last executing test programs: 3m48.441842399s ago: executing program 0 (id=21128): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000005600)={'veth1_to_hsr\x00', {0x2, 0x4e20, @multicast1}}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'syzkaller1\x00', &(0x7f0000000100)=@ethtool_rxfh_indir={0x38, 0x1, [0x5]}}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800dd8d000020000000000002000000000000060000060006001500010000001800168014000100000000000000010000001000000011"], 0x3c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}]}, 0x60}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="08000500060000000c001780040007"], 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000002e00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002120207b1a00fe00000000bfa10000000000000701000078ffffffb702000008000000b70300000000000085000000c700000095"], &(0x7f0000000040)='syzkaller\x00', 0x9}, 0x90) 3m48.166253999s ago: executing program 0 (id=21135): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001800010200000000ffdbdf2502180000ff0000080000000208000100ac1414"], 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r0, @ANYRES16=r3, @ANYBLOB="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"], 0xc0}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) (rerun: 64) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7004fcdbdf25070000000c00060001000000010000000c0017000201aaaaaaaaaaaa0a0004007770616e340000000800050001000000080005000200000008000100030000002d9cfee1805dce0247e4f7a4ccfc438db7ae5207186644a66d2451bc4ef3eb6483fdd58715d434bad374657233a57479d3996673e1fb979413981cef38d0ec28b46662504a0a947c432e89d5"], 0x50}, 0x1, 0x0, 0x0, 0x2000}, 0x4000000) 3m47.993442229s ago: executing program 0 (id=21140): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'syz_tun\x00', {0x2, 0x0, @local}}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth0_macvtap\x00', &(0x7f0000000080)=@ethtool_pauseparam={0x12, 0x0, 0x7, 0x1}}) close(r0) (async) ioctl(r0, 0x5f, &(0x7f0000000100)="5cb1405609a4e36d980a7e3bd8b0") (async) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000140)=0x3) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/45, 0x2d, 0x1, &(0x7f00000001c0)=""/241, 0xf1}, &(0x7f0000000300)=0x40) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'veth0_to_batadv\x00', 0x10000}) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4) (async) accept4$bt_l2cap(r1, &(0x7f0000000400), &(0x7f0000000440)=0xe, 0x800) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000480), 0x4) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000c00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000540)={0x65c, r2, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x61}}}}, [@NL80211_ATTR_IE={0xab, 0x2a, [@chsw_timing={0x68, 0x4, {0x6, 0x3}}, @ht={0x2d, 0x1a, {0x2, 0x0, 0x6, 0x0, {0xffffffff00000001, 0x0, 0x0, 0x93, 0x0, 0x0, 0x1, 0x1}, 0x8, 0x1b, 0x9}}, @random_vendor={0xdd, 0x7f, "f30af83ab4d49c30f82607bd5ee872fcb72623febd4eb95c9f0659c35b90476eebaaf934a15222a81b2c793bb5a1e4b3efd3b40e80d8f15a4377ffd2e3eda21b2e44aa5cd3e6c1aaba079f2d5aa67be7592404f4ec0b10696585b7b0c70de5092712155fa1749ac89b2071f6e16438a9b3e574e64aab099cf07c3b7c689517"}, @ibss={0x6, 0x2}]}, @NL80211_ATTR_IE={0x1f, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0x1, 0x0, 0x1, 0x4, 0x48}}, @peer_mgmt={0x75, 0x8, {0x1, 0x5, @val=0x6, @val=0x3c, @void}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x4}, @NL80211_ATTR_FILS_ERP_RRK={0xf5, 0xfc, "3d26330bb99d3bcde13355eb79f672ec80abdc89196b19b4ec54b8e744257e474ae996e87ef064eea8f603f461062f5e86cc4d151ac9a949fe9114043719a35d2d902f7ac8c6edb07a232aa8e7f18d745bfa5fdcb0afb23c8f35a39b9a80a3b65185ad9a6a1c5b9a232d1f1bbef27d9bd95032cda527a0683350e65385edcd0184115817642d89a0589641740c4d29170d69416421137959db0fbe8d17e5f03211880f792dd2b88b91f7b4b6ffb7cac05438bffda82b2d79d3364d519e7a22644d91a81b71c23fd1e8bd2004e1937a0953ba6f0477272e9919ae3160aac12fdfcebb5dcc9b6a8082fee5ed31f6e20d52c4"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "8ac7290d1306ead2a959"}], @NL80211_ATTR_IE={0x83, 0x2a, [@mesh_chsw={0x76, 0x6, {0xc, 0xa, 0xf, 0x4}}, @link_id={0x65, 0x12, {@random="5606bcdccf8a", @device_b, @broadcast}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @measure_req={0x26, 0x5e, {0x0, 0x10, 0x0, "81c74c2906614bb6b43c1d54a8d6fa2703759721006104626df3f27aa8716a839b3af01ff112843a97d50f9cd5c479b792a4d12f36532645227b50650ed50758f1a4e4ee218fefecac48495d48f3fd021098cedcc300b16eee4703"}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "4b3652358ceac9ded42db75324"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "562c11713c3c"}, @NL80211_ATTR_FILS_ERP_REALM={0x3c, 0xfa, "893c9cd2094f42304a57b9bb30d063b46bb1594175d874df42fc6e54785e71d9a2b69fae9b2729c4f728a06ddb1f8dfeb5fc245b32dbbf35"}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x26, 0xfa, "e9bf1d65870d0ec72bbc015166903f3898d9d535e564e1818312155490da4cce1a2a"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}, @NL80211_ATTR_FILS_ERP_RRK={0x3c, 0xfc, "faee5f969ba23b240665eba37d7c6170b45171210457b4cd8be4a406e9d184b2fb419e004a232e5a7adbe2b4c53e427854564c7e58e0e072"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, "dd"}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x5d, 0xfa, "856cacf7a8f7937a253a48884c52dad6325beb21219aeee380369427064fa676ee776ec5c8fe4949ffeda898607cbc5fc65b9d09c3cb6c2386efd1ecb62fa11a6482c721707f23c9cd6b5670aed3c8ebc16e09380ba2054b89"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "41a26e1de8ba70bb4aad25658f9fef82"}, @NL80211_ATTR_FILS_ERP_RRK={0xf6, 0xfc, "b84de96143b7948c593b4d06a1cd3f94ab1ef569b32312fc9b146df4e5086b673685583611bcdfa9715c59d4d77213a66228f5b9ddb6c95f6e353cf2168c7bbe74667d4c8a35acc626a13989abd08f370d491de8205679a9f4ff69c909d88c7e44ec38de5e8527ee2a5e27dad7ec5a0a9506688133328b623c980d2f23d6318669ba394261eace1e9e930bc6db0140ca847a9870fee3a8ae495a79d5bf1902a56b3b150b6ec8e11901874081b66ce96ec4f444ccec486423a44e4de89e713b5f1f49aa044f168c52f765d030df3844b4ea5d360a2a69c2c6cc76dedd3a5ac641af5a1df3b179ecfe39d6c0c9c6fadcf09027"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x13, 0xf9, "98ba3fa47eb5b79733bbfc1b14ac92"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9}, @NL80211_ATTR_FILS_ERP_RRK={0xd4, 0xfc, "a25d6a2e69055ac657e533f85aa7250950236ed750ffd9e6a583a0c0c2f5091a0b21dabbb3128f0842775acdd94ffa538e3e3fb031ab478febed98171c1cfb255cd58b1dcad9f787f01d35c3454243523138de2ae7c90a43953ea02dac5543e59235b5551b282c3d7d9a422ee03db718976de4bfab2383b4b07d5584e4c42df931a19cca7140eb918c8b037f69f7069a86e3d34fc064793d966316208d872d722096e68d6be4889f3d6d21c036e2cc366b937e1e2a2f9d63b07dd773a0f682a8f66dc51deacbb4cded33915e0730d38a"}, @NL80211_ATTR_FILS_ERP_REALM={0x8f, 0xfa, "d5e2525abcd495657cfeccc7d56b31acebe895cad3115d6fa0638c1180221028056d7cfe00962164957c9169f13146e0ab5b452b1fcaf356284d004378ceb03126ca457bae0064b018d3dc180e2f455a37e488aacf29305217caf05ce81b5e213078c3b232a57afeb489f27dc08834933aaf81a33a81785fd48fb2b511d9246ca7371b9b3b2a2cf866554f"}], @NL80211_ATTR_IE={0xe, 0x2a, [@supported_rates={0x1, 0x2, [{0x2, 0x1}, {0x12, 0x1}]}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0xa5, 0x2f}}]}, @NL80211_ATTR_IE={0x10, 0x2a, [@cf={0x4, 0x6, {0xe, 0x8b, 0x9, 0x80}}, @ibss={0x6, 0x2, 0x7fff}]}]}, 0x65c}, 0x1, 0x0, 0x0, 0x4}, 0x4040005) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c80), r1) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000cc0)={0x0, @multicast2, @multicast2}, &(0x7f0000000d00)=0xc) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000e00)={'syztnl1\x00', &(0x7f0000000d40)={'ip_vti0\x00', 0x0, 0x1, 0x730, 0x3, 0xd67, {{0x1a, 0x4, 0x3, 0x1, 0x68, 0x64, 0x0, 0x4, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp_addr={0x44, 0x1c, 0x10, 0x1, 0xc, [{@broadcast, 0x3ff}, {@broadcast, 0x6}, {@broadcast, 0x9}]}, @rr={0x7, 0xf, 0x18, [@remote, @local, @private=0xa010101]}, @rr={0x7, 0xf, 0x7, [@multicast1, @empty, @local]}, @generic={0x86, 0xf, "ce5859819cf11721d6a09a600d"}, @ssrr={0x89, 0x7, 0xfb, [@broadcast]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000f00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x44, r3, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x4004010) recvmmsg$unix(r1, &(0x7f0000003400)=[{{&(0x7f0000000f40)=@abs, 0x6e, &(0x7f00000024c0)=[{&(0x7f0000000fc0)=""/205, 0xcd}, {&(0x7f00000010c0)=""/200, 0xc8}, {&(0x7f00000011c0)=""/49, 0x31}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/129, 0x81}, {&(0x7f00000022c0)=""/227, 0xe3}, {&(0x7f00000023c0)=""/223, 0xdf}], 0x7, &(0x7f0000002540)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f00000025c0)=@abs, 0x6e, &(0x7f0000002980)=[{&(0x7f0000002640)=""/28, 0x1c}, {&(0x7f0000002680)=""/241, 0xf1}, {&(0x7f0000002780)=""/54, 0x36}, {&(0x7f00000027c0)=""/202, 0xca}, {&(0x7f00000028c0)=""/176, 0xb0}], 0x5, &(0x7f0000002a00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000002ac0)=""/172, 0xac}, {&(0x7f0000002b80)=""/120, 0x78}, {&(0x7f0000002c00)=""/79, 0x4f}, {&(0x7f0000002c80)=""/235, 0xeb}, {&(0x7f0000002d80)=""/206, 0xce}, {&(0x7f0000002e80)=""/234, 0xea}, {&(0x7f0000002f80)=""/221, 0xdd}, {&(0x7f0000003080)=""/201, 0xc9}, {&(0x7f0000003180)=""/217, 0xd9}], 0x9, &(0x7f0000003340)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}], 0x3, 0x41, &(0x7f00000034c0)={0x77359400}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003580)={{r15, 0xffffffffffffffff}, &(0x7f0000003500), &(0x7f0000003540)=r18}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000037c0)={0x18, 0x13, &(0x7f00000035c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0xffff0000}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r20}}, @generic={0x0, 0x6, 0x5, 0x5, 0x2}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x1}], &(0x7f0000003680)='GPL\x00', 0x0, 0x0, &(0x7f00000036c0), 0x41000, 0x2a, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000003700)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000003740)=[r17, r8, r16, r6], &(0x7f0000003780)=[{0x0, 0x4, 0xb, 0x6}, {0x3, 0x2, 0x4, 0xa}], 0x10, 0x1}, 0x94) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r18, 0x84, 0x1b, &(0x7f0000003880)={0x0, 0xfd, "3324e11f527022047cee0f05bb0f5253d20ceaf71d88901fe203f0ee38f843587d1ad81e2b0ac855e4bcc898339a3f6edcb9c33e04148ba9e796624566017758d7b38d2969e9eb33363585ee1c03c9e51fc193f27b01f3b8e4adc12a21d5b6e590ecf9c55e95bab2fcf6df7c9b7e1efcc8b060e1c8177daa9241e776d3515e06c902e9d8113ea50e5f119da519119e184c173a1d36b9c8b42368bd9e74ddd4caec38765981258e5b3b841a5e35759b4291221c93097e2bbcd2536796ef1a6640dec7241d287ffb3122c0f3af4e83e8086024cf695e29b0e701f25002d6db9c3b9b88715d7ae868490f594ed95180c899b6bb3e75860478ea36273db8f4"}, &(0x7f00000039c0)=0x105) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r9, 0x84, 0x79, &(0x7f0000003a00)={r21, 0x1ff, 0xfff7}, 0x8) (async) sendmsg$nl_route(r11, &(0x7f0000003b40)={&(0x7f0000003a40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003b00)={&(0x7f0000003a80)=@ipv6_newrule={0x6c, 0x20, 0x400, 0x70bd26, 0x25dfdbfe, {0xa, 0x0, 0x10, 0x2, 0x4, 0x0, 0x0, 0x3, 0x8}, [@FRA_DST={0x14, 0x1, @loopback}, @FRA_SRC={0x14, 0x2, @mcast2}, @FRA_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @loopback}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24004001}, 0x80) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000003b80)={r8, 0xffffffffffffffff}, 0x4) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r12, 0x89f2, &(0x7f0000003d80)={'ip6_vti0\x00', &(0x7f0000003d00)={'ip6gre0\x00', r5, 0x4, 0x5, 0xf7, 0x4, 0x40, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x10, 0x9}}) (async) r24 = bpf$MAP_CREATE(0x0, &(0x7f0000003e40)=@bloom_filter={0x1e, 0x0, 0xa, 0x8, 0xc000, r14, 0x10, '\x00', r4, r10, 0x0, 0x2, 0x1, 0xb, @value=r7}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003f00)={0x18, 0x11, &(0x7f0000003bc0)=@raw=[@generic={0x7, 0x8, 0xb, 0x7fff, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x647, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x1, 0x8, 0x0, 0xa, 0xfffffffffffffff0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r22}}], &(0x7f0000003c80)='GPL\x00', 0xfffffffb, 0x8, &(0x7f0000003cc0)=""/8, 0x40f00, 0x14, '\x00', r23, 0x0, r12, 0x8, &(0x7f0000003dc0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000003e00)={0x3, 0x1, 0x3, 0xfffffffb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000003ec0)=[r13, r19, r24], 0x0, 0x10, 0x10}, 0x94) 3m47.800379541s ago: executing program 0 (id=21143): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x67}]}, &(0x7f0000000040)='syzkaller\x00', 0x301, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3m47.624620873s ago: executing program 0 (id=21146): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="b80000001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000100000000000000000000000000000090000000000000000000000000000000500764fde49cdf7623b900000000000000000000000000000f5ec000000000000000000000000000000000000000000000408000000000000000000000000000000020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m47.508879599s ago: executing program 0 (id=21148): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, 0x0, 0x800) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000780)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000007c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x40840) sendmsg$NFC_CMD_DEV_UP(r3, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000c80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x30, r5, 0x5f88a4dd245d7557, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x40}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x90) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc0000800c00018006000100ff"], 0x12c}, 0x1, 0x0, 0x0, 0x4008805}, 0x8000) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 3m32.453605982s ago: executing program 32 (id=21148): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, 0x0, 0x800) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000780)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000007c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x40840) sendmsg$NFC_CMD_DEV_UP(r3, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000c80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x30, r5, 0x5f88a4dd245d7557, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x40}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x90) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc0000800c00018006000100ff"], 0x12c}, 0x1, 0x0, 0x0, 0x4008805}, 0x8000) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 2m29.570867628s ago: executing program 4 (id=22565): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000000280)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r2, 0x28, 0x2, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="b4000000030701080000000000000000030000010900010073797a31000000003c00078008000140000000060800024000000006080001400000000508000140000000040800014000000006080001400000000708000240000000040c00034002000000000000050800054000000000240007800800014000000081080001400000000d0800024000000001080002d40000000314000780080001400000000208000240000000090c0002400000000000000008"], 0xb4}}, 0x24040000) close(r0) 2m29.484248507s ago: executing program 4 (id=22566): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$igmp6(0xa, 0x3, 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) getsockopt$sock_buf(r2, 0x1, 0x1a, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f62726964676500140001007767320000007c421236966f000000000000000000001400010076657468305f756f5f7465616d00000014"], 0xa8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4005) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000004c0)="b9fe030768045c8c989a14f088a865f986dd", 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) bind$bt_hci(r0, &(0x7f0000001ac0), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYRES16=r2], 0x60}, 0x1, 0x0, 0x0, 0x4811}, 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r5, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) 2m28.860501073s ago: executing program 4 (id=22574): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1e}}, &(0x7f0000000480)='GPL\x00'}, 0x80) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000003e00090b000000000008000003"], 0x20}}, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@newlink={0xc0, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3886}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x20}}]}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_PHYS_SWITCH_ID={0x4}, @IFLA_PORT_SELF={0x18, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb, 0x2, 'vxcan0\x00'}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}, @IFLA_PORT_SELF={0x40, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "0147f3398f4fb4931076484b581085c2"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "00000000000000000000000002abdfd3"}, @IFLA_PORT_PROFILE={0xb, 0x2, 'ip6gre\x00'}]}, @IFLA_IFALIAS={0x14, 0x14, 'ip6_vti0\x00'}]}, 0xc0}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0xf, &(0x7f00000001c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x88, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000440)={@private0, 0x0}, &(0x7f0000000480)=0x14) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x7, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048840}, 0x40004) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x150, r1, 0x2, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x134, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6c7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) 2m28.278398272s ago: executing program 4 (id=22585): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc, 0x3f00}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) 2m27.538028496s ago: executing program 4 (id=22598): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000003e00090b000000000008000003"], 0x20}}, 0x0) (fail_nth: 8) 2m26.89256717s ago: executing program 4 (id=22601): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000800850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0a41, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x12, &(0x7f0000000080)=0xffffffff, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000002600010026bdf000fcdbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='memory.current\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113380000000000bf1000000000000025000200091b00003d030000000000008701000000000000bc26000000000000bf67000000000000150300000ee600f0670200001400000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305863f970eac3590ac99b798f8125f1c322c2a154a8a8d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) write$tun(r2, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x3c, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast, {[@noop]}}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x3a) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000a000000000000000002000000183300000400000000000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x8, 0x7ff, 0x7}, 0x10, 0x0, r1, 0x2, &(0x7f0000000480)=[r0, r0, r0], &(0x7f00000004c0)=[{0x3, 0x1, 0xe, 0x1}, {0x0, 0x3, 0xc}], 0x10, 0x9}, 0x94) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f00000005c0)=r6) 2m21.731313901s ago: executing program 2 (id=22674): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10, 0x0, 0xffffffffffffff41}, 0x3000c041) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000002700), 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000001600)={'nicvf0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x33}}}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002640), 0xffffffffffffffff) ioctl$sock_SIOCSIFBR(r0, 0x8941, 0x0) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000400000010000001c000180060001"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9ff", @ANYRES32, @ANYBLOB="089805000750050008001300", @ANYBLOB="08002c000500000014"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4000010) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYBLOB], 0x2298}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 2m21.42558624s ago: executing program 2 (id=22679): bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000068000100020000040000d4260046949b25cc41b2781778457c36000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r3 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private0, @in=@local, 0x4e23, 0x0, 0x4e20, 0x0, 0x2}, {0x1, 0x4, 0x1, 0x0, 0x0, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x1, 0x0, 0x1}, {{@in6=@private2, 0x4d3, 0x32}, 0x2, @in=@local, 0x3502, 0x1, 0x0, 0x0, 0xa, 0xfffffffd}}, 0xe8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000002001000fe0000010000002008001e0002000000"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) close(0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) (rerun: 32) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x38, r9, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) setsockopt$packet_add_memb(r7, 0x107, 0x18, &(0x7f0000000800)={0x0, 0x1, 0x6, @local}, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r10) (async, rerun: 64) r12 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005", 0x2b}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000005c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001c00010029bd7000fadbdf2507000000", @ANYRES32=r13, @ANYBLOB="4000ac0a0a000200aaaa"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x48088) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="29fdffff", @ANYRES16=r11, @ANYBLOB="00032dfd7000fddbdf250100000000000000084100000010001800000a1473797a31200000000000000000000000000900000000000000000000000000000000f2ff910d477000621994b222dd0000000000000000000000000000000000000000000000000028cdfc7a04306a18cca56aa7e63587c60688e86bb3e44c4cc0ac1ac40b9a69d1ca287b807ad78c8909ffef84d9a936d59c3d91b47e88d46a578858a61b153740295069436f00c9241b5022b99e4767358adbbb9cec629db2eaf3963e0de4418085b7001c702fa3755ad25ba5cc8f8da8e03c5d37c3a5e540255f11990000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20040084) (async, rerun: 32) ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f00000003c0)) (async, rerun: 32) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b04040000000000280012800b00010065727370616e000018000280040012000600020001ab"], 0x48}}, 0x88890) (rerun: 32) 2m21.266660092s ago: executing program 2 (id=22683): bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@name={0x1e, 0x2, 0x2, {{0x40, 0x3}, 0x3}}, 0x10) r0 = socket(0x23, 0x2, 0x53f0800) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000001800000400000000000000000300000008000000000000000400098053c5fa5508b3fc6422b7344ac3d7d5334e5ba360bc51c85961f5dc099e799404bd4318d46bafdf304c981f05d49cf4d411f5a7902d0f38e3605d8577d31755efcf17e3854de26e15b11f4010fa123fb1567fb917f7d29ee92952c4b9"], 0x20}}, 0x2000c080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000003d5fc129d78fc5491ade8c46f370ab06901109907814995a040ed815b778f8b1bc3fcaabc1d840e8", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="080026006c09000008002700000000000800a100000000000500180101000000"], 0x3c}}, 0x884) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x44040) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001340)={0x1c, 0x1a, 0xa01, 0x0, 0x0, {0x0, 0x0, 0x300}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x1c}}, 0x0) socket$kcm(0x2, 0xe, 0x2) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="4ff3c74a360001000000000000000100040000806d9c2a734ac244a5ee806b6bf19bbcb55e2708d499758efb"], 0x14}], 0x1, 0x0, 0x0, 0x4000080}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34010000", @ANYRES16=r9, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000080108805400078008000500000000000800050000000000080005009d2c690d08000500000000000800050000000000080005000000000008000500"], 0x134}}, 0x4048014) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000400)={0x7, [0xc07, 0x9, 0x8, 0x5f1, 0x1, 0x3, 0x9]}, 0x12) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000200)="000088a8", 0x4, 0x14000b01, &(0x7f00000000c0)={0x11, 0x5, r11, 0x1, 0x84, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) write$tun(r6, &(0x7f0000000300)=ANY=[@ANYRES32=r6], 0x340a) 2m20.848432072s ago: executing program 2 (id=22691): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xec, 0x0, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x34e6}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}, @CTA_EXPECT_NAT={0xc0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x99}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000880)=@newlink={0x44, 0x10, 0x401, 0xc47, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x200}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x2}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x2}]}}}]}, 0x44}}, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)={0x28, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x141}]}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) socket$kcm(0xa, 0x3, 0x87) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) 2m20.527960455s ago: executing program 2 (id=22697): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x3, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xffff, 0xc}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00'}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000000) r8 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000000)="ff45679b012420893ba2a1fd1ee01ebc00000000a1a037b8f6bf96abd096b48908b61cb527072453f698f34d", 0xfffffc63}], 0x1}, 0x4000000) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x5452, &(0x7f0000000080)) sendmsg$kcm(r8, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x200000c1) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, 0x0, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, &(0x7f00000002c0)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth0_virt_wifi\x00'}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, 0x0, 0x4000000) r10 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000580)={r10, r9, 0x6, 0xf1, &(0x7f0000000480)="b69236301b94649edb7c3d8bb7f29aa1f887c4edcb607fba52e7c0534ec1308957f0faef2df20846477303f93bb27cd87494ffdf539b79d24da36d3ecbd85f6fd92247bf4e59221e185d0f8fbdfa758fd3c3f013056c289312005e0fcac7cff1725bfc9710cad3f126fe831fe361884175acf4bf6b4f2900732d6908842ec85f6a84b4a9a2c66f282a97d2bb2e1a8afd3548f21fb82d80f9b7b586ba739b292fb7851308aa4d084baeb99d6c984e8de10bed1ffa13680e9d893ab6f90e4cd06f6a11595649e31f66456a2908286e047e6d432c72192643fdc5e786694a978e8c2532ed90de827e36eaf2ab8e2dc31c8c67", 0x6, 0x8, 0xd, 0x7, 0x9, 0x2, 0x2, 'syz0\x00'}) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) 2m19.960177052s ago: executing program 2 (id=22706): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21b4b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x4, 0x1f, 0x7fffffff}, @IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21b4b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x4, 0x1f, 0x7fffffff}, @IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) (async) 2m11.884506426s ago: executing program 33 (id=22601): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000800850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0a41, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x12, &(0x7f0000000080)=0xffffffff, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000002600010026bdf000fcdbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='memory.current\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) write$tun(r2, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x3c, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast, {[@noop]}}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x3a) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000a000000000000000002000000183300000400000000000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x8, 0x7ff, 0x7}, 0x10, 0x0, r1, 0x2, &(0x7f0000000480)=[r0, r0, r0], &(0x7f00000004c0)=[{0x3, 0x1, 0xe, 0x1}, {0x0, 0x3, 0xc}], 0x10, 0x9}, 0x94) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f00000005c0)=r6) 2m4.543727107s ago: executing program 34 (id=22706): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21b4b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x4, 0x1f, 0x7fffffff}, @IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21b4b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x4, 0x1f, 0x7fffffff}, @IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) (async) 4.969518494s ago: executing program 3 (id=24991): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) 4.624557538s ago: executing program 3 (id=24997): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb, 0x4}}}}]}, 0x40}}, 0x4010004) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05", 0x1, 0x20000005, &(0x7f0000000140)={0x11, 0x7, r7, 0x1, 0x0, 0x6, @remote}, 0x14) 4.571115071s ago: executing program 6 (id=24999): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000) 4.433801058s ago: executing program 6 (id=25000): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4.230183093s ago: executing program 3 (id=25002): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) read(r0, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, 0x0, 0x840) 1.519450669s ago: executing program 6 (id=25017): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x18, 0x40, 0x107, 0x70bd2d, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) listen(0xffffffffffffffff, 0x9) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) syz_emit_ethernet(0x4a6, &(0x7f00000018c0)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6099e90704702c03cb697a653e336f000000500000000000ff020000000000000000000000000001"], 0x0) 1.457682693s ago: executing program 3 (id=25019): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70b923, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0xe, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0xa, 0x2, 0x9, 0xd, 0x1, 0xfffffffb, {0xffff1c72, 0x23, 0x7, 0xc, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x20048040) sendto$packet(r4, &(0x7f00000003c0)="f9d33075218151db3d316f3a277fedbc86dd46fe766f486d7cea18d5be2cf4380cc2470072201f35", 0x28, 0x4004011, &(0x7f0000000080)={0x11, 0x8100, r3, 0x1, 0xdb, 0x6, @multicast}, 0x14) 1.457011226s ago: executing program 7 (id=25021): syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb7", 0x85}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d", 0xd0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654", 0x48}, {&(0x7f0000000800)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d603", 0x45}, {&(0x7f00000000c0)}], 0x6}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26", 0x6c}, {&(0x7f0000000580)="8f966bd94d169820f6b844", 0xb}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}], 0x2, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.412272241s ago: executing program 6 (id=25022): socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x7}, 0x8) sendmmsg$inet6(r0, 0x0, 0x0, 0x20000000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000240)=ANY=[], 0x10) 1.287355065s ago: executing program 6 (id=25023): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x7fffffff, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb, 0x4}}}}]}, 0x40}}, 0x4010004) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05", 0x1, 0x20000005, &(0x7f0000000140)={0x11, 0x7, r7, 0x1, 0x0, 0x6, @remote}, 0x14) 1.219918402s ago: executing program 7 (id=25025): readv(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000500)=""/133, 0x85}], 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) 1.127307521s ago: executing program 5 (id=25026): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de3832", 0x9d}, {0x0}, {&(0x7f0000000780)}, {&(0x7f0000000800)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff", 0x25}], 0x6}}], 0x1, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.051706535s ago: executing program 7 (id=25028): syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d32", 0xe}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 952.123784ms ago: executing program 3 (id=25029): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) read(r0, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, 0x0, 0x840) 951.976678ms ago: executing program 1 (id=25030): syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1c}}, 0x840) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 841.387282ms ago: executing program 1 (id=25031): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) socket(0x2b, 0x1, 0x1) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16], 0x14) 835.572708ms ago: executing program 7 (id=25032): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r2], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000140)=@NCI_OP_CORE_CONN_CLOSE_RSP={0x0, 0x0, 0x2, 0x5, 0x1}, 0x4) 834.379643ms ago: executing program 5 (id=25033): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000200)='\x00\x00\x00', 0x3) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES16=r2], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 802.452335ms ago: executing program 6 (id=25034): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000840)={r2, 0x0, 0x25, 0x0, @val=@uprobe_multi={&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)=[0x9, 0x3, 0x2, 0x5, 0x5, 0x1, 0x9, 0x7, 0x100000000, 0x82], &(0x7f0000000800)=[0x5, 0x4, 0x4], 0x5, 0xa}}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffffffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4319030000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="04d96f885e8a7be83ea8af7be273f3226bb2fc1924c7148d2be3cbea30c541c81b8379f4e146d24e2a4486e302a919fcc294ada767a07799f8f14fa7ae3746383157fe5e0c1a01f24c649ea5c15edb44a1932e0bb8a1b2c3"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000b00)={'tunl0\x00', &(0x7f0000000ac0)={'ip_vti0\x00', 0x0, 0x7, 0x7800, 0x4, 0x80000000, {{0x8, 0x4, 0x0, 0x15, 0x20, 0x66, 0x0, 0x7, 0x2f, 0x0, @loopback, @multicast1, {[@noop, @rr={0x7, 0x7, 0x11, [@rand_addr=0x64010102]}, @ra={0x94, 0x4}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002300)={&(0x7f0000002380)={0x6ac, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xf8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xf3, 0x5, "120d2b05c9cd0f17d010954b185c654e0089388a135d285c8e51ab5359ad884bdfea9b1e8de483ab99311125f245432a3f6cc328e8ef8db57df3b605a7106653cb6e8435b978430ca077b7fc58b3e49d0677dec4a66517ba7d455dcba7676e403079659ade4c00d3a2df4a845c91ffd79c8fc842864ee8294e53b0443bd4753e4ce0adb0783007cd38ef18872399d1d21e7beb1c2f562a75699426fc037fc098fd87cd42de74b5aa565edc898b3f28ab1ff530287dd6371cc8d47a241fda5b60efb13556110ff808d9a0f1eaad84398cb8f129a4be98de7931eb3faa28e00cf0ced44f5de5c57078c411e7dc3e9521"}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x9c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8a, 0x4, "2fc7fabc5c666cfdc3466c9e1ae27f2d826c7b0baa30498d20fbabb3c1d5c0a99ecb2ae23698621c008c3f2d678c127751d64c4d221e25023f00e1feb4644e0def59f46507298c46e47de11089b2b04df124e45a8b926befd534fbb64ae5e3ecf1670c3acc6bfffd3e6f016e99454fc8d9c0456cef28fa15a18d680d5527161fcc52a08a1418"}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x148, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xd5, 0x5, "e1da054e001e988c9d92ec8227dcaf6edd1442e0a0be4995dc8c3ae5c5d9f22e1807f4d2e8969205af221ebc79339a871b691d03d6312293d29b815535aa1898345ed28e2a3b0a74f97932617b49705802e02a3f888a94fd0417ccfcf42b38cc96971aef3ec0492dc61fb4a1fb5ddba4cfce8bf7ec817d513595b497a4fdb57fcb2308db9fc4a3b27b23b5ca3a4f58827ffe2e1c23b8d61c17b14b92331667b7071553c459c26b1cd037e97a55181dd6c31bae7c15f601a202ec7724827c26999dc9d92741c3bb87f404d79a53c7e1c97b"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x81}, @ETHTOOL_A_BITSET_BITS={0x60, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x51}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '+)%++\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'vlan0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x2f4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3204506c}, @ETHTOOL_A_BITSET_BITS={0x17c, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x02\x02\x02\x02\x02\x02'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb50}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x02\x02\x02\x02\x02\x02'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x02\x02\x02\x02\x02\x02'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x02\x02\x02\x02\x02\x02'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/rfkill\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x02\x02\x02\x02\x02\x02'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbee4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x02\x02\x02\x02\x02\x02'}]}]}, @ETHTOOL_A_BITSET_MASK={0xd0, 0x5, "e18b6231175f4ad58c789672b4ccbe37f54ab19375aee6a5c3864ff60a0b12a7171d3d5c03f819ba5ec838b0faad870e695d7dc8f08214767f2e700228a0eb48c009a868231ffe65e19e0abaa1f0a0eb9ff49b8d27c796593dabcdec4d1ccf8c77a8b96bbf1fffcf353dd0e0ef5338149551fb16c17f370ea013ee1431710ea46a1d3ba24e652c429780629ccae6425e9e18988dd8e10f819f5a2940a8d40ce98dd9802ec1f4aecd9a610c4db60764c67412a22bf92e92ee71fdb40c12cdd27eb486526f0eb28e051b2dfa03"}, @ETHTOOL_A_BITSET_BITS={0x6c, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x02\x02\x02\x02\x02\x02'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x02\x02\x02\x02\x02\x02'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x25, 0x5, "7e853d0f73ce2e2ab6c112b48907362443d33aa7f33df4833e0163f6105e05563c"}]}]}, 0x6ac}, 0x1, 0x0, 0x0, 0x24008041}, 0x800) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r8, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000e40)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="05002cbd7000000000002e00000008000300", @ANYRES32=0x0, @ANYBLOB="0a0034000202f5010202080008002600da8e0000"], 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000200)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @val={0x10, 0x1, 0x21}}, 0x21) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="1000001d08021100000108021100000008021100000020000100000001000100"], 0x20) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x60c01, 0x0) write$rfkill(r9, &(0x7f0000000080)={0x4, 0x1, 0x3, 0x1}, 0x8) setsockopt$inet6_int(r7, 0x29, 0x48, &(0x7f0000000000)=0xffff5e66, 0x4) sendmsg$inet(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)="7f1b254dd66a055050f718a2db71f82261d8283f98f6f62543a811d1ab09df308ed614161f5cd8503f25e6304d098de764b11a2bc6e140d7c1ca6a73af1cd2bb2aa3c2729f01592fa433087b954d10e5974125681f6e217c0daffb1dc4394652553c07c2342b22925e5a50a301a5927284f6481d30c069a8dc11a1e1", 0x7c}, {&(0x7f0000000080)="4be05efc39b02544a8514a6675", 0xd}, {&(0x7f00000006c0)="045d0089a8d730328a7dcbe5a900f32dbcf44b91f101ddb9339105b2a526b8c1bd8236f53a4040a46293076cde3a017c4a8754f79679f70073ec9f21911668695b1328cce09caf341b5dff8664f3171ba9687988b524fb911eab16e317b5c00b9af766a99d5429e63525e9270c5fc9db444900ef6ab302a578f7c03211cac85d21976faa7f105d319cde", 0x8a}, {&(0x7f0000000400)="c94b123737a766b7ae70459424cf5347bd316d9ab1877d952184029807bb26310d54a1090ce27a0cb184100fe0b6d568e7c5c97ef855441de94069ea1af1782b955628efaa", 0x45}, {&(0x7f0000000480)="0fc696d7b842c43ae55ed10313a5a7794e843a636d29d3929a2c2101aec632636be1f3dd139048b5ccfd8999bb568b6619d7a0fd74a72a1aade41032dfd2d1a84618c8b0a7ea51801bd126f7753022f6f2710476478f57a3298a0625", 0x5c}, {&(0x7f0000000500)="f7ee53f36ebeb94faa313d0faedfa893b1238b541340ecdf41aed6076037d2725c044c53292b3fbb2227bd63b9da2be50add501c9b7ff54caf17618c742116a2168681057a782324af15f6f493297c", 0x4f}], 0x6}, 0x40001) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001d00)={&(0x7f0000000e80)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0xe68}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x14, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000200000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000e0000008500000082000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0x0, 0xe, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f00000005c0)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 691.261157ms ago: executing program 1 (id=25035): syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb7", 0x85}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d", 0xd0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654", 0x48}, {&(0x7f0000000800)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d603", 0x45}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}], 0x2, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 636.476982ms ago: executing program 5 (id=25036): ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x20000001, 0xffffffff, 0x1, 0x5, 0xe, 0x4, 0xd, 0x18, 0x5, 0x2, {0x6, 0x8, 0xfffffffc, 0x0, 0x7, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 636.237568ms ago: executing program 7 (id=25037): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e105000000890600001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 615.075397ms ago: executing program 1 (id=25038): listen(0xffffffffffffffff, 0x9) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) syz_emit_ethernet(0x4a6, &(0x7f00000018c0)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6099e90704702c03cb697a653e336f000000500000000000ff020000000000000000000000000001"], 0x0) 412.955863ms ago: executing program 5 (id=25039): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, r1, 0x629, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000104}, 0x40) 336.548319ms ago: executing program 7 (id=25040): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x3c}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)=""/4, 0x4}, {0x0}], 0x2, &(0x7f0000001180)=""/4096, 0x1000}, 0xfffff453}], 0x1, 0x10120, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) 289.060741ms ago: executing program 5 (id=25041): syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1c}}, 0x840) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 215.174783ms ago: executing program 1 (id=25042): syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d32", 0xe}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 389.419µs ago: executing program 3 (id=25043): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de3832", 0x9d}, {0x0}, {&(0x7f0000000780)}, {&(0x7f0000000800)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff", 0x25}], 0x6}}], 0x1, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 150.854µs ago: executing program 5 (id=25044): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589b"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) 0s ago: executing program 1 (id=25045): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16], 0x14) kernel console output (not intermixed with test programs): 893.959008][T30654] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 893.959031][T30654] ? ref_tracker_free+0x689/0x830 [ 893.959053][T30654] ? __pfx_ref_tracker_free+0x10/0x10 [ 893.959087][T30654] netlink_rcv_skb+0x2a4/0x4a0 [ 893.959114][T30654] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 893.959139][T30654] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 893.959172][T30654] ? netlink_deliver_tap+0x2e/0x1b0 [ 893.959201][T30654] netlink_unicast+0x7bb/0x940 [ 893.959231][T30654] netlink_sendmsg+0x813/0xb40 [ 893.959253][T30654] ? __pfx_netlink_sendmsg+0x10/0x10 [ 893.959281][T30654] ? aa_sock_msg_perm+0xf1/0x1b0 [ 893.959302][T30654] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 893.959324][T30654] ? __pfx_netlink_sendmsg+0x10/0x10 [ 893.959351][T30654] ____sys_sendmsg+0x9b9/0xa20 [ 893.959382][T30654] ? __pfx_____sys_sendmsg+0x10/0x10 [ 893.959410][T30654] ? lock_release+0x4b/0x3c0 [ 893.959439][T30654] ? import_iovec+0x73/0xa0 [ 893.959464][T30654] ___sys_sendmsg+0x2a5/0x360 [ 893.959489][T30654] ? rcu_is_watching+0x15/0xb0 [ 893.959506][T30654] ? get_pid_task+0x20/0x1f0 [ 893.959525][T30654] ? __pfx____sys_sendmsg+0x10/0x10 [ 893.959553][T30654] ? rcu_is_watching+0x15/0xb0 [ 893.959584][T30654] ? __fget_files+0x2a/0x420 [ 893.959605][T30654] ? __fget_files+0x3a2/0x420 [ 893.959630][T30654] __x64_sys_sendmsg+0x1b1/0x290 [ 893.959657][T30654] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 893.959692][T30654] ? rcu_is_watching+0x15/0xb0 [ 893.959712][T30654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.959732][T30654] do_syscall_64+0x174/0x580 [ 893.959756][T30654] ? trace_irq_disable+0x3b/0x140 [ 893.959783][T30654] ? clear_bhb_loop+0x40/0x90 [ 893.959802][T30654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.959820][T30654] RIP: 0033:0x7f023f99ce59 [ 893.959837][T30654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 893.959850][T30654] RSP: 002b:00007f0240889028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 893.959869][T30654] RAX: ffffffffffffffda RBX: 00007f023fc15fa0 RCX: 00007f023f99ce59 [ 893.959884][T30654] RDX: 0000000020040804 RSI: 0000200000000300 RDI: 0000000000000003 [ 893.959896][T30654] RBP: 00007f0240889090 R08: 0000000000000000 R09: 0000000000000000 [ 893.959909][T30654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 893.959921][T30654] R13: 00007f023fc16038 R14: 00007f023fc15fa0 R15: 00007ffedf64fb58 [ 893.959942][T30654] [ 894.292293][T30656] lo speed is unknown, defaulting to 1000 [ 894.298559][T30656] lo speed is unknown, defaulting to 1000 [ 894.412152][T30656] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 894.519591][T30656] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 894.595922][T30666] netlink: 'syz.1.22928': attribute type 1 has an invalid length. [ 894.613288][T30661] netlink: 'syz.3.22926': attribute type 1 has an invalid length. [ 894.647463][T30656] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 894.658632][T30666] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 894.683704][T30664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22926'. [ 894.728495][T30669] netlink: 8 bytes leftover after parsing attributes in process `syz.5.22929'. [ 894.820294][T30661] netlink: 96 bytes leftover after parsing attributes in process `syz.3.22926'. [ 894.831941][T30661] netlink: 1 bytes leftover after parsing attributes in process `syz.3.22926'. [ 894.846608][ T5744] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 894.857992][ T5744] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 894.865587][ T5744] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 894.874310][ T5744] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 894.880333][T30661] netlink: 'syz.3.22926': attribute type 1 has an invalid length. [ 894.882267][ T5744] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 894.897162][T30656] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 894.911231][T30661] netlink: 'syz.3.22926': attribute type 8 has an invalid length. [ 894.940692][T30661] netlink: 582 bytes leftover after parsing attributes in process `syz.3.22926'. [ 894.979816][T30656] lo speed is unknown, defaulting to 1000 [ 895.014204][T30656] lo speed is unknown, defaulting to 1000 [ 895.057710][T30656] lo speed is unknown, defaulting to 1000 [ 895.098970][T30656] lo speed is unknown, defaulting to 1000 [ 895.128158][T30686] netlink: 36 bytes leftover after parsing attributes in process `syz.5.22931'. [ 895.140020][T30656] lo speed is unknown, defaulting to 1000 [ 895.164914][T30656] lo speed is unknown, defaulting to 1000 [ 895.174043][T30687] netlink: 36 bytes leftover after parsing attributes in process `syz.5.22931'. [ 895.198899][T30656] lo speed is unknown, defaulting to 1000 [ 895.468876][T30712] netlink: 'syz.3.22934': attribute type 1 has an invalid length. [ 895.480643][ T5744] Bluetooth: hci6: command tx timeout [ 895.506604][T30712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22934'. [ 895.530372][T30712] netlink: 658 bytes leftover after parsing attributes in process `syz.3.22934'. [ 895.554647][T30712] netlink: 'syz.3.22934': attribute type 1 has an invalid length. [ 896.014921][T30671] lo speed is unknown, defaulting to 1000 [ 896.234697][T30741] bond0 (unregistering): (slave bond43): Releasing backup interface [ 896.264144][T30741] bond0 (unregistering): (slave bond46): Releasing backup interface [ 896.289085][T30741] bond0 (unregistering): (slave bond52): Releasing backup interface [ 896.316212][T30741] bond0 (unregistering): (slave bond53): Releasing backup interface [ 896.341504][T30741] bond0 (unregistering): (slave bond54): Releasing backup interface [ 896.354696][T30741] bond0 (unregistering): Released all slaves [ 896.384106][T30671] lo speed is unknown, defaulting to 1000 [ 896.920907][ T5744] Bluetooth: hci7: command tx timeout [ 897.043780][T30790] 8021q: adding VLAN 0 to HW filter on device bond4 [ 897.057437][T30790] bond0: (slave bond4): Enslaving as an active interface with an up link [ 897.145438][T30671] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.176624][T30671] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.199136][T30805] FAULT_INJECTION: forcing a failure. [ 897.199136][T30805] name failslab, interval 1, probability 0, space 0, times 0 [ 897.217287][T30671] bridge_slave_0: entered allmulticast mode [ 897.238186][T30671] bridge_slave_0: entered promiscuous mode [ 897.250323][T30805] CPU: 0 UID: 0 PID: 30805 Comm: syz.5.22964 Not tainted syzkaller #0 PREEMPT(full) [ 897.250353][T30805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 897.250365][T30805] Call Trace: [ 897.250373][T30805] [ 897.250382][T30805] dump_stack_lvl+0xe8/0x150 [ 897.250409][T30805] should_fail_ex+0x40c/0x560 [ 897.250432][T30805] should_failslab+0xa8/0x100 [ 897.250459][T30805] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 897.250482][T30805] ? rcu_is_watching+0x15/0xb0 [ 897.250501][T30805] ? __alloc_skb+0x1d7/0x7a0 [ 897.250523][T30805] ? trace_irq_enable+0x3b/0x140 [ 897.250549][T30805] __alloc_skb+0x1d7/0x7a0 [ 897.250573][T30805] ctrl_getfamily+0x3d0/0x5c0 [ 897.250595][T30805] ? __pfx_ctrl_getfamily+0x10/0x10 [ 897.250616][T30805] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 897.250642][T30805] genl_family_rcv_msg_doit+0x233/0x340 [ 897.250668][T30805] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 897.250696][T30805] ? __dev_queue_xmit+0x29b/0x37f0 [ 897.250719][T30805] genl_rcv_msg+0x614/0x7a0 [ 897.250741][T30805] ? __pfx_genl_rcv_msg+0x10/0x10 [ 897.250761][T30805] ? ref_tracker_free+0x689/0x830 [ 897.250781][T30805] ? __pfx_ctrl_getfamily+0x10/0x10 [ 897.250806][T30805] ? __pfx_ref_tracker_free+0x10/0x10 [ 897.250832][T30805] netlink_rcv_skb+0x226/0x4a0 [ 897.250859][T30805] ? __pfx_genl_rcv_msg+0x10/0x10 [ 897.250880][T30805] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 897.250912][T30805] ? down_read+0x2be/0x330 [ 897.250940][T30805] genl_rcv+0x28/0x40 [ 897.250959][T30805] netlink_unicast+0x7bb/0x940 [ 897.250990][T30805] netlink_sendmsg+0x813/0xb40 [ 897.251010][T30805] ? __pfx_netlink_sendmsg+0x10/0x10 [ 897.251037][T30805] ? __might_fault+0xaf/0x130 [ 897.251056][T30805] ? aa_sock_msg_perm+0xf1/0x1b0 [ 897.251077][T30805] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 897.251099][T30805] ? __pfx_netlink_sendmsg+0x10/0x10 [ 897.251125][T30805] __sys_sendto+0x626/0x6c0 [ 897.251152][T30805] ? __pfx___sys_sendto+0x10/0x10 [ 897.251190][T30805] ? do_user_addr_fault+0xc4a/0x1340 [ 897.251211][T30805] __x64_sys_sendto+0xde/0x100 [ 897.251245][T30805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.251264][T30805] do_syscall_64+0x174/0x580 [ 897.251287][T30805] ? trace_irq_disable+0x3b/0x140 [ 897.251310][T30805] ? clear_bhb_loop+0x40/0x90 [ 897.251332][T30805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.251350][T30805] RIP: 0033:0x7f023f95d68e [ 897.251368][T30805] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 897.251384][T30805] RSP: 002b:00007f0240887e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 897.251405][T30805] RAX: ffffffffffffffda RBX: 00007f02408896c0 RCX: 00007f023f95d68e [ 897.251419][T30805] RDX: 0000000000000020 RSI: 00007f0240888000 RDI: 0000000000000003 [ 897.251433][T30805] RBP: 0000000000000000 R08: 00007f0240887f04 R09: 000000000000000c [ 897.251445][T30805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 897.251457][T30805] R13: 00007f0240887f58 R14: 00007f0240888000 R15: 0000000000000000 [ 897.251480][T30805] [ 897.572628][T30671] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.579900][T30671] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.587263][T30671] bridge_slave_1: entered allmulticast mode [ 897.595068][T30671] bridge_slave_1: entered promiscuous mode [ 897.622694][T30671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 897.634808][T30671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 897.716089][T30671] team0: Port device team_slave_0 added [ 897.724828][T30671] team0: Port device team_slave_1 added [ 897.748161][T30671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 897.757030][T30671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 897.783442][T30671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 897.799059][T30671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 897.806102][T30671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 897.832723][T30671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 897.994936][T30671] hsr_slave_0: entered promiscuous mode [ 898.016719][T30671] hsr_slave_1: entered promiscuous mode [ 898.033972][T30671] debugfs: 'hsr0' already exists in 'hsr' [ 898.055457][T30671] Cannot create hsr debugfs directory [ 898.162115][T30834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 898.189551][T30834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 898.208064][T30834] bond0 (unregistering): Released all slaves [ 898.225967][T30829] wireguard: wg1: Could not create IPv4 socket [ 898.232668][T30829] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 898.265715][T30847] tc_dump_action: action bad kind [ 898.402433][T30852] FAULT_INJECTION: forcing a failure. [ 898.402433][T30852] name failslab, interval 1, probability 0, space 0, times 0 [ 898.446324][T30852] CPU: 0 UID: 0 PID: 30852 Comm: syz.6.22979 Not tainted syzkaller #0 PREEMPT(full) [ 898.446352][T30852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 898.446364][T30852] Call Trace: [ 898.446372][T30852] [ 898.446381][T30852] dump_stack_lvl+0xe8/0x150 [ 898.446407][T30852] should_fail_ex+0x40c/0x560 [ 898.446430][T30852] should_failslab+0xa8/0x100 [ 898.446458][T30852] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 898.446482][T30852] ? rcu_is_watching+0x15/0xb0 [ 898.446501][T30852] ? __alloc_skb+0x1d7/0x7a0 [ 898.446523][T30852] ? trace_irq_enable+0x3b/0x140 [ 898.446548][T30852] __alloc_skb+0x1d7/0x7a0 [ 898.446569][T30852] netlink_sendmsg+0x5d4/0xb40 [ 898.446592][T30852] ? __pfx_netlink_sendmsg+0x10/0x10 [ 898.446620][T30852] ? aa_sock_msg_perm+0xf1/0x1b0 [ 898.446641][T30852] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 898.446662][T30852] ? __pfx_netlink_sendmsg+0x10/0x10 [ 898.446690][T30852] ____sys_sendmsg+0x9b9/0xa20 [ 898.446721][T30852] ? __pfx_____sys_sendmsg+0x10/0x10 [ 898.446747][T30852] ? lock_release+0x4b/0x3c0 [ 898.446777][T30852] ? import_iovec+0x73/0xa0 [ 898.446802][T30852] ___sys_sendmsg+0x2a5/0x360 [ 898.446827][T30852] ? rcu_is_watching+0x15/0xb0 [ 898.446845][T30852] ? get_pid_task+0x20/0x1f0 [ 898.446864][T30852] ? __pfx____sys_sendmsg+0x10/0x10 [ 898.446892][T30852] ? rcu_is_watching+0x15/0xb0 [ 898.446924][T30852] ? __fget_files+0x2a/0x420 [ 898.446946][T30852] ? __fget_files+0x3a2/0x420 [ 898.446971][T30852] __x64_sys_sendmsg+0x1b1/0x290 [ 898.446999][T30852] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 898.447033][T30852] ? rcu_is_watching+0x15/0xb0 [ 898.447126][T30852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.447144][T30852] do_syscall_64+0x174/0x580 [ 898.447168][T30852] ? trace_irq_disable+0x3b/0x140 [ 898.447191][T30852] ? clear_bhb_loop+0x40/0x90 [ 898.447218][T30852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.447235][T30852] RIP: 0033:0x7fa75a99ce59 [ 898.447253][T30852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 898.447268][T30852] RSP: 002b:00007fa75b914028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 898.447291][T30852] RAX: ffffffffffffffda RBX: 00007fa75ac15fa0 RCX: 00007fa75a99ce59 [ 898.447305][T30852] RDX: 0000000000000800 RSI: 0000200000000100 RDI: 0000000000000003 [ 898.447317][T30852] RBP: 00007fa75b914090 R08: 0000000000000000 R09: 0000000000000000 [ 898.447328][T30852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 898.447340][T30852] R13: 00007fa75ac16038 R14: 00007fa75ac15fa0 R15: 00007ffe81c99228 [ 898.447363][T30852] [ 898.869257][T30861] __nla_validate_parse: 9 callbacks suppressed [ 898.869279][T30861] netlink: 4 bytes leftover after parsing attributes in process `syz.6.22983'. [ 898.976780][T30861] netlink: 1047 bytes leftover after parsing attributes in process `syz.6.22983'. [ 898.993004][T30861] veth0_to_bond: default FDB implementation only supports local addresses [ 899.002682][ T5744] Bluetooth: hci7: command tx timeout [ 899.033235][T30866] can: request_module (can-proto-0) failed. [ 901.048535][T30835] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 901.081120][ T5744] Bluetooth: hci7: command tx timeout [ 901.109887][T30671] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 901.143308][T30671] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 901.160647][T30671] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 901.195333][T30671] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 901.227037][T30671] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 901.265228][T30671] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 901.265423][T30877] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 901.298264][T30671] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 901.331434][T30671] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 901.507355][T30901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22994'. [ 901.592862][T30671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 901.629679][T30671] 8021q: adding VLAN 0 to HW filter on device team0 [ 901.665302][T22937] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.672479][T22937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 901.677026][T30907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22994'. [ 901.698960][T30916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22996'. [ 901.730748][T22942] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.737938][T22942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 901.965001][T30931] netlink: 'syz.6.22999': attribute type 266 has an invalid length. [ 902.073857][T30935] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 902.488045][T30964] netlink: 'syz.6.23009': attribute type 2 has an invalid length. [ 902.509483][T30964] netlink: 8812 bytes leftover after parsing attributes in process `syz.6.23009'. [ 902.522727][T30964] netlink: 'syz.6.23009': attribute type 2 has an invalid length. [ 902.606492][T30970] Timeout policy `syz1' can only be used by L3 protocol number 35006 [ 902.697619][T30980] --map-set only usable from mangle table [ 902.728807][T30671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 902.982300][T30671] veth0_vlan: entered promiscuous mode [ 902.996809][T30671] veth1_vlan: entered promiscuous mode [ 903.036708][T30671] veth0_macvtap: entered promiscuous mode [ 903.048191][T30671] veth1_macvtap: entered promiscuous mode [ 903.074943][T30671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 903.095770][T30671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 903.112407][ T59] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.133401][ T59] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.155319][ T59] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.164499][ T5744] Bluetooth: hci7: command tx timeout [ 903.170872][ T59] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.448346][T30965] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 905.575690][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.597912][T31003] netlink: 'syz.1.23017': attribute type 1 has an invalid length. [ 905.609463][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.853480][T31018] macvlan2: entered promiscuous mode [ 905.859100][T31018] macvlan2: entered allmulticast mode [ 905.866914][T31012] netlink: 8 bytes leftover after parsing attributes in process `syz.5.23020'. [ 905.883580][T31018] bond37: entered promiscuous mode [ 905.889644][T31018] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 905.898659][T31018] bond37: left promiscuous mode [ 905.929369][T31014] bridge_slave_1: left allmulticast mode [ 905.936848][T22937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.955057][T31014] bridge_slave_1: left promiscuous mode [ 905.961871][T22937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.980963][T31014] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.039283][T31026] netlink: 'syz.3.23021': attribute type 2 has an invalid length. [ 906.057548][T31025] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 906.067048][T31026] netlink: 8812 bytes leftover after parsing attributes in process `syz.3.23021'. [ 906.103902][T31026] netlink: 'syz.3.23021': attribute type 2 has an invalid length. [ 906.237513][T31036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23025'. [ 906.270856][T31032] block nbd0: reconnected socket [ 906.288521][T31032] netlink: 'syz.6.23024': attribute type 1 has an invalid length. [ 906.312870][T31032] nbd: error processing sock list [ 906.328751][ T5744] block nbd0: Receive control failed (result -32) [ 906.415678][T31042] tap0: tun_chr_ioctl cmd 2148553947 [ 906.453045][T31044] netlink: 'syz.6.23029': attribute type 1 has an invalid length. [ 906.495576][T31044] netlink: 28 bytes leftover after parsing attributes in process `syz.6.23029'. [ 906.524666][T31044] netlink: 52 bytes leftover after parsing attributes in process `syz.6.23029'. [ 906.587734][T31046] netlink: zone id is out of range [ 906.602903][T31046] netlink: zone id is out of range [ 906.619223][T31046] netlink: zone id is out of range [ 906.636625][T31046] netlink: zone id is out of range [ 906.656699][T31046] netlink: zone id is out of range [ 906.695322][T31046] netlink: zone id is out of range [ 906.707656][T31055] xt_bpf: check failed: parse error [ 906.728168][T31046] netlink: zone id is out of range [ 906.751888][T31046] netlink: zone id is out of range [ 906.767722][T31046] netlink: zone id is out of range [ 906.777089][T31062] netlink: 'syz.3.23035': attribute type 1 has an invalid length. [ 906.789158][T31046] netlink: zone id is out of range [ 906.876714][T31070] nbd: must specify an index to disconnect [ 906.893169][T31069] syzkaller0: entered promiscuous mode [ 906.910365][T31068] nbd: must specify an index to disconnect [ 906.913296][T31069] syzkaller0: entered allmulticast mode [ 906.952716][T31073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23039'. [ 906.971647][T31076] macvtap1: entered promiscuous mode [ 906.977484][T31073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23039'. [ 906.987338][T31076] macvtap1: entered allmulticast mode [ 907.000103][T31076] veth1_vlan: entered allmulticast mode [ 907.012500][T31069] tipc: Started in network mode [ 907.017660][T31069] tipc: Node identity dae01afd42e, cluster identity 4711 [ 907.025721][T31069] tipc: Enabled bearer , priority 0 [ 907.039744][T31078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23041'. [ 907.069116][T31078] block nbd8: Unsupported socket: should be TCP or UNIX. [ 907.088238][T31083] netlink: 12 bytes leftover after parsing attributes in process `syz.5.23042'. [ 907.114337][T31066] tipc: Resetting bearer [ 907.128401][T31066] tipc: Disabling bearer [ 907.153571][T31083] netlink: 36 bytes leftover after parsing attributes in process `syz.5.23042'. [ 907.263245][T31086] netlink: 'syz.6.23044': attribute type 4 has an invalid length. [ 907.462294][T31105] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 907.544258][T31107] lo: entered allmulticast mode [ 907.663937][T31116] bridge1: entered promiscuous mode [ 907.685164][T31116] bridge1: entered allmulticast mode [ 908.125482][T31156] netlink: 'syz.7.23069': attribute type 21 has an invalid length. [ 908.147507][T31156] IPv6: NLM_F_CREATE should be specified when creating new route [ 908.163073][T31154] bond5 (unregistering): Released all slaves [ 908.174389][T31156] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 908.181689][T31156] IPv6: NLM_F_CREATE should be set when creating new route [ 908.189047][T31156] IPv6: NLM_F_CREATE should be set when creating new route [ 908.196325][T31156] IPv6: NLM_F_CREATE should be set when creating new route [ 908.533755][T31181] tipc: Started in network mode [ 908.548725][T31181] tipc: Node identity 32b694f76fc4, cluster identity 4711 [ 908.564495][T31181] tipc: Enabled bearer , priority 0 [ 908.584824][T31177] tipc: Disabling bearer [ 908.779542][T31183] nbd8: detected capacity change from 0 to 63 [ 908.811772][ T5748] block nbd8: Receive control failed (result -32) [ 908.818322][ T5744] block nbd8: Receive control failed (result -32) [ 908.833747][T31198] Bluetooth: MGMT ver 1.23 [ 909.124393][T31222] netlink: 'syz.7.23092': attribute type 11 has an invalid length. [ 909.459078][T31243] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 909.950619][T31298] netlink: 'syz.6.23116': attribute type 1 has an invalid length. [ 910.075645][T31298] bond0: entered promiscuous mode [ 910.085896][T31298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 910.135284][T31304] macvtap1: entered allmulticast mode [ 910.168979][T31310] 8021q: adding VLAN 0 to HW filter on device bond5 [ 910.177850][T31310] bond0: (slave bond5): Enslaving as an active interface with an up link [ 910.222972][T31298] macvtap2: entered allmulticast mode [ 910.294928][T31304] bond0: (slave bridge2): making interface the new active one [ 910.323721][T31304] bridge2: entered promiscuous mode [ 910.347312][T31304] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 910.357917][T31318] syzkaller0: entered promiscuous mode [ 910.365347][T31318] syzkaller0: entered allmulticast mode [ 910.596695][T31338] netlink: 'syz.7.23129': attribute type 9 has an invalid length. [ 910.709544][T31348] nftables ruleset with unbound chain [ 910.884087][T31365] syzkaller0: entered promiscuous mode [ 910.889770][T31365] syzkaller0: entered allmulticast mode [ 910.951204][T31367] __nla_validate_parse: 23 callbacks suppressed [ 910.951225][T31367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23139'. [ 910.994298][T31374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23140'. [ 911.070925][T31381] netlink: 44 bytes leftover after parsing attributes in process `syz.5.23142'. [ 911.199572][T31392] netlink: 32 bytes leftover after parsing attributes in process `syz.6.23143'. [ 911.226577][T31394] netlink: 'syz.1.23147': attribute type 10 has an invalid length. [ 911.431098][T31407] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23149'. [ 911.545150][T31418] netlink: 12 bytes leftover after parsing attributes in process `syz.6.23150'. [ 911.659003][T31409] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.666688][T31409] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.844595][T31409] net_ratelimit: 44 callbacks suppressed [ 911.844619][T31409] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 911.913390][T11011] lo speed is unknown, defaulting to 1000 [ 911.939521][T11011] syz2: Port: 1 Link DOWN [ 911.961775][T31447] netlink: 4 bytes leftover after parsing attributes in process `syz.7.23156'. [ 912.026606][T31440] syzkaller0: entered promiscuous mode [ 912.057938][T31440] syzkaller0: entered allmulticast mode [ 912.142833][T31452] syzkaller0: entered promiscuous mode [ 912.169913][T31452] syzkaller0: entered allmulticast mode [ 912.193018][T31454] netlink: 20 bytes leftover after parsing attributes in process `syz.6.23158'. [ 912.219707][T31454] netlink: 20 bytes leftover after parsing attributes in process `syz.6.23158'. [ 912.228666][T31462] netlink: 'syz.1.23162': attribute type 1 has an invalid length. [ 912.248754][T31454] geneve2: entered promiscuous mode [ 912.324396][T31464] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 912.414284][T31468] bond38: (slave veth19): Enslaving as an active interface with a down link [ 912.464950][T31471] bridge0: port 1(vlan2) entered blocking state [ 912.496022][T31471] bridge0: port 1(vlan2) entered disabled state [ 912.513153][T31471] vlan2: entered allmulticast mode [ 912.525805][T31471] geneve0: entered allmulticast mode [ 912.552158][T31471] vlan2: entered promiscuous mode [ 912.563178][T31471] geneve0: entered promiscuous mode [ 912.573693][T31462] 8021q: adding VLAN 0 to HW filter on device bond38 [ 912.603021][ T5748] Bluetooth: hci7: command 0x0405 tx timeout [ 912.734954][T31483] syzkaller1: entered promiscuous mode [ 912.764307][T31483] syzkaller1: entered allmulticast mode [ 912.854143][T31486] netlink: 8 bytes leftover after parsing attributes in process `syz.6.23170'. [ 912.868590][T31492] bond0 (unregistering): (slave bond4): Releasing backup interface [ 912.912090][T31492] bond0 (unregistering): (slave bond5): Releasing backup interface [ 912.939089][T31492] bond0 (unregistering): Released all slaves [ 913.609080][T31490] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 913.616785][T31490] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 913.643931][T31490] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 913.654543][T31490] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 913.893631][T31525] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 914.096339][T31540] netlink: 'syz.5.23188': attribute type 13 has an invalid length. [ 914.120559][T31533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 914.134845][T31533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 914.163408][T31533] bond0 (unregistering): Released all slaves [ 914.344901][T31552] netlink: 'syz.1.23194': attribute type 21 has an invalid length. [ 914.501088][T31566] netlink: 'syz.5.23197': attribute type 21 has an invalid length. [ 914.924479][T31594] netlink: 'syz.1.23205': attribute type 1 has an invalid length. [ 915.349150][T31630] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 915.549217][T31645] netlink: 'syz.7.23220': attribute type 1 has an invalid length. [ 915.618066][T31645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 916.178577][T31693] __nla_validate_parse: 17 callbacks suppressed [ 916.178597][T31693] netlink: 20 bytes leftover after parsing attributes in process `syz.3.23238'. [ 916.220369][T31693] nbd: must specify a device to reconfigure [ 916.232614][T31699] netlink: 8 bytes leftover after parsing attributes in process `syz.7.23240'. [ 916.357879][T31703] syzkaller0: entered promiscuous mode [ 916.369274][T31703] syzkaller0: entered allmulticast mode [ 916.381522][T31705] syzkaller0: entered promiscuous mode [ 916.389919][T31705] syzkaller0: entered allmulticast mode [ 916.401183][T31703] netlink: 'syz.6.23241': attribute type 29 has an invalid length. [ 916.409528][T31703] netlink: 4 bytes leftover after parsing attributes in process `syz.6.23241'. [ 916.429260][T31703] netlink: 24 bytes leftover after parsing attributes in process `syz.6.23241'. [ 916.523245][T31713] netlink: 20 bytes leftover after parsing attributes in process `syz.5.23245'. [ 916.864676][T31724] netlink: 'syz.6.23248': attribute type 1 has an invalid length. [ 916.969209][T31728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 917.210473][T31739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 917.313578][T31739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 917.396084][T31748] netlink: 20 bytes leftover after parsing attributes in process `syz.3.23254'. [ 917.422323][T31748] nbd: must specify a device to reconfigure [ 917.618799][T31757] netlink: 'syz.6.23258': attribute type 3 has an invalid length. [ 917.657771][T31757] netlink: 'syz.6.23258': attribute type 1 has an invalid length. [ 917.670248][T31757] netlink: 212 bytes leftover after parsing attributes in process `syz.6.23258'. [ 917.698485][T31757] NCSI netlink: No device for ifindex 813332851 [ 918.292033][T31811] netlink: 8 bytes leftover after parsing attributes in process `syz.7.23271'. [ 918.394004][T31823] netlink: 'syz.1.23275': attribute type 1 has an invalid length. [ 918.444578][T31825] bridge6: entered promiscuous mode [ 918.492345][T31825] bridge6: entered allmulticast mode [ 918.546990][T31829] netlink: 48 bytes leftover after parsing attributes in process `syz.7.23276'. [ 918.685363][T31835] netlink: 8 bytes leftover after parsing attributes in process `syz.6.23279'. [ 919.019564][T31848] sctp: [Deprecated]: syz.5.23282 (pid 31848) Use of struct sctp_assoc_value in delayed_ack socket option. [ 919.019564][T31848] Use struct sctp_sack_info instead [ 919.156154][T31853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 919.297926][T31865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 919.554009][T31873] syzkaller0: entered promiscuous mode [ 919.570323][T31873] syzkaller0: entered allmulticast mode [ 919.739076][T31878] syzkaller0: entered promiscuous mode [ 919.755072][T31878] syzkaller0: entered allmulticast mode [ 919.869316][ T5745] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 919.939295][ T5745] CPU: 0 UID: 0 PID: 5745 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 919.939323][ T5745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 919.939335][ T5745] Call Trace: [ 919.939342][ T5745] [ 919.939350][ T5745] dump_stack_lvl+0xe8/0x150 [ 919.939378][ T5745] dump_header+0xd3/0x4b0 [ 919.939438][ T5745] oom_kill_process+0x3ab/0x970 [ 919.939466][ T5745] out_of_memory+0x1064/0x1480 [ 919.939488][ T5745] ? try_charge_memcg+0xbca/0x1590 [ 919.939522][ T5745] ? __pfx_out_of_memory+0x10/0x10 [ 919.939545][ T5745] ? do_raw_spin_unlock+0xf5/0x210 [ 919.939576][ T5745] try_charge_memcg+0xc74/0x1590 [ 919.939604][ T5745] ? fs_reclaim_acquire+0x7c/0x100 [ 919.939636][ T5745] ? __pfx_try_charge_memcg+0x10/0x10 [ 919.939666][ T5745] ? lock_release+0x4b/0x3c0 [ 919.939693][ T5745] ? rcu_is_watching+0x15/0xb0 [ 919.939717][ T5745] ? rcu_is_watching+0x15/0xb0 [ 919.939737][ T5745] ? lock_release+0x4b/0x3c0 [ 919.939763][ T5745] ? percpu_ref_tryget+0xfd/0x180 [ 919.939795][ T5745] charge_memcg+0x19c/0x2b0 [ 919.939821][ T5745] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 919.939847][ T5745] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 919.939874][ T5745] __swap_cache_prepare_and_add+0xdd/0x700 [ 919.939900][ T5745] ? page_rmappable_folio+0x9a/0x170 [ 919.939944][ T5745] swap_cache_alloc_folio+0xf1/0x240 [ 919.939968][ T5745] swap_cluster_readahead+0x355/0x670 [ 919.939993][ T5745] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 919.940020][ T5745] ? rcu_is_watching+0x15/0xb0 [ 919.940040][ T5745] ? trace_hrtimer_start+0x82/0x200 [ 919.940066][ T5745] ? get_vma_policy+0x27b/0x3c0 [ 919.940096][ T5745] swapin_readahead+0x196/0xc50 [ 919.940117][ T5745] ? rcu_is_watching+0x15/0xb0 [ 919.940140][ T5745] ? swap_table_get+0x1e/0x260 [ 919.940157][ T5745] ? rcu_is_watching+0x15/0xb0 [ 919.940178][ T5745] ? __pfx_swapin_readahead+0x10/0x10 [ 919.940197][ T5745] ? lock_release+0x4b/0x3c0 [ 919.940222][ T5745] ? rcu_is_watching+0x15/0xb0 [ 919.940240][ T5745] ? get_swap_device_info+0x1c/0x2b0 [ 919.940262][ T5745] ? swap_table_get+0x1e/0x260 [ 919.940281][ T5745] ? swap_table_get+0x1e/0x260 [ 919.940299][ T5745] ? swap_table_get+0x216/0x260 [ 919.940319][ T5745] ? swap_cache_get_folio+0x2ea/0x2f0 [ 919.940342][ T5745] do_swap_page+0x545/0x5340 [ 919.940366][ T5745] ? __pte_offset_map+0x29/0x240 [ 919.940389][ T5745] ? lock_acquire+0x5f/0x350 [ 919.940413][ T5745] ? __pfx___schedule+0x10/0x10 [ 919.940437][ T5745] ? schedule+0x90/0x360 [ 919.940460][ T5745] ? do_swap_page+0x128/0x5340 [ 919.940479][ T5745] ? __pfx_do_swap_page+0x10/0x10 [ 919.940496][ T5745] ? __pte_offset_map+0x45/0x240 [ 919.940515][ T5745] ? __pte_offset_map+0x1ae/0x240 [ 919.940538][ T5745] ? pte_offset_map_rw_nolock+0xea/0x160 [ 919.940561][ T5745] handle_mm_fault+0x124c/0x3080 [ 919.940589][ T5745] ? handle_mm_fault+0xec/0x3080 [ 919.940614][ T5745] ? __pfx_handle_mm_fault+0x10/0x10 [ 919.940635][ T5745] ? lock_vma_under_rcu+0x45a/0x500 [ 919.940667][ T5745] ? rcu_is_watching+0x15/0xb0 [ 919.940688][ T5745] do_user_addr_fault+0xa4d/0x1340 [ 919.940714][ T5745] ? trace_page_fault_user+0x84/0x1e0 [ 919.940734][ T5745] exc_page_fault+0x6a/0xc0 [ 919.940757][ T5745] asm_exc_page_fault+0x26/0x30 [ 919.940776][ T5745] RIP: 0033:0x7fda0255d68e [ 919.940795][ T5745] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 919.940811][ T5745] RSP: 002b:00007ffe42ffa998 EFLAGS: 00010246 [ 919.940831][ T5745] RAX: 0000000000000000 RBX: 0000555590c29500 RCX: 00007fda0255d68e [ 919.940845][ T5745] RDX: 00007ffe42ffa9f0 RSI: 0000000000000000 RDI: 0000000000000000 [ 919.940858][ T5745] RBP: 00007ffe42ffaa5c R08: 0000000000000000 R09: 0000000000000000 [ 919.940870][ T5745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 919.940882][ T5745] R13: 00000000000927c0 R14: 00000000000e0678 R15: 00007ffe42ffaab0 [ 919.940905][ T5745] [ 919.956773][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880b27f2000: rx timeout, send abort [ 920.078878][ T5745] memory: usage 307200kB, limit 307200kB, failcnt 1036 [ 920.082111][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880b27f2000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 920.119343][ T5745] memory+swap: usage 307428kB, limit 9007199254740988kB, failcnt 0 [ 920.455634][T31893] bond0 (unregistering): Released all slaves [ 920.488034][ T5745] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 920.492680][T31895] netlink: 'syz.5.23301': attribute type 1 has an invalid length. [ 920.523842][ T5745] Memory cgroup stats for /syz1: [ 920.523972][ T5745] cache 0 [ 920.596314][ T5745] rss 0 [ 920.630902][ T5745] rss_huge 0 [ 920.656027][ T5745] shmem 0 [ 920.671478][ T5745] mapped_file 0 [ 920.678982][T31899] openvswitch: netlink: Flow actions attr not present in new flow. [ 920.738439][ T5745] dirty 0 [ 920.787144][ T5745] writeback 0 [ 920.830127][ T5745] workingset_refault_anon 82 [ 920.859624][ T5745] workingset_refault_file 256 [ 920.900276][ T5745] swap 233472 [ 920.912374][ T5745] swapcached 675840 [ 920.931922][ T5745] pgpgin 297121 [ 920.943123][ T5745] pgpgout 297121 [ 920.961041][ T5745] pgfault 630490 [ 920.969237][ T5745] pgmajfault 52 [ 920.990593][ T5745] inactive_anon 0 [ 921.005536][ T5745] active_anon 0 [ 921.012605][T31923] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 921.035121][ T5745] inactive_file 0 [ 921.053886][ T5745] active_file 0 [ 921.061254][ T5745] unevictable 0 [ 921.074150][ T5745] hierarchical_memory_limit 314572800 [ 921.100742][ T5745] hierarchical_memsw_limit 9223372036854771712 [ 921.111501][T31928] openvswitch: netlink: IPv4 tun info is not correct [ 921.126266][ T5745] total_cache 0 [ 921.144259][ T5745] total_rss 0 [ 921.156459][ T5745] total_rss_huge 0 [ 921.169290][T31930] syzkaller0: entered promiscuous mode [ 921.177257][ T5745] total_shmem 0 [ 921.184374][ T5745] total_mapped_file 0 [ 921.193900][T31930] syzkaller0: entered allmulticast mode [ 921.199822][ T5745] total_dirty 0 [ 921.203537][T31932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 921.247605][ T5745] total_writeback 0 [ 921.262493][ T5745] total_workingset_refault_anon 82 [ 921.271958][T31930] xt_connbytes: Forcing CT accounting to be enabled [ 921.283317][ T5745] total_workingset_refault_file 256 [ 921.290862][T31938] ¾x9ÿ: renamed from bridge_slave_0 [ 921.301100][ T5745] total_swap 233472 [ 921.309590][T31930] xt_bpf: check failed: parse error [ 921.317243][ T5745] total_swapcached 675840 [ 921.330691][ T5745] total_pgpgin 297121 [ 921.342098][T31938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 921.347518][T31941] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 921.361784][ T5745] total_pgpgout 297121 [ 921.372584][ T5745] total_pgfault 630492 [ 921.380653][ T5745] total_pgmajfault 52 [ 921.389596][ T5745] total_inactive_anon 0 [ 921.402004][ T5745] total_active_anon 0 [ 921.412464][ T5745] total_inactive_file 0 [ 921.441012][ T5745] total_active_file 0 [ 921.459150][ T5745] total_unevictable 0 [ 921.464706][ T5745] anon_cost 0 [ 921.471807][ T5745] file_cost 0 [ 921.478670][ T5745] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.23275,pid=31822,uid=0 [ 921.520684][ T5745] Memory cgroup out of memory: OOM victim 31822 (syz.1.23275) is already exiting. Skip killing the task [ 921.678470][T31950] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 922.210663][T31973] __nla_validate_parse: 3 callbacks suppressed [ 922.210684][T31973] netlink: 8 bytes leftover after parsing attributes in process `syz.5.23327'. [ 923.141610][T32026] netlink: 4 bytes leftover after parsing attributes in process `syz.7.23349'. [ 923.161587][T32027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 923.203178][T32026] bond0: Invalid ad_actor_system MAC address. [ 923.236394][T32033] netlink: 'syz.7.23349': attribute type 1 has an invalid length. [ 923.268703][T32026] bond0: option ad_actor_system: invalid value (1) [ 923.295264][T32026] bond0 (unregistering): Released all slaves [ 923.401222][T32027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 923.463784][T32035] bond0: (slave gretap1): making interface the new active one [ 923.474318][T32035] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 923.627329][T32048] netlink: 40 bytes leftover after parsing attributes in process `syz.5.23353'. [ 923.638351][T32053] netlink: 20 bytes leftover after parsing attributes in process `syz.6.23354'. [ 923.719313][T32062] netlink: 144 bytes leftover after parsing attributes in process `syz.5.23353'. [ 923.745678][T32063] netlink: 8 bytes leftover after parsing attributes in process `syz.7.23357'. [ 923.931046][T32075] syzkaller0: entered promiscuous mode [ 923.942003][T32075] syzkaller0: entered allmulticast mode [ 924.346936][T32084] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 924.354387][T32084] IPv6: NLM_F_CREATE should be set when creating new route [ 924.361732][T32084] IPv6: NLM_F_CREATE should be set when creating new route [ 924.374012][T32084] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 924.756391][T32103] netlink: 'syz.6.23373': attribute type 1 has an invalid length. [ 924.782293][T32103] netlink: 244 bytes leftover after parsing attributes in process `syz.6.23373'. [ 924.811569][T32104] syzkaller0: entered promiscuous mode [ 924.837894][T32104] syzkaller0: entered allmulticast mode [ 924.926525][T32114] netlink: 20 bytes leftover after parsing attributes in process `syz.7.23378'. [ 925.059865][T32125] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23381'. [ 925.102162][T32127] netlink: 'syz.3.23381': attribute type 1 has an invalid length. [ 925.152330][T32129] bridge1: entered promiscuous mode [ 925.188361][T32129] bridge1: entered allmulticast mode [ 925.247167][T32127] workqueue: Failed to create a rescuer kthread for wq "bond55": -EINTR [ 925.335520][T32142] netlink: 'syz.6.23385': attribute type 1 has an invalid length. [ 925.428344][T32151] netlink: 36 bytes leftover after parsing attributes in process `syz.1.23388'. [ 925.443894][T32153] netlink: 'syz.7.23389': attribute type 1 has an invalid length. [ 925.524153][T32156] netlink: 'syz.3.23387': attribute type 2 has an invalid length. [ 925.560995][T32156] netlink: 'syz.3.23387': attribute type 2 has an invalid length. [ 925.602106][T32161] syzkaller0: entered promiscuous mode [ 925.623508][T32161] syzkaller0: entered allmulticast mode [ 925.642133][T32162] veth0: entered promiscuous mode [ 925.663810][T32162] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 925.691718][T32160] veth0: left promiscuous mode [ 925.789805][T32169] bond0 (unregistering): (slave gretap1): Releasing active interface [ 925.824436][T32169] bond0 (unregistering): Released all slaves [ 925.898842][T32176] bridge_slave_1: left allmulticast mode [ 925.917903][T32176] bridge_slave_1: left promiscuous mode [ 925.937680][T32176] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.949936][T32176] ¾x9ÿ: left allmulticast mode [ 925.963678][T32176] ¾x9ÿ: left promiscuous mode [ 925.976512][T32176] bridge0: port 1(1¾x9ÿ) entered disabled state [ 926.000359][T32173] syzkaller0: entered promiscuous mode [ 926.009098][T32173] syzkaller0: entered allmulticast mode [ 927.134858][T32255] netlink: 'syz.3.23422': attribute type 3 has an invalid length. [ 927.225138][T32262] __nla_validate_parse: 8 callbacks suppressed [ 927.225159][T32262] netlink: 12 bytes leftover after parsing attributes in process `syz.7.23425'. [ 927.292283][T32262] nbd: must specify a device to reconfigure [ 927.302128][T32259] 8021q: adding VLAN 0 to HW filter on device bond1 [ 927.335552][T32259] bond0: (slave bond1): Enslaving as a backup interface with an up link [ 927.431677][T32267] netlink: 211792 bytes leftover after parsing attributes in process `syz.3.23426'. [ 927.639745][T32286] netlink: 36 bytes leftover after parsing attributes in process `syz.6.23432'. [ 927.694265][T32293] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 927.805009][T32288] syzkaller0: entered promiscuous mode [ 927.811902][T32288] syzkaller0: entered allmulticast mode [ 927.845178][T32296] veth21: entered allmulticast mode [ 927.908537][T32309] netlink: 20 bytes leftover after parsing attributes in process `syz.6.23439'. [ 927.935341][T32309] nbd: must specify a device to reconfigure [ 928.057927][T32312] netlink: 72 bytes leftover after parsing attributes in process `syz.1.23440'. [ 928.071435][T32312] netlink: 72 bytes leftover after parsing attributes in process `syz.1.23440'. [ 928.108451][T32315] IPv6: sit1: Disabled Multicast RS [ 928.123473][T32315] sit1: entered allmulticast mode [ 928.166756][T32322] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 928.179057][T32321] netlink: 8 bytes leftover after parsing attributes in process `syz.6.23444'. [ 928.246238][T32324] syzkaller0: entered promiscuous mode [ 928.275678][T32324] syzkaller0: entered allmulticast mode [ 928.287076][T32328] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 928.309433][T32327] netlink: 36 bytes leftover after parsing attributes in process `syz.3.23447'. [ 928.523222][T32346] netlink: 'syz.3.23452': attribute type 13 has an invalid length. [ 928.625297][ T29] audit: type=1800 audit(1782303428.640:26): pid=32357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.23454" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=468 res=0 errno=0 [ 928.718010][T32361] netlink: 4 bytes leftover after parsing attributes in process `syz.6.23456'. [ 929.096470][T32380] netlink: 36 bytes leftover after parsing attributes in process `syz.6.23462'. [ 929.247935][T32391] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 929.287964][T32391] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 929.313692][T32391] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 929.376510][T32391] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 929.446222][T32391] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 929.476428][T32414] ip6tnl0: Caught tx_queue_len zero misconfig [ 929.499538][T32391] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 929.553492][T32391] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 929.584730][T32391] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 929.622360][T32391] bridge10: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 929.688946][T32391] bridge11: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 929.733588][T32391] bridge12: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 929.761225][T32391] bridge13: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 929.796795][T32391] bridge14: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 929.837489][T32391] bridge15: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 929.887874][T32391] bridge16: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 929.953176][T32391] bridge17: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 930.020846][T32391] bridge18: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 930.146743][T32450] syzkaller0: entered promiscuous mode [ 930.175985][T32450] syzkaller0: entered allmulticast mode [ 930.189032][T32448] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 930.220014][T32456] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 930.348447][T32453] bond39 (unregistering): Released all slaves [ 930.559671][T32487] "syz.6.23496" (32487) uses obsolete ecb(arc4) skcipher [ 930.605564][T32488] "syz.6.23496" (32488) uses obsolete ecb(arc4) skcipher [ 930.745145][T32509] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 930.795577][ T46] IPVS: starting estimator thread 0... [ 930.908507][T32516] IPVS: using max 36 ests per chain, 86400 per kthread [ 931.054958][T32538] syzkaller0: entered promiscuous mode [ 931.089376][T32538] syzkaller0: entered allmulticast mode [ 931.261424][T32542] veth0: entered promiscuous mode [ 931.369193][T32560] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 931.402279][T32560] netlink: 'syz.7.23518': attribute type 1 has an invalid length. [ 931.422263][T32567] xt_hashlimit: size too large, truncated to 1048576 [ 931.481243][T32560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 931.499409][T32576] netlink: 'syz.1.23523': attribute type 3 has an invalid length. [ 931.598010][T32572] syzkaller0: entered promiscuous mode [ 931.604741][T32581] nbd: must specify a device to reconfigure [ 931.618136][T32572] syzkaller0: entered allmulticast mode [ 931.821571][T32588] erspan0: entered promiscuous mode [ 931.879045][T32541] veth0: left promiscuous mode [ 932.202192][T32613] nbd: must specify a device to reconfigure [ 932.222991][T32607] nbd: device at index 64 is going down [ 932.231424][T32616] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 932.313481][T32607] __nla_validate_parse: 19 callbacks suppressed [ 932.313502][T32607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23533'. [ 932.362908][T32607] ip6tnl0: Caught tx_queue_len zero misconfig [ 932.517295][T32632] tipc: Enabled bearer , priority 0 [ 932.600094][T32640] Cannot find add_set index 0 as target [ 932.649654][T32632] syzkaller0: entered promiscuous mode [ 932.665810][T32632] syzkaller0: entered allmulticast mode [ 932.680978][T32632] tipc: Resetting bearer [ 932.690865][T32643] netlink: 8 bytes leftover after parsing attributes in process `syz.6.23544'. [ 932.753697][T32640] syzkaller0: entered promiscuous mode [ 932.759361][T32640] syzkaller0: entered allmulticast mode [ 932.818867][T32648] bond55: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 932.842462][T32648] bond55 (unregistering): Released all slaves [ 932.879615][T32653] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 933.025477][T32659] netlink: 28 bytes leftover after parsing attributes in process `syz.5.23550'. [ 933.034302][T32660] netlink: 20 bytes leftover after parsing attributes in process `syz.1.23549'. [ 933.058660][T32660] nbd: must specify a device to reconfigure [ 933.160041][T32672] netlink: 48 bytes leftover after parsing attributes in process `syz.5.23554'. [ 933.172536][T32672] macvlan0: entered promiscuous mode [ 933.194464][T32675] syzkaller1: entered promiscuous mode [ 933.204629][T32675] syzkaller1: entered allmulticast mode [ 933.249730][T32625] tipc: Resetting bearer [ 933.359244][T32692] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 933.401374][T32625] tipc: Disabling bearer [ 933.555382][T32703] netlink: 165 bytes leftover after parsing attributes in process `syz.6.23562'. [ 933.579377][T32705] vlan7: entered promiscuous mode [ 933.592666][T32707] netlink: 20 bytes leftover after parsing attributes in process `syz.7.23565'. [ 933.614355][T32707] nbd: must specify a device to reconfigure [ 933.787037][T32722] netlink: 8 bytes leftover after parsing attributes in process `syz.6.23568'. [ 933.888341][T32723] veth0: entered promiscuous mode [ 933.933005][T32738] openvswitch: netlink: nsh attr 6 is out of range max 3 [ 933.962605][T32738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 933.974609][T32721] veth0: left promiscuous mode [ 934.211562][T32755] netlink: 20 bytes leftover after parsing attributes in process `syz.1.23577'. [ 934.219980][T32757] netlink: 116 bytes leftover after parsing attributes in process `syz.6.23576'. [ 934.241564][T32755] nbd: must specify a device to reconfigure [ 934.577611][ T316] tipc: Enabling of bearer rejected, failed to enable media [ 934.660666][ T321] nbd: must specify a device to reconfigure [ 934.829175][ T338] syzkaller0: entered promiscuous mode [ 934.855385][ T338] syzkaller0: entered allmulticast mode [ 935.037551][ T350] bond2: entered promiscuous mode [ 935.050524][ T350] bond2: entered allmulticast mode [ 935.056115][ T350] 8021q: adding VLAN 0 to HW filter on device bond2 [ 935.687173][ T404] netlink: 'syz.6.23610': attribute type 1 has an invalid length. [ 935.690704][ T405] netlink: 'syz.1.23609': attribute type 21 has an invalid length. [ 935.732053][ T404] netlink: 'syz.6.23610': attribute type 1 has an invalid length. [ 935.755927][ T404] netlink: 'syz.6.23610': attribute type 8 has an invalid length. [ 936.172439][ T429] syzkaller0: entered promiscuous mode [ 936.185019][ T429] syzkaller0: entered allmulticast mode [ 936.194042][ T435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 936.418782][ T447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 936.618739][ T466] netlink: 'syz.7.23628': attribute type 1 has an invalid length. [ 936.851969][ T473] IPVS: set_ctl: invalid protocol: 46 255.255.255.255:20002 [ 937.462578][ T521] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 937.517909][ T525] __nla_validate_parse: 12 callbacks suppressed [ 937.517930][ T525] netlink: 4 bytes leftover after parsing attributes in process `syz.5.23646'. [ 937.584460][ T531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23650'. [ 937.658956][ T536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23650'. [ 937.723527][ T536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23650'. [ 938.056090][ T548] bridge0: entered promiscuous mode [ 938.067214][ T548] bridge0: entered allmulticast mode [ 938.076544][ T555] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 938.218202][ T565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23663'. [ 938.229196][ T564] bond0: left promiscuous mode [ 938.251462][ T564] bridge2: left promiscuous mode [ 938.286815][T22942] bond0: (slave bridge2): link status definitely down, disabling slave [ 938.314127][T22942] bond0: (slave bond1): link status definitely down, disabling slave [ 938.318392][ T570] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 938.339229][T22942] bond0: now running without any active interface! [ 938.353683][ T576] netlink: 8 bytes leftover after parsing attributes in process `syz.6.23662'. [ 938.473463][ T580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 938.492368][ T582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23670'. [ 938.525474][ T580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 938.907874][ T617] syzkaller1: entered promiscuous mode [ 938.923829][ T617] syzkaller1: entered allmulticast mode [ 938.958310][ T617] netlink: 4240 bytes leftover after parsing attributes in process `syz.5.23681'. [ 939.124680][ T619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23682'. [ 939.541112][ T667] netlink: 'syz.5.23692': attribute type 2 has an invalid length. [ 939.563085][ T663] bond39: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 939.590113][ T663] bond39 (unregistering): Released all slaves [ 939.877813][ T685] syzkaller0: entered promiscuous mode [ 939.915392][ T685] syzkaller0: entered allmulticast mode [ 940.594229][ T704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 940.753442][ T704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 941.024519][ T741] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 941.136759][ T743] netlink: 'syz.1.23711': attribute type 1 has an invalid length. [ 941.244825][ T745] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 941.439712][ T704] veth1_vlan: left allmulticast mode [ 941.604412][ T743] 8021q: adding VLAN 0 to HW filter on device bond39 [ 941.615620][ T59] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 941.667725][ T59] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.727254][ T59] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 941.760691][ T750] netlink: 28 bytes leftover after parsing attributes in process `syz.7.23713'. [ 941.789786][ T59] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.801438][ T750] netlink: 'syz.7.23713': attribute type 7 has an invalid length. [ 941.829547][ T59] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 941.846079][ T59] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.876847][ T59] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 941.903255][ T59] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.964906][ T765] syzkaller0: entered promiscuous mode [ 941.987980][ T765] syzkaller0: entered allmulticast mode [ 942.011236][ T763] macvlan0: entered promiscuous mode [ 942.068911][ T775] netlink: 'syz.7.23719': attribute type 32 has an invalid length. [ 942.309703][ T788] tunl0: Caught tx_queue_len zero misconfig [ 942.529873][ T803] tipc: Started in network mode [ 942.536795][ T803] tipc: Node identity 6668683233bf, cluster identity 4711 [ 942.558105][ T803] tipc: Enabled bearer , priority 0 [ 942.586370][ T803] syzkaller0: entered promiscuous mode [ 942.598265][ T803] syzkaller0: entered allmulticast mode [ 942.623075][ T803] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 942.653354][ T803] tipc: Resetting bearer [ 942.679839][ T802] tipc: Resetting bearer [ 942.701440][ T802] tipc: Disabling bearer [ 942.726729][ T810] syzkaller0: entered promiscuous mode [ 942.750304][ T810] syzkaller0: entered allmulticast mode [ 942.872365][ T818] __nla_validate_parse: 5 callbacks suppressed [ 942.872385][ T818] netlink: 56 bytes leftover after parsing attributes in process `syz.6.23735'. [ 942.891515][ T820] netlink: 4 bytes leftover after parsing attributes in process `syz.5.23736'. [ 942.922000][ T818] netlink: 12 bytes leftover after parsing attributes in process `syz.6.23735'. [ 942.960953][ T818] netlink: 31 bytes leftover after parsing attributes in process `syz.6.23735'. [ 942.986084][ T818] netlink: 'syz.6.23735': attribute type 3 has an invalid length. [ 943.007519][ T818] netlink: 'syz.6.23735': attribute type 2 has an invalid length. [ 943.028282][ T818] netlink: 31 bytes leftover after parsing attributes in process `syz.6.23735'. [ 943.053959][ T831] netlink: 'syz.5.23740': attribute type 1 has an invalid length. [ 943.078343][ T831] netlink: 'syz.5.23740': attribute type 1 has an invalid length. [ 943.096926][ T831] netlink: 9172 bytes leftover after parsing attributes in process `syz.5.23740'. [ 943.131783][ T834] bond0 (unregistering): Released all slaves [ 943.301426][ T850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23748'. [ 943.304840][ T839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 943.357667][ T856] netlink: 4 bytes leftover after parsing attributes in process `syz.5.23749'. [ 943.391849][ T839] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 943.562304][ T856] macsec1: entered promiscuous mode [ 943.573241][ T856] bridge0: entered promiscuous mode [ 943.592577][ T856] macsec1: entered allmulticast mode [ 943.607464][ T856] bridge0: entered allmulticast mode [ 943.623521][ T856] bridge0: port 1(macsec1) entered blocking state [ 943.635295][ T856] bridge0: port 1(macsec1) entered disabled state [ 943.649273][ T871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23751'. [ 943.666338][ T856] bridge0: left allmulticast mode [ 943.679424][ T856] bridge0: left promiscuous mode [ 943.716813][ T59] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.737812][ T876] netlink: 'syz.6.23753': attribute type 5 has an invalid length. [ 943.737813][ T875] netlink: 'syz.6.23753': attribute type 5 has an invalid length. [ 943.788031][ T59] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.803742][ T878] netlink: 12 bytes leftover after parsing attributes in process `syz.6.23753'. [ 943.817655][ T59] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.891892][ T59] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.040004][ T886] Cannot find set identified by id 3 to match [ 944.554608][ T910] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 944.588509][ T912] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 945.006864][ T941] bond40: option packets_per_slave: invalid value (18446744073709551615) [ 945.023776][ T941] bond40: option packets_per_slave: allowed values 0 - 65535 [ 945.052765][ T941] bond40 (unregistering): Released all slaves [ 945.354781][ T964] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 945.552455][T22940] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 945.590764][T22941] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 945.616740][T22941] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 945.641328][T22941] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 945.710690][ T985] 8021q: adding VLAN 0 to HW filter on device bond40 [ 945.723543][ T985] bond0: (slave bond40): Enslaving as an active interface with an up link [ 945.994941][ C1] vcan0: j1939_tp_rxtimer: 0xffff888038aa7000: rx timeout, send abort [ 946.212966][ T1012] : entered promiscuous mode [ 946.459018][ T1027] 8021q: adding VLAN 0 to HW filter on device bond41 [ 946.468363][ T1027] bond0: (slave bond41): Enslaving as an active interface with an up link [ 946.503360][ C1] vcan0: j1939_tp_rxtimer: 0xffff888038aa7000: abort rx timeout. Force session deactivation [ 946.635384][ T1041] Cannot find set identified by id 3 to match [ 946.945059][ T1075] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 947.325833][ T1109] syzkaller0: entered promiscuous mode [ 947.341991][ T1109] syzkaller0: entered allmulticast mode [ 947.404984][ T5748] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 947.412854][ T5748] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 947.420750][ T5748] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 947.428741][ T5748] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 947.437910][ T5748] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 947.605421][ T5744] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 947.615084][ T5744] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 947.622715][ T5744] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 947.631400][ T5744] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 947.638966][ T5744] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 948.303471][ T1166] __nla_validate_parse: 11 callbacks suppressed [ 948.303492][ T1166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23836'. [ 948.371277][ T1166] workqueue: Failed to create a rescuer kthread for wq "bond55": -EINTR [ 948.597908][ T1182] netlink: 'syz.7.23839': attribute type 1 has an invalid length. [ 948.613315][ T1111] lo speed is unknown, defaulting to 1000 [ 948.730604][ T1186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23841'. [ 948.907140][ T1111] lo speed is unknown, defaulting to 1000 [ 949.238890][ T1221] netlink: 16 bytes leftover after parsing attributes in process `syz.3.23851'. [ 949.333595][ T1213] syzkaller0: entered promiscuous mode [ 949.347298][ T1213] syzkaller0: entered allmulticast mode [ 949.359933][ T1229] netlink: 28 bytes leftover after parsing attributes in process `syz.7.23852'. [ 949.389555][T22943] syzkaller0: tun_net_xmit 48 [ 949.505712][ T1234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23853'. [ 949.712081][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.719424][ T1111] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.726688][ T5748] Bluetooth: hci8: command tx timeout [ 949.736340][ T1111] bridge_slave_0: entered allmulticast mode [ 949.744815][ T1111] bridge_slave_0: entered promiscuous mode [ 949.753221][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.760760][ T1111] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.768152][ T1111] bridge_slave_1: entered allmulticast mode [ 949.776674][ T1111] bridge_slave_1: entered promiscuous mode [ 949.887062][ T1111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 949.925985][ T1111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 950.031276][ T1111] team0: Port device team_slave_0 added [ 950.049664][ T1111] team0: Port device team_slave_1 added [ 950.117102][ T1111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 950.136528][ T1111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 950.165181][ T1111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 950.178637][ T1111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 950.186488][ T1111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 950.226065][ T1111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 950.287634][ T1111] hsr_slave_0: entered promiscuous mode [ 950.318530][ T1111] hsr_slave_1: entered promiscuous mode [ 950.326229][ T1111] debugfs: 'hsr0' already exists in 'hsr' [ 950.335169][ T1111] Cannot create hsr debugfs directory [ 950.558824][ T1267] netlink: 8 bytes leftover after parsing attributes in process `syz.7.23862'. [ 950.585139][ T1270] netlink: 16 bytes leftover after parsing attributes in process `syz.3.23860'. [ 950.644552][ T1111] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 950.671778][ T1111] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 950.705066][ T1274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 950.724435][ T1273] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.23864'. [ 950.761908][ T1111] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 950.776173][ T1111] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 950.884108][ T1273] syzkaller0: entered promiscuous mode [ 950.895148][ T1273] syzkaller0: entered allmulticast mode [ 950.931794][ T1111] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 950.978625][ T1111] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 951.018389][ T1291] FAULT_INJECTION: forcing a failure. [ 951.018389][ T1291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 951.058731][ T1291] CPU: 0 UID: 0 PID: 1291 Comm: syz.6.23870 Not tainted syzkaller #0 PREEMPT(full) [ 951.058761][ T1291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 951.058774][ T1291] Call Trace: [ 951.058782][ T1291] [ 951.058791][ T1291] dump_stack_lvl+0xe8/0x150 [ 951.058819][ T1291] should_fail_ex+0x40c/0x560 [ 951.058845][ T1291] _copy_to_iter+0x59c/0x1810 [ 951.058866][ T1291] ? lock_release+0x4b/0x3c0 [ 951.058900][ T1291] ? __pfx__copy_to_iter+0x10/0x10 [ 951.058920][ T1291] ? rcu_is_watching+0x15/0xb0 [ 951.058940][ T1291] ? trace_irq_enable+0x3b/0x140 [ 951.058965][ T1291] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 951.058988][ T1291] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 951.059021][ T1291] __skb_datagram_iter+0xf8/0x980 [ 951.059038][ T1291] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 951.059059][ T1291] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 951.059081][ T1291] skb_copy_datagram_iter+0xb5/0x240 [ 951.059101][ T1291] netlink_recvmsg+0x2b9/0xa50 [ 951.059125][ T1291] ? __pfx_netlink_recvmsg+0x10/0x10 [ 951.059144][ T1291] ? unwind_next_frame+0x8f/0x2550 [ 951.059164][ T1291] ? rcu_is_watching+0x15/0xb0 [ 951.059185][ T1291] ? aa_sock_msg_perm+0xf1/0x1b0 [ 951.059206][ T1291] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 951.059229][ T1291] ? security_socket_recvmsg+0x7e/0x2c0 [ 951.059251][ T1291] ? __pfx_netlink_recvmsg+0x10/0x10 [ 951.059269][ T1291] sock_recvmsg_nosec+0x10c/0x140 [ 951.059292][ T1291] ____sys_recvmsg+0x3e3/0x4a0 [ 951.059324][ T1291] ? __pfx_____sys_recvmsg+0x10/0x10 [ 951.059358][ T1291] ? import_iovec+0x73/0xa0 [ 951.059384][ T1291] ___sys_recvmsg+0x213/0x5a0 [ 951.059415][ T1291] ? __pfx____sys_recvmsg+0x10/0x10 [ 951.059445][ T1291] ? __fget_files+0x2a/0x420 [ 951.059468][ T1291] ? rcu_is_watching+0x15/0xb0 [ 951.059496][ T1291] ? rcu_is_watching+0x15/0xb0 [ 951.059517][ T1291] ? lock_release+0x4b/0x3c0 [ 951.059545][ T1291] ? __might_fault+0xcb/0x130 [ 951.059570][ T1291] do_recvmmsg+0x31a/0x7f0 [ 951.059603][ T1291] ? __pfx_do_recvmmsg+0x10/0x10 [ 951.059645][ T1291] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 951.059671][ T1291] ? __fget_files+0x3a2/0x420 [ 951.059698][ T1291] __x64_sys_recvmmsg+0x198/0x250 [ 951.059718][ T1291] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 951.059748][ T1291] ? rcu_is_watching+0x15/0xb0 [ 951.059769][ T1291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.059790][ T1291] do_syscall_64+0x174/0x580 [ 951.059815][ T1291] ? trace_irq_disable+0x3b/0x140 [ 951.059840][ T1291] ? clear_bhb_loop+0x40/0x90 [ 951.059862][ T1291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.059882][ T1291] RIP: 0033:0x7fa75a99ce59 [ 951.059902][ T1291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 951.059919][ T1291] RSP: 002b:00007fa75b914028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 951.059942][ T1291] RAX: ffffffffffffffda RBX: 00007fa75ac15fa0 RCX: 00007fa75a99ce59 [ 951.059957][ T1291] RDX: 0000000000000002 RSI: 0000200000005f80 RDI: 0000000000000004 [ 951.059970][ T1291] RBP: 00007fa75b914090 R08: 0000000000000000 R09: 0000000000000000 [ 951.059983][ T1291] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000002 [ 951.059995][ T1291] R13: 00007fa75ac16038 R14: 00007fa75ac15fa0 R15: 00007ffe81c99228 [ 951.060019][ T1291] [ 951.638901][ T1111] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 951.692567][ T1111] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 951.802400][ T5748] Bluetooth: hci8: command tx timeout [ 951.936830][ T1307] syzkaller0: entered promiscuous mode [ 951.951404][ T1307] syzkaller0: entered allmulticast mode [ 952.044068][ T1111] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 952.068484][ T1111] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 952.093606][ T1111] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 952.132436][ T1111] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 952.157406][ T1111] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 952.205454][ T1111] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 952.228015][ T1111] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 952.261057][ T1111] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 952.269656][ T1334] netlink: 8 bytes leftover after parsing attributes in process `syz.7.23881'. [ 952.282946][ T1331] netlink: 64 bytes leftover after parsing attributes in process `syz.3.23880'. [ 952.466903][ T1111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 952.506881][ T1111] 8021q: adding VLAN 0 to HW filter on device team0 [ 952.537876][T22940] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.545071][T22940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 952.582328][T22943] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.589552][T22943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 952.715234][ T1355] netlink: 'syz.3.23887': attribute type 1 has an invalid length. [ 952.757369][ T1355] netlink: 'syz.3.23887': attribute type 2 has an invalid length. [ 953.189256][ T1378] syzkaller0: entered promiscuous mode [ 953.206196][ T1378] syzkaller0: entered allmulticast mode [ 953.227737][ T1384] team0: Caught tx_queue_len zero misconfig [ 953.424245][ T1390] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 953.587469][ T1410] __nla_validate_parse: 1 callbacks suppressed [ 953.587491][ T1410] netlink: 8 bytes leftover after parsing attributes in process `syz.5.23898'. [ 953.616353][ T1410] netlink: 24 bytes leftover after parsing attributes in process `syz.5.23898'. [ 953.799781][ T1414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 953.824027][ T1414] bond0: entered promiscuous mode [ 953.829856][ T1414] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 953.864671][ T1420] syzkaller0: entered promiscuous mode [ 953.881198][ T5748] Bluetooth: hci8: command tx timeout [ 953.884881][ T1420] syzkaller0: entered allmulticast mode [ 953.917631][ T1111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 954.173677][ T1111] veth0_vlan: entered promiscuous mode [ 954.187672][ T1437] netlink: 'syz.3.23902': attribute type 1 has an invalid length. [ 954.203025][ T1111] veth1_vlan: entered promiscuous mode [ 954.214040][ T1437] netlink: 'syz.3.23902': attribute type 1 has an invalid length. [ 954.257617][ T1437] netlink: 16 bytes leftover after parsing attributes in process `syz.3.23902'. [ 954.288293][ T1111] veth0_macvtap: entered promiscuous mode [ 954.314229][ T1111] veth1_macvtap: entered promiscuous mode [ 954.353874][ T1111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 954.403952][ T1111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 954.445342][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.476920][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.515569][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.536429][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.652395][ T1451] 8021q: adding VLAN 0 to HW filter on device bond55 [ 954.673160][ T1451] bond0: (slave bond55): Enslaving as an active interface with an up link [ 954.895934][ T1456] block nbd0: Unsupported socket: should be TCP or UNIX. [ 954.898221][T22937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 954.912086][T22937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 955.034297][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 955.057853][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 955.125545][ T1463] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.23912'. [ 955.155953][ T1468] netlink: 'syz.5.23913': attribute type 1 has an invalid length. [ 955.174655][ T1469] netlink: 16 bytes leftover after parsing attributes in process `syz.3.23914'. [ 955.175573][ T1468] netlink: 'syz.5.23913': attribute type 1 has an invalid length. [ 955.193832][ T1468] netlink: 16 bytes leftover after parsing attributes in process `syz.5.23913'. [ 955.207705][ T1463] netlink: 20 bytes leftover after parsing attributes in process `syz.6.23912'. [ 955.227900][ T1471] netlink: 108 bytes leftover after parsing attributes in process `syz.1.23818'. [ 955.241375][ T1463] openvswitch: netlink: Flow key attr not present in new flow. [ 955.437413][ T1481] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 955.537747][ T5744] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 955.548081][ T5744] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 955.556871][ T5744] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 955.564923][ T5744] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 955.573428][ T5744] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 955.642537][ T1480] syzkaller0: entered promiscuous mode [ 955.680428][ T1480] syzkaller0: entered allmulticast mode [ 955.682287][ T1496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23922'. [ 955.852110][ T1499] bridge0: port 3(gretap0) entered blocking state [ 955.871470][ T1499] bridge0: port 3(gretap0) entered disabled state [ 955.883583][ T1499] gretap0: entered allmulticast mode [ 955.898329][ T1499] gretap0: entered promiscuous mode [ 955.918488][ T1499] bridge0: port 3(gretap0) entered blocking state [ 955.925269][ T1499] bridge0: port 3(gretap0) entered forwarding state [ 955.960743][ T5748] Bluetooth: hci8: command tx timeout [ 956.085137][ T1512] netlink: 'syz.1.23926': attribute type 1 has an invalid length. [ 956.106696][ T1512] netlink: 20 bytes leftover after parsing attributes in process `syz.1.23926'. [ 956.224072][ T1517] tc_dump_action: action bad kind [ 956.282228][ T1519] tipc: Started in network mode [ 956.304408][ T1519] tipc: Node identity c61e3f3a8677, cluster identity 4711 [ 956.340967][ T1519] tipc: Enabled bearer , priority 0 [ 956.362394][ T1522] syzkaller0: entered promiscuous mode [ 956.387079][ T1522] syzkaller0: entered allmulticast mode [ 956.471925][ T1522] tipc: Resetting bearer [ 956.512821][ T1522] tipc: Disabling bearer [ 956.709188][ T1546] netlink: 'syz.5.23938': attribute type 30 has an invalid length. [ 956.786081][ T1546] bond8: option arp_missed_max: invalid value (0) [ 956.820475][ T1546] bond8: option arp_missed_max: allowed values 1 - 255 [ 956.915041][ T1546] bond8 (unregistering): Released all slaves [ 957.038831][ T1484] lo speed is unknown, defaulting to 1000 [ 957.186323][ T1484] lo speed is unknown, defaulting to 1000 [ 957.252158][ T1561] netlink: 'syz.6.23942': attribute type 1 has an invalid length. [ 957.305509][ T1561] 8021q: adding VLAN 0 to HW filter on device bond5 [ 957.384008][ T1563] bond5: (slave geneve3): making interface the new active one [ 957.428880][ T1563] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 957.484583][T22937] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.535311][T22937] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.578611][T22937] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.640342][ T5748] Bluetooth: hci1: command tx timeout [ 957.647515][T22937] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.728537][ T1569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 957.767760][ T1568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 957.875345][ T1574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 957.996657][ T1568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 958.122950][ T1484] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.141048][ T1484] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.152578][ T1484] bridge_slave_0: entered allmulticast mode [ 958.173318][ T1484] bridge_slave_0: entered promiscuous mode [ 958.199842][ T1484] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.224801][ T1484] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.239215][ T1579] netlink: 'syz.1.23946': attribute type 1 has an invalid length. [ 958.254462][ T1484] bridge_slave_1: entered allmulticast mode [ 958.269056][ T1484] bridge_slave_1: entered promiscuous mode [ 958.348740][ T1484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.378021][ T1484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 958.455602][ T1484] team0: Port device team_slave_0 added [ 958.475794][ T1484] team0: Port device team_slave_1 added [ 958.543503][ T1484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 958.556512][ T1484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 958.622140][ T1484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 958.663962][ T1484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 958.702853][ T1484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 958.767956][ T1484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 958.912831][ T1484] hsr_slave_0: entered promiscuous mode [ 958.924735][ T1484] hsr_slave_1: entered promiscuous mode [ 958.944574][ T1484] debugfs: 'hsr0' already exists in 'hsr' [ 958.970879][ T1484] Cannot create hsr debugfs directory [ 959.366569][ T1484] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 959.482985][ T1484] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 959.720980][ T5748] Bluetooth: hci1: command tx timeout [ 959.754138][ T1484] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 959.810908][ T1614] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 959.862011][ T1484] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 960.082069][ T1484] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 960.117808][ T1484] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 960.150869][ T1632] __nla_validate_parse: 3 callbacks suppressed [ 960.150888][ T1632] netlink: 24 bytes leftover after parsing attributes in process `syz.5.23964'. [ 960.192278][ T1632] netlink: 'syz.5.23964': attribute type 3 has an invalid length. [ 960.206067][ T1635] xt_hashlimit: size too large, truncated to 1048576 [ 960.211563][ T1632] netlink: 24 bytes leftover after parsing attributes in process `syz.5.23964'. [ 960.248889][ T1632] netlink: 'syz.5.23964': attribute type 3 has an invalid length. [ 960.265280][ T1637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23966'. [ 960.271982][ T1631] netlink: 'syz.6.23965': attribute type 20 has an invalid length. [ 960.291752][ T1484] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 960.301550][ T1631] netlink: 4 bytes leftover after parsing attributes in process `syz.6.23965'. [ 960.326758][ T1484] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 960.431566][ T1484] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 960.439594][ T1631] netlink: 'syz.6.23965': attribute type 20 has an invalid length. [ 960.466815][ T1484] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 960.481005][ T1631] netlink: 4 bytes leftover after parsing attributes in process `syz.6.23965'. [ 960.493631][ T1484] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 960.515503][ T1484] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 960.723774][ T1484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 960.779773][ T1484] 8021q: adding VLAN 0 to HW filter on device team0 [ 960.820415][T22940] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.827718][T22940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 960.863302][ T1656] netlink: 'syz.5.23971': attribute type 4 has an invalid length. [ 960.893559][T22938] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.900760][T22938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 961.398644][ T1671] netlink: 8 bytes leftover after parsing attributes in process `syz.5.23975'. [ 961.581490][ T1688] netlink: 8 bytes leftover after parsing attributes in process `syz.5.23982'. [ 961.764264][ T5845] IPVS: starting estimator thread 0... [ 961.800946][ T5748] Bluetooth: hci1: command tx timeout [ 961.871107][ T1702] IPVS: using max 40 ests per chain, 96000 per kthread [ 961.976527][ T1484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 962.187231][ T1484] veth0_vlan: entered promiscuous mode [ 962.223793][ T1484] veth1_vlan: entered promiscuous mode [ 962.276109][ T1731] syzkaller0: entered promiscuous mode [ 962.293523][ T1731] syzkaller0: entered allmulticast mode [ 962.433286][ T1484] veth0_macvtap: entered promiscuous mode [ 962.485509][ T1484] veth1_macvtap: entered promiscuous mode [ 962.516205][ T1740] syzkaller0: entered promiscuous mode [ 962.534047][ T1740] syzkaller0: entered allmulticast mode [ 962.593378][ T1484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 962.636632][ T1484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 962.679537][T22938] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.715643][T22938] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.736129][ T1752] netlink: del zone limit has 4 unknown bytes [ 962.748427][T22938] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.779361][T22938] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.969991][T22940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.995280][T22940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 963.066460][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 963.067901][ T1767] syzkaller0: entered promiscuous mode [ 963.081553][ T1767] syzkaller0: entered allmulticast mode [ 963.095803][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 963.503773][ T1789] netlink: 88 bytes leftover after parsing attributes in process `syz.5.24026'. [ 963.688999][ T1807] netlink: 'syz.3.24033': attribute type 12 has an invalid length. [ 963.880502][ T5748] Bluetooth: hci1: command tx timeout [ 963.923644][ T1813] bridge1: left promiscuous mode [ 963.928841][ T1815] can: request_module (can-proto-0) failed. [ 963.994095][ T1815] batman_adv: batadv0: Adding interface: dummy0 [ 964.027068][ T1815] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 964.070348][ T1815] batman_adv: batadv0: Interface activated: dummy0 [ 964.135300][ T1822] batadv0: mtu less than device minimum [ 964.199519][ T1822] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 964.210720][ T1822] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 964.221839][ T1822] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 964.233088][ T1822] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 964.244004][ T1822] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 964.254806][ T1822] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 964.265583][ T1822] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 964.354933][ T1834] tipc: Cannot configure node identity twice [ 964.388120][ T1840] netlink: 13 bytes leftover after parsing attributes in process `syz.6.24047'. [ 964.544820][ T1851] syz_tun: entered allmulticast mode [ 964.796989][ T1868] netlink: 64 bytes leftover after parsing attributes in process `syz.6.24059'. [ 964.971152][T19086] IPVS: starting estimator thread 0... [ 965.060415][ T1883] IPVS: using max 40 ests per chain, 96000 per kthread [ 965.313184][ T1910] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 965.377785][ T1916] __nla_validate_parse: 1 callbacks suppressed [ 965.377820][ T1916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24082'. [ 965.870713][ T1948] netlink: 'syz.3.24096': attribute type 12 has an invalid length. [ 965.923135][T19086] IPVS: starting estimator thread 0... [ 965.988739][ T1954] netlink: 4 bytes leftover after parsing attributes in process `syz.5.24099'. [ 966.031762][ T1952] IPVS: using max 50 ests per chain, 120000 per kthread [ 966.207325][ T1968] lo: left promiscuous mode [ 966.266659][ T1968] 8021q: adding VLAN 0 to HW filter on device team0 [ 966.287520][ T1968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 966.295320][ T5845] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 966.355275][ T1968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 966.365823][ T1968] net_ratelimit: 12 callbacks suppressed [ 966.365843][ T1968] batadv0: mtu less than device minimum [ 966.379787][ T1968] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 966.391202][ T1968] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 966.402664][ T1968] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 966.414136][ T1968] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 966.426198][ T1968] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 966.437085][ T1968] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 966.448058][ T1968] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 966.458808][ T1968] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 966.469530][ T1968] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 966.496847][ T1968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 966.538765][ T1968] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 966.550123][ T1968] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 966.568698][ T1968] veth1_vlan: left promiscuous mode [ 966.575819][ T1968] veth0_vlan: left promiscuous mode [ 966.583108][ T1968] veth0_vlan: entered promiscuous mode [ 966.590402][T19085] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 966.592686][ T1968] veth1_vlan: entered promiscuous mode [ 966.604801][ T1968] macvlan0: left promiscuous mode [ 966.618074][ T1968] veth1_macvtap: left promiscuous mode [ 966.625183][ T1968] veth0_macvtap: left promiscuous mode [ 966.635245][ T1968] veth0_macvtap: entered promiscuous mode [ 966.642991][ T1968] veth1_macvtap: entered promiscuous mode [ 966.655383][ T1968] batman_adv: batadv0: Interface activated: wlan0 [ 966.685240][ T1968] 8021q: adding VLAN 0 to HW filter on device bond1 [ 966.697992][ T1968] netdevsim netdevsim5 eth0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 966.718114][ T1968] 8021q: adding VLAN 0 to HW filter on device eth0 [ 966.737715][ T1968] netdevsim netdevsim5 eth1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 966.768497][ T1968] 8021q: adding VLAN 0 to HW filter on device eth1 [ 966.778377][ T1968] netdevsim netdevsim5 eth2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 966.800647][ T1968] 8021q: adding VLAN 0 to HW filter on device eth2 [ 966.819605][ T1968] netdevsim netdevsim5 eth3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 966.832245][ T1968] 8021q: adding VLAN 0 to HW filter on device eth3 [ 966.855008][ T1968] 8021q: adding VLAN 0 to HW filter on device bond2 [ 966.879272][ T1968] bond3: left promiscuous mode [ 966.895228][ T1968] 8021q: adding VLAN 0 to HW filter on device bond3 [ 966.925451][ T1968] 8021q: adding VLAN 0 to HW filter on device bond4 [ 966.947999][ T1968] veth1_vlan: entered allmulticast mode [ 966.959548][ T1968] macvtap1: left promiscuous mode [ 966.985929][ T1968] 8021q: adding VLAN 0 to HW filter on device bond5 [ 967.009498][ T1968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 967.058556][ T1968] 8021q: adding VLAN 0 to HW filter on device bond6 [ 967.083662][ T1968] bridge6: left promiscuous mode [ 967.097781][ T1968] 8021q: adding VLAN 0 to HW filter on device bond7 [ 967.153427][ T1968] bond0: entered promiscuous mode [ 967.169450][ T1968] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 967.293519][ T1975] netlink: 'syz.3.24107': attribute type 12 has an invalid length. [ 967.311522][T22938] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 967.332821][T22938] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.351656][T22938] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 967.367941][T22938] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.404346][ T2003] can: request_module (can-proto-0) failed. [ 967.409865][T22943] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 967.430419][T22943] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 967.451568][T22938] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 967.474062][T22938] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.501267][T22938] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 967.513774][T22938] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.545074][ T2015] netlink: 8 bytes leftover after parsing attributes in process `syz.7.24124'. [ 967.566772][T22943] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 967.591112][ T5830] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 967.611925][T22943] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 968.075531][ T2045] netlink: 24 bytes leftover after parsing attributes in process `syz.6.24135'. [ 968.226370][ T2055] netlink: 8 bytes leftover after parsing attributes in process `syz.7.24139'. [ 968.599988][ T2077] netlink: 88 bytes leftover after parsing attributes in process `syz.1.24148'. [ 968.748391][ T2088] netlink: 8 bytes leftover after parsing attributes in process `syz.5.24154'. [ 968.864716][ T2096] bond0: (slave dummy0): Error: Device can not be enslaved while up [ 969.001585][ T5748] Bluetooth: hci1: command tx timeout [ 970.266280][ T2191] netlink: 8 bytes leftover after parsing attributes in process `syz.7.24202'. [ 971.164319][ T2261] netlink: 8 bytes leftover after parsing attributes in process `syz.5.24236'. [ 971.321033][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 971.593434][T22942] net_ratelimit: 60 callbacks suppressed [ 971.593454][T22942] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 971.692342][ T2300] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 971.825579][ T2312] netlink: 8 bytes leftover after parsing attributes in process `syz.7.24258'. [ 971.880870][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 972.040940][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 972.171601][T22938] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 972.721076][T22942] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 973.244353][ T59] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 973.770436][ T59] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 974.290649][ T59] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 974.810414][T22938] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 974.938388][ T2319] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 975.068691][ T2349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24271'. [ 975.256126][ T2364] netlink: 'syz.5.24279': attribute type 1 has an invalid length. [ 975.282487][ T2364] netlink: 'syz.5.24279': attribute type 2 has an invalid length. [ 975.331340][T22942] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 975.608158][ T2390] netlink: 12 bytes leftover after parsing attributes in process `syz.7.24292'. [ 975.871807][T22938] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 976.394574][T22942] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 976.942608][ T59] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 977.500926][T22942] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 977.689109][ T2535] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 978.063710][T22938] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 978.203104][ T2574] sit0: entered promiscuous mode [ 978.215737][ T2574] netlink: 'syz.1.24364': attribute type 1 has an invalid length. [ 978.224157][ T2574] netlink: 1 bytes leftover after parsing attributes in process `syz.1.24364'. [ 978.597015][T19086] IPVS: starting estimator thread 0... [ 978.604120][ T2604] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 978.611005][ T59] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 978.700330][ T2607] IPVS: using max 42 ests per chain, 100800 per kthread [ 979.165986][T22938] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 979.734167][T22938] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 979.801710][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 979.969346][ T2701] netlink: 292 bytes leftover after parsing attributes in process `syz.3.24411'. [ 980.292164][ T59] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 980.821733][T22943] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 980.917922][ T2762] syz_tun: entered allmulticast mode [ 981.080451][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 981.089768][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 981.380500][T22942] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 981.953305][T22938] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 982.034274][ T2818] syzkaller0: entered promiscuous mode [ 982.064556][ T2818] syzkaller0: entered allmulticast mode [ 982.515098][T22938] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 982.682243][ T2890] sctp: [Deprecated]: syz.1.24476 (pid 2890) Use of struct sctp_assoc_value in delayed_ack socket option. [ 982.682243][ T2890] Use struct sctp_sack_info instead [ 982.990236][ T5744] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 982.997624][ T5744] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 983.006200][ T5744] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 983.014758][ T5744] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 983.022756][ T5744] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 983.051876][ T59] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 983.201041][ T2911] netlink: 20 bytes leftover after parsing attributes in process `syz.7.24483'. [ 983.394782][T26107] syz_tun (unregistering): left allmulticast mode [ 983.473173][T22943] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 983.519429][T22943] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.622498][T22943] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 983.632659][T22940] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 983.681025][T22943] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.752938][T22943] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 983.779902][T22943] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.862151][T22943] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 983.896031][T22943] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.073509][ T59] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.115075][ T59] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.157896][T22942] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.188869][T22942] netdevsim netdevsim5 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.203549][T22938] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 984.295319][T22943] pimreg: left allmulticast mode [ 984.312042][T22943] lo: left allmulticast mode [ 984.750589][ T59] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 984.767627][T22943] bond2 (unregistering): (slave bridge2): Releasing active interface [ 984.837557][T22943] bond1 (unregistering): Released all slaves [ 984.862592][T22943] bond2 (unregistering): Released all slaves [ 984.875451][T22943] bond3 (unregistering): Released all slaves [ 984.889020][T22943] bond4 (unregistering): Released all slaves [ 984.905941][T22943] bond5 (unregistering): Released all slaves [ 984.928106][T22943] bond0 (unregistering): left promiscuous mode [ 984.945915][T22943] bond0 (unregistering): Released all slaves [ 984.958939][T22943] bond6 (unregistering): Released all slaves [ 984.977038][T22943] bond7 (unregistering): Released all slaves [ 985.003830][ T2903] lo speed is unknown, defaulting to 1000 [ 985.004283][ T2978] syzkaller0: entered promiscuous mode [ 985.031622][ T2978] syzkaller0: entered allmulticast mode [ 985.084469][ T5744] Bluetooth: hci3: command tx timeout [ 985.138693][T22943] tipc: Left network mode [ 985.248762][ T3016] netlink: 60 bytes leftover after parsing attributes in process `syz.7.24519'. [ 985.304053][ T59] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 985.323696][ T3016] netlink: 60 bytes leftover after parsing attributes in process `syz.7.24519'. [ 985.352610][ T2903] lo speed is unknown, defaulting to 1000 [ 985.764617][ T3050] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 985.798027][T22943] batman_adv: batadv0: Interface deactivated: wlan0 [ 985.807156][T22943] batadv0: mtu less than device minimum [ 985.820635][T22943] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 985.831980][T22943] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 985.907426][T22943] batman_adv: batadv0: Removing interface: wlan0 [ 986.429218][ T3095] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 986.461156][ T2903] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.480387][ T2903] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.488187][ T2903] bridge_slave_0: entered allmulticast mode [ 986.517652][ T2903] bridge_slave_0: entered promiscuous mode [ 986.561189][ T2903] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.580001][ T2903] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.588236][ T2903] bridge_slave_1: entered allmulticast mode [ 986.599975][ T2903] bridge_slave_1: entered promiscuous mode [ 986.632897][ T2903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 986.646453][ T2903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 986.693809][ T2903] team0: Port device team_slave_0 added [ 986.702925][ T2903] team0: Port device team_slave_1 added [ 986.743972][ T2903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 986.756335][ T2903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 986.800030][ T2903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 986.825499][ T2903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 986.835175][ T2903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 986.865294][ T2903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 986.931323][ T2903] hsr_slave_0: entered promiscuous mode [ 986.938401][ T2903] hsr_slave_1: entered promiscuous mode [ 986.946996][ T2903] debugfs: 'hsr0' already exists in 'hsr' [ 986.953789][ T2903] Cannot create hsr debugfs directory [ 987.066746][ T3118] netlink: 8 bytes leftover after parsing attributes in process `syz.7.24561'. [ 987.161371][ T5744] Bluetooth: hci3: command tx timeout [ 987.323143][ T2903] netdevsim netdevsim5 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.420838][ T59] net_ratelimit: 20 callbacks suppressed [ 987.420862][ T59] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 987.971280][ T48] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 988.074956][ T2903] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.155885][ T3136] netlink: 28 bytes leftover after parsing attributes in process `syz.3.24567'. [ 988.236183][ T2903] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.253724][ T3144] netlink: 8 bytes leftover after parsing attributes in process `syz.6.24572'. [ 988.321533][ T2903] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.491215][T22938] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 988.656956][ T2903] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 988.773684][ T2903] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 988.838890][ T2903] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 988.871893][ T2903] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 988.896255][ T2903] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 988.919761][ T2903] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 988.953989][ T2903] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 989.005802][ T2903] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 989.021158][T22940] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 989.079095][T22943] hsr_slave_0: left promiscuous mode [ 989.106255][T22943] hsr_slave_1: left promiscuous mode [ 989.125417][T22943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 989.145631][T22943] batadv0: mtu less than device minimum [ 989.172389][T22943] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 989.183867][T22943] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 989.194940][T22943] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 989.205876][T22943] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 989.216742][T22943] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 989.236532][T22943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 989.244164][ T5744] Bluetooth: hci3: command tx timeout [ 989.251940][T22943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 989.275716][T22943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 989.285210][T22943] batman_adv: batadv0: Interface deactivated: dummy0 [ 989.293546][T22943] batman_adv: batadv0: Removing interface: dummy0 [ 989.325696][T22943] veth1_vlan: left allmulticast mode [ 989.348368][T22943] veth1_macvtap: left promiscuous mode [ 989.355030][T22943] veth0_macvtap: left promiscuous mode [ 989.361014][T22943] veth1_vlan: left promiscuous mode [ 989.371386][T22943] veth0_vlan: left promiscuous mode [ 989.576898][ T3203] netlink: 4 bytes leftover after parsing attributes in process `syz.7.24593'. [ 989.675332][T22943] team0 (unregistering): Port device team_slave_1 removed [ 989.689248][T22943] team0 (unregistering): Port device team_slave_0 removed [ 990.045304][ T2903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 990.106353][ T2903] 8021q: adding VLAN 0 to HW filter on device team0 [ 990.146925][T22941] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.154330][T22941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 990.197529][T22941] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.204921][T22941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 990.234389][ T3243] netlink: 28 bytes leftover after parsing attributes in process `syz.1.24605'. [ 990.256888][T22943] IPVS: stop unused estimator thread 0... [ 990.478026][ T3250] syzkaller1: entered promiscuous mode [ 990.502715][ T3250] syzkaller1: entered allmulticast mode [ 991.321177][ T5744] Bluetooth: hci3: command tx timeout [ 991.566054][ T3274] netlink: 28 bytes leftover after parsing attributes in process `syz.7.24618'. [ 991.713485][ T3279] can: request_module (can-proto-0) failed. [ 991.719786][ T3285] batman_adv: batadv0: Adding interface: dummy0 [ 991.739634][ T3287] xt_hashlimit: size too large, truncated to 1048576 [ 991.754103][ T3285] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 991.806137][ T3285] batman_adv: batadv0: Interface activated: dummy0 [ 991.878450][ T3297] syz_tun: entered allmulticast mode [ 991.919496][ T3290] syzkaller0: entered promiscuous mode [ 991.942410][ T3290] syzkaller0: entered allmulticast mode [ 991.977065][ T3296] syz_tun: left allmulticast mode [ 992.386302][ T2903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 992.396031][ T3322] syzkaller1: entered promiscuous mode [ 992.415370][ T3322] syzkaller1: entered allmulticast mode [ 992.727507][ T3342] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 992.783744][ T3344] netlink: 24 bytes leftover after parsing attributes in process `syz.7.24640'. [ 992.965520][ T3347] netlink: 36 bytes leftover after parsing attributes in process `syz.7.24641'. [ 992.976731][ T2903] veth0_vlan: entered promiscuous mode [ 993.024815][ T2903] veth1_vlan: entered promiscuous mode [ 993.140948][ T2903] veth0_macvtap: entered promiscuous mode [ 993.164835][ T2903] veth1_macvtap: entered promiscuous mode [ 993.208579][ T2903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 993.241296][ T2903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 993.272921][ T59] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.308100][ T59] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.328320][ T3341] lo speed is unknown, defaulting to 1000 [ 993.328340][ T59] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.361163][ T59] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.776204][ T3341] lo speed is unknown, defaulting to 1000 [ 996.088993][ T3350] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 996.205925][T22941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.238192][T22941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.394874][ T3393] netlink: 36 bytes leftover after parsing attributes in process `syz.7.24652'. [ 996.422388][T22941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.454921][T22941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.656401][ T3408] netlink: 556 bytes leftover after parsing attributes in process `syz.1.24660'. [ 996.808484][ T3421] netlink: 36 bytes leftover after parsing attributes in process `syz.5.24667'. [ 996.953531][ T3424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 996.979064][ T3424] batadv_slave_1: entered promiscuous mode [ 997.143184][ T3439] tipc: Enabled bearer , priority 0 [ 997.163890][ T3441] syzkaller0: entered promiscuous mode [ 997.181534][ T3441] syzkaller0: entered allmulticast mode [ 997.192932][ T3439] syzkaller0: entered promiscuous mode [ 997.207084][ T3439] syzkaller0: entered allmulticast mode [ 997.359437][ T3454] netlink: 20 bytes leftover after parsing attributes in process `syz.7.24682'. [ 997.398218][ T3438] tipc: Resetting bearer [ 997.448681][ T3438] tipc: Disabling bearer [ 997.585347][ T3461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 997.610816][ T3461] batadv_slave_1: entered promiscuous mode [ 997.797018][ T3474] pimreg: entered allmulticast mode [ 997.884965][T19086] IPVS: starting estimator thread 0... [ 997.990484][ T3483] IPVS: using max 43 ests per chain, 103200 per kthread [ 998.170712][ T3471] lo speed is unknown, defaulting to 1000 [ 998.193294][ T3501] netlink: 8 bytes leftover after parsing attributes in process `syz.5.24698'. [ 998.223451][ T3501] netlink: 8 bytes leftover after parsing attributes in process `syz.5.24698'. [ 998.433188][ T3511] tipc: Started in network mode [ 998.450310][ T3511] tipc: Node identity 2613c04581ee, cluster identity 4711 [ 998.475510][ T3511] tipc: Enabled bearer , priority 0 [ 998.500534][ T3471] lo speed is unknown, defaulting to 1000 [ 998.502354][ T3511] syzkaller0: entered promiscuous mode [ 998.528786][ T3511] syzkaller0: entered allmulticast mode [ 998.573556][ T3509] tipc: Resetting bearer [ 998.602944][ T3509] tipc: Disabling bearer [ 998.744725][ T3523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 998.754231][ T3523] batadv_slave_1: entered promiscuous mode [ 998.876967][ T3525] netlink: 8 bytes leftover after parsing attributes in process `syz.5.24711'. [ 998.932581][ T3529] netlink: 'syz.7.24713': attribute type 13 has an invalid length. [ 999.150984][ T3532] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 999.436669][ T3554] syzkaller0: entered promiscuous mode [ 999.452038][ T3554] syzkaller0: entered allmulticast mode [ 999.566846][ T3558] syzkaller0: entered promiscuous mode [ 999.588930][ T3558] syzkaller0: entered allmulticast mode [ 999.844987][ T3566] bridge_slave_0: left allmulticast mode [ 999.855041][ T3566] bridge_slave_0: left promiscuous mode [ 999.869317][ T3566] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.917588][ T3566] bridge_slave_1: left allmulticast mode [ 999.930024][ T3566] bridge_slave_1: left promiscuous mode [ 999.955354][ T3566] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.975742][ T3566] bond0: (slave bond_slave_0): Releasing backup interface [ 1000.004124][ T3566] bond0: (slave bond_slave_1): Releasing backup interface [ 1000.063635][ T3566] team0: Port device team_slave_0 removed [ 1000.108697][ T3566] team0: Port device team_slave_1 removed [ 1000.139387][ T3566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1000.165695][ T3566] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1000.215868][ T3566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1000.236288][ T3566] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1000.290708][ T3566] net_ratelimit: 54 callbacks suppressed [ 1000.290732][ T3566] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1000.339627][ T3569] team0: Mode changed to "loadbalance" [ 1000.515950][ T3591] syz_tun: entered allmulticast mode [ 1000.634612][ T3593] can: request_module (can-proto-0) failed. [ 1000.806736][ T3601] syzkaller0: entered promiscuous mode [ 1000.818310][ T3601] syzkaller0: entered allmulticast mode [ 1001.358722][ T3640] netlink: 620 bytes leftover after parsing attributes in process `syz.6.24761'. [ 1001.520325][ T3646] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1001.763668][ T3667] netlink: 620 bytes leftover after parsing attributes in process `syz.7.24773'. [ 1001.878421][ T3676] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1001.946344][ T3676] xt_hashlimit: size too large, truncated to 1048576 [ 1002.205433][ T3691] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1002.407867][ T3703] netlink: 32 bytes leftover after parsing attributes in process `syz.5.24790'. [ 1002.949039][ T3737] syzkaller0: entered promiscuous mode [ 1002.963289][ T3737] syzkaller0: entered allmulticast mode [ 1003.017804][ T3741] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1003.206410][ T3722] lo speed is unknown, defaulting to 1000 [ 1003.278528][ T3756] syz_tun: entered allmulticast mode [ 1003.458742][ T3722] lo speed is unknown, defaulting to 1000 [ 1003.547140][ T3764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24817'. [ 1003.698690][ T3766] syzkaller0: entered promiscuous mode [ 1003.716654][ T3766] syzkaller0: entered allmulticast mode [ 1003.943444][ T3775] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1003.995428][ T3775] xt_hashlimit: size too large, truncated to 1048576 [ 1004.189087][ T3785] syzkaller0: entered promiscuous mode [ 1004.196476][ T3785] syzkaller0: entered allmulticast mode [ 1004.336545][ T3788] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1004.842436][ T3816] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1004.871515][ T3816] xt_hashlimit: size too large, truncated to 1048576 [ 1005.356991][ T3838] syzkaller0: entered promiscuous mode [ 1005.369978][ T3838] syzkaller0: entered allmulticast mode [ 1005.646677][ T3842] bridge_slave_0: left allmulticast mode [ 1005.673887][ T3842] bridge_slave_0: left promiscuous mode [ 1005.703624][ T3842] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.736253][ T3842] bridge_slave_1: left allmulticast mode [ 1005.747424][ T3842] bridge_slave_1: left promiscuous mode [ 1005.753185][ T3850] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1005.753607][ T3842] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.779295][ T3842] bond0: (slave bond_slave_0): Releasing backup interface [ 1005.781946][ T3850] xt_hashlimit: size too large, truncated to 1048576 [ 1005.821650][ T3842] bond0: (slave bond_slave_1): Releasing backup interface [ 1005.853764][ T3842] team0: Port device team_slave_0 removed [ 1005.912348][ T3842] team0: Port device team_slave_1 removed [ 1005.945285][ T3842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1005.956073][ T3842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1005.970737][ T3842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1005.982809][ T3842] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1006.077781][ T3845] team0: Mode changed to "loadbalance" [ 1006.235168][ T3862] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1006.266399][ T3862] xt_hashlimit: size too large, truncated to 1048576 [ 1006.861208][ T3886] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1007.578543][ T3908] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1007.921781][ T3912] lo speed is unknown, defaulting to 1000 [ 1008.076046][ T3912] lo speed is unknown, defaulting to 1000 [ 1008.181144][ T3930] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1008.222115][ T3930] xt_hashlimit: size too large, truncated to 1048576 [ 1008.761206][ T3950] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1008.764325][ T3951] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1008.807306][ T3950] xt_hashlimit: size too large, truncated to 1048576 [ 1009.693434][ T3987] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1009.778182][ T3992] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1009.895949][ T3995] xt_hashlimit: size too large, truncated to 1048576 [ 1010.943109][ T4055] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1011.017466][ T4059] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1011.056305][ T4059] xt_hashlimit: size too large, truncated to 1048576 [ 1011.094490][ T4064] netlink: 620 bytes leftover after parsing attributes in process `syz.6.24932'. [ 1011.809503][ T4112] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1011.935344][ T4119] xt_hashlimit: size too large, truncated to 1048576 [ 1012.174544][ T4129] syzkaller0: entered promiscuous mode [ 1012.192261][ T4129] syzkaller0: entered allmulticast mode [ 1012.422228][ T4139] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 1013.023602][T22940] nci: nci_ntf_packet: unknown ntf opcode 0x227 [ 1013.748118][ T4166] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1014.145843][ T4244] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1014.423348][ T4249] syzkaller0: entered promiscuous mode [ 1014.448227][ T4249] syzkaller0: entered allmulticast mode [ 1015.048830][ T4288] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1015.556527][ T4301] syzkaller0: entered promiscuous mode [ 1015.564385][ T4301] syzkaller0: entered allmulticast mode [ 1017.311999][ T4253] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1017.366260][ T4315] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1017.498283][ T4317] syzkaller0: entered promiscuous mode [ 1017.525416][ T4317] syzkaller0: entered allmulticast mode [ 1017.736577][ T4331] syzkaller0: entered promiscuous mode [ 1017.752332][ T4331] syzkaller0: entered allmulticast mode [ 1018.189140][ T4370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1018.263340][ T4382] syzkaller0: entered promiscuous mode [ 1018.278846][ T4382] syzkaller0: entered allmulticast mode [ 1018.296758][ T4384] syzkaller0: entered promiscuous mode [ 1018.296891][ T4370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1018.302608][ T4384] syzkaller0: entered allmulticast mode [ 1018.316376][ T4386] xt_hashlimit: size too large, truncated to 1048576 [ 1018.377878][ T4370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1018.842868][ T30] INFO: task syz.4.22601:29646 blocked for more than 143 seconds. [ 1018.857335][ T30] Not tainted syzkaller #0 [ 1018.879110][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1018.901872][ T30] task:syz.4.22601 state:D stack:25544 pid:29646 tgid:29645 ppid:5758 task_flags:0x400140 flags:0x00080002 [ 1018.927405][ T30] Call Trace: [ 1018.935943][ T30] [ 1018.942323][ T30] __schedule+0x17d9/0x56c0 [ 1018.946987][ T30] ? trace_irq_enable+0x3b/0x140 [ 1018.953165][ T30] ? __kmalloc_node_track_caller_noprof+0x4d7/0x7b0 [ 1018.960513][ T30] ? netlink_rcv_skb+0x226/0x4a0 [ 1018.965624][ T30] ? genl_rcv+0x28/0x40 [ 1018.969927][ T30] ? __pfx___schedule+0x10/0x10 [ 1018.975419][ T30] ? rcu_is_watching+0x15/0xb0 [ 1018.982170][ T30] ? rcu_is_watching+0x15/0xb0 [ 1018.987297][ T30] ? lock_release+0x4b/0x3c0 [ 1018.998424][ T30] ? rcu_is_watching+0x15/0xb0 [ 1019.005325][ T30] schedule+0x164/0x360 [ 1019.009674][ T30] schedule_preempt_disabled+0x13/0x30 [ 1019.016436][ T30] __mutex_lock+0x7bf/0x1550 [ 1019.021720][ T30] ? __mutex_lock+0x5d4/0x1550 [ 1019.026694][ T30] ? nfsd_nl_version_get_doit+0x17c/0xd20 [ 1019.032993][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1019.038299][ T30] ? __nlmsg_put+0xef/0x1b0 [ 1019.044193][ T30] ? genlmsg_put+0x137/0x2e0 [ 1019.049016][ T30] nfsd_nl_version_get_doit+0x17c/0xd20 [ 1019.055578][ T30] ? rcu_is_watching+0x15/0xb0 [ 1019.060794][ T30] ? __nla_parse+0x40/0x60 [ 1019.065638][ T30] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 1019.072945][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1019.081376][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1019.087927][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 1019.095694][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1019.102989][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1019.108558][ T30] genl_rcv_msg+0x614/0x7a0 [ 1019.115594][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1019.122122][ T30] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 1019.128530][ T30] ? __netlink_lookup+0xc6/0x8b0 [ 1019.134408][ T30] ? rcu_is_watching+0x15/0xb0 [ 1019.139361][ T30] netlink_rcv_skb+0x226/0x4a0 [ 1019.145272][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1019.150849][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1019.156402][ T30] ? down_read+0x2be/0x330 [ 1019.162334][ T30] genl_rcv+0x28/0x40 [ 1019.166618][ T30] netlink_unicast+0x7bb/0x940 [ 1019.172306][ T30] netlink_sendmsg+0x813/0xb40 [ 1019.177279][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1019.183107][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1019.189176][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1019.195872][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1019.202978][ T30] ____sys_sendmsg+0x9b9/0xa20 [ 1019.208299][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1019.214263][ T30] ? lock_release+0x4b/0x3c0 [ 1019.219130][ T30] ? import_iovec+0x73/0xa0 [ 1019.226520][ T30] ___sys_sendmsg+0x2a5/0x360 [ 1019.232520][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1019.237945][ T30] ? futex_wake+0x51b/0x5f0 [ 1019.242943][ T30] ? __fget_files+0x2a/0x420 [ 1019.247813][ T30] ? __fget_files+0x3a2/0x420 [ 1019.253518][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 1019.258651][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1019.264708][ T30] ? rcu_is_watching+0x15/0xb0 [ 1019.269639][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.276457][ T30] do_syscall_64+0x174/0x580 [ 1019.282191][ T30] ? trace_irq_disable+0x3b/0x140 [ 1019.287622][ T30] ? clear_bhb_loop+0x40/0x90 [ 1019.292923][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.299177][ T30] RIP: 0033:0x7f1ab859ce59 [ 1019.304263][ T30] RSP: 002b:00007f1ab94df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1019.315099][ T30] RAX: ffffffffffffffda RBX: 00007f1ab8815fa0 RCX: 00007f1ab859ce59 [ 1019.324435][ T30] RDX: 0000000020048000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1019.334734][ T30] RBP: 00007f1ab8632e6f R08: 0000000000000000 R09: 0000000000000000 [ 1019.344264][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1019.352787][ T30] R13: 00007f1ab8816038 R14: 00007f1ab8815fa0 R15: 00007ffc4be9ae08 [ 1019.361182][ T30] [ 1019.364522][ T30] INFO: lockdep is turned off. [ 1019.386007][ T30] NMI backtrace for cpu 1 [ 1019.386029][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1019.386051][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1019.386063][ T30] Call Trace: [ 1019.386071][ T30] [ 1019.386079][ T30] dump_stack_lvl+0xe8/0x150 [ 1019.386106][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1019.386128][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1019.386186][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1019.386208][ T30] sys_info+0x135/0x170 [ 1019.386226][ T30] watchdog+0xfd7/0x1030 [ 1019.386255][ T30] ? watchdog+0x1c7/0x1030 [ 1019.386283][ T30] kthread+0x388/0x470 [ 1019.386302][ T30] ? __pfx_watchdog+0x10/0x10 [ 1019.386326][ T30] ? __pfx_kthread+0x10/0x10 [ 1019.386344][ T30] ret_from_fork+0x514/0xb70 [ 1019.386366][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1019.386385][ T30] ? __switch_to+0xc89/0x1420 [ 1019.386411][ T30] ? __pfx_kthread+0x10/0x10 [ 1019.386430][ T30] ret_from_fork_asm+0x1a/0x30 [ 1019.386460][ T30] [ 1019.386468][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1019.503012][ C0] NMI backtrace for cpu 0 [ 1019.503033][ C0] CPU: 0 UID: 0 PID: 22942 Comm: kworker/u8:30 Not tainted syzkaller #0 PREEMPT(full) [ 1019.503052][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1019.503063][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1019.503162][ C0] RIP: 0010:kasan_check_range+0x67/0x2c0 [ 1019.503188][ C0] Code: 00 ff 4c 39 cf 0f 82 14 02 00 00 49 89 ff 49 c1 ef 03 49 ba 00 00 00 00 00 fc ff df 4f 8d 1c 17 49 ff c8 4d 89 c1 49 c1 e9 03 <48> bb 01 00 00 00 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 [ 1019.503202][ C0] RSP: 0018:ffffc9000da174e8 EFLAGS: 00000a03 [ 1019.503217][ C0] RAX: ffffc9000da17701 RBX: 0000000000000010 RCX: ffffffff8176ae94 [ 1019.503229][ C0] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc9000da17638 [ 1019.503240][ C0] RBP: 0000000000000000 R08: ffffc9000da17647 R09: 1ffff92001b42ec8 [ 1019.503251][ C0] R10: dffffc0000000000 R11: fffff52001b42ec7 R12: dffffc0000000000 [ 1019.503263][ C0] R13: ffffffff90ca5208 R14: ffffc9000da17638 R15: 1ffff92001b42ec7 [ 1019.503275][ C0] FS: 0000000000000000(0000) GS:ffff88812527b000(0000) knlGS:0000000000000000 [ 1019.503288][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1019.503299][ C0] CR2: 00007ffcaa280000 CR3: 000000007e6ce000 CR4: 00000000003526f0 [ 1019.503315][ C0] Call Trace: [ 1019.503322][ C0] [ 1019.503331][ C0] __asan_memset+0x22/0x50 [ 1019.503350][ C0] unwind_next_frame+0xd04/0x2550 [ 1019.503371][ C0] ? stack_trace_save+0xa9/0x100 [ 1019.503390][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1019.503408][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1019.503428][ C0] arch_stack_walk+0x11b/0x150 [ 1019.503448][ C0] ? kasan_save_track+0x3e/0x80 [ 1019.503469][ C0] stack_trace_save+0xa9/0x100 [ 1019.503488][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1019.503509][ C0] ? stack_trace_snprint+0xe1/0xf0 [ 1019.503529][ C0] kasan_save_track+0x3e/0x80 [ 1019.503570][ C0] __kasan_kmalloc+0x93/0xb0 [ 1019.503590][ C0] __kmalloc_node_track_caller_noprof+0x4d7/0x7b0 [ 1019.503612][ C0] ? nsim_dev_trap_report_work+0x25f/0xb40 [ 1019.503627][ C0] ? __kmalloc_node_track_caller_noprof+0x346/0x7b0 [ 1019.503657][ C0] __alloc_skb+0x2bd/0x7a0 [ 1019.503678][ C0] nsim_dev_trap_report_work+0x25f/0xb40 [ 1019.503700][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 1019.503719][ C0] process_scheduled_works+0xa8e/0x14e0 [ 1019.503749][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1019.503766][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1019.503788][ C0] ? assign_work+0x3cf/0x5d0 [ 1019.503808][ C0] worker_thread+0xa47/0xfb0 [ 1019.503837][ C0] kthread+0x388/0x470 [ 1019.503852][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1019.503870][ C0] ? __pfx_kthread+0x10/0x10 [ 1019.503885][ C0] ret_from_fork+0x514/0xb70 [ 1019.503902][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1019.503949][ C0] ? __switch_to+0xc89/0x1420 [ 1019.503972][ C0] ? __pfx_kthread+0x10/0x10 [ 1019.503987][ C0] ret_from_fork_asm+0x1a/0x30 [ 1019.504012][ C0] [ 1019.841871][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1019.848784][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1019.857926][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1019.868450][ T30] Call Trace: [ 1019.871762][ T30] [ 1019.874713][ T30] vpanic+0x56c/0xa60 [ 1019.878727][ T30] ? __pfx___schedule+0x10/0x10 [ 1019.883605][ T30] ? __pfx_vpanic+0x10/0x10 [ 1019.888142][ T30] panic+0xc5/0xd0 [ 1019.891897][ T30] ? __pfx_panic+0x10/0x10 [ 1019.896339][ T30] ? preempt_schedule_common+0x82/0xd0 [ 1019.901827][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 1019.907227][ T30] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1019.913506][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1019.919944][ T30] watchdog+0x1030/0x1030 [ 1019.924311][ T30] ? watchdog+0x1c7/0x1030 [ 1019.928849][ T30] kthread+0x388/0x470 [ 1019.932950][ T30] ? __pfx_watchdog+0x10/0x10 [ 1019.937656][ T30] ? __pfx_kthread+0x10/0x10 [ 1019.942272][ T30] ret_from_fork+0x514/0xb70 [ 1019.946887][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1019.952118][ T30] ? __switch_to+0xc89/0x1420 [ 1019.956916][ T30] ? __pfx_kthread+0x10/0x10 [ 1019.961529][ T30] ret_from_fork_asm+0x1a/0x30 [ 1019.966623][ T30] [ 1019.969819][ T30] Kernel Offset: disabled [ 1019.974149][ T30] Rebooting in 86400 seconds..