting to 1000 [ 763.026067][T31853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 763.221494][T31853] veth0_vlan: entered promiscuous mode [ 763.250931][T31853] veth1_vlan: entered promiscuous mode [ 763.279495][T11022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.415626][T31853] veth0_macvtap: entered promiscuous mode [ 763.450715][T31853] veth1_macvtap: entered promiscuous mode [ 763.573905][T31853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 763.625950][T31853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 763.731966][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.761951][T32087] lo speed is unknown, defaulting to 1000 [ 763.819442][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.829361][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.953253][T32100] netlink: 'syz.3.6336': attribute type 1 has an invalid length. [ 763.967741][T21237] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.983997][T21237] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.994459][ T5838] Bluetooth: hci1: command tx timeout [ 764.051303][T21237] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.059277][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 764.084687][T32087] lo speed is unknown, defaulting to 1000 [ 764.295644][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.304977][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.318710][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.354301][T11022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.432514][T21227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.451446][T21227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.747146][T32118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6340'. [ 764.836747][T32124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6340'. [ 765.325904][T31563] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 765.342545][T31563] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 765.352299][T31563] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 765.362657][T31563] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 765.370838][T31563] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 765.426162][T22440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.428081][T32128] syzkaller0: entered promiscuous mode [ 765.439961][T32128] syzkaller0: entered allmulticast mode [ 765.479681][T32128] 0: reclassify loop, rule prio 0, protocol 800 [ 765.736856][T32126] lo speed is unknown, defaulting to 1000 [ 765.851319][T32138] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6345'. [ 765.866666][T32138] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6345'. [ 766.068865][T32142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6346'. [ 766.163454][T32140] bond1: entered promiscuous mode [ 766.182495][T32140] bond1: entered allmulticast mode [ 766.188591][T32140] 8021q: adding VLAN 0 to HW filter on device bond1 [ 766.311526][T32150] FAULT_INJECTION: forcing a failure. [ 766.311526][T32150] name failslab, interval 1, probability 0, space 0, times 0 [ 766.324829][T32150] CPU: 1 UID: 0 PID: 32150 Comm: syz.4.6348 Not tainted syzkaller #0 PREEMPT(full) [ 766.324857][T32150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 766.324888][T32150] Call Trace: [ 766.324898][T32150] [ 766.324907][T32150] dump_stack_lvl+0xe8/0x150 [ 766.324941][T32150] should_fail_ex+0x412/0x560 [ 766.324972][T32150] should_failslab+0xa8/0x100 [ 766.324996][T32150] ? skb_clone+0x212/0x3a0 [ 766.325027][T32150] kmem_cache_alloc_noprof+0x87/0x650 [ 766.325070][T32150] ? run_filter+0x23/0x270 [ 766.325101][T32150] skb_clone+0x212/0x3a0 [ 766.325129][T32150] ? packet_rcv+0x567/0x1720 [ 766.325157][T32150] packet_rcv+0x65b/0x1720 [ 766.325194][T32150] __netif_receive_skb_core+0x2797/0x31a0 [ 766.325217][T32150] ? is_bpf_text_address+0x26/0x2b0 [ 766.325244][T32150] ? is_bpf_text_address+0x292/0x2b0 [ 766.325271][T32150] ? kernel_text_address+0xa5/0xe0 [ 766.325296][T32150] ? unwind_get_return_address+0x4d/0x90 [ 766.325326][T32150] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 766.325354][T32150] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 766.325407][T32150] ? kasan_save_track+0x4f/0x80 [ 766.325426][T32150] ? kasan_save_track+0x3e/0x80 [ 766.325444][T32150] ? __kasan_slab_alloc+0x6c/0x80 [ 766.325464][T32150] ? kmem_cache_alloc_bulk_noprof+0x570/0x7e0 [ 766.325492][T32150] __netif_receive_skb_list_core+0x24d/0x810 [ 766.325533][T32150] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 766.325570][T32150] netif_receive_skb_list_internal+0x995/0xcf0 [ 766.325602][T32150] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 766.325628][T32150] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 766.325663][T32150] ? __xdp_build_skb_from_frame+0x34b/0x730 [ 766.325701][T32150] netif_receive_skb_list+0x55/0x4b0 [ 766.325723][T32150] ? bpf_test_run_xdp_live+0x1921/0x1cf0 [ 766.325754][T32150] bpf_test_run_xdp_live+0x1946/0x1cf0 [ 766.325801][T32150] ? bpf_test_run_xdp_live+0x438/0x1cf0 [ 766.325837][T32150] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 766.325889][T32150] ? 0xffffffffa02043ac [ 766.325907][T32150] ? 0xffffffffa0204d58 [ 766.325955][T32150] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 766.325991][T32150] ? _copy_from_user+0x94/0xb0 [ 766.326021][T32150] ? bpf_test_init+0x113/0x150 [ 766.326043][T32150] ? xdp_convert_md_to_buff+0x5b/0x330 [ 766.326080][T32150] bpf_prog_test_run_xdp+0x81c/0x1160 [ 766.326123][T32150] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 766.326154][T32150] ? __fget_files+0x2a/0x420 [ 766.326188][T32150] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 766.326214][T32150] bpf_prog_test_run+0x2c7/0x340 [ 766.326236][T32150] __sys_bpf+0x643/0x950 [ 766.326267][T32150] ? __pfx___sys_bpf+0x10/0x10 [ 766.326313][T32150] ? ksys_write+0x242/0x270 [ 766.326336][T32150] ? __pfx_ksys_write+0x10/0x10 [ 766.326365][T32150] __x64_sys_bpf+0x7c/0x90 [ 766.326395][T32150] do_syscall_64+0x14d/0xf80 [ 766.326424][T32150] ? trace_irq_disable+0x3b/0x150 [ 766.326459][T32150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.326480][T32150] ? clear_bhb_loop+0x40/0x90 [ 766.326507][T32150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.326529][T32150] RIP: 0033:0x7fc47999c799 [ 766.326549][T32150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 766.326567][T32150] RSP: 002b:00007fc47a8a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 766.326592][T32150] RAX: ffffffffffffffda RBX: 00007fc479c15fa0 RCX: 00007fc47999c799 [ 766.326607][T32150] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 766.326621][T32150] RBP: 00007fc47a8a1090 R08: 0000000000000000 R09: 0000000000000000 [ 766.326634][T32150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 766.326647][T32150] R13: 00007fc479c16038 R14: 00007fc479c15fa0 R15: 00007ffd003303a8 [ 766.326683][T32150] [ 766.387286][T32126] lo speed is unknown, defaulting to 1000 [ 766.402726][T32146] lo speed is unknown, defaulting to 1000 [ 766.584620][T11021] IPVS: starting estimator thread 0... [ 766.589453][T22440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.652131][T32155] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 766.759426][T11021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.799167][T32153] IPVS: using max 28 ests per chain, 67200 per kthread [ 767.259657][T32146] lo speed is unknown, defaulting to 1000 [ 767.579208][T31563] Bluetooth: hci0: command tx timeout [ 767.652347][T32126] chnl_net:caif_netlink_parms(): no params data found [ 767.732498][T32183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6356'. [ 768.081663][T32204] FAULT_INJECTION: forcing a failure. [ 768.081663][T32204] name failslab, interval 1, probability 0, space 0, times 0 [ 768.094419][T32204] CPU: 0 UID: 0 PID: 32204 Comm: syz.3.6359 Not tainted syzkaller #0 PREEMPT(full) [ 768.094448][T32204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 768.094460][T32204] Call Trace: [ 768.094469][T32204] [ 768.094479][T32204] dump_stack_lvl+0xe8/0x150 [ 768.094515][T32204] should_fail_ex+0x412/0x560 [ 768.094547][T32204] should_failslab+0xa8/0x100 [ 768.094572][T32204] ? skb_clone+0x212/0x3a0 [ 768.094603][T32204] kmem_cache_alloc_noprof+0x87/0x650 [ 768.094638][T32204] ? run_filter+0x23/0x270 [ 768.094669][T32204] skb_clone+0x212/0x3a0 [ 768.094698][T32204] ? packet_rcv+0x567/0x1720 [ 768.094726][T32204] packet_rcv+0x65b/0x1720 [ 768.094763][T32204] __netif_receive_skb_core+0x2797/0x31a0 [ 768.094788][T32204] ? is_bpf_text_address+0x26/0x2b0 [ 768.094824][T32204] ? is_bpf_text_address+0x292/0x2b0 [ 768.094851][T32204] ? kernel_text_address+0xa5/0xe0 [ 768.094877][T32204] ? unwind_get_return_address+0x4d/0x90 [ 768.094908][T32204] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 768.094936][T32204] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 768.094989][T32204] ? kasan_save_track+0x4f/0x80 [ 768.095008][T32204] ? kasan_save_track+0x3e/0x80 [ 768.095027][T32204] ? __kasan_slab_alloc+0x6c/0x80 [ 768.095047][T32204] ? kmem_cache_alloc_bulk_noprof+0x570/0x7e0 [ 768.095073][T32204] __netif_receive_skb_list_core+0x24d/0x810 [ 768.095115][T32204] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 768.095153][T32204] netif_receive_skb_list_internal+0x995/0xcf0 [ 768.095184][T32204] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 768.095210][T32204] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 768.095246][T32204] ? __xdp_build_skb_from_frame+0x34b/0x730 [ 768.095284][T32204] netif_receive_skb_list+0x55/0x4b0 [ 768.095306][T32204] ? bpf_test_run_xdp_live+0x1921/0x1cf0 [ 768.095336][T32204] bpf_test_run_xdp_live+0x1946/0x1cf0 [ 768.095383][T32204] ? bpf_test_run_xdp_live+0x438/0x1cf0 [ 768.095417][T32204] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 768.095466][T32204] ? 0xffffffffa02043ac [ 768.095484][T32204] ? 0xffffffffa0204d58 [ 768.095527][T32204] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 768.095566][T32204] ? _copy_from_user+0x94/0xb0 [ 768.095594][T32204] ? bpf_test_init+0x113/0x150 [ 768.095616][T32204] ? xdp_convert_md_to_buff+0x5b/0x330 [ 768.095645][T32204] bpf_prog_test_run_xdp+0x81c/0x1160 [ 768.095689][T32204] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 768.095720][T32204] ? __fget_files+0x2a/0x420 [ 768.095755][T32204] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 768.095782][T32204] bpf_prog_test_run+0x2c7/0x340 [ 768.095808][T32204] __sys_bpf+0x643/0x950 [ 768.095851][T32204] ? __pfx___sys_bpf+0x10/0x10 [ 768.095900][T32204] ? ksys_write+0x242/0x270 [ 768.095925][T32204] ? __pfx_ksys_write+0x10/0x10 [ 768.095956][T32204] __x64_sys_bpf+0x7c/0x90 [ 768.095985][T32204] do_syscall_64+0x14d/0xf80 [ 768.096013][T32204] ? trace_irq_disable+0x3b/0x150 [ 768.096040][T32204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.096062][T32204] ? clear_bhb_loop+0x40/0x90 [ 768.096087][T32204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.096108][T32204] RIP: 0033:0x7fa00519c799 [ 768.096129][T32204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 768.096147][T32204] RSP: 002b:00007fa0060f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 768.096170][T32204] RAX: ffffffffffffffda RBX: 00007fa005415fa0 RCX: 00007fa00519c799 [ 768.096185][T32204] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 768.096199][T32204] RBP: 00007fa0060f2090 R08: 0000000000000000 R09: 0000000000000000 [ 768.096212][T32204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 768.096225][T32204] R13: 00007fa005416038 R14: 00007fa005415fa0 R15: 00007ffff9b51e18 [ 768.096261][T32204] [ 768.521272][T32126] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.528676][T32126] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.536702][T32126] bridge_slave_0: entered allmulticast mode [ 768.547691][T32126] bridge_slave_0: entered promiscuous mode [ 768.575808][T32126] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.583594][T32126] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.616494][T32126] bridge_slave_1: entered allmulticast mode [ 768.629876][T32126] bridge_slave_1: entered promiscuous mode [ 768.703873][T11022] net_ratelimit: 2 callbacks suppressed [ 768.703896][T11022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.841367][T32126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 768.854769][T32126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 768.896382][T32126] team0: Port device team_slave_0 added [ 768.977523][T32126] team0: Port device team_slave_1 added [ 768.989499][T32212] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6361'. [ 769.002091][T32212] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6361'. [ 769.012603][T32206] lo speed is unknown, defaulting to 1000 [ 769.283812][T32126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 769.299198][T32126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 769.326335][T32126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 769.338947][T32206] lo speed is unknown, defaulting to 1000 [ 769.352879][T32126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 769.369872][T32126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 769.401265][T32223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.411652][T32223] netlink: 340 bytes leftover after parsing attributes in process `syz.0.6363'. [ 769.427499][T32223] IPv6: addrconf: prefix option has invalid lifetime [ 769.434504][T32223] IPv6: addrconf: prefix option has invalid lifetime [ 769.451298][T32126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 769.552541][T32233] netlink: 'syz.0.6365': attribute type 1 has an invalid length. [ 769.570681][T32233] netlink: 280 bytes leftover after parsing attributes in process `syz.0.6365'. [ 769.605826][T32126] hsr_slave_0: entered promiscuous mode [ 769.620483][T32126] hsr_slave_1: entered promiscuous mode [ 769.637894][T32126] debugfs: 'hsr0' already exists in 'hsr' [ 769.649289][T32126] Cannot create hsr debugfs directory [ 769.673894][T31563] Bluetooth: hci0: command tx timeout [ 769.743438][T22440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.818200][T32238] vxcan2: entered allmulticast mode [ 769.916673][T32240] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6368'. [ 770.109144][T32245] FAULT_INJECTION: forcing a failure. [ 770.109144][T32245] name failslab, interval 1, probability 0, space 0, times 0 [ 770.121898][T32245] CPU: 1 UID: 0 PID: 32245 Comm: syz.3.6370 Not tainted syzkaller #0 PREEMPT(full) [ 770.121927][T32245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 770.121940][T32245] Call Trace: [ 770.121949][T32245] [ 770.121959][T32245] dump_stack_lvl+0xe8/0x150 [ 770.121995][T32245] should_fail_ex+0x412/0x560 [ 770.122027][T32245] should_failslab+0xa8/0x100 [ 770.122052][T32245] ? skb_clone+0x212/0x3a0 [ 770.122082][T32245] kmem_cache_alloc_noprof+0x87/0x650 [ 770.122125][T32245] ? run_filter+0x23/0x270 [ 770.122155][T32245] skb_clone+0x212/0x3a0 [ 770.122181][T32245] ? packet_rcv+0x567/0x1720 [ 770.122205][T32245] packet_rcv+0x65b/0x1720 [ 770.122237][T32245] __netif_receive_skb_core+0x2797/0x31a0 [ 770.122260][T32245] ? is_bpf_text_address+0x26/0x2b0 [ 770.122282][T32245] ? is_bpf_text_address+0x292/0x2b0 [ 770.122304][T32245] ? kernel_text_address+0xa5/0xe0 [ 770.122328][T32245] ? unwind_get_return_address+0x4d/0x90 [ 770.122354][T32245] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 770.122378][T32245] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 770.122426][T32245] ? kasan_save_track+0x4f/0x80 [ 770.122444][T32245] ? kasan_save_track+0x3e/0x80 [ 770.122460][T32245] ? __kasan_slab_alloc+0x6c/0x80 [ 770.122478][T32245] ? kmem_cache_alloc_bulk_noprof+0x570/0x7e0 [ 770.122504][T32245] __netif_receive_skb_list_core+0x24d/0x810 [ 770.122542][T32245] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 770.122577][T32245] netif_receive_skb_list_internal+0x995/0xcf0 [ 770.122604][T32245] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 770.122628][T32245] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 770.122663][T32245] ? __xdp_build_skb_from_frame+0x34b/0x730 [ 770.122697][T32245] netif_receive_skb_list+0x55/0x4b0 [ 770.122717][T32245] ? bpf_test_run_xdp_live+0x1921/0x1cf0 [ 770.122745][T32245] bpf_test_run_xdp_live+0x1946/0x1cf0 [ 770.122792][T32245] ? bpf_test_run_xdp_live+0x438/0x1cf0 [ 770.122829][T32245] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 770.122876][T32245] ? 0xffffffffa0201a50 [ 770.122894][T32245] ? 0xffffffffa02043ac [ 770.122941][T32245] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 770.122977][T32245] ? _copy_from_user+0x94/0xb0 [ 770.123006][T32245] ? bpf_test_init+0x113/0x150 [ 770.123028][T32245] ? xdp_convert_md_to_buff+0x5b/0x330 [ 770.123056][T32245] bpf_prog_test_run_xdp+0x81c/0x1160 [ 770.123099][T32245] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 770.123139][T32245] ? __fget_files+0x2a/0x420 [ 770.123173][T32245] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 770.123196][T32245] bpf_prog_test_run+0x2c7/0x340 [ 770.123220][T32245] __sys_bpf+0x643/0x950 [ 770.123251][T32245] ? __pfx___sys_bpf+0x10/0x10 [ 770.123298][T32245] ? ksys_write+0x242/0x270 [ 770.123321][T32245] ? __pfx_ksys_write+0x10/0x10 [ 770.123351][T32245] __x64_sys_bpf+0x7c/0x90 [ 770.123380][T32245] do_syscall_64+0x14d/0xf80 [ 770.123407][T32245] ? trace_irq_disable+0x3b/0x150 [ 770.123434][T32245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.123455][T32245] ? clear_bhb_loop+0x40/0x90 [ 770.123481][T32245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.123499][T32245] RIP: 0033:0x7fa00519c799 [ 770.123518][T32245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 770.123534][T32245] RSP: 002b:00007fa0060f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 770.123556][T32245] RAX: ffffffffffffffda RBX: 00007fa005415fa0 RCX: 00007fa00519c799 [ 770.123571][T32245] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 770.123584][T32245] RBP: 00007fa0060f2090 R08: 0000000000000000 R09: 0000000000000000 [ 770.123597][T32245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 770.123610][T32245] R13: 00007fa005416038 R14: 00007fa005415fa0 R15: 00007ffff9b51e18 [ 770.123646][T32245] [ 770.649319][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.788852][T22440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.949464][T32248] netlink: 'syz.3.6371': attribute type 1 has an invalid length. [ 771.035766][T32247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6371'. [ 771.062651][T32247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6371'. [ 771.367344][T32261] IPVS: set_ctl: invalid protocol: 136 172.20.20.10:20002 [ 771.635098][T32268] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6379'. [ 771.666640][T32268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6379'. [ 771.753152][T31563] Bluetooth: hci0: command tx timeout [ 771.820246][T22440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.902066][T32126] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 771.944871][T32126] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 772.000142][T32126] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 772.025822][T32126] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 772.062286][T32282] lo speed is unknown, defaulting to 1000 [ 772.324949][T32126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 772.475555][T32304] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 772.491739][T32126] 8021q: adding VLAN 0 to HW filter on device team0 [ 772.532029][T21227] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.539427][T21227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 772.578886][T10500] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.586106][T10500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 772.755031][T32126] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 772.788111][T32126] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 772.796028][T32315] netlink: 'syz.4.6392': attribute type 1 has an invalid length. [ 772.828475][T32282] lo speed is unknown, defaulting to 1000 [ 772.866258][T32317] netlink: 'syz.0.6391': attribute type 1 has an invalid length. [ 772.878770][T22440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.899236][T32317] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6391'. [ 773.002857][T32324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6390'. [ 773.176600][T32326] geneve1: entered promiscuous mode [ 773.401784][T32342] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 773.416056][T32126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 773.640509][T32126] veth0_vlan: entered promiscuous mode [ 773.733765][T32126] veth1_vlan: entered promiscuous mode [ 773.821450][T31563] Bluetooth: hci0: command tx timeout [ 773.903924][T22442] net_ratelimit: 1 callbacks suppressed [ 773.903947][T22442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.905146][T32126] veth0_macvtap: entered promiscuous mode [ 773.961066][T32126] veth1_macvtap: entered promiscuous mode [ 774.034864][T32126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 774.081043][T32126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 774.172631][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.187015][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.258605][T32363] lo speed is unknown, defaulting to 1000 [ 774.265442][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.280589][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.558681][T25820] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 774.577488][T25820] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 774.846843][T25820] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 774.870369][T25820] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 774.943652][T22442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.134315][T32381] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6407'. [ 775.168792][T32382] netlink: 'syz.1.6408': attribute type 2 has an invalid length. [ 775.205729][T32363] lo speed is unknown, defaulting to 1000 [ 775.293362][T32382] netlink: 'syz.1.6408': attribute type 2 has an invalid length. [ 775.324143][T32389] netlink: 'syz.0.6410': attribute type 4 has an invalid length. [ 775.349695][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.391833][T32389] netlink: 'syz.0.6410': attribute type 4 has an invalid length. [ 775.481629][T32395] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6412'. [ 775.516179][T32395] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6412'. [ 775.540038][T32396] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6412'. [ 775.632462][T32389] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.640589][T32389] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.662728][T32389] team_slave_0: left promiscuous mode [ 775.668296][T32389] team_slave_1: left promiscuous mode [ 775.772260][T32389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 775.784312][T32389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 775.822492][T32389] tipc: Resetting bearer [ 775.892389][T32389] erspan0: left allmulticast mode [ 775.950121][T21227] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.965495][T21227] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.999935][T21227] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.011004][T21227] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.053625][T32411] lo speed is unknown, defaulting to 1000 [ 776.528680][T32411] lo speed is unknown, defaulting to 1000 [ 776.723038][T32440] netlink: 43 bytes leftover after parsing attributes in process `syz.3.6426'. [ 777.162018][T32444] lo speed is unknown, defaulting to 1000 [ 777.213805][T32455] netlink: 'syz.0.6428': attribute type 16 has an invalid length. [ 777.222188][T32455] netlink: 'syz.0.6428': attribute type 17 has an invalid length. [ 777.231670][T32456] netlink: 'syz.3.6427': attribute type 1 has an invalid length. [ 777.256168][T32456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6427'. [ 777.269428][T32449] netlink: 'syz.0.6428': attribute type 16 has an invalid length. [ 777.306314][T32449] netlink: 'syz.0.6428': attribute type 17 has an invalid length. [ 777.450695][T32455] syzkaller0: entered promiscuous mode [ 777.470859][T32455] syzkaller0: entered allmulticast mode [ 778.477183][T32461] ip6t_srh: unknown srh match flags 4000 [ 780.536263][T32444] lo speed is unknown, defaulting to 1000 [ 780.677387][T32468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6430'. [ 780.743033][T32470] bond2: option updelay: invalid value (18446744072924056005) [ 780.761076][T32470] bond2: option updelay: allowed values 0 - 2147483647 [ 780.787831][T32470] bond2 (unregistering): Released all slaves [ 780.824797][T32468] "syz.0.6430" (32468) uses obsolete ecb(arc4) skcipher [ 781.006654][T32478] geneve2: entered allmulticast mode [ 781.072196][T32481] tunl0: Caught tx_queue_len zero misconfig [ 781.228119][T32480] bond2: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 781.432702][T32496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6437'. [ 781.478130][T32495] netlink: 'syz.4.6438': attribute type 10 has an invalid length. [ 781.534292][T32496] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6437'. [ 781.543810][T32496] netlink: 'syz.0.6437': attribute type 7 has an invalid length. [ 781.555985][T32499] netlink: 'syz.4.6438': attribute type 10 has an invalid length. [ 781.564519][T32496] netlink: 'syz.0.6437': attribute type 8 has an invalid length. [ 781.574053][T32496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6437'. [ 781.626191][T32495] team0: Port device dummy0 added [ 781.693732][T32499] team0: Port device dummy0 removed [ 781.746296][T32499] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 781.843703][T32504] netlink: 'syz.0.6439': attribute type 12 has an invalid length. [ 782.377721][T32520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6441'. [ 782.904788][T32524] syzkaller1: entered promiscuous mode [ 782.924585][T32524] syzkaller1: entered allmulticast mode [ 783.031336][T32524] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 783.416212][T32531] syzkaller0: entered promiscuous mode [ 783.452580][T32531] syzkaller0: entered allmulticast mode [ 787.184938][T32590] netlink: 'syz.4.6456': attribute type 1 has an invalid length. [ 787.947273][T32590] 8021q: adding VLAN 0 to HW filter on device bond1 [ 788.397910][T32613] xt_hashlimit: max too large, truncated to 1048576 [ 788.476526][T32619] netlink: 'syz.2.6466': attribute type 1 has an invalid length. [ 788.506504][T32619] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 788.657713][T32622] bond2: invalid ARP target 0.0.0.0 specified for addition [ 788.666481][T32622] bond2: option arp_ip_target: invalid value (0) [ 788.688559][T32622] bond2 (unregistering): Released all slaves [ 789.100524][T32656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6476'. [ 789.136282][T32656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6476'. [ 789.142012][T21227] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 789.153855][T32658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6476'. [ 789.157443][T21227] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 789.176476][T32658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6476'. [ 789.179089][T25820] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 789.204010][T25820] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 789.327835][T32663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6478'. [ 789.337963][T32663] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6478'. [ 789.736072][T32671] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6481'. [ 789.940562][T32683] Bluetooth: MGMT ver 1.23 [ 790.169386][T32700] xt_CT: No such helper "syz0" [ 790.180850][T32696] syzkaller0: entered promiscuous mode [ 790.189966][T32696] syzkaller0: entered allmulticast mode [ 790.333333][T32696] x_tables: duplicate underflow at hook 2 [ 790.626981][T32722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6496'. [ 790.821097][T32732] sctp: [Deprecated]: syz.0.6499 (pid 32732) Use of int in max_burst socket option deprecated. [ 790.821097][T32732] Use struct sctp_assoc_value instead [ 791.018959][T32747] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6502'. [ 791.081177][T32749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6504'. [ 791.090796][T32749] 8021q: VLANs not supported on vcan0 [ 791.493030][ T300] lo speed is unknown, defaulting to 1000 [ 792.114172][ T300] lo speed is unknown, defaulting to 1000 [ 792.503326][ T369] netlink: 'syz.1.6527': attribute type 1 has an invalid length. [ 792.712015][ T373] lo speed is unknown, defaulting to 1000 [ 793.602871][ T401] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.610776][ T401] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.029908][ T401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 794.048124][ T401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 794.517850][ T373] lo speed is unknown, defaulting to 1000 [ 794.536329][ T49] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.564284][ T49] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.583153][ T49] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.596625][ T49] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.697833][ T425] __nla_validate_parse: 6 callbacks suppressed [ 794.697855][ T425] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6537'. [ 794.950061][ T434] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6541'. [ 795.109918][ T442] netlink: 'syz.2.6541': attribute type 11 has an invalid length. [ 795.139967][ T442] netlink: 'syz.2.6541': attribute type 23 has an invalid length. [ 795.158568][ T442] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6541'. [ 795.417082][ T453] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6545'. [ 795.952405][ T466] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6548'. [ 796.007509][ T469] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6548'. [ 796.079870][ T471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6549'. [ 796.162387][ T479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6551'. [ 796.284274][ T481] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6550'. [ 796.452306][ T488] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6552'. [ 796.722176][ T500] netlink: 'syz.2.6555': attribute type 1 has an invalid length. [ 796.930777][ T506] tipc: Enabled bearer , priority 0 [ 796.961342][ T506] syzkaller0: entered promiscuous mode [ 796.971113][ T506] syzkaller0: entered allmulticast mode [ 797.011499][ T506] tipc: Resetting bearer [ 797.061088][ T504] tipc: Resetting bearer [ 797.173061][ T504] tipc: Disabling bearer [ 797.979347][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 798.311210][ T557] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.433949][ T557] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.554007][ T557] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.605834][ T578] netlink: 'syz.1.6574': attribute type 1 has an invalid length. [ 798.628618][ T578] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 798.714042][ T557] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.948377][ T1090] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.005288][T25820] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.067323][T10495] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.122410][T10495] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.436461][ T617] team_slave_0: entered allmulticast mode [ 799.625254][ T624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 799.670319][ T624] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 799.711088][ T628] __nla_validate_parse: 6 callbacks suppressed [ 799.711110][ T628] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6590'. [ 800.204850][ T671] lo speed is unknown, defaulting to 1000 [ 800.568053][ T671] lo speed is unknown, defaulting to 1000 [ 800.596677][ T688] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6605'. [ 800.893064][ T697] netlink: 'syz.1.6609': attribute type 3 has an invalid length. [ 801.027162][ T701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6611'. [ 801.127234][ T706] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6612'. [ 801.240225][ T708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6613'. [ 801.255666][ T713] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6612'. [ 801.360374][ T708] syzkaller0: entered promiscuous mode [ 801.380989][ T718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6615'. [ 801.383730][ T708] syzkaller0: entered allmulticast mode [ 801.410783][ T722] openvswitch: netlink: IP tunnel TTL not specified. [ 801.784186][ T734] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6618'. [ 802.318198][ T746] xt_cgroup: path and classid specified [ 802.373408][ T734] lo speed is unknown, defaulting to 1000 [ 802.753169][ T753] lo speed is unknown, defaulting to 1000 [ 802.800481][ T734] lo speed is unknown, defaulting to 1000 [ 802.880080][ T756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6623'. [ 803.117463][ T759] tipc: Started in network mode [ 803.130542][ T759] tipc: Node identity 6a8356cc9db1, cluster identity 4711 [ 803.148192][ T759] tipc: Enabled bearer , priority 0 [ 803.166097][ T759] syzkaller0: entered promiscuous mode [ 803.178567][ T759] syzkaller0: entered allmulticast mode [ 803.239825][ T759] tipc: Resetting bearer [ 803.258078][ T758] tipc: Resetting bearer [ 803.307655][ T758] tipc: Disabling bearer [ 803.358538][ T753] lo speed is unknown, defaulting to 1000 [ 803.639182][ T767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6627'. [ 803.915245][ T773] syzkaller0: entered promiscuous mode [ 803.921082][ T773] syzkaller0: entered allmulticast mode [ 804.099426][ T779] netlink: 'syz.4.6630': attribute type 83 has an invalid length. [ 804.443489][ T6136] lec:lec_start_xmit: lec0:No lecd attached [ 804.570965][T11024] IPVS: starting estimator thread 0... [ 804.669757][ T799] IPVS: using max 28 ests per chain, 67200 per kthread [ 804.800486][ T802] lo speed is unknown, defaulting to 1000 [ 805.139977][ T816] __nla_validate_parse: 5 callbacks suppressed [ 805.140003][ T816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6640'. [ 805.209368][ T817] netlink: 'syz.2.6639': attribute type 1 has an invalid length. [ 805.472886][ T825] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6639'. [ 805.494277][ T817] 8021q: adding VLAN 0 to HW filter on device bond1 [ 805.703529][ T822] bond1: (slave veth3): Enslaving as an active interface with a down link [ 805.786818][ T824] bond1: (slave dummy0): making interface the new active one [ 805.797092][ T824] dummy0: entered promiscuous mode [ 805.803366][ T824] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 805.860634][ T825] bond1: (slave dummy0): Releasing active interface [ 805.867495][ T825] dummy0 (unregistering): left promiscuous mode [ 805.909817][ T802] lo speed is unknown, defaulting to 1000 [ 806.377689][ T831] bond0: (slave rose0): Error: Device can not be enslaved while up [ 806.579968][ T843] openvswitch: netlink: Flow actions attr not present in new flow. [ 807.087021][ T861] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 807.365592][ T874] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6652'. [ 807.511777][ T878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6653'. [ 807.696101][ T877] lo speed is unknown, defaulting to 1000 [ 808.131462][ T892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6657'. [ 808.225450][ T892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6657'. [ 808.456298][ T877] lo speed is unknown, defaulting to 1000 [ 808.573567][ T900] netlink: 'syz.3.6659': attribute type 2 has an invalid length. [ 808.584457][ T900] netlink: 'syz.3.6659': attribute type 2 has an invalid length. [ 808.916117][ T907] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6660'. [ 808.947775][ T907] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 809.067970][ T894] rdma_rxe: rxe_newlink: failed to add lo [ 809.411984][ T932] xt_hashlimit: size too large, truncated to 1048576 [ 809.469896][ T928] ipvlan2: entered allmulticast mode [ 809.512188][ T928] veth0_vlan: entered allmulticast mode [ 810.059684][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5610 ms [ 810.067876][ C1] lec:lec_tx_timeout: lec0 [ 810.073210][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 810.251160][ T969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6667'. [ 810.330366][ T967] netlink: 'syz.1.6671': attribute type 12 has an invalid length. [ 810.366149][ T967] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6671'. [ 810.420961][ T963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6669'. [ 810.464847][ T972] IPv6: sit1: Disabled Multicast RS [ 810.673750][ T988] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6676'. [ 811.614970][ T1044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6691'. [ 811.639424][ T1044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6691'. [ 811.689458][ T1044] IPVS: set_ctl: invalid protocol: 8256 0.32.0.0:768 [ 811.712628][ T1055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6693'. [ 811.760932][ T1055] netlink: 'syz.4.6693': attribute type 1 has an invalid length. [ 811.826044][ T1066] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6695'. [ 811.837633][ T1069] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6693'. [ 812.578074][ T1098] lo speed is unknown, defaulting to 1000 [ 812.935901][ T1106] netlink: 'syz.3.6707': attribute type 4 has an invalid length. [ 812.957879][ T1106] netlink: 240 bytes leftover after parsing attributes in process `syz.3.6707'. [ 813.180221][ T1098] lo speed is unknown, defaulting to 1000 [ 814.095360][ T1142] only policy match revision 0 supported [ 814.095386][ T1142] unable to load match [ 814.602744][ T1162] lo speed is unknown, defaulting to 1000 [ 814.722881][ T1164] lo speed is unknown, defaulting to 1000 [ 815.089067][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 815.097209][ C1] lec:lec_tx_timeout: lec0 [ 815.263613][ T1162] lo speed is unknown, defaulting to 1000 [ 815.324133][ T1199] __nla_validate_parse: 2 callbacks suppressed [ 815.324154][ T1199] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6728'. [ 815.427358][ T1201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6729'. [ 815.449347][ T1201] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6729'. [ 815.539507][ T1208] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 815.690667][ T1217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6734'. [ 815.731798][ T1221] netlink: 'syz.2.6736': attribute type 2 has an invalid length. [ 815.756587][ T1221] netlink: 'syz.2.6736': attribute type 1 has an invalid length. [ 815.758441][ T1219] netlink: 'syz.0.6735': attribute type 1 has an invalid length. [ 815.776865][ T1221] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6736'. [ 815.925868][ T1219] bond4: entered promiscuous mode [ 815.931450][ T1219] bond4: entered allmulticast mode [ 815.937200][ T1219] 8021q: adding VLAN 0 to HW filter on device bond4 [ 815.998900][ T1229] x_tables: duplicate underflow at hook 1 [ 816.141297][ T1234] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6735'. [ 816.177884][ T1223] macvlan3: entered promiscuous mode [ 816.315512][ T1223] macvlan3: entered allmulticast mode [ 816.387971][ T1223] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 816.421058][ T1248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6742'. [ 816.553752][ T1164] lo speed is unknown, defaulting to 1000 [ 816.821866][ T1257] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 816.821933][ T1261] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6743'. [ 816.843950][T22436] IPVS: starting estimator thread 0... [ 817.040354][ T1262] IPVS: using max 28 ests per chain, 67200 per kthread [ 817.130618][ T1266] netlink: 'syz.1.6746': attribute type 3 has an invalid length. [ 817.337751][ T1271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6748'. [ 817.452579][ T1279] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6748'. [ 817.635802][ T1282] lo speed is unknown, defaulting to 1000 [ 818.650382][ T1282] lo speed is unknown, defaulting to 1000 [ 818.673229][ T1318] mac80211_hwsim hwsim101 syzkaller0: entered promiscuous mode [ 818.681574][ T1318] mac80211_hwsim hwsim101 syzkaller0: entered allmulticast mode [ 818.691322][ T1317] tipc: Started in network mode [ 818.698309][ T1317] tipc: Node identity 080211, cluster identity 4711 [ 818.710216][ T1317] tipc: Enabled bearer , priority 0 [ 818.821638][ T1322] tipc: Enabling of bearer rejected, already enabled [ 818.849843][ T1322] tipc: Resetting bearer [ 818.913440][ T1295] lo speed is unknown, defaulting to 1000 [ 819.445039][ T1347] netlink: 'syz.0.6760': attribute type 1 has an invalid length. [ 819.544044][ T1295] lo speed is unknown, defaulting to 1000 [ 819.707500][T21227] tipc: Resetting bearer [ 819.767987][T22436] tipc: Node number set to 134353152 [ 819.799686][ T1352] netlink: 'syz.0.6762': attribute type 1 has an invalid length. [ 819.807613][ T1352] netlink: 'syz.0.6762': attribute type 1 has an invalid length. [ 820.126479][ T1359] bond5: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 820.147938][ T1359] bond5 (unregistering): Released all slaves [ 820.494038][ T1363] netlink: 'syz.0.6766': attribute type 3 has an invalid length. [ 820.653345][ T1365] bond3: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 820.685921][ T1365] bond3 (unregistering): Released all slaves [ 820.797731][ T30] audit: type=1800 audit(1772427133.328:20): pid=1371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6767" name="memory.events" dev="tmpfs" ino=885 res=0 errno=0 [ 821.153515][T25820] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.171140][ T1380] __nla_validate_parse: 11 callbacks suppressed [ 821.171166][ T1380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6769'. [ 821.197328][ T1380] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 821.243436][T25820] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.277333][T25820] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.319222][T25820] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.457036][ T1395] netlink: 'syz.0.6774': attribute type 1 has an invalid length. [ 821.540516][ T1400] openvswitch: netlink: IPv4 tun info is not correct [ 822.015831][ T1433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6784'. [ 822.081341][ T1425] tipc: Resetting bearer [ 823.012647][ T1425] tipc: Resetting bearer [ 823.062432][ T1480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6795'. [ 823.072144][ T1480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6795'. [ 823.107465][ T1480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6795'. [ 823.157309][ T1482] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 823.171216][ T1486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6795'. [ 823.306259][ T1486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6795'. [ 823.339251][ T1486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6795'. [ 823.396662][ T1495] xt_ecn: cannot match TCP bits for non-tcp packets [ 823.414739][ T1496] erspan0: left promiscuous mode [ 823.521842][ T1496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 823.547290][ T1496] 8021q: adding VLAN 0 to HW filter on device team0 [ 823.617575][ T1496] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 823.681406][ T1497] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6800'. [ 823.890568][ T1529] netlink: 'syz.4.6807': attribute type 61 has an invalid length. [ 823.928250][ T1529] netlink: 'syz.4.6807': attribute type 62 has an invalid length. [ 823.939486][ T1533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6806'. [ 824.722741][ T1566] bond2: entered promiscuous mode [ 824.779743][ T1566] 8021q: adding VLAN 0 to HW filter on device bond2 [ 824.995783][ T1583] bond4: entered promiscuous mode [ 825.069114][ T1583] macvlan2: entered promiscuous mode [ 825.097217][ T1583] macvlan2: entered allmulticast mode [ 825.122086][ T1583] bond4: (slave macvlan2): Opening slave failed [ 825.241608][ T1598] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 825.464049][ T1606] netlink: 'syz.0.6827': attribute type 1 has an invalid length. [ 825.500915][ T1606] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 825.565059][ T1613] netlink: 'syz.1.6829': attribute type 1 has an invalid length. [ 825.637626][ T1613] netlink: 'syz.1.6829': attribute type 2 has an invalid length. [ 825.671003][ T1614] lo speed is unknown, defaulting to 1000 [ 825.724340][ T1613] netlink: 'syz.1.6829': attribute type 1 has an invalid length. [ 825.759217][ T1613] netlink: 'syz.1.6829': attribute type 3 has an invalid length. [ 826.261984][ T1657] syz_tun: entered allmulticast mode [ 826.317698][ T1614] lo speed is unknown, defaulting to 1000 [ 826.327415][ T1657] __nla_validate_parse: 3 callbacks suppressed [ 826.327436][ T1657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6842'. [ 826.452112][ T1657] syz_tun (unregistering): left allmulticast mode [ 826.494217][ T30] audit: type=1107 audit(1772427139.028:21): pid=1661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 826.622065][ T1667] netlink: 'syz.2.6845': attribute type 29 has an invalid length. [ 826.640757][ T1667] netlink: 'syz.2.6845': attribute type 29 has an invalid length. [ 826.784507][ T1672] lo speed is unknown, defaulting to 1000 [ 826.842263][ T1667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6845'. [ 827.023313][ T1667] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6845'. [ 827.046424][ T1681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6849'. [ 827.067078][ T1677] syzkaller0: entered promiscuous mode [ 827.074942][ T1677] syzkaller0: entered allmulticast mode [ 827.085550][ T1681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6849'. [ 827.100769][ T1677] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6847'. [ 827.113582][ T1677] 0: reclassify loop, rule prio 0, protocol 800 [ 827.258685][ T1672] lo speed is unknown, defaulting to 1000 [ 827.295311][ T1688] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6851'. [ 827.857953][ T1691] lo speed is unknown, defaulting to 1000 [ 828.151632][ T1709] tipc: Enabling of bearer rejected, failed to enable media [ 828.389309][ T1714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6858'. [ 828.435209][ T1718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6858'. [ 828.977051][ T1691] lo speed is unknown, defaulting to 1000 [ 829.096452][ T1733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6863'. [ 829.240703][ T1735] netlink: 'syz.0.6863': attribute type 4 has an invalid length. [ 829.381975][ T1733] 8021q: adding VLAN 0 to HW filter on device bond5 [ 829.422187][ T1735] .`: renamed from bond0 (while UP) [ 830.584561][ T1768] syzkaller0: entered promiscuous mode [ 830.599148][ T1768] syzkaller0: entered allmulticast mode [ 830.736841][T10500] bridge_slave_0: left allmulticast mode [ 830.743672][T10500] bridge_slave_0: left promiscuous mode [ 830.756448][T10500] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.298561][T10500] bond11 (unregistering): (slave gretap2): Releasing active interface [ 831.373558][T10500] tipc: Disabling bearer [ 831.429152][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 831.469147][T10500] bond1 (unregistering): (slave bridge1): Releasing active interface [ 831.568033][ T1804] __nla_validate_parse: 5 callbacks suppressed [ 831.568055][ T1804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6879'. [ 831.585013][ T1804] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6879'. [ 831.585021][ T1805] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6879'. [ 831.585534][ T1805] netlink: 91 bytes leftover after parsing attributes in process `syz.3.6879'. [ 831.824138][T10500] bond11 (unregistering): (slave bridge9): Releasing active interface [ 831.917102][T10500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 831.926537][T10500] bond_slave_0: left promiscuous mode [ 831.933555][T10500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 831.943066][T10500] bond_slave_1: left promiscuous mode [ 831.948949][T10500] bond0 (unregistering): Released all slaves [ 831.960345][T10500] bond1 (unregistering): Released all slaves [ 831.974009][T10500] bond2 (unregistering): Released all slaves [ 831.987576][T10500] bond3 (unregistering): Released all slaves [ 832.010660][T10500] bond4 (unregistering): (slave lo): Releasing backup interface [ 832.019792][T10500] bond4 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 832.031594][T10500] bond4 (unregistering): Released all slaves [ 832.047021][T10500] bond5 (unregistering): Released all slaves [ 832.061391][T10500] bond6 (unregistering): Released all slaves [ 832.082494][T10500] bond7 (unregistering): Released all slaves [ 832.097311][T10500] bond8 (unregistering): Released all slaves [ 832.111427][T10500] bond9 (unregistering): Released all slaves [ 832.128667][T10500] bond10 (unregistering): Released all slaves [ 832.146474][T10500] bond11 (unregistering): Released all slaves [ 832.161774][T10500] bond12 (unregistering): Released all slaves [ 832.175122][ T1787] wg2: entered allmulticast mode [ 832.183671][ T1792] kthread_run failed with err -4 [ 832.227084][ T1794] pim6reg: entered allmulticast mode [ 832.252865][ T1796] bond0: ARP target 170.170.170.170 is already present [ 832.270991][ T1796] bond0: option arp_ip_target: invalid value (2863311530) [ 832.321382][ T1808] netlink: 'syz.1.6880': attribute type 4 has an invalid length. [ 832.820285][ T1829] netlink: 'syz.2.6887': attribute type 2 has an invalid length. [ 832.828315][ T1829] netlink: 'syz.2.6887': attribute type 9 has an invalid length. [ 832.846606][ T1829] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6887'. [ 833.030553][ T1835] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6887'. [ 835.612155][ T1840] lo speed is unknown, defaulting to 1000 [ 835.642834][ T1853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6890'. [ 835.790038][ T1862] netlink: 'syz.2.6893': attribute type 1 has an invalid length. [ 835.868109][ T1871] FAULT_INJECTION: forcing a failure. [ 835.868109][ T1871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 835.953155][ T1871] CPU: 1 UID: 0 PID: 1871 Comm: syz.4.6895 Not tainted syzkaller #0 PREEMPT(full) [ 835.953187][ T1871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 835.953200][ T1871] Call Trace: [ 835.953209][ T1871] [ 835.953218][ T1871] dump_stack_lvl+0xe8/0x150 [ 835.953256][ T1871] should_fail_ex+0x412/0x560 [ 835.953298][ T1871] _copy_to_user+0x31/0xb0 [ 835.953331][ T1871] simple_read_from_buffer+0xe1/0x170 [ 835.953365][ T1871] proc_fail_nth_read+0x1bb/0x230 [ 835.953396][ T1871] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 835.953436][ T1871] ? rw_verify_area+0x2a6/0x4d0 [ 835.953457][ T1871] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 835.953487][ T1871] vfs_read+0x20c/0xa70 [ 835.953506][ T1871] ? fdget_pos+0x246/0x320 [ 835.953541][ T1871] ? __pfx___mutex_lock+0x10/0x10 [ 835.953572][ T1871] ? __pfx_vfs_read+0x10/0x10 [ 835.953595][ T1871] ? __fget_files+0x2a/0x420 [ 835.953629][ T1871] ? __fget_files+0x3a0/0x420 [ 835.953656][ T1871] ? __fget_files+0x2a/0x420 [ 835.953694][ T1871] ksys_read+0x150/0x270 [ 835.953718][ T1871] ? __pfx_ksys_read+0x10/0x10 [ 835.953753][ T1871] do_syscall_64+0x14d/0xf80 [ 835.953781][ T1871] ? trace_irq_disable+0x3b/0x150 [ 835.953809][ T1871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.953830][ T1871] ? clear_bhb_loop+0x40/0x90 [ 835.953856][ T1871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.953876][ T1871] RIP: 0033:0x7fc47995cfce [ 835.953897][ T1871] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 835.953915][ T1871] RSP: 002b:00007fc47a8a0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 835.953938][ T1871] RAX: ffffffffffffffda RBX: 00007fc47a8a16c0 RCX: 00007fc47995cfce [ 835.953954][ T1871] RDX: 000000000000000f RSI: 00007fc47a8a10a0 RDI: 0000000000000004 [ 835.953967][ T1871] RBP: 00007fc47a8a1090 R08: 0000000000000000 R09: 0000000000000000 [ 835.953979][ T1871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 835.953992][ T1871] R13: 00007fc479c16038 R14: 00007fc479c15fa0 R15: 00007ffd003303a8 [ 835.954028][ T1871] [ 836.292903][ T1885] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6900'. [ 836.412785][ T1840] lo speed is unknown, defaulting to 1000 [ 836.801248][ T1898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6902'. [ 836.816169][ T1903] lo speed is unknown, defaulting to 1000 [ 837.159167][ T1920] xt_CT: No such helper "pptp" [ 837.234302][ T1924] tipc: Enabling of bearer rejected, failed to enable media [ 837.717755][ T1930] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6906'. [ 837.769281][ T1903] lo speed is unknown, defaulting to 1000 [ 837.842710][ T1946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6917'. [ 837.889324][ T1946] openvswitch: netlink: Flow actions attr not present in new flow. [ 838.618296][ T1964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6925'. [ 838.660881][ T1964] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6925'. [ 838.761239][ T1971] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6926'. [ 838.793122][ T1971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6926'. [ 838.889769][ T1973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 839.110283][ T1993] netlink: 'syz.4.6932': attribute type 1 has an invalid length. [ 839.225654][ T1991] veth3: entered promiscuous mode [ 839.289352][ T2000] netlink: 'syz.3.6936': attribute type 1 has an invalid length. [ 839.353704][ T2002] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6936'. [ 839.355356][ T2000] bond5: entered promiscuous mode [ 839.368673][ T2000] 8021q: adding VLAN 0 to HW filter on device bond5 [ 839.376473][ T1992] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6933'. [ 839.425095][ T2002] bond5: entered allmulticast mode [ 839.438582][ T2005] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 839.460584][ T2005] batadv_slave_0: entered promiscuous mode [ 839.495037][ T2000] bond5: (slave bridge3): making interface the new active one [ 839.523957][ T2000] bridge3: entered promiscuous mode [ 839.540898][ T2000] bridge3: entered allmulticast mode [ 839.546896][ T2009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6939'. [ 839.559659][ T2000] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 839.585865][ T2004] batadv_slave_0: left promiscuous mode [ 839.648025][ T2009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 840.872138][ T2075] netlink: 'syz.0.6958': attribute type 4 has an invalid length. [ 840.933716][ T2083] netlink: 'syz.1.6960': attribute type 1 has an invalid length. [ 841.175784][ T2092] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 841.259509][T31563] Bluetooth: hci1: command 0x0405 tx timeout [ 851.901792][ T5838] Bluetooth: hci5: command 0x0406 tx timeout [ 860.061416][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 867.490005][ T6136] lec:lec_start_xmit: lec0:No lecd attached [ 870.301954][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 872.379643][T31563] Bluetooth: hci4: command 0x0406 tx timeout [ 873.019384][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5530 ms [ 873.027435][ C1] lec:lec_tx_timeout: lec0 [ 873.032148][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 878.059741][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 878.067878][ C1] lec:lec_tx_timeout: lec0 [ 878.639450][ T2107] bond3: entered promiscuous mode [ 878.646314][ T2107] 8021q: adding VLAN 0 to HW filter on device bond3 [ 878.988233][ T2135] geneve2: entered promiscuous mode [ 879.463103][ T2150] __nla_validate_parse: 3 callbacks suppressed [ 879.463124][ T2150] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6978'. [ 879.695710][ T2165] syzkaller0: entered promiscuous mode [ 879.702372][ T2165] syzkaller0: entered allmulticast mode [ 879.933062][ T2184] vlan2: entered promiscuous mode [ 879.943068][ T2184] bridge0: entered promiscuous mode [ 880.272849][ T2206] netlink: 'syz.1.6995': attribute type 1 has an invalid length. [ 880.765678][ T2224] netlink: 'syz.2.7001': attribute type 7 has an invalid length. [ 880.774657][ T2224] netlink: 'syz.2.7001': attribute type 5 has an invalid length. [ 880.796771][ T2224] netlink: 17 bytes leftover after parsing attributes in process `syz.2.7001'. [ 882.623649][T31563] Bluetooth: hci1: command 0x0405 tx timeout [ 882.999649][ T2208] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6996'. [ 883.008849][ T2208] ip6tnl0: Caught tx_queue_len zero misconfig [ 883.295156][ T2249] lo speed is unknown, defaulting to 1000 [ 883.369990][ T2251] nft_compat: unsupported protocol 0 [ 883.679387][ T2279] pimreg: entered allmulticast mode [ 883.806433][ T2282] tipc: Started in network mode [ 883.819318][ T2282] tipc: Node identity 9e77497c4516, cluster identity 4711 [ 883.829667][ T2282] tipc: Enabled bearer , priority 0 [ 883.868014][ T2282] tipc: Resetting bearer [ 883.879813][ T2282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7016'. [ 883.909199][ T2282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7016'. [ 884.040344][ T2280] tipc: Disabling bearer [ 884.173454][ T2249] lo speed is unknown, defaulting to 1000 [ 884.272323][ T2307] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7021'. [ 884.292998][ T2307] netlink: 220 bytes leftover after parsing attributes in process `syz.4.7021'. [ 884.315809][ T2307] netlink: 220 bytes leftover after parsing attributes in process `syz.4.7021'. [ 884.335804][ T2307] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7021'. [ 884.428013][ T2310] netlink: 165 bytes leftover after parsing attributes in process `syz.3.7023'. [ 884.451997][ T2310] hsr0: entered promiscuous mode [ 884.457001][ T2310] hsr0: entered allmulticast mode [ 884.462629][ T2310] hsr_slave_0: entered allmulticast mode [ 884.468411][ T2310] hsr_slave_1: entered allmulticast mode [ 884.511554][ T2260] siw: device registration error -23 [ 884.611931][ T2315] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7024'. [ 884.710905][ T2320] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.7026'. [ 884.835410][ T2323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7028'. [ 884.849805][ T2323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7028'. [ 884.855615][ T2326] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7027'. [ 884.870569][ T2323] netlink: 'syz.3.7028': attribute type 18 has an invalid length. [ 884.901855][ T2334] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0001 with DS=0x67 [ 885.062239][ T2323] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 885.075939][ T2345] netlink: 'syz.1.7034': attribute type 3 has an invalid length. [ 885.129602][ T2323] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.239727][ T2340] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7032'. [ 885.347640][ T2323] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 885.359457][ T2323] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.389985][ T2364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7037'. [ 885.505152][ T2323] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 885.515965][ T2323] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.592644][ T2374] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7040'. [ 885.685546][ T2378] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7041'. [ 885.844273][ T2323] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 885.863221][ T2323] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.168186][ T2405] pim6reg: entered allmulticast mode [ 886.232435][T21237] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 886.249417][T21237] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.285494][T21237] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 886.315308][T21237] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.337329][ T2410] netlink: 388 bytes leftover after parsing attributes in process `syz.4.7048'. [ 886.452998][ T1090] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 886.461722][ T1090] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.530307][ T1090] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 886.538558][ T1090] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.581232][ T2424] netlink: 'syz.2.7051': attribute type 1 has an invalid length. [ 886.661334][ T2424] 8021q: adding VLAN 0 to HW filter on device bond3 [ 886.678122][ T2428] vlan2: entered promiscuous mode [ 886.683683][ T2428] bond3: entered promiscuous mode [ 886.689546][ T2428] vlan2: entered allmulticast mode [ 886.694901][ T2428] bond3: entered allmulticast mode [ 886.824198][ T2439] syzkaller1: entered promiscuous mode [ 886.830530][ T2439] syzkaller1: entered allmulticast mode [ 886.839884][ T2439] netlink: 'syz.2.7054': attribute type 1 has an invalid length. [ 886.874708][ T2439] 8021q: adding VLAN 0 to HW filter on device bond4 [ 886.922467][ T2440] veth0_to_bridge: entered promiscuous mode [ 886.930484][ T2440] macvtap1: entered promiscuous mode [ 886.936232][ T2440] macvtap1: entered allmulticast mode [ 886.942138][ T2440] veth0_to_bridge: entered allmulticast mode [ 886.954772][ T2440] veth0_to_bridge: left allmulticast mode [ 886.961484][ T2440] veth0_to_bridge: left promiscuous mode [ 887.487142][ T2480] lo speed is unknown, defaulting to 1000 [ 887.797113][ T2480] lo speed is unknown, defaulting to 1000 [ 890.159222][ T2456] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 890.396384][ T2503] __nla_validate_parse: 18 callbacks suppressed [ 890.396408][ T2503] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7069'. [ 890.441520][ T2506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7068'. [ 890.469651][ T2506] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.523340][ T2506] bridge_slave_0 (unregistering): left allmulticast mode [ 890.533860][ T2506] bridge_slave_0 (unregistering): left promiscuous mode [ 890.542660][ T2506] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.559218][ T2508] iwpm_parse_nlmsg: Invalid attribute (msg type Query Mapping response ret = -34) [ 890.607581][ T2514] lo speed is unknown, defaulting to 1000 [ 890.750429][ T2517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7072'. [ 890.763494][ T2519] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7073'. [ 890.776375][ T2517] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 890.830715][ T2519] syzkaller1: entered promiscuous mode [ 890.836612][ T2519] syzkaller1: entered allmulticast mode [ 890.913992][ T2524] syzkaller0: entered promiscuous mode [ 890.919701][ T2524] syzkaller0: entered allmulticast mode [ 891.128456][ T2514] lo speed is unknown, defaulting to 1000 [ 892.024634][ T2565] lo speed is unknown, defaulting to 1000 [ 892.093494][ T2567] pim6reg1: entered promiscuous mode [ 892.099199][ T2567] pim6reg1: entered allmulticast mode [ 892.235245][ T2576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7087'. [ 892.514699][ T2582] bridge_slave_0: left allmulticast mode [ 892.537834][ T2582] bridge_slave_0: left promiscuous mode [ 892.559790][ T2582] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.582290][ T2582] bridge_slave_1: left allmulticast mode [ 892.588261][ T2582] bridge_slave_1: left promiscuous mode [ 892.623014][ T2582] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.650864][ T2582] .`: (slave bond_slave_0): Releasing backup interface [ 892.670844][ T2582] .`: (slave bond_slave_1): Releasing backup interface [ 892.697495][ T2582] team0: Port device team_slave_0 removed [ 892.711835][ T2582] team0: Port device team_slave_1 removed [ 892.727367][ T2582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 892.736841][ T2582] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 892.771576][ T2565] lo speed is unknown, defaulting to 1000 [ 893.010274][ T2598] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 893.021043][ T2600] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7094'. [ 893.032478][ T2601] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7094'. [ 893.063784][ T2598] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7093'. [ 893.226416][ T2615] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7096'. [ 893.271969][ T2615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7096'. [ 893.353969][ T2615] can: request_module (can-proto-4) failed. [ 893.793601][ T2631] netlink: 'syz.0.7101': attribute type 3 has an invalid length. [ 893.803172][ T2631] netlink: 'syz.0.7101': attribute type 1 has an invalid length. [ 893.811587][ T2631] NCSI netlink: No device for ifindex 808464432 [ 893.840849][ T2635] siw: device registration error -23 [ 894.010260][ T2643] netlink: 'syz.3.7105': attribute type 11 has an invalid length. [ 894.366108][ T2656] tipc: Enabled bearer , priority 0 [ 894.453207][ T2652] tipc: Disabling bearer [ 894.691290][T10495] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 894.702242][T10495] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 894.713963][T10495] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 894.722717][T10495] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 894.877647][ T2700] syzkaller0: entered promiscuous mode [ 894.883487][ T2700] syzkaller0: entered allmulticast mode [ 897.482374][ T2664] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 897.755156][ T49] bond0: (slave bond_slave_0): interface is now down [ 897.769105][ T2737] bond0: option arp_validate: invalid value (55553) [ 897.788857][ T49] bond0: (slave bond_slave_1): interface is now down [ 897.820822][ T49] bond0: (slave dummy0): interface is now down [ 897.843715][ T2730] __nla_validate_parse: 4 callbacks suppressed [ 897.843741][ T2730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7122'. [ 897.861243][ T49] bond0: (slave bond_slave_0): interface is now down [ 897.887406][ T49] bond0: (slave bond_slave_1): interface is now down [ 897.895523][ T49] bond0: (slave dummy0): interface is now down [ 897.936843][ T49] bond0: now running without any active interface! [ 898.491266][ T2774] xt_hashlimit: size too large, truncated to 1048576 [ 898.568903][ T2776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7134'. [ 930.680372][ T6136] lec:lec_start_xmit: lec0:No lecd attached [ 936.059130][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5380 ms [ 936.067246][ C1] lec:lec_tx_timeout: lec0 [ 936.072069][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 941.079087][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 941.087474][ C1] lec:lec_tx_timeout: lec0 [ 947.169538][ T2794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7136'. [ 947.214763][ T2800] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7137'. [ 947.221269][ T2797] bridge0: entered promiscuous mode [ 947.240671][ T2797] macsec1: entered promiscuous mode [ 947.632827][ T2819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7142'. [ 947.653450][ T2819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7142'. [ 947.690722][ T2819] netlink: 'syz.4.7142': attribute type 12 has an invalid length. [ 947.835418][ T2819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7142'. [ 947.864168][ T2819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7142'. [ 947.904375][ T2819] netlink: 'syz.4.7142': attribute type 12 has an invalid length. [ 947.983367][ T2833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7145'. [ 948.257541][ T2851] netlink: 'syz.1.7150': attribute type 12 has an invalid length. [ 948.352521][ T2849] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 948.409748][ T2849] team0 (unregistering): Port device team_slave_0 removed [ 948.453972][ T2849] team0 (unregistering): Failed to send options change via netlink (err -105) [ 948.523924][ T2849] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 948.555571][ T2849] team0 (unregistering): Port device team_slave_1 removed [ 948.706786][ T2862] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 948.720943][ T2862] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.806017][ T2862] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 948.817435][ T2862] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.980180][ T2862] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 948.992589][ T2862] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.171502][ T2879] netlink: 148 bytes leftover after parsing attributes in process `syz.4.7151'. [ 949.233582][ T2876] syzkaller0: entered promiscuous mode [ 949.239560][ T2876] syzkaller0: entered allmulticast mode [ 949.392224][ T2862] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 949.452117][ T2862] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.624643][ T2886] netlink: 'syz.2.7154': attribute type 3 has an invalid length. [ 949.744397][ T2894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7157'. [ 949.787879][T25820] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 949.808189][T25820] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.842307][ T2897] netlink: 'syz.2.7157': attribute type 3 has an invalid length. [ 949.851484][ T2899] Bluetooth: MGMT ver 1.23 [ 949.859925][ T2894] bridge_slave_1: left allmulticast mode [ 949.863841][ T2897] netlink: 772 bytes leftover after parsing attributes in process `syz.2.7157'. [ 949.875795][ T2894] bridge_slave_1: left promiscuous mode [ 949.877948][ T2897] netlink: 'syz.2.7157': attribute type 3 has an invalid length. [ 949.898799][ T2899] netlink: 'syz.1.7159': attribute type 5 has an invalid length. [ 949.943101][ T2894] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.021031][ T2894] bridge_slave_0: left allmulticast mode [ 950.026743][ T2894] bridge_slave_0: left promiscuous mode [ 950.034130][ T2894] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.187134][T21227] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 950.201538][T21227] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.256828][T25820] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 950.278934][T25820] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.347059][T21235] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 950.358021][T21235] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.645401][ T2931] syzkaller0: entered promiscuous mode [ 950.660610][ T2931] syzkaller0: entered allmulticast mode [ 950.671727][ T2930] tipc: Enabled bearer , priority 0 [ 950.743103][ T2930] tipc: Resetting bearer [ 950.798776][ T2930] tipc: Disabling bearer [ 951.021859][ T2950] sock: sock_timestamping_bind_phc: sock not bind to device [ 951.915006][ T2962] can: request_module (can-proto-4) failed. [ 952.226757][ T2986] __nla_validate_parse: 16 callbacks suppressed [ 952.226780][ T2986] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7181'. [ 952.242771][ T2988] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7181'. [ 952.584156][ T2998] tipc: Disabling bearer [ 952.937685][ T3022] mac80211_hwsim hwsim101 syzkaller0: left promiscuous mode [ 952.949395][ T3022] mac80211_hwsim hwsim101 syzkaller0: left allmulticast mode [ 952.986846][ T3022] netlink: 'syz.1.7188': attribute type 30 has an invalid length. [ 953.019360][ T3022] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7188'. [ 953.071917][ T3022] bond4: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 953.085288][ T3022] bond4 (unregistering): Released all slaves [ 953.435268][ T3046] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7197'. [ 953.578000][ T3056] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048) [ 953.598052][ T3055] netlink: 'syz.3.7200': attribute type 10 has an invalid length. [ 953.615859][ T3055] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7200'. [ 953.661818][ T3055] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 953.899677][ T3076] netlink: 'syz.0.7204': attribute type 1 has an invalid length. [ 953.909494][ T3076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7204'. [ 953.926698][ T3076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7204'. [ 953.946191][ T3076] netlink: 'syz.0.7204': attribute type 2 has an invalid length. [ 954.002162][ T3076] netlink: 'syz.0.7204': attribute type 2 has an invalid length. [ 954.010328][ T3076] netlink: 'syz.0.7204': attribute type 2 has an invalid length. [ 954.033786][ T3068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 954.070508][ T3068] 8021q: adding VLAN 0 to HW filter on device team0 [ 954.100687][ T3068] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 954.122333][ T3086] netlink: 116 bytes leftover after parsing attributes in process `syz.4.7206'. [ 954.136397][ T3088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7206'. [ 954.219414][ T3088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7206'. [ 954.247191][ T3088] netlink: 'syz.4.7206': attribute type 12 has an invalid length. [ 954.282699][ T3088] netlink: 'syz.4.7206': attribute type 11 has an invalid length. [ 954.409343][ T3099] pim6reg: left allmulticast mode [ 954.677131][ T3110] lo speed is unknown, defaulting to 1000 [ 954.878322][ T3130] gretap1: entered promiscuous mode [ 955.134672][ T3136] mac80211_hwsim hwsim101 syzkaller0: entered promiscuous mode [ 955.156959][ T3136] mac80211_hwsim hwsim101 syzkaller0: entered allmulticast mode [ 955.783950][ T3110] lo speed is unknown, defaulting to 1000 [ 955.795220][ T3166] openvswitch: netlink: Multiple metadata blocks provided [ 955.960377][ T3170] lo speed is unknown, defaulting to 1000 [ 955.999557][ T3174] netlink: 'syz.3.7228': attribute type 10 has an invalid length. [ 956.076815][ T3177] lo: Caught tx_queue_len zero misconfig [ 956.494327][ T3170] lo speed is unknown, defaulting to 1000 [ 957.695490][ T3221] netlink: 'syz.3.7236': attribute type 178 has an invalid length. [ 958.308921][ T3238] __nla_validate_parse: 1 callbacks suppressed [ 958.321452][ T3238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7239'. [ 958.679362][ T3256] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7247'. [ 958.914815][ T3265] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7250'. [ 958.920370][ T3260] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7249'. [ 958.927276][ T3265] openvswitch: netlink: Flow key attr not present in new flow. [ 959.110287][ T3273] dvmrp1: entered allmulticast mode [ 959.138812][ T3273] dvmrp1: left allmulticast mode [ 959.166536][ T3276] pim6reg1: entered promiscuous mode [ 959.174572][ T3276] pim6reg1: entered allmulticast mode [ 959.441865][ T3287] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7255'. [ 959.620430][ T3292] pimreg3: entered allmulticast mode [ 959.652020][ T3296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7259'. [ 959.661380][ T3296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7259'. [ 959.795934][ T3291] pimreg3: left allmulticast mode [ 960.115533][ T3319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7264'. [ 960.240755][ T3321] lo speed is unknown, defaulting to 1000 [ 960.482337][ T3337] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7270'. [ 960.768243][ T3321] lo speed is unknown, defaulting to 1000 [ 961.080982][ T3347] syzkaller1: entered promiscuous mode [ 961.094762][ T3347] syzkaller1: entered allmulticast mode [ 961.306607][ T3362] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7276'. [ 961.552854][ T3376] netlink: 'syz.3.7279': attribute type 10 has an invalid length. [ 961.696769][ T3381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 962.078692][ T3404] netlink: 'syz.1.7285': attribute type 1 has an invalid length. [ 962.328923][ T3406] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 962.350114][ T3406] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 962.424829][ T3407] bond4: (slave bridge8): Enslaving as an active interface with a down link [ 962.442869][ T3410] 8021q: adding VLAN 0 to HW filter on device bond4 [ 962.894318][ T3427] veth1: entered promiscuous mode [ 963.411937][ T3452] __nla_validate_parse: 8 callbacks suppressed [ 963.411961][ T3452] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7300'. [ 963.412511][ T3453] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 963.428123][ T3452] netlink: 43 bytes leftover after parsing attributes in process `syz.1.7300'. [ 963.486363][ T3452] netlink: 'syz.1.7300': attribute type 5 has an invalid length. [ 963.504546][ T3452] netlink: 43 bytes leftover after parsing attributes in process `syz.1.7300'. [ 963.701538][ T3466] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7303'. [ 965.047024][ T3509] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7312'. [ 965.162430][ T3515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7316'. [ 965.320681][ T3518] bond5: entered promiscuous mode [ 965.337519][ T3518] 8021q: adding VLAN 0 to HW filter on device bond5 [ 965.617953][ T3544] openvswitch: netlink: Key 6 has unexpected len 8 expected 2 [ 965.714216][ T3543] vlan0: entered promiscuous mode [ 965.750394][ T3543] team0: entered promiscuous mode [ 966.112905][ T3555] FAULT_INJECTION: forcing a failure. [ 966.112905][ T3555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 966.152087][ T3555] CPU: 0 UID: 0 PID: 3555 Comm: syz.2.7327 Not tainted syzkaller #0 PREEMPT(full) [ 966.152117][ T3555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 966.152130][ T3555] Call Trace: [ 966.152138][ T3555] [ 966.152146][ T3555] dump_stack_lvl+0xe8/0x150 [ 966.152181][ T3555] should_fail_ex+0x412/0x560 [ 966.152213][ T3555] _copy_to_user+0x31/0xb0 [ 966.152244][ T3555] bpf_prog_test_run_raw_tp+0x511/0x6c0 [ 966.152278][ T3555] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 966.152304][ T3555] ? __fget_files+0x2a/0x420 [ 966.152338][ T3555] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 966.152362][ T3555] bpf_prog_test_run+0x2c7/0x340 [ 966.152387][ T3555] __sys_bpf+0x643/0x950 [ 966.152420][ T3555] ? __pfx___sys_bpf+0x10/0x10 [ 966.152464][ T3555] ? ksys_write+0x242/0x270 [ 966.152488][ T3555] ? __pfx_ksys_write+0x10/0x10 [ 966.152517][ T3555] __x64_sys_bpf+0x7c/0x90 [ 966.152543][ T3555] do_syscall_64+0x14d/0xf80 [ 966.152570][ T3555] ? trace_irq_disable+0x3b/0x150 [ 966.152598][ T3555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.152619][ T3555] ? clear_bhb_loop+0x40/0x90 [ 966.152645][ T3555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.152666][ T3555] RIP: 0033:0x7f227d19c799 [ 966.152686][ T3555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 966.152704][ T3555] RSP: 002b:00007f227e017028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 966.152727][ T3555] RAX: ffffffffffffffda RBX: 00007f227d415fa0 RCX: 00007f227d19c799 [ 966.152743][ T3555] RDX: 000000000000000c RSI: 00002000000003c0 RDI: 000000000000000a [ 966.152757][ T3555] RBP: 00007f227e017090 R08: 0000000000000000 R09: 0000000000000000 [ 966.152771][ T3555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 966.152785][ T3555] R13: 00007f227d416038 R14: 00007f227d415fa0 R15: 00007ffe89975668 [ 966.152820][ T3555] [ 966.514242][ T3568] netlink: 'syz.0.7330': attribute type 1 has an invalid length. [ 966.546052][ T3567] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7332'. [ 966.577807][ T3569] x_tables: duplicate underflow at hook 1 [ 966.640279][ T3571] bond0: option tlb_dynamic_lb: invalid value (5) [ 966.727746][ T3571] bond0 (unregistering): Released all slaves [ 966.773914][ T3576] netlink: 'syz.3.7334': attribute type 1 has an invalid length. [ 967.013403][ T3576] 8021q: adding VLAN 0 to HW filter on device bond6 [ 967.074884][ T3592] netlink: 'syz.0.7338': attribute type 2 has an invalid length. [ 967.083896][ T3592] netlink: 'syz.0.7338': attribute type 8 has an invalid length. [ 967.093669][ T3592] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7338'. [ 967.117491][ T3581] batman_adv: batadv0: Adding interface: dummy0 [ 967.149717][ T3581] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 967.251398][ T3581] batman_adv: batadv0: Interface activated: dummy0 [ 967.354451][ T3588] batadv0: mtu less than device minimum [ 967.372692][ T3588] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 967.385277][ T3588] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 967.397466][ T3588] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 967.409715][ T3588] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 967.422099][ T3588] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 967.434131][ T3588] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 967.446261][ T3588] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 967.458444][ T3588] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 967.558385][ T3605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7342'. [ 967.636073][ T3576] veth5: entered promiscuous mode [ 967.652937][ T3576] bond6: (slave veth5): Enslaving as an active interface with an up link [ 968.014934][ T3618] syzkaller0: entered promiscuous mode [ 968.031293][ T3618] syzkaller0: entered allmulticast mode [ 968.137794][ T3631] netlink: 'syz.2.7350': attribute type 1 has an invalid length. [ 968.978720][ T3674] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7362'. [ 969.943973][ T3722] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7373'. [ 970.002221][ T3727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7373'. [ 970.185976][ T3736] netlink: 'syz.3.7378': attribute type 11 has an invalid length. [ 970.195247][ T3738] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7377'. [ 970.225457][ T3729] 8021q: adding VLAN 0 to HW filter on device .` [ 970.239295][ T3733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7377'. [ 970.257746][ T3741] netlink: 'syz.4.7376': attribute type 4 has an invalid length. [ 970.277477][ T3737] pimreg3: entered allmulticast mode [ 970.313354][ T3734] netlink: 'syz.4.7376': attribute type 4 has an invalid length. [ 970.647143][ T3761] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7382'. [ 970.953789][ T3770] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.095155][ T3770] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.205680][ T3785] netlink: 'syz.0.7389': attribute type 9 has an invalid length. [ 971.225096][ T3770] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.426621][ T3770] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.462377][ T3797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7391'. [ 971.463950][ T3791] lo speed is unknown, defaulting to 1000 [ 971.638192][T10496] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.704615][T10496] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.722051][ T3193] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.757451][T10496] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.887284][ T3813] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7394'. [ 972.196144][ T3791] lo speed is unknown, defaulting to 1000 [ 972.589142][T10500] unregister_netdevice: waiting for bond4 to become free. Usage count = 2 [ 972.641569][ T3831] lo speed is unknown, defaulting to 1000 [ 973.035870][ T3831] lo speed is unknown, defaulting to 1000