last executing test programs: 3m35.687202811s ago: executing program 4 (id=1757): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140ffffffff0c00018008000140c0ffffff050014000200000005000500020000000500010006"], 0x6c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="f21f", @ANYBLOB="080009000011749e8f1f112e6dffffff130001"], 0x64}, 0x1, 0x0, 0x0, 0x4084}, 0x20000000) socket(0x1f, 0x2, 0x3) 3m35.542106878s ago: executing program 4 (id=1761): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) accept$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/134, 0x86}], 0x1, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfffffffffffffd17) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfffffffffffffd17) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8090) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8090) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@bridge_delneigh={0x0, 0x1d, 0x400, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x65, 0x10, 0xa}, [@NDA_CACHEINFO={0x0, 0x3, {0x7fff, 0x6, 0x9, 0x2}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 3m35.316394902s ago: executing program 4 (id=1765): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080003d1e5a6caa2c004e", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000002300000000000104002c09ded8bc32acf8624d30ed23ab0000000000000002", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3m35.186608001s ago: executing program 4 (id=1769): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) syz_emit_ethernet(0x49, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaa006400001e069078ac1414bbac1414bb4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50106071907800e733f1a8c493969455b8d6484a9e4ddc5ed04137"], 0x0) syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x40, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x10, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x1e, 0x4, 0xa101}, @mptcp=@ack={0x1e, 0xc, 0x7, 0x4, "0b6df4f5c06e887c"}, @exp_fastopen={0xfe, 0x7, 0xf989, "519f7e"}, @md5sig={0x13, 0x12, "7224407c80fe8a3616b4bf3400006cc8"}]}}}}}}}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x9, 0x1, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, @private1, 0x8, 0x10, 0x3ff, 0x6}}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x3}, &(0x7f0000000140)=0x8) socket(0x18, 0x0, 0xc18895e) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000280)={r3, @in6={{0xa, 0x4e22, 0x1, @private0, 0xd77}}, 0x2, 0x775}, &(0x7f0000000180)=0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x44, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x800, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7498d88c}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x7, 0x1}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x14}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) write(r1, &(0x7f0000000000)="61dada9f4e06a83826ce1c05ee3c6571ec82ede5fb5c73d93c0dcc6cc327c14d32758cbff7f130066eb5ba22f65582ff59ce220ef2263fc149a737815053d3c263e69af9727be81575c3bab68fae06076232b71d6395a9645bb24634c292f057fbc7dd3428495f6c5262021ecaebee", 0x6f) 3m34.225231866s ago: executing program 4 (id=1777): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000024c0)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="96a14a9cc036d8eec443a5e2e85976ba14903b4deb48e1b093e1407baeba81a56b5616f92d1229423e17da7234a324514b9f8194410280e196fcf79d3949acf262ebb3f781f1040ba26fa125db4a883dd028340aceabc1938bae1d638479", 0x5e}, {&(0x7f0000000080)="d39282d829fbc37525bee0156ae0c8894087b5e9a7f064684948ef0310f19bb0a2d04e3f1dec4983b1794a74c2e9e42492bf4b3b8b6c0f6b385b6f752d36c70bcb93298efe015135fd63f6b8c43203ad7dcee0330768f56be9cee4b74a0e64eac23488c218c602157389cf1640eadb151c7f854c88de61c3950c38f188a73a6c5e3617e1", 0x84}, {&(0x7f0000000140)}, {&(0x7f0000000180)="032c499ea5386c2ab956b8327c90bfe5c364adc229c52a970900f7fe848c11f2077da0e78b07c443aac8d455d4b7769bde9a47cdef184513d7256736a516c3ba6672c1c57e738f9b5374e15460668d2f8395316c34e85a9ebfc314740edc0a5bab0dd96cc8c1c4d8019097835619a0c80124e008e7d6d5c9bf6e90510e7b", 0x7e}, {&(0x7f0000000200)="7e7b9d7488e7529c6fd053da5434684890cef70ff0ee5cf2715544f0af38bc23a4ce1ca75f1a1781cf90999dfcf1ae274a089a8b32ebb864fa3abe0ff3", 0x3d}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000000300)="818a9bbf5ae543930a5e9c28ec055ae90b612dd2de9cab3f61d9e6f819e378c99c2d060b2a151e6dfbc92c9af5a2a3be9899f929e875ee4c2c3a0b9d609e95bf76a281f651052e2b3f39a43b955819a87f77855918c0b544717925c1f2c97133f8c2e046a9bfcbcaff8592cc35ff53df90584cbab944ef2fbaacd03104476d81e780b41b4936236a06f84d59d0628ca638a283509c66ec2f964a1139859f01013263aa736a88a8fd00805a18d5", 0xad}, {&(0x7f00000003c0)="96e22c30bb0ead72fd46f6cc4ea88519ec839ee164d04b98b1cb88790a339165e5848f6f1ecd7b531e4e9a33f62413c30daf597052344613878f8798ce58ff59aa545eb848cf9aeaca8e64c08074d4ffc01aee2ccf464c5c1b1b8508d4903ddc2914814d51f5af584fbf38e0a648db5300a8511d99936b0011fd1c63e61f190bff84ab669e039b1017fea5e1cdad6c5c7be452c676a8f5495edc41d7341412fc63f06e39d2a45af2b1b75ea231c4eb04249ce3a22e208f5a452132654fe84b09556f66e6336f1f3135e9d0a8b326e63279993f6682d278a98333d86c7d", 0xdd}], 0x8, 0x0, 0x0, 0x8045}, {0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)="b13e8a555dcaa35b866f31783e80816ef552b7aae5b098080800f1eb99a50f8acc026a2637e40f93c4f8914e13894de8e900c1728e8df4e9d991c059e49d96dad40f2bd4a7f9", 0x46}, {&(0x7f00000005c0)="9f47f747e0f761614ea1e1a0e9b858df1a5ecea0337bafbd85894b62f8e023e917abcf13d08a5fe9ef9de60306d74ecc2b8ed103f83205e86c29ae5975182ceeafd39c27c5c588fd5f50ec919167dac4cbf1d85ea7a68d5a937ad1915b2bb481b5ae619280cd3c699bccd495ad2c35630389bcc29486feb0c91e153864504de04ba78cadf766516fc23fda5ff1342c194c48c7b1e7375b7a90fb51dc1bfa6284c64a56e47ecb72c327db711ea4e38ed1", 0xb0}, {&(0x7f0000000240)="d522dc3546f0fb884a72a28d372ea4d5dbfd2d", 0x13}, {&(0x7f0000000680)="fe409ace43c91c7839a3ac374262b49f118274e5362bd53d0045cb2afe5c4586465a55f291e0c5c93ffecffa0a02043336e4dd94864143aaf44dff1c3f192b707518033e43e476363f49f97a44a2d5ccd64adfa0691370b45887ab3715a8e0799436bd603fd7ef37bf31e8005428414ec0e87fb5d15fc7d65e1f37e87dc275073aa40277c4b260e5d4e65f34741ef94f9496001821ee739224f13109fc0446a26314bc5ce98f7402298360529abc6938e11830b1c9b13d3893c699eba8074c02bfce6e8723882e869483", 0xca}, {&(0x7f0000000780)="b76e0855aada70ef518fff6c61d3b16ce3c218939662f4199f445273b6b25f631e3939d0d1ba7d802566054e1d0f39134b6e1894557afc2a012f68f290daff9a11adceea8e9bdff0762e6b6184ad01a6a848e70e31b4aace06d48963e67744c33dc2c758bf03d8256a4d43dfeb39834aa8f75e526a4dc68f1f8effdd73038463f158b5c5d3e3a699ca53a7ae7ec97ae83af58c76bcfb77a9711462a0f22cbb", 0x9f}, {&(0x7f0000001940)="4a9fcc1bcdf403cf8186d2ba36e83e2902c14e76739eaaf1882f43bdcdc351d1a1dbe29dd5b47552a7dc1bc75796d66c9b30357fb9700009d261c424adb8ba8acfeec50c9c7fd3a620d13c54eab184ab061fe51e080095dccc0997bfccf1917475b0184386b411380122bb48a5379c17bef5e73c414bb31d81d8ca09793fc7763cea25f28da89b55f2b30537809cccba050d667ee6b2e428efc210b19638c4158c2eccb9ca490a4dd7f4", 0xaa}], 0x6, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], 0x220, 0x8844}, {0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001c40)="ca3564721c43e13159d9b3c3ef3fa4881a9d85b9ab0cd25a0fba507e45eff819ffe1877f5ae143545485c8bd1c00e3d4ec227a194f44f091370cf025e63cf594ba6513399a58509a7da90e438d60087491b788457d8bbcd328afda879430cb1de1d4af705d3991a70697b78cc00955589f5e4301afc33d6ebbcafe0a55e80c25813c4618dd75bc26547528edeb12f977ed9e2208ef8b79b49da37985c40f7f0810d2c406233d1ce2fae280049f3f5d24f2cd298701a34358460d1344951cf5ce9ceddaa6", 0xc4}, {&(0x7f0000001d40)="bf0127fd26e576b3d6f9022be3123e5924e14bef091415297af066604b9d611555b87ddeba7ced6abdd48572a1c30496e75b60626666cd770736148e35dbba53556108d092a706233261a825b8396a76b6eaca0a43c6ab969ae8bcc4f56fee991eb5c5c52d1b1ff60804a0122bfd0af5ebbf70b0dfc484f288c9aacf28d31b5371e804d12813589cdd329c62c81aef3e26c9dda6f5324fa7c252b198416f281dada9bfbad5f33774b12db7bd7c51129beab402d10c25f5295c05c4a9", 0xbc}, {&(0x7f0000001e00)="288f28f77311fd2853fac41c2baee149afa867d5b1b75384c112297da65b1de69961378e603db5b0bcd4fe102ff5c5697f8feccee8ff890919aecb74a946a59f22b96c9ede4f4a9ab8130cb5357396e4f1721bfd819baaab4b0e724ddf7e5ba420b4f92f73e7c9273fbffeabd681e6a791ee5c7e55a7dbb6ba465ab4ecc1f268456c7a0429c5572603e6fb2af99a03d8abc8bd4f2931b850336c93fbb0173a69ab3a66a2d64c8098517b2b274f63949194a91712217a54a0072f", 0xba}, {&(0x7f0000001ec0)="4aa2051df10a6f5018b99244a330988ee5", 0x11}, {&(0x7f0000001f00)="4d2bc21b3e585e1d6713970e7e0bfb2198007da19534d6d8c15fd86b434e42822d67fa3e00c4ec507392b536185d9566ef707cbfee0c09c9157e7fdef8fc624c5f9c181d5a4ef3bc0e60d755c60731e42d5175183f175cf852c9b2c323e7d9bac1101215f56e81cd9da8ad818d2f57118527a35ba909df62b90c0e755909e20ddd846aa8343756bf394f53ce13e8520a46e844ea6cada42239ac9555cf0ad559bd5773b537f7482f5092c3b2f9bf038a8cd0dc82f5e738daad14833cee6535c18b798d49bee14d", 0xc7}, {&(0x7f0000002000)="d6d1c1cec098adefba760ea86c262d6fbedec256948d8c8555acea62a91342e28b73ecc4a9e74d26f6cd9e68be5edcb53e3bd44f38ed79516dd6b7e6319a7ab8bfce6aa076272955fb54c2447c907f0f394f48e981b20b620ac06840ca70c07e24cedb32e76037f32d28591fbbf45514a5e0342253812660205c8372ff9293c04da7b2144fd334636d4130b2ebd0efaac29f70b54658ad0bf76b4b8fbe1e4b0461f3324c05866381cbe7092ce333fb546629d39fca42c587f9b0819e323b677eb6c6e714327236d5f77ca55c8b5184557b02af", 0xd3}, {&(0x7f0000002100)="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", 0xfa}, {&(0x7f0000002200)="4960920f4ff351ca981999b15baa4109e140c54be734d9139ae9c280ff7a76d94c6f6547a361ad1fecb551c5dae24fe7cf74c4ba1ab662e5eb60baf3b49717d4c39b657497d38c14ea19d2b055241d31bab1061af895de03c5dd2d272fd01e480ec034a0f9703035bf41f2fbd4a0b2cc5d1de267204d7186e02fd0193ccc8f6463fe201ef6c639147bd28aeb6b76732891dbf92e9eef8ed67939a558e25982a61e3f21416e5a23b9e914d428275bb94c0b5314b76e17b20f3b58039ffe2afa3fbb27b9", 0xc3}], 0x8, &(0x7f0000002380)=[@iv={0x60, 0x117, 0x2, 0x47, "b0315a82f9b8d341aa05f2f94b41f0171f4f621dd6022b2c1ee24163ea15cd6a9128fea2f14bd829d506271a8619ec67ead26b6b90bea2daea2c1ad39fcb59bc1efb08068f0ec4"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x38}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x300}, @op={0x18}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x108, 0x40000}], 0x3, 0x1) 3m34.120982244s ago: executing program 4 (id=1778): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x101}]}}}]}, 0x3c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x81, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x404c005}, 0x4000040) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, 0x14, 0x1, 0x0, 0x0, {0x10}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "e80cc3779a80befaa3"}]}, 0x24}}, 0x0) 3m19.030485008s ago: executing program 32 (id=1778): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x101}]}}}]}, 0x3c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x81, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x404c005}, 0x4000040) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, 0x14, 0x1, 0x0, 0x0, {0x10}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "e80cc3779a80befaa3"}]}, 0x24}}, 0x0) 2m35.364835227s ago: executing program 3 (id=2223): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000a002430180004"], 0x2c}}, 0x0) 2m35.225453732s ago: executing program 3 (id=2226): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000001c00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x4, 0xfe00}]}, &(0x7f0000001c40)='syzkaller\x00', 0xdd}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="541fff0000000080faffffff0000000000000000922c51a64f8a8c9c0013aa512b1ad1ab2b79b77e0cc6f03b87698914a6c4635ae2f12546e18cf98916c45a2500"/77, @ANYRES32=0x0, @ANYBLOB="00000000003f00002c0012800b00010067726574617000001c00028006000e00010000000800070064010101060010004e22000008000a00", @ANYRES32=r3, @ANYBLOB], 0x54}}, 0x20000800) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r4, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x10003}], 0x1, 0x122, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000240)={r6, 0x2}, 0x8) socket$unix(0x1, 0x1, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x0) socket$kcm(0x11, 0x3, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 2m34.731994304s ago: executing program 3 (id=2232): socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x25, 0x5, 0x0) socket$phonet(0x23, 0x2, 0x1) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10, 0x80800) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @broadcast}, 0x10) 2m34.494062279s ago: executing program 3 (id=2234): r0 = socket$igmp(0x2, 0x3, 0x2) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000001480)=[{&(0x7f0000000080)=""/80, 0x50}, {&(0x7f0000000100)=""/133, 0x85}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/167, 0xa7}, {&(0x7f0000001300)=""/111, 0x6f}, {&(0x7f0000001380)=""/215, 0xd7}], 0x6, &(0x7f00000001c0)=""/2, 0x2}, 0x162) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) 2m34.42904938s ago: executing program 3 (id=2237): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000340)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf, 0xbe1317c6caa15353}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00"], 0x44}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000000000600", 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m34.289798641s ago: executing program 3 (id=2239): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000000400000241000000030013"], 0x2c}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}}, 0x24048000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18070080000000000000000000000000851000000600000018100000490623e6a0992735c98afb6827208c8de0737f438dcef307a3361901e329bc1a82d4e44ba079e491c0c6c4939b04107b31a6015334a4a589d4af751dc7230b79a27f0a47ad25eb3241ec4af594199affce74bc91d9c0322451507405295abc2ca60ef46d9d26089923407e586aae30a115d609f3a9d606ebcf0407d9de75b8836d934956f7d3d1ac0244c90dbdad14aa69bedbc2984eee", @ANYRES32=r0, @ANYBLOB="00000000000000005f000000000000001800000018000000000000000000000095000000"], &(0x7f0000001300)='GPL\x00'}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 2m19.237054069s ago: executing program 33 (id=2239): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000000400000241000000030013"], 0x2c}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}}, 0x24048000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18070080000000000000000000000000851000000600000018100000490623e6a0992735c98afb6827208c8de0737f438dcef307a3361901e329bc1a82d4e44ba079e491c0c6c4939b04107b31a6015334a4a589d4af751dc7230b79a27f0a47ad25eb3241ec4af594199affce74bc91d9c0322451507405295abc2ca60ef46d9d26089923407e586aae30a115d609f3a9d606ebcf0407d9de75b8836d934956f7d3d1ac0244c90dbdad14aa69bedbc2984eee", @ANYRES32=r0, @ANYBLOB="00000000000000005f000000000000001800000018000000000000000000000095000000"], &(0x7f0000001300)='GPL\x00'}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 4.086547797s ago: executing program 2 (id=3569): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv6_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20}, [@FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@type_tag={0x8, 0x0, 0x0, 0x12, 0x5}, @fwd={0xe}, @ptr={0x9, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x5f, 0x5f, 0xe, 0x2e, 0x2e, 0x2e, 0x0, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000080)=""/15, 0x48, 0xf, 0x0, 0x6, 0x10000}, 0x28) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@type_tag={0x8, 0x0, 0x0, 0x12, 0x5}, @fwd={0xe}, @ptr={0x9, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x5f, 0x5f, 0xe, 0x2e, 0x2e, 0x2e, 0x0, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000080)=""/15, 0x48, 0xf, 0x0, 0x6, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=ANY=[@ANYBLOB="0800000000000000000000000000000085000000b200"/32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r1}, 0x94) 3.936925494s ago: executing program 2 (id=3572): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x181341, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20040081) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f00000004c0)={0x1f, 0x4, @none, 0x0, 0x2}, 0xe) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000240)}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x20044054}, 0x4000054) (async) sendmsg$nl_route_sched(r3, 0x0, 0x8000) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xff, @fixed, 0x0, 0x1}, 0xe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000001a40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8140000}, 0xc, &(0x7f0000001240)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x4000090}, 0x20000000) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, 0x0) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 32) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="6b1690bb8dc095ebae95baccdce177a97389ae7df65487e3996df64c35efa6e159bd2f2180", 0x25}], 0x1, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @dev}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4}, @generic={0x0, 0x2}]}}}], 0x38}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r5, 0x321, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x14}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048895}, 0x4) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r8, 0x0, 0x0) (async) setsockopt$sock_linger(r8, 0x1, 0x3d, &(0x7f00000001c0)={0x1}, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x400}) (async) socket$inet6_udp(0xa, 0x2, 0x0) 3.536897882s ago: executing program 2 (id=3578): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x12, r1, 0x5ff44000) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000d0c10000000000000000000", 0x58}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x40, r4, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x81}]}, 0x40}}, 0x20) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000080004006ecd2666f5fb8df124899aef5e54671e9282bc6c10156282d4bed233204d9dac32da52c79cc97e08e14dcb7a79ba6abe5074d8ae2f6aef08e8f53f7c9d7d98542f60e850e9744d1ad2e0a10bca5c3d1b8d86012d2d2c683777f62a65e844527f2b72ccf2e0e8d4da4292a8d8b69a1a8a3ca1800000000000", @ANYRES32=r5, @ANYBLOB="06001500070000000c0016c008000100", @ANYRES64=r0], 0x38}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x12, r1, 0x5ff44000) (async) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000d0c10000000000000000000", 0x58}], 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x40, r4, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x81}]}, 0x40}}, 0x20) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000080004006ecd2666f5fb8df124899aef5e54671e9282bc6c10156282d4bed233204d9dac32da52c79cc97e08e14dcb7a79ba6abe5074d8ae2f6aef08e8f53f7c9d7d98542f60e850e9744d1ad2e0a10bca5c3d1b8d86012d2d2c683777f62a65e844527f2b72ccf2e0e8d4da4292a8d8b69a1a8a3ca1800000000000", @ANYRES32=r5, @ANYBLOB="06001500070000000c0016c008000100", @ANYRES64=r0], 0x38}}, 0x10) (async) 3.534599285s ago: executing program 5 (id=3579): socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x88}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x28, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x0, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @private}}}}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140002000000000000000000000098954ff7bb2df5c117eff8941c9195d5b514a675d865057a3fc1ae87a5017722282ef1a08c0c5b3bed425fb3cb05558f191d0f84780b8c1070cca462de8d8e81df108fc7db2eca457f201812ad591b39d9ebcd205053dba5ef71987c9ba415cc8a2125014b7d3a67d5ff742b62657c77eb1f95a75f9224d59e7e6f8980e430d6cba842e597789d6f5f13e4"], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000020061104000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073697a300000000044000000060a010400000000000000000500000008000b40000000001c00048018000180080001006c6f67000c00028006000140000600000900010073797a30"], 0xb8}}, 0x0) 3.334154923s ago: executing program 5 (id=3580): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) bind$bt_hci(r0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x7, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{0x4, 0x0, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "a8a1f4ca7c78a954b1c552dd0c694cfb9602293ae990ec006080f3af9c8a0daf8b6b3b8d8872515970eb87b0d439267b81c9bcb68c54e503e21e9b5bd7df8755"}}, 0x80}}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x10c, r3, 0x3cac8be20c27996d, 0x70bd27, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x100}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6d}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0xffffffff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x1000}, {0x8, 0x15, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x80000000}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x9}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8005}, 0x4008014) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x10c, r3, 0x3cac8be20c27996d, 0x70bd27, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x100}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6d}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0xffffffff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x1000}, {0x8, 0x15, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x80000000}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x9}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8005}, 0x4008014) 3.333903794s ago: executing program 2 (id=3581): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$kcm(0x2, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BETA={0x4}]}}]}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r1, &(0x7f0000000080)={@val={0x0, 0xc}, @void, @eth={@empty, @random="8bc6002500", @val={@val, {0x8100, 0x0, 0x0, 0x1}}, {@mpls_mc={0x8848, {[], @llc={@llc={0xd4, 0x8, "d3"}}}}}}}, 0x1d) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 2.929597606s ago: executing program 1 (id=3586): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000006180)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') syz_emit_ethernet(0xa7, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000008100100086dd6000a8bc006d0600fc000000000000000000000000000001fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYBLOB="6002000090780000fe04f989c6ad29fffa63"], 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000b80)=ANY=[@ANYBLOB="1c0000001000ff05000000000000000009003c8004c937b184"], 0x1c}], 0x1}, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000811}, 0x0) recvmmsg(r3, &(0x7f0000000f40)=[{{&(0x7f0000000380)=@qipcrtr, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/104, 0x68}, {&(0x7f0000000300)=""/15, 0xf}, {&(0x7f0000000480)=""/100, 0x64}, {&(0x7f0000000500)=""/98, 0x62}, {&(0x7f0000000580)=""/32, 0x20}, {&(0x7f00000005c0)=""/72, 0x48}, {&(0x7f0000000640)=""/223, 0xdf}], 0x7, &(0x7f00000008c0)=""/239, 0xef}, 0x8}, {{0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f0000000a40)=""/232, 0xe8}, 0x5}, {{&(0x7f0000000bc0)=@rc, 0x80, &(0x7f0000000b40), 0x0, &(0x7f0000000c40)=""/169, 0xa9}, 0x8000}, {{&(0x7f0000000d00)=@l2tp6, 0x80, &(0x7f0000000e40)=[{&(0x7f00000010c0)=""/132, 0x84}], 0x1, &(0x7f0000000e80)=""/139, 0x8b}, 0x1}], 0x4, 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r3}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000010000100000000"], 0x110}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000001080)="3a53e6ff19acc27dfcd05fbc5da0cca1", 0x20) getsockopt$inet_tcp_buf(r5, 0x6, 0x21, 0x0, &(0x7f0000000180)) r6 = socket(0xa, 0x2, 0x3) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000002c0)={0x7, &(0x7f00000001c0)=[{0x8, 0x4, 0x0, 0x7}, {0x1, 0x4, 0x6, 0x4}, {0x6, 0x9, 0x3, 0x8}, {0x3, 0x4f, 0x5, 0xd}, {0x882, 0x8, 0x9, 0x7}, {0x4, 0x1, 0x1, 0x4}, {0xd536, 0x9, 0x2, 0x10}]}, 0x10) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r7 = accept(r4, 0x0, 0x0) sendmmsg(r7, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[{0x10, 0x117, 0x2}], 0x10}}], 0x1, 0x8001) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2472b, 0x18040}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xb9}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 2.398038564s ago: executing program 5 (id=3590): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) splice(r1, 0x0, r2, 0x0, 0xfffffffffffffff1, 0x8) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101, 0x382}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x810) 2.159438561s ago: executing program 5 (id=3592): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_int(r1, 0x29, 0x18, 0x0, 0x2e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r0}, &(0x7f0000000640), &(0x7f0000000680)=r2}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000240)=ANY=[@ANYBLOB="150000005500bbca000000000000000007"], 0x18}}, 0x0) 1.878747449s ago: executing program 1 (id=3595): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275c, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000001c0)={0x1adbc, 0x1002, 0x0, 0x3, 0x7}) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) (async) read(r0, 0x0, 0x0) (async) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000300)=""/208, 0xd0}], 0x1) write$ppp(r0, &(0x7f00000002c0)="d16d", 0x2) 1.50303751s ago: executing program 1 (id=3599): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, 0x0, 0x0) getsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f0000000000)=""/45, &(0x7f0000000080)=0x2d) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300090468fe070000000000000eac3736000000480100100000000004002b000a00010014a4ee1ee438d2fd00000000000000720896bba4b0ac43109cd34e9d7dc51dcf26960026404e7a5ef4b249cab8526efda284634ae585a109c012c40676d7d60ebd142af34706d1166b6e66b47ad55be0ed6b1a6f8ee46ad14ab46c", 0x83}, {0x0}, {0x0}], 0x3) recvfrom$inet(r0, 0x0, 0xffffffffffffff8f, 0x40000000, &(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c000000030a01010000000000000000fa0000000900010073797a30000000000900030073797a32000000e78c000000060a010400000000000000000100000008000b400000000064000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002d05000200070000002c0001800c00010062697477697365001c0002800800014000000014080002400000001608000340000000010900010073797a3000000000140000001100010000000000000000000700000a51658a6293affadd627a28e776a586c9bdc634a0072343f1108311f9615d08e4bb8543f446a79f4beca075e81a8b660053ba901fbdd62face19f38fbc77b757ecd05d2cfc8e4a989cdec31de5964fb79f061787ad21e741422da08699bb4a7d260f89ea0"], 0xe0}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x0, 0x0, 0x148, 0x0, 0x148, 0x348, 0x348, 0x348, 0x348, 0x348, 0x6, 0x0, {[{{@ip={@broadcast, @rand_addr=0x64010102, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x8001, @ipv4=@local, 0x4e23}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x278}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x6]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000004c0)={0x2, {{0x2, 0x4e21, @private=0xa010101}}, 0x1, 0x4, [{{0x2, 0x4e23, @remote}}, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e21, @rand_addr=0x64010101}}]}, 0x290) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x4e) 1.455092898s ago: executing program 0 (id=3600): r0 = socket$inet(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e00010000000000000000000c00ff8008007e00", @ANYRES32=0x0, @ANYBLOB], 0x1c}], 0x1}, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r3, 0x84, 0x7f, 0x0, &(0x7f0000001180)=0x24) bind$rxrpc(r2, &(0x7f0000000180)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x5, @private2}}, 0x24) sendmmsg(r2, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"17b2152624e270aeb161aca3a47b5707", 0x0, 0x0, {0xd88, 0xffffffff}, {0x0, 0x6}, 0x2, [0x5, 0x1, 0x653, 0x9, 0x9, 0x6, 0x34, 0xa, 0x0, 0x1, 0x46, 0xe, 0x9, 0x7ff, 0x6, 0x9]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000140)={"de11dcf2067fdb5edd2afa10053d58be", r4, r5, {0x7, 0xeb}, {0x6, 0x2}, 0xd, [0x3, 0x6, 0xbf59, 0x6, 0x1, 0x8000000000000001, 0x2, 0x3, 0x9, 0x9, 0x0, 0x4, 0xc4, 0x0, 0xc40000000, 0x9]}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f00000004c0)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000009c0)=@gcm_256={{0x303}, "0100", "acba84f0a6731f234db1dc7f39000080d00600000003a9f4f600000000400080", "129c9707", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) writev(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x29, 0x1f, 0x0, 0x48) accept4(r1, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000340)=0x80, 0x80000) sendmsg$NFT_MSG_GETCHAIN(r7, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4010}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x4, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x200480d0}, 0x800) 1.318174561s ago: executing program 6 (id=3601): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x38, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.freeze\x00', 0x275a, 0x0) pread64(r2, &(0x7f0000000100)=""/165, 0xa5, 0x9) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c000}, 0x841) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.243181645s ago: executing program 0 (id=3602): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000170a0103000000000000000002000008090001c0"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x8094) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000000), 0x4) (async) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000000), 0x4) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r4 = accept4(r2, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="58000000000000000a000001090000000900010073797a31000000002c000380e6000080240001802000028009ed010073797a300000000008000340000000ff0800034000000004000000000000000000420ca24771de9e07c7d1e0f2f349e881bcd8174dbdf8c9b2e5cc620f868fa5f9011b6d136fc80f93761fa5686821ef12d5e8466d36841aafed2e3cea962ab8c5d3d19293deb14066ea1f4ba5a8fda50564048e76d12fc20a1fef"], 0x58}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r6 = socket$can_bcm(0x1d, 0x2, 0x2) socket(0x1d, 0x2, 0x6) (async) r7 = socket(0x1d, 0x2, 0x6) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x2, {0x3}}, 0x18) (async) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x2, {0x3}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000010003b150c00"/20, @ANYRES8=r8, @ANYBLOB="02018000005c0000300012800b000100697036677265000020000280050008000300000014000700fc00000000000000000000000000000308000a00", @ANYRES32=0x0, @ANYBLOB], 0x58}}, 0x4048850) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000010003b150c00"/20, @ANYRES8=r8, @ANYBLOB="02018000005c0000300012800b000100697036677265000020000280050008000300000014000700fc00000000000000000000000000000308000a00", @ANYRES32=0x0, @ANYBLOB], 0x58}}, 0x4048850) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) (async) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f0000000b00)="800000800000210ee7decd7a00009475b4b228c1310eaa818b5ea09cb7d2d9bcf1daad0f180f7f29bb537648c88e34de1c5169c24df6fc032780100c72bc90e3998bf4e57d", 0x45, 0x20000040, &(0x7f00000001c0)={0x11, 0x15, r10, 0x1, 0xd6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) (async) sendto$packet(r11, &(0x7f0000000b00)="800000800000210ee7decd7a00009475b4b228c1310eaa818b5ea09cb7d2d9bcf1daad0f180f7f29bb537648c88e34de1c5169c24df6fc032780100c72bc90e3998bf4e57d", 0x45, 0x20000040, &(0x7f00000001c0)={0x11, 0x15, r10, 0x1, 0xd6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r12 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'geneve1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r13, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018"], 0x58}, 0x1, 0x2}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)=@newchain={0x1660, 0x64, 0x4, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x10}, {0xffff, 0x7}, {0x4, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x1618, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1ff}}]}, @TCA_BASIC_ACT={0x450, 0x3, [@m_mirred={0x208, 0x15, 0x0, 0x0, {{0xb}, {0x124, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x98, 0x6, 0x0, 0x9, 0x4}, 0x5, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7ff, 0x4, 0x20000000, 0x1, 0x2}, 0x2, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x40, 0x2, 0x2, 0x82, 0x4}, 0x4, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7fff, 0xa, 0x8, 0x400, 0x7ff}, 0x1, r13}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffff9, 0x5, 0x2, 0xda5, 0x7}, 0x4, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000000, 0x100, 0x10000000, 0xe6, 0x5}, 0x2, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa1ff, 0x3, 0x2, 0x100, 0x2}, 0x2, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xf1f, 0x20000000, 0x80000000, 0x6}, 0x3, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4a, 0x9, 0x20000000, 0x6, 0x9}, 0x4, r8}}]}, {0xbb, 0x6, "2c2711c5123c5583f5b79291464a72399fcd26e6e2ef5b22efb62a04ba8dd7997514303fe7f03d6b3b81237109709e552dbdd05c1904e043b8ad6a610febb057658058d04d574281cd3ad9934a405afe48a26bbb594284a9b5a0d3aa63c2f4eb98d658e467e09978df2f5df2e79b104659a3a1ec555441c9cd360972fda1219c8446a4b575902aa6e43f9fe06428f9f3cf657255bc54097a174b590f9a71569d0de0411396fc5f7e357e70a92fe3f355e0b1f5f44d1acc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x178, 0xa, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_TYPE={0x6, 0x5, 0x7f}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1000000, 0x80000001, 0xffffffffdffffff9, 0x6}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @link_local}]}, {0xef, 0x6, "00af6d0d6ffc7cc0bcb8f34a71720b55a1ff27098d4f09a7633d28ed2204b84e701f5d60406a1310b592e6f390a1c8bf8c34dfb8ae4027449a73388f9639fbd0a9743a6e1e82881772e6eb3773b1570edf7efc81064f3b732c6d3aa808682a1440b332fa2e808d552386dabe31ee42859d18bb5df528a15ec06e749e2d45c5cc1d9a9777f7a12bb6c1775d6afe3320898d45e78af9ec243ffc01c0db4e7ddea0641cfbdc9bc17c9d3ccc8534c64d79cadbc1516b10905178890be6ea56d0cb27dedb1f4c8e43d064fd86a791289d7b84afad19b9af41c6c8725a72e8d7f2c2d0661e2714f1a1d73869acef"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0xcc, 0x14, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x709}]}, {0x97, 0x6, "0d29ecc64d1b309d8318f0f94a935ef2b0b46fe3995f117e8e7e871b4172682a843b2ba8bdddd9dadbca9c1b9c8c0b1d141a03cb17d2daeab61c0da54d6905fb4fc625870dd69b1bd5e196ed5411c7a3ebe3a6399d0201aa9d32886752b43d0daaeec6116afde94c5d7fbf3c8fa8c30dcd91e02a52c7cb0c82219e7a363f4cf7acc293bafdacd28f0f9769f0175d147d9c71b4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x4977e89c0c6c8e40}}}}]}, @TCA_BASIC_ACT={0x11b8, 0x3, [@m_connmark={0x1050, 0x1e, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80000000, 0x0, 0x20000000, 0xe77, 0xe}, 0x9}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0x164, 0x1c, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x7, 0x1, 0xecf5}, 0x280}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x12, 0x0, 0xffffffffffffffff, 0xffff, 0x3}, 0xfffb}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7fffffff, 0xfffffe01, 0x4, 0x466, 0x60000}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf, 0xa399, 0x5, 0x1ff}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xffffd910, 0x8, 0x9, 0x1ff}, 0x100}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x6, 0x6, 0x5, 0x80000001}, 0x200}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xe085, 0x40, 0x8, 0x8}, 0x2}}]}, {0x6e, 0x6, "e6be165c2b3b5c14001879edfc5e55a1bb4734e4b4a0fc6530555adcf77e12619d280b639bcd0721fcfda685bb96a724e3af8d5d0624b2e34fb8035f808653671f6b23f4ee350b8086c8af356198d7916a1045162e0faa1ec9ee1653b9f069bc11a05c21ea1dde758cfe"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xdb, 0x70}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x1660}, 0x1, 0x0, 0x0, 0x3000c000}, 0x804) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r14, {0x8}, {0xfff2, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x20000099) 1.189546679s ago: executing program 6 (id=3603): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000040), 0x4) (async) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"/363], 0x78}}, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000200)={r5}, &(0x7f0000000340)=0x8) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={r5, @in6={{0xa, 0x4e22, 0x7fff, @empty, 0xffffca57}}}, &(0x7f0000000000)=0x84) sendmsg$unix(r0, &(0x7f0000000640)={&(0x7f00000005c0)=@file={0x1, './bus\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x4004044) 970.157973ms ago: executing program 6 (id=3604): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c000004e8440104004000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028005001100de000000"], 0x3c}}, 0x0) 914.74864ms ago: executing program 0 (id=3605): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r2) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r5, 0x1, 0x23, &(0x7f00000000c0)=0x3, 0x4) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000000000)=0xfffffffa, 0x4) recvmmsg(r5, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x100, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r4, @ANYBLOB="ac00308014000400403a050c5baee2004ef2b6d713459a7a2000018008000100000000001400038006000100000300000800020003000000740001800500020002000000680003800c0004000200aaaaaaaaaaaa0c0004000203aaaaaaaaaaaa0c0004000203aaaaaaaaaaaa060003000000000008000200020000000c0004008302ffffffffffff0c0004000203aaaaaaaaaaaa0c0004000200aaaaaaaaaaaa0c0004000200aaaaaaaaaaaa"], 0xc8}}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3a}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}}, 0x0) 846.297891ms ago: executing program 6 (id=3606): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000840)="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", 0x100}, {&(0x7f0000000600)="fa4930e2f7feb52241e739006ef78c0aeb4dd989f1bf69e01e4eb4bb743569e49e3db4ab502ed698e9d1015794e38f83dc9d177719cb1f7991ee501ad1ff9d69f88d4bb78c0b76402fd5b363a275a95533bc9300c69d731162f7d6591a1b120ae0aabdef8442bd3f3fcc0a8928ca09c02696e77c4a5344365ad0cddf7ae2313cf21a3677d60a3eafb6b0da9fd92de9a62986ab654c00", 0x96}, {&(0x7f0000002a00)="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", 0x9f3}], 0x3}, 0x20000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xae}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) syz_emit_ethernet(0x46, &(0x7f00000004c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @mcast2, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x3}}}}}}, 0x0) sendto$l2tp(0xffffffffffffffff, &(0x7f00000000c0)="85aa99808f39947578b490ead83149552bcc8a07781186c9906bab146a69ec1d3a1653a2fca22e3f6c6b56df2fdde84d92c55132fe5aadedf7c9a87ed65b9ff544578df0ac1f82064e4088c1856e09e1135c47478d9c56fc072a8b24c895926e4080c614d9fcb2fc2fae78567161392bf20396c0e7b35a997862570b6c082a6d689b30a3d5c203ecf1fcb523597f7a8d2f6b9015d08596d5d956aa7b0e0a1bbe385ec7c978ceb4c5", 0xa8, 0x40010, &(0x7f0000000040)={0x2, 0x0, @multicast2, 0x2}, 0x10) 617.808343ms ago: executing program 6 (id=3607): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380080011"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r1, 0x804, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x101}]}, 0x44}, 0x1, 0x0, 0x0, 0x4801}, 0x20040080) 606.047567ms ago: executing program 0 (id=3608): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x7}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000005c0)={r3, @in={{0x2, 0x4e23, @broadcast}}}, &(0x7f0000000280)=0x84) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r1, &(0x7f0000000000)="4816f5d97a5283cab036b9725a8ad1841e7d3fbc50c2fbc691ed6dfd6fec3542539969e704afff"}, 0x20) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'syz_tun\x00'}) 571.225283ms ago: executing program 1 (id=3609): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x21, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f332460916e6e893f1eeb0b723043c47c896ce0bce66a245ad99b8173d98cd824498949714ffaaca9f39817beb2de45406fb6db714e4b94bdae214fa68a0157eb3c00000000b6fc89398f2b9000f224891060017cfa6fa26fa7a34700458c60897d4a6148a1c11428607c40de60beac671e8e8fdecb03598aa623fa71f31bf0f871ab5c2ff88afc6002084e5b52710aee410e3e554d090d95983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed00000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r2, 0x5, 0x4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xae, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0xc, 0x7, 0x0, 0x7, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$inet6_int(r0, 0x29, 0x21, 0x0, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) pipe(&(0x7f0000000080)) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f332460916e6e893f1eeb0b723043c47c896ce0bce66a245ad99b8173d98cd824498949714ffaaca9f39817beb2de45406fb6db714e4b94bdae214fa68a0157eb3c00000000b6fc89398f2b9000f224891060017cfa6fa26fa7a34700458c60897d4a6148a1c11428607c40de60beac671e8e8fdecb03598aa623fa71f31bf0f871ab5c2ff88afc6002084e5b52710aee410e3e554d090d95983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed00000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r2, 0x5, 0x4}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xae, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0xc, 0x7, 0x0, 0x7, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 475.385321ms ago: executing program 5 (id=3610): r0 = socket$packet(0x11, 0x0, 0x300) socket$can_raw(0x1d, 0x3, 0x1) (async) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3c, 0x0, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) (rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r1, &(0x7f0000000080)={0x11, 0x4, r3, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) (async) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xd}, {0xfff1, 0xfff2}, {0xffe0}}}, 0x24}}, 0x40000) 412.233469ms ago: executing program 2 (id=3611): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$phonet(0x23, 0x2, 0x1) sendmsg(r1, &(0x7f0000000440)={&(0x7f00000000c0)=@phonet, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)='l', 0x1}, {0x0, 0x2}], 0x2}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c0001800800108004000780040002"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 358.49419ms ago: executing program 6 (id=3612): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c40)=@ipv6_newrule={0x30, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000940)=@newtaction={0x48, 0x76, 0x1, 0x0, 0x0, {0x0, 0x0, 0x300}, [{0x34, 0x1, [@m_vlan={0x30, 0x4, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x5}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x40, r5, 0x0, 0x70bd28, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40d0}, 0x4004) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0xbe, 0x5, {0x7, 0x6, 0xfe, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_ACT={0x58, 0x7, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4cc0, 0x3, 0x4, 0x7, 0x400000}, 0xc}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_CHAIN={0x0, 0xb, 0x6}]}, 0xa4}, 0x1, 0x0, 0x0, 0x81}, 0x800) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) 290.785063ms ago: executing program 1 (id=3613): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@ipv4_delrule={0x40, 0x21, 0x4, 0x70bd26, 0x25dfdbfe, {0x2, 0x14, 0x20, 0x0, 0x3, 0x0, 0x0, 0x8, 0x14}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0xfffffffffffffe16, 0xd, 0x4}, @FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xb84}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002214000000110001"], 0xd8}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) 290.44547ms ago: executing program 0 (id=3614): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000700)=[{&(0x7f00000000c0)="02ef667db5e53f90ddf725d589e79497ed32000192c55934a92b7b6285d5b1fb065ae78c91902eb69b165687a415b833508dc85680407417b65a83592a4e597178233649c148ab68571c3390210cbe7ea8194c25e9b37c83bb8055e08218fa6a47d9401cdffa24dd9b984cec90c7c1508f05453927e13e43ffc2f4482bd0fc", 0x4}, {&(0x7f0000000140)="1a36c585040053c08764d056a86d003cbaf5cde47e5f51052d82c19aa673d661416429534237090097b3116d403a08c07bbbe72da665341d6592092455897fe84a54e94a435e8d3810ce4899d5b04d17b099bbec7fb7f005b03bb00f6860f0cd665a14bd1b7ad319101e9beae62faa71a5f2383e963aba417592d7a84958", 0x7e}], 0x62) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x5, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e1f}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 269.625234ms ago: executing program 5 (id=3615): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x52d35ce30131f272}) socket$nl_route(0x10, 0x3, 0x0) 221.077573ms ago: executing program 2 (id=3616): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c80)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="55000e0080000000080211000000080211000001505050505050000000000000000000009d92fd67da8a"], 0xcc}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000ac0)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x860, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xfffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000000}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1, 0x60, 0xfff, 0x7, 0x80000000, 0x1, 0xa, 0x8, 0xfff, 0x4, 0x9, 0x78f, 0x0, 0x9, 0x1, 0x6, 0x0, 0x1, 0x1, 0x1, 0x40, 0x2, 0x1, 0xba0e, 0x3, 0x200, 0x8048, 0x1, 0x0, 0x2, 0xe8, 0x40, 0x6, 0x200, 0x5b3e, 0x993, 0x4, 0x800, 0x846, 0x5, 0x7, 0x8000, 0x30, 0x284, 0x4, 0x7, 0x6, 0x3, 0x2, 0x66eb, 0x2, 0x74, 0x7ff, 0xea4c, 0x1, 0x24, 0xfffffffc, 0x4, 0x100, 0x7, 0x8, 0x0, 0x94, 0x2, 0x1, 0xfff, 0x0, 0x5, 0x9, 0x7fff, 0x1, 0x30, 0x9f9, 0x5, 0x7fff, 0x8, 0x2, 0x1, 0x8, 0xf5, 0x10000, 0x9, 0x9, 0xe, 0x5, 0x0, 0x6, 0x1ff, 0x6, 0x5, 0x9, 0x5, 0x14, 0x58, 0x2, 0x3, 0x800, 0xf676, 0xfffffff7, 0xd9, 0x101, 0x2, 0x6, 0x8, 0x10001, 0x2, 0x0, 0xfffffeff, 0x8, 0x9, 0xffffffff, 0x9, 0x5, 0x1e2c, 0x401, 0x5, 0x5, 0x1, 0x7924, 0x0, 0x7, 0x9, 0x8000, 0x9, 0xfffffffd, 0x8, 0x82d, 0x4, 0x7, 0x0, 0x35e80000, 0x1, 0x1, 0xa26, 0x0, 0x2c, 0xfff, 0x7, 0x6, 0x7ede, 0x8000, 0x1, 0x4, 0x5, 0x0, 0x5, 0x3, 0x8, 0x4, 0xa21, 0x0, 0x7, 0x7, 0xfffffffc, 0x2, 0x6, 0x54ed5172, 0x6, 0x5, 0x0, 0xf, 0x20000, 0x9, 0x9e, 0xb, 0xbb42da9, 0x25, 0x6, 0x3, 0xd, 0x7, 0x2, 0x3, 0x5, 0xd, 0x4, 0x1ff, 0x9, 0x6, 0x6, 0x8, 0x40, 0x5, 0x9, 0xff, 0x5, 0x40, 0x0, 0x7, 0xfffffff5, 0x5, 0x8001, 0xdb1, 0x8, 0x81, 0x40000, 0xfff, 0xce, 0x10, 0x5, 0x5, 0xffffffff, 0x8, 0x9, 0xdc1b, 0xf2c, 0x10000, 0x4d, 0xe8b3, 0x6, 0x9, 0x2, 0x4, 0x2, 0xc, 0x1, 0x6, 0x896, 0x3, 0x0, 0x8cc6, 0x8, 0x10000, 0x4, 0x9, 0x8, 0x7, 0x1a, 0x80000001, 0x80000000, 0x101, 0x8017f, 0x1, 0x9, 0x5, 0x4, 0xb1c0, 0x7, 0x7fffffff, 0x80, 0x8, 0x0, 0xffffffff, 0x40, 0x8001, 0x101, 0x8, 0x8, 0x1ff, 0xfc51c64, 0x10000, 0xffffffff, 0x400, 0x7, 0x2]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffca}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r8, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r13, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r15, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r5, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, r1, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 99.02909ms ago: executing program 0 (id=3617): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={0xffffffffffffffff}, 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000380)=@generic={&(0x7f0000000180)='./file0\x00', r0}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="2e00000010008188040f6fec59acbc0435a181003f00000000060000000000000e000d000d6ed60012801900121f", 0x2e}], 0x1}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ITS={0x4}]}, @CTA_MARK={0x8}]}, 0xb8}, 0x1, 0xfffff000}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000000000007110bc000000000006000000000000009500000000000000ffc76897e5a0d8ac9c41b386c239770fddb59f9f94f1b82887b494dcccd700c893c51fbf0e25b12c945924be4f06abf92f54bb68ae84c13da369e68727e69ddf1fcdc4705d60fc68eeb3dd1b59ab0ac6d213fe255e8224438460e48f413cbac9fdda55042ed25737f9d9fac3dd4d6f568f24d2f96a26bb8db3d7ef34ac46cddd2b"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 0s ago: executing program 1 (id=3618): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x6, &(0x7f00000005c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xf6c8c7780c4e6e55}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000126bd7000ffdbdf254a00000008925b8f1f5fb3d7931938fbc08b95440001007063690011000200303030303a30303a31302e300000000208000300030000000e00a80066697273746e616d65000000"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x40090) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000280)=""/150, &(0x7f0000000340)=0x96) kernel console output (not intermixed with test programs): [ 433.491350][T13265] dvmrp6: entered allmulticast mode [ 433.734394][T13284] tipc: Enabled bearer , priority 0 [ 433.847980][T13285] syzkaller0: entered promiscuous mode [ 433.868737][T13285] syzkaller0: entered allmulticast mode [ 433.882889][T13285] tipc: Resetting bearer [ 433.975317][T13285] tipc: Resetting bearer [ 434.127383][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 434.149948][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 434.168676][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 434.177074][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 434.191164][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 435.635021][T13285] tipc: Disabling bearer [ 435.754557][T13306] lo speed is unknown, defaulting to 1000 [ 436.069964][T13346] sock: sock_set_timeout: `syz.0.2007' (pid 13346) tries to set negative timeout [ 436.261408][ T52] Bluetooth: hci5: command tx timeout [ 436.302491][T13306] chnl_net:caif_netlink_parms(): no params data found [ 436.383303][T13361] netlink: 'syz.3.2008': attribute type 10 has an invalid length. [ 436.505229][T13374] xt_hashlimit: size too large, truncated to 1048576 [ 436.587550][T13306] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.613697][T13306] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.620943][T13306] bridge_slave_0: entered allmulticast mode [ 436.632414][T13306] bridge_slave_0: entered promiscuous mode [ 436.653248][T13306] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.660826][T13306] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.670063][T13306] bridge_slave_1: entered allmulticast mode [ 436.678883][T13306] bridge_slave_1: entered promiscuous mode [ 436.737650][T13306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.753391][T13306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.843565][T13306] team0: Port device team_slave_0 added [ 436.870560][T13306] team0: Port device team_slave_1 added [ 436.917828][T13306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.942171][T13306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.970190][T13306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.985786][T13386] __nla_validate_parse: 6 callbacks suppressed [ 436.985805][T13386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2014'. [ 436.986650][T13306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.009552][T13306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.036252][T13306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.040331][T13393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2014'. [ 437.076087][T13394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.093821][T13396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2014'. [ 437.159421][T13390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2016'. [ 437.169429][T13390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2016'. [ 437.226155][T13306] hsr_slave_0: entered promiscuous mode [ 437.253247][T13306] hsr_slave_1: entered promiscuous mode [ 437.260237][T13306] debugfs: 'hsr0' already exists in 'hsr' [ 437.277002][T13306] Cannot create hsr debugfs directory [ 437.354807][T13404] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2019'. [ 437.409543][T13409] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2021'. [ 437.433221][T13411] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2020'. [ 437.455167][T13404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2019'. [ 437.607544][T13417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2021'. [ 438.160310][T13306] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 438.239620][T13306] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 438.327355][T13306] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 438.332182][T13455] xt_TPROXY: Can be used only with -p tcp or -p udp [ 438.342975][ T52] Bluetooth: hci5: command tx timeout [ 438.392250][T13306] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 438.481646][T13464] netlink: 'syz.0.2037': attribute type 58 has an invalid length. [ 438.758373][T13306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.805450][T13306] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.875368][T11171] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.882687][T11171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.957192][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.964413][ T2970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.246186][T13507] : entered promiscuous mode [ 439.313202][T13510] syzkaller0: entered promiscuous mode [ 439.321202][T13510] syzkaller0: entered allmulticast mode [ 439.343511][T13510] x_tables: ip_tables: ah match: only valid for protocol 51 [ 439.436313][T13306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.660580][T13306] veth0_vlan: entered promiscuous mode [ 439.675457][T13306] veth1_vlan: entered promiscuous mode [ 439.705962][T13306] veth0_macvtap: entered promiscuous mode [ 439.717674][T13306] veth1_macvtap: entered promiscuous mode [ 439.735905][T13306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.752213][T13306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.767953][T11171] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.778577][T11171] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.793713][T11171] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.802694][T11171] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.899762][T11171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.918859][T11171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.966181][T11175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.975433][T11175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.190069][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 440.421754][ T52] Bluetooth: hci5: command tx timeout [ 442.501512][ T52] Bluetooth: hci5: command tx timeout [ 444.581389][ T52] Bluetooth: hci5: command tx timeout [ 445.211469][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 445.219518][ C1] lec:lec_tx_timeout: lec0 [ 464.826774][T13537] __nla_validate_parse: 5 callbacks suppressed [ 464.826794][T13537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2051'. [ 464.895509][T13528] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 465.278265][T13562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2058'. [ 465.309953][T13562] netlink: 'syz.1.2058': attribute type 21 has an invalid length. [ 465.318411][T13562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2058'. [ 465.329152][T13562] netlink: 'syz.1.2058': attribute type 21 has an invalid length. [ 465.330891][T13565] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2059'. [ 465.337780][T13562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2058'. [ 465.365171][T13567] syzkaller1: entered promiscuous mode [ 465.370824][T13567] syzkaller1: entered allmulticast mode [ 465.393694][T13565] geneve2: entered promiscuous mode [ 465.399075][T13565] geneve2: entered allmulticast mode [ 465.434642][T11173] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 465.451219][T11173] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 465.461555][T11173] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 465.491111][T11173] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 466.057825][T13619] netlink: 'syz.2.2073': attribute type 22 has an invalid length. [ 466.097217][T13619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2073'. [ 466.118558][T13620] xt_CT: You must specify a L4 protocol and not use inversions on it [ 466.130225][T13619] netlink: 'syz.2.2073': attribute type 22 has an invalid length. [ 466.133113][ T36] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.158495][ T36] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.173321][ T36] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.195647][ T36] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.207634][T13619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2073'. [ 466.222262][T13624] wlan0 speed is unknown, defaulting to 1000 [ 466.228364][T13624] wlan0 speed is unknown, defaulting to 1000 [ 466.248676][T13624] wlan0 speed is unknown, defaulting to 1000 [ 466.397102][T13637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2077'. [ 466.442698][T13624] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 466.498232][T13624] wlan0 speed is unknown, defaulting to 1000 [ 466.507406][T13624] wlan0 speed is unknown, defaulting to 1000 [ 466.520750][T13624] wlan0 speed is unknown, defaulting to 1000 [ 466.553252][T13624] wlan0 speed is unknown, defaulting to 1000 [ 466.570369][T13624] wlan0 speed is unknown, defaulting to 1000 [ 466.594995][T13624] wlan0 speed is unknown, defaulting to 1000 [ 466.595919][T13645] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2081'. [ 466.733965][T13645] bond0: (slave wlan1): Releasing backup interface [ 466.770349][T13659] netlink: 'syz.3.2083': attribute type 4 has an invalid length. [ 466.985547][T13670] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2088'. [ 467.356006][T13691] Cannot find add_set index 0 as target [ 467.624235][T13710] netlink: 'syz.2.2100': attribute type 21 has an invalid length. [ 467.665034][T13710] netlink: 'syz.2.2100': attribute type 4 has an invalid length. [ 467.687485][T13710] netlink: 'syz.2.2100': attribute type 5 has an invalid length. [ 467.902971][T13725] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.935269][T13725] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 468.353333][T13746] syzkaller0: entered promiscuous mode [ 468.361622][T13746] syzkaller0: entered allmulticast mode [ 468.515364][T13743] ip6gretap0 (unregistering): left promiscuous mode [ 469.158165][T13789] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 469.292288][T13799] sctp: [Deprecated]: syz.2.2129 (pid 13799) Use of struct sctp_assoc_value in delayed_ack socket option. [ 469.292288][T13799] Use struct sctp_sack_info instead [ 469.331534][T13799] sctp: [Deprecated]: syz.2.2129 (pid 13799) Use of struct sctp_assoc_value in delayed_ack socket option. [ 469.331534][T13799] Use struct sctp_sack_info instead [ 469.415585][T13799] sctp: [Deprecated]: syz.2.2129 (pid 13799) Use of struct sctp_assoc_value in delayed_ack socket option. [ 469.415585][T13799] Use struct sctp_sack_info instead [ 469.462810][T13799] sctp: [Deprecated]: syz.2.2129 (pid 13799) Use of struct sctp_assoc_value in delayed_ack socket option. [ 469.462810][T13799] Use struct sctp_sack_info instead [ 469.515735][T13799] sctp: [Deprecated]: syz.2.2129 (pid 13799) Use of struct sctp_assoc_value in delayed_ack socket option. [ 469.515735][T13799] Use struct sctp_sack_info instead [ 469.575037][T13799] sctp: [Deprecated]: syz.2.2129 (pid 13799) Use of struct sctp_assoc_value in delayed_ack socket option. [ 469.575037][T13799] Use struct sctp_sack_info instead [ 469.620851][T13799] sctp: [Deprecated]: syz.2.2129 (pid 13799) Use of struct sctp_assoc_value in delayed_ack socket option. [ 469.620851][T13799] Use struct sctp_sack_info instead [ 469.652237][T13799] sctp: [Deprecated]: syz.2.2129 (pid 13799) Use of struct sctp_assoc_value in delayed_ack socket option. [ 469.652237][T13799] Use struct sctp_sack_info instead [ 469.696198][T13799] sctp: [Deprecated]: syz.2.2129 (pid 13799) Use of struct sctp_assoc_value in delayed_ack socket option. [ 469.696198][T13799] Use struct sctp_sack_info instead [ 469.761231][T13799] sctp: [Deprecated]: syz.2.2129 (pid 13799) Use of struct sctp_assoc_value in delayed_ack socket option. [ 469.761231][T13799] Use struct sctp_sack_info instead [ 470.086940][T13840] __nla_validate_parse: 18 callbacks suppressed [ 470.086961][T13840] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2143'. [ 470.148811][T13841] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2143'. [ 470.345406][T13551] udevd[13551]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 470.430696][T13859] netlink: 'syz.0.2146': attribute type 10 has an invalid length. [ 470.465016][T13859] bridge0: port 2(team0) entered blocking state [ 470.472967][T13859] bridge0: port 2(team0) entered disabled state [ 470.496285][T13859] team0: entered allmulticast mode [ 470.507934][T13859] team_slave_1: entered allmulticast mode [ 470.525149][T13861] netlink: 'syz.3.2147': attribute type 3 has an invalid length. [ 470.536817][T13859] team0: entered promiscuous mode [ 470.542281][T13861] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2147'. [ 470.549835][T13859] team_slave_1: entered promiscuous mode [ 470.572193][T13859] bridge0: port 2(team0) entered blocking state [ 470.578676][T13859] bridge0: port 2(team0) entered listening state [ 470.670980][ T5895] IPVS: starting estimator thread 0... [ 470.683118][T13873] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2152'. [ 470.762022][T13874] IPVS: using max 25 ests per chain, 60000 per kthread [ 470.872020][T13885] sctp: [Deprecated]: syz.1.2154 (pid 13885) Use of int in maxseg socket option. [ 470.872020][T13885] Use struct sctp_assoc_value instead [ 470.971507][T13891] x_tables: duplicate underflow at hook 2 [ 470.985174][T13899] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2158'. [ 473.813542][T13885] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 473.824593][T13899] nbd: illegal input index 2958377 [ 474.142106][T13950] syzkaller0: entered promiscuous mode [ 474.171252][T13950] syzkaller0: entered allmulticast mode [ 474.184399][T13950] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 474.724561][T13981] netlink: 'syz.1.2180': attribute type 10 has an invalid length. [ 475.032770][T13995] team0 (unregistering): left allmulticast mode [ 475.048128][T13995] team0 (unregistering): left promiscuous mode [ 475.066368][T13995] bridge0: port 1(team0) entered disabled state [ 475.219188][T14006] delete_channel: no stack [ 475.334201][T14012] syzkaller1: entered promiscuous mode [ 475.339722][T14012] syzkaller1: entered allmulticast mode [ 475.552626][T13979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.565639][T14018] ksmbd: Unknown IPC event: 3, ignore. [ 476.303842][T14054] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2199'. [ 476.383738][T14056] bridge14: entered promiscuous mode [ 476.391694][T14056] bridge14: entered allmulticast mode [ 476.460643][T14059] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2200'. [ 477.008881][T14082] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2211'. [ 477.107513][T14089] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2213'. [ 477.133556][T14093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2214'. [ 477.167068][T14093] openvswitch: netlink: Unknown nsh attribute 0 [ 477.234676][T14097] netlink: 'syz.3.2216': attribute type 1 has an invalid length. [ 477.254979][T14095] syzkaller0: entered promiscuous mode [ 477.260524][T14095] syzkaller0: entered allmulticast mode [ 477.291222][T14097] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.413968][T14115] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2220'. [ 477.441042][T14115] bridge0: port 2(team0) entered disabled state [ 477.558928][T14127] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2223'. [ 477.564254][T14128] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2224'. [ 477.674203][T14134] netlink: 'syz.3.2226': attribute type 1 has an invalid length. [ 477.803053][T14134] syzkaller0: entered promiscuous mode [ 477.812880][T14134] syzkaller0: entered allmulticast mode [ 478.034954][T14143] netlink: 'syz.1.2228': attribute type 11 has an invalid length. [ 478.194982][T14155] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 478.206544][T14156] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 478.299152][T14166] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2233'. [ 478.313856][T14166] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2233'. [ 478.337168][T14166] netlink: 'syz.5.2233': attribute type 2 has an invalid length. [ 478.484288][T13519] wlan0 speed is unknown, defaulting to 1000 [ 478.535027][T14178] netlink: 'syz.2.2235': attribute type 4 has an invalid length. [ 478.699605][T14180] syzkaller0: entered promiscuous mode [ 478.712003][T14180] syzkaller0: entered allmulticast mode [ 478.733521][T14191] netlink: 'syz.2.2241': attribute type 5 has an invalid length. [ 479.251874][T14213] netlink: 'syz.5.2245': attribute type 10 has an invalid length. [ 480.450027][T14199] syz_tun: entered allmulticast mode [ 480.455935][T14199] syz_tun: left allmulticast mode [ 480.464580][T14213] team0: Device ipvlan1 failed to register rx_handler [ 480.718370][T14228] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 480.911778][T14238] netlink: 'syz.0.2251': attribute type 1 has an invalid length. [ 480.992040][T14241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 481.077771][T14243] bond9: (slave gretap3): making interface the new active one [ 481.088200][T14243] bond9: (slave gretap3): Enslaving as an active interface with an up link [ 481.355171][T14262] __nla_validate_parse: 11 callbacks suppressed [ 481.355194][T14262] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2259'. [ 481.749467][T14280] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.764738][T14280] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.897879][T14280] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.908569][T14280] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.935419][T14287] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 481.942990][T14287] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 482.069069][T14280] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.085993][T14280] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.196311][T14280] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.217315][T14280] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.382197][T11175] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.390437][T11175] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.445447][T11175] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.456963][T11175] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.475698][T11175] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.501312][T11175] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.536171][ T36] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.554846][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.644781][T14316] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2276'. [ 482.752149][ T5841] Bluetooth: hci5: command 0x0405 tx timeout [ 482.890833][T14327] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2278'. [ 483.756038][T14368] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2292'. [ 483.766455][T14369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2292'. [ 483.800013][T14368] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2292'. [ 483.818806][T14368] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2292'. [ 483.901918][T14374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2294'. [ 483.913574][T14374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2294'. [ 483.927537][T14374] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2294'. [ 484.138235][T14390] vlan3: entered allmulticast mode [ 484.143928][T14390] mac80211_hwsim hwsim23 wlan0: entered allmulticast mode [ 484.700438][T14428] netlink: 'syz.1.2310': attribute type 8 has an invalid length. [ 485.108702][T14448] openvswitch: netlink: Unknown nsh attribute 0 [ 485.115716][T14446] caif0: entered promiscuous mode [ 485.135860][T14446] caif0: entered allmulticast mode [ 485.631513][T14471] netlink: 'syz.5.2320': attribute type 3 has an invalid length. [ 485.864032][T14477] netlink: 'syz.0.2322': attribute type 1 has an invalid length. [ 485.865037][T14479] nbd: must specify at least one socket [ 485.881234][T14479] Unknown metaid 0 dlen 28 [ 485.897244][T14477] bond10: entered promiscuous mode [ 485.903143][T14477] 8021q: adding VLAN 0 to HW filter on device bond10 [ 486.086356][T14488] netlink: 'syz.5.2326': attribute type 4 has an invalid length. [ 486.455954][T14510] IPVS: set_ctl: invalid protocol: 41 224.0.0.1:20004 [ 486.464745][T14514] IPVS: set_ctl: invalid protocol: 41 224.0.0.1:20004 [ 486.852925][T14532] __nla_validate_parse: 8 callbacks suppressed [ 486.852946][T14532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2341'. [ 486.878338][T14538] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2343'. [ 487.074809][T14558] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2347'. [ 487.288032][T14570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2351'. [ 487.652764][T14596] sctp: [Deprecated]: syz.1.2358 (pid 14596) Use of struct sctp_assoc_value in delayed_ack socket option. [ 487.652764][T14596] Use struct sctp_sack_info instead [ 487.689829][T14596] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 487.695317][T14601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2357'. [ 487.727642][T14602] syzkaller1: entered promiscuous mode [ 487.737452][T14602] syzkaller1: entered allmulticast mode [ 487.741624][T14601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2357'. [ 487.879086][T14611] netlink: 'syz.5.2362': attribute type 10 has an invalid length. [ 487.967855][T14611] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 488.099619][T14626] netlink: 'syz.2.2365': attribute type 10 has an invalid length. [ 488.190169][T14626] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 488.472470][T14647] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2372'. [ 488.533205][T14650] netlink: 'syz.2.2371': attribute type 2 has an invalid length. [ 488.558337][T14650] netlink: 'syz.2.2371': attribute type 2 has an invalid length. [ 488.599525][T14654] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2373'. [ 488.608001][T14650] netlink: 'syz.2.2371': attribute type 2 has an invalid length. [ 488.674179][T14650] netlink: 'syz.2.2371': attribute type 2 has an invalid length. [ 488.800208][T14658] xt_l2tp: v2 tid > 0xffff: 1114244 [ 488.966123][T14670] netlink: 19372 bytes leftover after parsing attributes in process `syz.2.2376'. [ 489.057430][T14675] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2380'. [ 489.619328][T14703] veth0_macvtap: left promiscuous mode [ 489.845065][T14713] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 490.112238][T14724] validate_nla: 66 callbacks suppressed [ 490.112261][T14724] netlink: 'syz.5.2394': attribute type 39 has an invalid length. [ 490.655736][T14758] hsr_slave_0: left promiscuous mode [ 490.667481][T14758] hsr_slave_1: left promiscuous mode [ 492.085727][T14845] __nla_validate_parse: 13 callbacks suppressed [ 492.085748][T14845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2427'. [ 492.349981][T14862] netlink: 'syz.0.2433': attribute type 3 has an invalid length. [ 492.419292][T14868] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2433'. [ 492.453547][ T6752] lec:lec_start_xmit: lec0:No lecd attached [ 492.643090][T14879] netlink: 27836 bytes leftover after parsing attributes in process `syz.2.2438'. [ 492.672426][T14881] dvmrp6: left allmulticast mode [ 492.673624][T14879] openvswitch: netlink: Flow key attr not present in new flow. [ 493.115490][T14900] atomic_op ffff88807e48a198 conn xmit_atomic 0000000000000000 [ 493.158701][T14900] Cannot find del_set index 2 as target [ 493.178920][T14906] wireguard0: entered promiscuous mode [ 493.189384][T14906] wireguard0: entered allmulticast mode [ 493.203846][T14906] team0: Device wireguard0 is of different type [ 493.415306][T14917] macvlan0: entered promiscuous mode [ 493.483921][T14920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2452'. [ 493.680327][T14926] bond0 (unregistering): Released all slaves [ 493.873450][T14941] geneve3: entered promiscuous mode [ 493.946242][ T5841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 493.955849][ T5841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 493.971147][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 493.984931][ T5841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 493.996500][ T5841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 494.339171][T14947] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.346664][T14947] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.402446][T14947] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 494.499747][T14945] lo speed is unknown, defaulting to 1000 [ 494.555858][T14962] netlink: 1020 bytes leftover after parsing attributes in process `syz.0.2464'. [ 494.576047][T14945] wlan0 speed is unknown, defaulting to 1000 [ 494.606833][T14964] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2466'. [ 494.779747][T14969] netlink: 'syz.0.2469': attribute type 21 has an invalid length. [ 494.788156][T14969] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2469'. [ 494.813697][T14973] netlink: 'syz.1.2468': attribute type 25 has an invalid length. [ 494.821878][T14973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2468'. [ 494.833332][T14973] netlink: 'syz.1.2468': attribute type 25 has an invalid length. [ 494.874073][T14973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2468'. [ 495.100639][T14984] gtp1: entered promiscuous mode [ 495.106309][T14984] gtp1: entered allmulticast mode [ 495.113625][T14945] chnl_net:caif_netlink_parms(): no params data found [ 495.335302][T14945] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.342912][T14945] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.351639][T14945] bridge_slave_0: entered allmulticast mode [ 495.365639][T14945] bridge_slave_0: entered promiscuous mode [ 495.377338][T14945] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.385863][T14945] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.393601][T14945] bridge_slave_1: entered allmulticast mode [ 495.402424][T14945] bridge_slave_1: entered promiscuous mode [ 495.470923][T14945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.486654][T14945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.585017][T14945] team0: Port device team_slave_0 added [ 495.602754][T14945] team0: Port device team_slave_1 added [ 495.694206][T14945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.702222][T14945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.748193][T14945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.767531][T14945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.776427][T14945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.789082][T15012] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2481'. [ 495.804625][T14945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.843958][T15012] bridge_slave_1: left allmulticast mode [ 495.849952][T15012] bridge_slave_1: left promiscuous mode [ 495.857101][T15012] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.898390][T15012] bridge_slave_0: left allmulticast mode [ 495.904418][T15012] bridge_slave_0: left promiscuous mode [ 495.910536][T15012] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.111817][ T52] Bluetooth: hci6: command tx timeout [ 496.111936][T15015] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 496.256259][T14945] hsr_slave_0: entered promiscuous mode [ 496.278982][T14945] hsr_slave_1: entered promiscuous mode [ 496.295671][T14945] debugfs: 'hsr0' already exists in 'hsr' [ 496.313531][T14945] Cannot create hsr debugfs directory [ 496.389717][T15032] netlink: 'syz.1.2485': attribute type 142 has an invalid length. [ 496.434006][T15037] netlink: 'syz.5.2488': attribute type 12 has an invalid length. [ 496.944328][T15064] SET target dimension over the limit! [ 496.955737][T15054] syzkaller0: entered promiscuous mode [ 496.964873][T15054] syzkaller0: entered allmulticast mode [ 497.192561][T15070] syzkaller0: entered promiscuous mode [ 497.198500][T15070] syzkaller0: entered allmulticast mode [ 497.242249][T14945] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 497.253187][T14945] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 497.265788][T15072] netlink: 'syz.1.2497': attribute type 1 has an invalid length. [ 497.276123][T14945] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 497.315805][T14945] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 497.448734][T15085] netlink: 'syz.1.2499': attribute type 1 has an invalid length. [ 497.548411][T15087] 8021q: adding VLAN 0 to HW filter on device bond8 [ 497.562417][T15087] bond0: (slave bond8): making interface the new active one [ 497.570931][T15087] bond0: (slave bond8): Enslaving as an active interface with an up link [ 497.595349][T15098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 497.630033][T15087] __nla_validate_parse: 8 callbacks suppressed [ 497.630056][T15087] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2499'. [ 497.757983][T15104] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2503'. [ 498.023613][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5570 ms [ 498.031754][ C1] lec:lec_tx_timeout: lec0 [ 498.184513][ T52] Bluetooth: hci6: command tx timeout [ 499.253526][T15085] bond0: (slave gretap2): Enslaving as a backup interface with an up link [ 499.266436][T15087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.454733][T14945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.465892][T15117] netlink: 'syz.2.2507': attribute type 1 has an invalid length. [ 499.481869][T15117] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2507'. [ 499.507778][T15117] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2507'. [ 499.510297][T14945] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.538055][T11174] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.545306][T11174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.554519][T15122] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2507'. [ 499.593526][T11173] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.600666][T11173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.690251][T15127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2511'. [ 499.721902][T15127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2511'. [ 499.733029][T15127] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2511'. [ 499.751660][T15130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2511'. [ 499.795621][T15130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2511'. [ 499.884615][T14945] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 500.160266][T15148] syzkaller0: entered promiscuous mode [ 500.176621][T15148] syzkaller0: entered allmulticast mode [ 500.263501][ T52] Bluetooth: hci6: command tx timeout [ 500.467180][T15170] bond11 (unregistering): Released all slaves [ 500.558459][T15165] lo speed is unknown, defaulting to 1000 [ 500.595696][T15165] wlan0 speed is unknown, defaulting to 1000 [ 500.809705][T15187] openvswitch: netlink: IP tunnel TTL not specified. [ 500.846808][T14945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.505883][T15202] syzkaller0: entered promiscuous mode [ 501.632738][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 502.355364][ T52] Bluetooth: hci6: command tx timeout [ 503.681859][T15246] netlink: 'syz.2.2534': attribute type 1 has an invalid length. [ 503.883904][T15246] netlink: 'syz.2.2534': attribute type 1 has an invalid length. [ 503.900353][T15246] netlink: 'syz.2.2534': attribute type 1 has an invalid length. [ 503.908522][T15256] netlink: 'syz.0.2537': attribute type 2 has an invalid length. [ 503.928060][T15246] netlink: 'syz.2.2534': attribute type 1 has an invalid length. [ 503.986060][T15256] 9: entered promiscuous mode [ 504.006237][T15246] netlink: 'syz.2.2534': attribute type 1 has an invalid length. [ 504.018542][T14945] veth0_vlan: entered promiscuous mode [ 504.045816][T15246] netlink: 'syz.2.2534': attribute type 1 has an invalid length. [ 504.058572][T14945] veth1_vlan: entered promiscuous mode [ 504.068513][T15246] netlink: 'syz.2.2534': attribute type 1 has an invalid length. [ 504.088237][T15246] netlink: 'syz.2.2534': attribute type 1 has an invalid length. [ 504.115651][T15246] netlink: 'syz.2.2534': attribute type 1 has an invalid length. [ 504.140817][T14945] veth0_macvtap: entered promiscuous mode [ 504.190633][T14945] veth1_macvtap: entered promiscuous mode [ 504.259003][T14945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.318199][T14945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.351681][T15273] __nla_validate_parse: 8 callbacks suppressed [ 504.351702][T15273] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2544'. [ 504.390560][ T2970] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.414282][ T2970] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.436106][ T52] Bluetooth: hci6: command tx timeout [ 504.448397][ T2970] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.464272][ T2970] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.694445][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.705817][T15284] tipc: Started in network mode [ 504.706806][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.719940][T15284] tipc: Node identity ac14140f, cluster identity 4711 [ 504.730887][T15284] tipc: Enabling of bearer rejected, failed to enable media [ 504.866104][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.882456][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.084278][T15305] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2551'. [ 505.094292][T15305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.102636][T15305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 505.145917][T15305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 505.165011][T15305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 505.313924][T15316] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2555'. [ 505.353012][T15307] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2551'. [ 505.396142][T15312] bond2: option packets_per_slave: invalid value (18446744073709551615) [ 505.404934][T15312] bond2: option packets_per_slave: allowed values 0 - 65535 [ 505.417191][T15312] bond2 (unregistering): Released all slaves [ 505.441679][T15318] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2554'. [ 505.599520][T15324] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2558'. [ 505.825051][T15343] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2559'. [ 505.827012][T15334] 8021q: adding VLAN 0 to HW filter on device bond1 [ 506.136903][T15360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2566'. [ 506.169997][T15360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2566'. [ 506.300847][T15365] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2568'. [ 506.981158][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5350 ms [ 506.989262][ C1] lec:lec_tx_timeout: lec0 [ 507.290155][T15420] xt_ecn: cannot match TCP bits for non-tcp packets [ 507.439418][T15428] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 507.576827][T15431] syzkaller0: entered allmulticast mode [ 507.613528][T15435] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 508.122103][T15464] netlink: del zone limit has 8 unknown bytes [ 508.494728][T15480] syzkaller0: entered promiscuous mode [ 508.500263][T15480] syzkaller0: entered allmulticast mode [ 508.697660][T15487] tipc: Enabled bearer , priority 0 [ 508.706936][T15486] syzkaller0: entered promiscuous mode [ 508.713187][T15486] syzkaller0: entered allmulticast mode [ 508.732753][T15486] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 508.860543][T15486] tipc: Resetting bearer [ 508.900490][T15487] bond0: entered promiscuous mode [ 508.927631][T15487] bond_slave_0: entered promiscuous mode [ 508.947631][T15487] bond_slave_1: entered promiscuous mode [ 508.971466][T15487] bridge_slave_1: entered promiscuous mode [ 508.992982][T15487] bond0: left promiscuous mode [ 509.006795][T15487] bond_slave_0: left promiscuous mode [ 509.020604][T15487] bond_slave_1: left promiscuous mode [ 509.027827][T15487] bridge_slave_1: left promiscuous mode [ 509.153765][T15514] validate_nla: 63 callbacks suppressed [ 509.153788][T15514] netlink: 'syz.5.2613': attribute type 2 has an invalid length. [ 509.203108][T15514] netlink: 'syz.5.2613': attribute type 2 has an invalid length. [ 509.230117][T15502] syzkaller0: entered promiscuous mode [ 509.252326][T15502] syzkaller0: entered allmulticast mode [ 509.280758][T15485] tipc: Resetting bearer [ 509.346882][T15485] tipc: Disabling bearer [ 509.403830][T15522] netlink: 'syz.6.2615': attribute type 1 has an invalid length. [ 509.558657][T15533] __nla_validate_parse: 14 callbacks suppressed [ 509.558677][T15533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2616'. [ 511.233457][T15542] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2619'. [ 511.320346][T15550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2621'. [ 511.338444][T15548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2622'. [ 511.338592][T15550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2621'. [ 511.374432][T15556] netlink: 'syz.0.2624': attribute type 7 has an invalid length. [ 511.384304][T15550] netlink: 'syz.1.2621': attribute type 3 has an invalid length. [ 511.404209][T15556] netlink: 'syz.0.2624': attribute type 7 has an invalid length. [ 511.557079][T15559] tipc: New replicast peer: 255.255.255.255 [ 511.564053][T15559] tipc: Enabled bearer , priority 10 [ 511.572363][T15563] Bluetooth: MGMT ver 1.23 [ 511.689295][T15567] netlink: 61 bytes leftover after parsing attributes in process `syz.0.2628'. [ 511.713220][T15569] xt_ecn: cannot match TCP bits for non-tcp packets [ 511.956202][T15585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2635'. [ 512.059489][T15590] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2636'. [ 512.119227][T15590] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2636'. [ 512.146974][T15594] netlink: 187468 bytes leftover after parsing attributes in process `syz.1.2638'. [ 512.343945][T15604] SET target dimension over the limit! [ 512.681238][ T24] tipc: Node number set to 2886997007 [ 513.017903][T15626] netlink: 'syz.5.2651': attribute type 2 has an invalid length. [ 513.287552][T15638] delete_channel: no stack [ 513.302086][T15641] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 513.319026][T15641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.645973][T15660] netlink: 'syz.6.2661': attribute type 1 has an invalid length. [ 513.662236][T15662] netlink: 'syz.6.2661': attribute type 1 has an invalid length. [ 513.910561][T15676] netlink: 'syz.6.2664': attribute type 1 has an invalid length. [ 514.108439][T15679] vlan2: entered allmulticast mode [ 514.134510][T15679] mac80211_hwsim hwsim28 wlan0: entered allmulticast mode [ 514.930360][T15730] __nla_validate_parse: 14 callbacks suppressed [ 514.930380][T15730] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2678'. [ 514.990232][T15730] bridge2: entered promiscuous mode [ 515.039460][T15730] bridge2: entered allmulticast mode [ 515.070541][T15730] team0: Port device bridge2 added [ 515.197884][T15742] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 515.207344][T15748] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 515.423241][T15759] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2685'. [ 515.471365][T15759] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2685'. [ 515.695640][T15770] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2691'. [ 516.103282][T15798] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 516.110622][T15798] IPv6: NLM_F_CREATE should be set when creating new route [ 516.149481][T15798] netlink: 'syz.2.2697': attribute type 33 has an invalid length. [ 516.255867][T15798] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 516.326363][T15798] bond5 (unregistering): Released all slaves [ 516.413460][T15803] xfrm0: entered allmulticast mode [ 516.429702][T15808] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 516.721729][T15826] IPVS: set_ctl: invalid protocol: 2 172.20.20.187:20003 [ 516.844489][T15838] netlink: 'syz.2.2707': attribute type 1 has an invalid length. [ 516.888274][T15838] 8021q: adding VLAN 0 to HW filter on device bond5 [ 517.000356][T15850] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2709'. [ 517.117643][T15844] bond5: (slave veth1): Enslaving as an active interface with a down link [ 517.177299][T15838] bond5: (slave veth0_to_bond): making interface the new active one [ 517.199125][T15838] veth0_to_bond: entered promiscuous mode [ 517.213996][T15838] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 517.276653][T15853] bond5: (slave veth7): Enslaving as an active interface with a down link [ 517.285893][T15853] netlink: 'syz.2.2707': attribute type 1 has an invalid length. [ 517.296379][T15853] netlink: 'syz.2.2707': attribute type 2 has an invalid length. [ 517.315291][T15863] gre0: entered promiscuous mode [ 517.326954][T15863] gre0: entered allmulticast mode [ 517.511790][T15866] syzkaller0: entered promiscuous mode [ 517.545318][T15866] syzkaller0: entered allmulticast mode [ 517.698103][T15866] tipc: Enabling of bearer rejected, already enabled [ 517.778186][T15878] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2715'. [ 518.287180][T15910] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 518.303518][T15910] netlink: 'syz.0.2725': attribute type 4 has an invalid length. [ 518.579113][T15920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2730'. [ 518.837482][T15935] netlink: 'syz.0.2735': attribute type 2 has an invalid length. [ 518.867539][T15935] netlink: 'syz.0.2735': attribute type 8 has an invalid length. [ 518.898288][T15935] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2735'. [ 519.243523][T15964] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 519.553830][T15976] mac80211_hwsim hwsim28 wlan0: entered promiscuous mode [ 519.610490][T15981] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2749'. [ 519.666160][T15984] SET target dimension over the limit! [ 519.787672][T15988] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2752'. [ 519.816084][T15988] netdevsim netdevsim5: Direct firmware load for . failed with error -2 [ 519.839233][T15988] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 520.040609][T15996] netlink: 'syz.6.2753': attribute type 10 has an invalid length. [ 520.098986][T15996] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 520.122051][T15995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.217615][T16010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2757'. [ 520.325549][T16020] bridge13: entered promiscuous mode [ 520.334751][T16020] bridge13: entered allmulticast mode [ 520.426457][T16023] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2759'. [ 520.554409][T16028] tipc: Enabling of bearer rejected, media not registered [ 520.565151][T16028] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2760'. [ 520.634378][T16032] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2761'. [ 520.744155][T16032] vlan1: entered promiscuous mode [ 520.761837][T16032] hsr_slave_1: entered promiscuous mode [ 520.767804][T16032] vlan1: entered allmulticast mode [ 520.774228][T16032] hsr_slave_1: entered allmulticast mode [ 523.091165][T16088] netlink: 284 bytes leftover after parsing attributes in process `syz.2.2774'. [ 524.258640][T16113] syzkaller0: entered promiscuous mode [ 524.271340][T16113] syzkaller0: entered allmulticast mode [ 524.283106][T16119] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2783'. [ 524.432784][T16137] netlink: 'syz.2.2785': attribute type 1 has an invalid length. [ 524.497408][T16143] netlink: 'syz.2.2785': attribute type 1 has an invalid length. [ 524.506860][T16143] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2785'. [ 524.517683][T16143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2785'. [ 524.529130][T16145] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 524.539626][T16143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2785'. [ 524.914426][T11173] tipc: Subscription rejected, illegal request [ 525.301915][ T52] Bluetooth: hci6: command 0x0405 tx timeout [ 526.178274][T16137] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 526.314763][T16156] netlink: 'syz.0.2787': attribute type 3 has an invalid length. [ 526.331579][T16156] netlink: 'syz.0.2787': attribute type 3 has an invalid length. [ 526.482876][T16162] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2789'. [ 526.668683][T16182] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2795'. [ 526.670207][ T30] audit: type=1800 audit(1770362695.302:3): pid=16162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2789" name="memory.events" dev="tmpfs" ino=917 res=0 errno=0 [ 526.787061][T16177] lo speed is unknown, defaulting to 1000 [ 526.808730][T16177] wlan0 speed is unknown, defaulting to 1000 [ 526.942248][T16192] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2799'. [ 526.967247][T16189] netlink: 'syz.1.2797': attribute type 4 has an invalid length. [ 527.110753][T16205] syz.1.2800: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 527.179644][T16205] CPU: 0 UID: 0 PID: 16205 Comm: syz.1.2800 Not tainted syzkaller #0 PREEMPT(full) [ 527.179673][T16205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 527.179684][T16205] Call Trace: [ 527.179692][T16205] [ 527.179700][T16205] dump_stack_lvl+0xe8/0x150 [ 527.179731][T16205] warn_alloc+0x249/0x340 [ 527.179753][T16205] ? stack_trace_save+0xa9/0x100 [ 527.179779][T16205] ? __pfx_warn_alloc+0x10/0x10 [ 527.179807][T16205] ? kasan_save_track+0x4f/0x80 [ 527.179823][T16205] ? kasan_save_track+0x3e/0x80 [ 527.179838][T16205] ? __kasan_kmalloc+0x93/0xb0 [ 527.179854][T16205] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 527.179872][T16205] ? xskq_create+0x56/0x170 [ 527.179890][T16205] ? xsk_setsockopt+0x54c/0x990 [ 527.179914][T16205] ? do_sock_setsockopt+0x17c/0x1b0 [ 527.179937][T16205] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 527.179959][T16205] ? do_syscall_64+0xe2/0xf80 [ 527.179983][T16205] __vmalloc_node_range_noprof+0x132/0x1730 [ 527.180038][T16205] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 527.180065][T16205] ? __kasan_kmalloc+0x93/0xb0 [ 527.180092][T16205] vmalloc_user_noprof+0xad/0xe0 [ 527.180111][T16205] ? xskq_create+0xbf/0x170 [ 527.180132][T16205] xskq_create+0xbf/0x170 [ 527.180154][T16205] xsk_init_queue+0xad/0x110 [ 527.180185][T16205] xsk_setsockopt+0x54c/0x990 [ 527.180216][T16205] ? __pfx_xsk_setsockopt+0x10/0x10 [ 527.180244][T16205] ? __pfx_aa_sk_perm+0x10/0x10 [ 527.180270][T16205] ? aa_sock_opt_perm+0xff/0x1a0 [ 527.180298][T16205] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 527.180318][T16205] ? __pfx_xsk_setsockopt+0x10/0x10 [ 527.180347][T16205] do_sock_setsockopt+0x17c/0x1b0 [ 527.180376][T16205] __x64_sys_setsockopt+0x13d/0x1b0 [ 527.180408][T16205] do_syscall_64+0xe2/0xf80 [ 527.180427][T16205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.180443][T16205] ? trace_irq_disable+0x37/0x100 [ 527.180462][T16205] ? clear_bhb_loop+0x60/0xb0 [ 527.180507][T16205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.180526][T16205] RIP: 0033:0x7ff31f99aeb9 [ 527.180545][T16205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.180561][T16205] RSP: 002b:00007ff3207dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 527.180584][T16205] RAX: ffffffffffffffda RBX: 00007ff31fc15fa0 RCX: 00007ff31f99aeb9 [ 527.180607][T16205] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 527.180619][T16205] RBP: 00007ff31fa08c1f R08: 0000000000000004 R09: 0000000000000000 [ 527.180631][T16205] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 527.180642][T16205] R13: 00007ff31fc16038 R14: 00007ff31fc15fa0 R15: 00007ffd61e38a98 [ 527.180677][T16205] [ 527.180686][T16205] Mem-Info: [ 527.474434][T16205] active_anon:7677 inactive_anon:0 isolated_anon:0 [ 527.474434][T16205] active_file:2957 inactive_file:40053 isolated_file:0 [ 527.474434][T16205] unevictable:768 dirty:69 writeback:0 [ 527.474434][T16205] slab_reclaimable:11668 slab_unreclaimable:113046 [ 527.474434][T16205] mapped:44576 shmem:1412 pagetables:1345 [ 527.474434][T16205] sec_pagetables:0 bounce:0 [ 527.474434][T16205] kernel_misc_reclaimable:0 [ 527.474434][T16205] free:1282449 free_pcp:14255 free_cma:0 [ 527.535550][T16203] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 527.556465][T16205] Node 0 active_anon:30908kB inactive_anon:0kB active_file:11828kB inactive_file:160008kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:178404kB dirty:276kB writeback:0kB shmem:4112kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13804kB pagetables:5256kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 527.620798][T16203] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 527.632626][T16203] gretap1: entered promiscuous mode [ 527.633294][T16205] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 527.649787][T16203] gretap1: entered allmulticast mode [ 527.685493][T16192] netlink: 'syz.2.2799': attribute type 2 has an invalid length. [ 527.718127][T16205] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 527.791078][T16205] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 527.831628][T16205] Node 0 DMA32 free:1230980kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30608kB inactive_anon:0kB active_file:11828kB inactive_file:160008kB unevictable:1536kB writepending:276kB zspages:0kB present:3129332kB managed:2554116kB mlocked:0kB bounce:0kB free_pcp:41160kB local_pcp:21032kB free_cma:0kB [ 527.877449][T16205] lowmem_reserve[]: 0 0 1 1 1 [ 527.885057][T16205] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 527.947156][T16205] lowmem_reserve[]: 0 0 0 0 0 [ 527.952475][T16205] Node 1 Normal free:3883236kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17288kB local_pcp:4356kB free_cma:0kB [ 528.003755][T16205] lowmem_reserve[]: 0 0 0 0 0 [ 528.047349][T16205] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 528.095295][T16237] netlink: 'syz.6.2806': attribute type 2 has an invalid length. [ 528.111500][T16205] Node 0 DMA32: 5407*4kB (UM) 3536*8kB (UME) 610*16kB (UME) 400*32kB (UME) 97*64kB (UME) 52*128kB (UM) 103*256kB (UME) 37*512kB (UM) 36*1024kB (UME) 19*2048kB (UM) 251*4096kB (UM) = 1234524kB [ 528.132460][T16237] netlink: 244 bytes leftover after parsing attributes in process `syz.6.2806'. [ 528.145437][T16205] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 528.184389][T16205] Node 1 Normal: 155*4kB (U) 43*8kB (UME) 40*16kB (UME) 75*32kB (UME) 23*64kB (UME) 9*128kB (UME) 5*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 944*4096kB (M) = 3883236kB [ 528.203493][T16205] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 528.232892][T16205] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 528.247898][T16205] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 528.266934][T16205] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 528.279308][T16205] 44417 total pagecache pages [ 528.285050][T16205] 0 pages in swap cache [ 528.289649][T16205] Free swap = 124996kB [ 528.294846][T16205] Total swap = 124996kB [ 528.299654][T16205] 2097051 pages RAM [ 528.304105][T16205] 0 pages HighMem/MovableOnly [ 528.308896][T16205] 426624 pages reserved [ 528.313606][T16205] 0 pages cma reserved [ 528.405378][T16249] netlink: 'syz.6.2810': attribute type 9 has an invalid length. [ 528.414008][T16249] netlink: 'syz.6.2810': attribute type 11 has an invalid length. [ 528.423062][T16249] netlink: 'syz.6.2810': attribute type 12 has an invalid length. [ 528.431370][T16249] netlink: 210020 bytes leftover after parsing attributes in process `syz.6.2810'. [ 528.444259][T16249] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2810'. [ 528.526987][ T2970] veth0_to_bond: left promiscuous mode [ 528.782806][T16265] xt_hashlimit: invalid interval [ 529.075444][T16159] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 529.087185][T16159] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 529.106815][T16159] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 529.115343][T16159] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 529.123936][T16159] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 529.180501][T16268] bond11: entered promiscuous mode [ 529.213537][T16282] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2822'. [ 529.230945][T16268] 8021q: adding VLAN 0 to HW filter on device bond11 [ 529.287300][T16282] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.2822'. [ 529.345811][T16277] lo speed is unknown, defaulting to 1000 [ 529.386384][T16277] wlan0 speed is unknown, defaulting to 1000 [ 529.469043][T16288] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 529.524233][ T5831] IPVS: starting estimator thread 0... [ 529.557779][T16293] validate_nla: 1 callbacks suppressed [ 529.557799][T16293] netlink: 'syz.0.2826': attribute type 1 has an invalid length. [ 529.616226][T16295] IPVS: using max 30 ests per chain, 72000 per kthread [ 529.749140][T16293] bond12: entered promiscuous mode [ 529.754625][T16293] bond12: entered allmulticast mode [ 529.760522][T16293] 8021q: adding VLAN 0 to HW filter on device bond12 [ 529.779747][T16296] macvlan2: entered promiscuous mode [ 529.786182][T16296] macvlan2: entered allmulticast mode [ 529.795761][T16296] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 530.039390][T16277] chnl_net:caif_netlink_parms(): no params data found [ 530.445075][T16277] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.479991][T16277] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.521454][T16277] bridge_slave_0: entered allmulticast mode [ 530.529534][T16277] bridge_slave_0: entered promiscuous mode [ 530.560458][T16277] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.580713][T16277] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.609229][T16277] bridge_slave_1: entered allmulticast mode [ 530.622974][T16277] bridge_slave_1: entered promiscuous mode [ 530.641522][T16330] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2835'. [ 530.763818][T16277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.778782][T16339] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 530.794636][T16277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.886672][T16341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2839'. [ 530.890813][T16277] team0: Port device team_slave_0 added [ 530.952674][T16277] team0: Port device team_slave_1 added [ 531.117264][T16277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.150543][T16277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.228743][ T5148] Bluetooth: hci7: command tx timeout [ 531.243711][T16277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.300181][T16277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.324907][T16277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.402309][T16277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.428193][T16367] tipc: Enabled bearer , priority 0 [ 531.442205][T16360] syzkaller0: entered promiscuous mode [ 531.450602][T16360] syzkaller0: entered allmulticast mode [ 531.506550][T16359] tipc: Resetting bearer [ 531.547713][T16359] tipc: Disabling bearer [ 531.659368][T16277] hsr_slave_0: entered promiscuous mode [ 531.667846][T16277] hsr_slave_1: entered promiscuous mode [ 531.674663][T16277] debugfs: 'hsr0' already exists in 'hsr' [ 531.701814][T16277] Cannot create hsr debugfs directory [ 532.329442][T16277] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.342795][T16277] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.359965][T16277] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 532.397158][T16405] x9: renamed from bridge_slave_0 (while UP) [ 532.454188][T16277] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.471153][T16277] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.503408][T16277] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 532.565039][T16417] netlink: 'syz.6.2861': attribute type 10 has an invalid length. [ 532.577731][T16417] veth0_macvtap: left promiscuous mode [ 532.618188][T16277] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.631337][T16277] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.642006][T16277] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 532.665646][T16418] __nla_validate_parse: 8 callbacks suppressed [ 532.665667][T16418] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2860'. [ 532.742276][T16277] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.757815][T16277] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.783438][T16277] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 533.031565][T16277] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 533.042677][T16277] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 533.055736][T16277] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 533.076501][T16277] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 533.120099][T16434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.301564][ T5148] Bluetooth: hci7: command tx timeout [ 533.357925][T16277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.390664][T16277] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.424794][T11175] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.432058][T11175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.524416][T11175] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.529659][T16454] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2871'. [ 533.531639][T11175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.540677][T16454] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2871'. [ 533.850784][T16467] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2877'. [ 533.915547][T16471] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2878'. [ 533.937608][T16471] netlink: 'syz.6.2878': attribute type 9 has an invalid length. [ 534.353091][T16498] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2882'. [ 534.586439][T16511] netlink: 'syz.0.2887': attribute type 5 has an invalid length. [ 534.614791][T16277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.789640][T16277] veth0_vlan: entered promiscuous mode [ 534.836204][T16277] veth1_vlan: entered promiscuous mode [ 534.954754][T16277] veth0_macvtap: entered promiscuous mode [ 534.990700][T16277] veth1_macvtap: entered promiscuous mode [ 535.043257][T16525] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2892'. [ 535.069673][T16525] openvswitch: netlink: Unknown nsh attribute 0 [ 535.071596][T16527] ipvlan2: entered promiscuous mode [ 535.099588][T16277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.134501][T16277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.157257][T11175] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.178870][T11175] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.195244][T16528] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 535.230017][T16527] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 535.354089][T11175] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.384588][ T5148] Bluetooth: hci7: command tx timeout [ 535.394399][T11175] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.612862][T11175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.641076][T11175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.686633][T16553] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.2900'. [ 535.698173][T16553] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 535.793797][T11171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.830114][T11171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.894584][T16561] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2904'. [ 536.419770][T16592] gre1: entered promiscuous mode [ 536.440397][T16592] gre1: entered allmulticast mode [ 536.608122][T16597] delete_channel: no stack [ 536.635424][T16597] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2911'. [ 536.844876][T16159] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 536.856469][T16159] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 536.869726][T16159] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 536.879277][T16159] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 536.887347][T16159] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 537.004361][T16610] lo speed is unknown, defaulting to 1000 [ 537.014019][T16610] wlan0 speed is unknown, defaulting to 1000 [ 537.464876][T16159] Bluetooth: hci7: command tx timeout [ 537.616564][T16643] gre0: entered promiscuous mode [ 537.634929][T16643] gre0: entered allmulticast mode [ 537.858960][T16662] __nla_validate_parse: 2 callbacks suppressed [ 537.858983][T16662] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2925'. [ 537.897430][T16662] block nbd1: Unsupported socket: should be TCP or UNIX. [ 538.835873][T11171] bond2 (unregistering): (slave bridge3): Releasing active interface [ 538.844341][T11171] bridge3 (unregistering): left promiscuous mode [ 538.850686][T11171] bridge3 (unregistering): left allmulticast mode [ 538.991597][T16159] Bluetooth: hci3: command tx timeout [ 539.127897][T11171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 539.140028][T11171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 539.155601][T11171] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 539.167716][T11171] bond0 (unregistering): Released all slaves [ 539.268643][T11171] bond1 (unregistering): Released all slaves [ 539.386543][T11171] bond2 (unregistering): Released all slaves [ 539.499837][T11171] bond3 (unregistering): Released all slaves [ 539.515704][T11171] bond4 (unregistering): Released all slaves [ 539.628421][T11171] bond5 (unregistering): (slave veth1): Releasing active interface [ 539.636691][T11171] veth0_to_bond: entered promiscuous mode [ 539.645132][T11171] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 539.656101][T11171] bond5 (unregistering): (slave veth7): Releasing active interface [ 539.666129][T11171] bond5 (unregistering): Released all slaves [ 539.839073][T16663] bond0: entered allmulticast mode [ 539.851507][T16663] bond_slave_0: entered allmulticast mode [ 539.867566][T16663] bond_slave_1: entered allmulticast mode [ 539.881498][T16663] bridge_slave_1: entered allmulticast mode [ 539.925404][T16669] syzkaller1: entered promiscuous mode [ 539.930946][T16669] syzkaller1: entered allmulticast mode [ 539.985021][T16610] chnl_net:caif_netlink_parms(): no params data found [ 540.016431][T11171] tipc: Disabling bearer [ 540.034392][T11171] tipc: Left network mode [ 540.081899][T16679] FAULT_INJECTION: forcing a failure. [ 540.081899][T16679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.103556][T16679] CPU: 0 UID: 0 PID: 16679 Comm: syz.6.2934 Not tainted syzkaller #0 PREEMPT(full) [ 540.103581][T16679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 540.103590][T16679] Call Trace: [ 540.103598][T16679] [ 540.103605][T16679] dump_stack_lvl+0xe8/0x150 [ 540.103631][T16679] should_fail_ex+0x412/0x560 [ 540.103656][T16679] _copy_from_iter+0x1d3/0x1670 [ 540.103684][T16679] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 540.103711][T16679] ? __pfx__copy_from_iter+0x10/0x10 [ 540.103732][T16679] ? __build_skb_around+0x22d/0x3c0 [ 540.103754][T16679] ? __alloc_skb+0x193/0x390 [ 540.103771][T16679] ? netlink_sendmsg+0x650/0xb40 [ 540.103787][T16679] ? skb_put+0x11b/0x210 [ 540.103809][T16679] netlink_sendmsg+0x6c0/0xb40 [ 540.103835][T16679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.103855][T16679] ? aa_sock_msg_perm+0xf1/0x1b0 [ 540.103877][T16679] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 540.103896][T16679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.103911][T16679] ____sys_sendmsg+0xa68/0xad0 [ 540.103932][T16679] ? __might_fault+0xaf/0x130 [ 540.103961][T16679] ? __pfx_____sys_sendmsg+0x10/0x10 [ 540.103990][T16679] ? import_iovec+0x73/0xa0 [ 540.104017][T16679] ___sys_sendmsg+0x2a5/0x360 [ 540.104036][T16679] ? __lock_acquire+0x6b5/0x2cf0 [ 540.104061][T16679] ? __pfx____sys_sendmsg+0x10/0x10 [ 540.104086][T16679] ? kstrtouint+0x6e/0xe0 [ 540.104130][T16679] ? __fget_files+0x2a/0x420 [ 540.104146][T16679] ? __fget_files+0x3a0/0x420 [ 540.104174][T16679] __sys_sendmmsg+0x27c/0x4e0 [ 540.104200][T16679] ? __pfx___sys_sendmmsg+0x10/0x10 [ 540.104218][T16679] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 540.104262][T16679] ? ksys_write+0x242/0x270 [ 540.104286][T16679] ? __pfx_ksys_write+0x10/0x10 [ 540.104316][T16679] __x64_sys_sendmmsg+0xa0/0xc0 [ 540.104340][T16679] do_syscall_64+0xe2/0xf80 [ 540.104357][T16679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.104373][T16679] ? trace_irq_disable+0x37/0x100 [ 540.104388][T16679] ? clear_bhb_loop+0x60/0xb0 [ 540.104410][T16679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.104427][T16679] RIP: 0033:0x7f09cfd9aeb9 [ 540.104445][T16679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.104459][T16679] RSP: 002b:00007f09d0d09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 540.104480][T16679] RAX: ffffffffffffffda RBX: 00007f09d0015fa0 RCX: 00007f09cfd9aeb9 [ 540.104494][T16679] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 540.104516][T16679] RBP: 00007f09d0d09090 R08: 0000000000000000 R09: 0000000000000000 [ 540.104528][T16679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.104539][T16679] R13: 00007f09d0016038 R14: 00007f09d0015fa0 R15: 00007ffe0872b728 [ 540.104570][T16679] [ 540.576601][T16690] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2937'. [ 540.586623][T16690] netlink: 13 bytes leftover after parsing attributes in process `syz.2.2937'. [ 540.602047][T16688] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2936'. [ 540.642173][T16693] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2935'. [ 540.662285][T16690] veth3: entered promiscuous mode [ 540.902487][T16704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2939'. [ 540.912385][T16610] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.931874][T16610] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.959873][T16610] bridge_slave_0: entered allmulticast mode [ 540.960015][T16710] x_tables: duplicate underflow at hook 3 [ 540.991769][T16610] bridge_slave_0: entered promiscuous mode [ 541.035940][T16610] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.056523][T16610] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.064226][T16159] Bluetooth: hci3: command tx timeout [ 541.091883][T16610] bridge_slave_1: entered allmulticast mode [ 541.131393][T16610] bridge_slave_1: entered promiscuous mode [ 541.332528][T16722] FAULT_INJECTION: forcing a failure. [ 541.332528][T16722] name failslab, interval 1, probability 0, space 0, times 1 [ 541.348812][T16722] CPU: 0 UID: 0 PID: 16722 Comm: syz.0.2945 Not tainted syzkaller #0 PREEMPT(full) [ 541.348848][T16722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 541.348859][T16722] Call Trace: [ 541.348867][T16722] [ 541.348875][T16722] dump_stack_lvl+0xe8/0x150 [ 541.348906][T16722] should_fail_ex+0x412/0x560 [ 541.348936][T16722] should_failslab+0xa8/0x100 [ 541.348960][T16722] kmem_cache_alloc_noprof+0x87/0x6e0 [ 541.348987][T16722] ? __netlink_lookup+0xc6/0x8b0 [ 541.349010][T16722] ? skb_clone+0x212/0x3a0 [ 541.349043][T16722] skb_clone+0x212/0x3a0 [ 541.349073][T16722] __netlink_deliver_tap+0x404/0x850 [ 541.349108][T16722] ? netlink_deliver_tap+0x2e/0x1b0 [ 541.349131][T16722] netlink_deliver_tap+0x19c/0x1b0 [ 541.349154][T16722] netlink_unicast+0x7e3/0x9b0 [ 541.349193][T16722] ? __pfx_netlink_unicast+0x10/0x10 [ 541.349221][T16722] ? __alloc_skb+0x193/0x390 [ 541.349244][T16722] ? netlink_sendmsg+0x650/0xb40 [ 541.349262][T16722] ? skb_put+0x11b/0x210 [ 541.349291][T16722] netlink_sendmsg+0x813/0xb40 [ 541.349323][T16722] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.349348][T16722] ? aa_sock_msg_perm+0xf1/0x1b0 [ 541.349375][T16722] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 541.349397][T16722] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.349416][T16722] ____sys_sendmsg+0xa68/0xad0 [ 541.349440][T16722] ? __might_fault+0xaf/0x130 [ 541.349475][T16722] ? __pfx_____sys_sendmsg+0x10/0x10 [ 541.349512][T16722] ? import_iovec+0x73/0xa0 [ 541.349545][T16722] ___sys_sendmsg+0x2a5/0x360 [ 541.349570][T16722] ? __lock_acquire+0x6b5/0x2cf0 [ 541.349602][T16722] ? __pfx____sys_sendmsg+0x10/0x10 [ 541.349635][T16722] ? kstrtouint+0x6e/0xe0 [ 541.349716][T16722] ? __fget_files+0x2a/0x420 [ 541.349737][T16722] ? __fget_files+0x3a0/0x420 [ 541.349771][T16722] __sys_sendmmsg+0x27c/0x4e0 [ 541.349804][T16722] ? __pfx___sys_sendmmsg+0x10/0x10 [ 541.349828][T16722] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 541.349881][T16722] ? ksys_write+0x242/0x270 [ 541.349912][T16722] ? __pfx_ksys_write+0x10/0x10 [ 541.349949][T16722] __x64_sys_sendmmsg+0xa0/0xc0 [ 541.349978][T16722] do_syscall_64+0xe2/0xf80 [ 541.349999][T16722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.350017][T16722] ? trace_irq_disable+0x37/0x100 [ 541.350036][T16722] ? clear_bhb_loop+0x60/0xb0 [ 541.350060][T16722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.350079][T16722] RIP: 0033:0x7f18bed9aeb9 [ 541.350097][T16722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.350114][T16722] RSP: 002b:00007f18bfca9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 541.350137][T16722] RAX: ffffffffffffffda RBX: 00007f18bf015fa0 RCX: 00007f18bed9aeb9 [ 541.350151][T16722] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 541.350164][T16722] RBP: 00007f18bfca9090 R08: 0000000000000000 R09: 0000000000000000 [ 541.350175][T16722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.350187][T16722] R13: 00007f18bf016038 R14: 00007f18bf015fa0 R15: 00007ffedad516d8 [ 541.350222][T16722] [ 541.722505][T16725] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 541.819704][T16722] tipc: Resetting bearer [ 541.906910][T16610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.920131][T16610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.962853][T16610] team0: Port device team_slave_0 added [ 542.065644][T16610] team0: Port device team_slave_1 added [ 542.129194][T16745] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2950'. [ 542.169045][T11171] veth1_macvtap: left promiscuous mode [ 542.178907][T11171] veth0_macvtap: left promiscuous mode [ 542.188164][T11171] : left promiscuous mode [ 542.205826][T11171] veth0_vlan: left promiscuous mode [ 542.884018][T11171] team0 (unregistering): Port device team_slave_1 removed [ 542.930519][T11171] team0 (unregistering): Port device team_slave_0 removed [ 543.142706][T16159] Bluetooth: hci3: command tx timeout [ 543.160889][T11171] smc: removing net device caif0 with user defined pnetid SYZ2 [ 543.228538][T11171] smc: removing net device team0 with user defined pnetid SYZ2 [ 543.435811][T16610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.444017][T16610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.473216][T16610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.535817][T16610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.544241][T16610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.574369][T16610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.641912][T16754] delete_channel: no stack [ 543.749849][T16773] veth1_macvtap: left promiscuous mode [ 543.779877][T16769] sctp: [Deprecated]: syz.6.2958 (pid 16769) Use of struct sctp_assoc_value in delayed_ack socket option. [ 543.779877][T16769] Use struct sctp_sack_info instead [ 543.865606][T16610] hsr_slave_0: entered promiscuous mode [ 543.877140][T16610] hsr_slave_1: entered promiscuous mode [ 543.925462][T16610] debugfs: 'hsr0' already exists in 'hsr' [ 543.939251][T16610] Cannot create hsr debugfs directory [ 543.955462][T16774] bridge0: entered promiscuous mode [ 543.960711][T16774] bridge0: entered allmulticast mode [ 544.040765][T16784] netlink: 'syz.2.2964': attribute type 21 has an invalid length. [ 544.198901][T16784] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 544.227407][T16784] bond1 (unregistering): Released all slaves [ 544.429200][T16806] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2971'. [ 544.505716][T16810] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2972'. [ 544.667567][T16812] tipc: Resetting bearer [ 544.847674][T16822] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2977'. [ 544.889494][T16610] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.899838][T16824] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2977'. [ 544.911860][T16610] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.953370][T16826] sctp: [Deprecated]: syz.2.2979 (pid 16826) Use of int in max_burst socket option. [ 544.953370][T16826] Use struct sctp_assoc_value instead [ 544.995074][T16610] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.006061][T16610] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.090810][T16610] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.101356][T16610] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.213474][T16610] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.223591][T16159] Bluetooth: hci3: command tx timeout [ 545.229140][T16610] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.695633][T16851] syzkaller0: entered promiscuous mode [ 545.721075][T16851] syzkaller0: entered allmulticast mode [ 545.936645][T16856] netlink: 'syz.2.2989': attribute type 26 has an invalid length. [ 545.971594][T16856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2989'. [ 545.994175][T16610] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 546.022073][T16856] netlink: 'syz.2.2989': attribute type 26 has an invalid length. [ 546.030448][T16610] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 546.043522][T16856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2989'. [ 546.049899][T16610] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 546.075197][T16610] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 546.136966][T16860] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2990'. [ 546.255599][T11171] IPVS: stop unused estimator thread 0... [ 546.344573][T16610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.362945][T16877] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 546.434128][T16884] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2995'. [ 546.440397][T16610] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.486022][T16887] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2995'. [ 546.518725][T11174] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.525958][T11174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.564362][T11174] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.571603][T11174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.666057][T16892] syzkaller1: entered promiscuous mode [ 546.679897][T16892] syzkaller1: entered allmulticast mode [ 547.320228][T16927] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3008'. [ 547.338765][T16929] sctp: [Deprecated]: syz.5.3010 (pid 16929) Use of int in max_burst socket option deprecated. [ 547.338765][T16929] Use struct sctp_assoc_value instead [ 547.435771][T16610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.561838][T16941] netlink: 'syz.0.3009': attribute type 1 has an invalid length. [ 547.750131][T16610] veth0_vlan: entered promiscuous mode [ 547.776869][T16610] veth1_vlan: entered promiscuous mode [ 547.892756][T16610] veth0_macvtap: entered promiscuous mode [ 547.917211][T16610] veth1_macvtap: entered promiscuous mode [ 547.972944][T16610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.016114][T16610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.084953][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.099523][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.152801][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.175578][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.377592][T11172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.390503][T11172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.580325][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.609898][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.252465][ T5148] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 549.266771][ T5148] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 549.275513][ T5148] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 549.283929][ T5148] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 549.297986][ T5148] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 549.349378][T17012] syzkaller0: entered promiscuous mode [ 549.356212][T17012] syzkaller0: entered allmulticast mode [ 549.442371][T17008] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 549.538545][T17014] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 549.549274][ T5895] IPVS: starting estimator thread 0... [ 549.560229][T17014] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 549.641411][T17018] IPVS: using max 24 ests per chain, 57600 per kthread [ 549.729479][T17010] wlan0 speed is unknown, defaulting to 1000 [ 549.759414][T17025] gre0: left promiscuous mode [ 549.766224][T17025] gre0: left allmulticast mode [ 549.785763][T17025] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 549.826838][T17031] netlink: 'syz.1.3034': attribute type 6 has an invalid length. [ 549.977696][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.039640][T17034] __nla_validate_parse: 2 callbacks suppressed [ 550.039661][T17034] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3035'. [ 550.104026][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.220655][T17034] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3035'. [ 550.277192][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.459668][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.564109][T17055] netlink: 'syz.6.3042': attribute type 30 has an invalid length. [ 550.604436][T17050] macsec1: entered promiscuous mode [ 550.655460][T17055] bond2: option arp_missed_max: invalid value (0) [ 550.663492][T17055] bond2: option arp_missed_max: allowed values 1 - 255 [ 550.684498][T17055] bond2 (unregistering): Released all slaves [ 550.748226][T17010] chnl_net:caif_netlink_parms(): no params data found [ 550.792029][T17052] wireguard0: entered promiscuous mode [ 550.797759][T17052] wireguard0: entered allmulticast mode [ 551.108311][T17072] veth0: entered promiscuous mode [ 551.176807][T17070] syzkaller0: entered promiscuous mode [ 551.182742][T17070] syzkaller0: entered allmulticast mode [ 551.197203][T17075] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3046'. [ 551.372177][T17089] Cannot find add_set index 0 as target [ 551.386593][T16159] Bluetooth: hci0: command tx timeout [ 551.630509][T17093] IPVS: set_ctl: invalid protocol: 92 172.30.0.3:20002 [ 552.991221][ T36] team0: left allmulticast mode [ 552.996156][ T36] team_slave_1: left allmulticast mode [ 553.010342][ T36] team0: left promiscuous mode [ 553.020567][ T36] team_slave_1: left promiscuous mode [ 553.028472][ T36] bridge0: port 2(team0) entered disabled state [ 553.047689][ T36] bridge_slave_0: left allmulticast mode [ 553.058519][ T36] bridge_slave_0: left promiscuous mode [ 553.068729][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.114479][ T36] veth0_to_bond: left allmulticast mode [ 553.120086][ T36] veth0_to_bond: left promiscuous mode [ 553.126759][ T36] bridge5: port 1(veth0_to_bond) entered disabled state [ 553.187674][ T36] tipc: Resetting bearer [ 553.471305][T16159] Bluetooth: hci0: command tx timeout [ 553.524926][ T36] tipc: Disabling bearer [ 553.590887][ T36] bond1 (unregistering): (slave gretap1): Releasing active interface [ 553.613243][ T36] bond5 (unregistering): (slave gretap2): Releasing active interface [ 553.636707][ T36] bond9 (unregistering): (slave gretap3): Releasing active interface [ 554.521699][ T36] bond8 (unregistering): (slave bond0): Releasing active interface [ 554.535552][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 554.545173][ T36] bond_slave_0: left allmulticast mode [ 554.554101][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 554.563221][ T36] bond_slave_1: left allmulticast mode [ 554.573981][ T36] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 554.587445][ T36] bridge_slave_1: left allmulticast mode [ 554.594745][ T36] bond0 (unregistering): Released all slaves [ 554.605083][ T36] bond1 (unregistering): Released all slaves [ 554.619057][ T36] bond2 (unregistering): Released all slaves [ 554.730369][ T36] bond3 (unregistering): Released all slaves [ 554.838686][ T36] bond4 (unregistering): Released all slaves [ 554.944969][ T36] bond5 (unregistering): Released all slaves [ 555.055035][ T36] bond6 (unregistering): Released all slaves [ 555.165170][ T36] bond7 (unregistering): Released all slaves [ 555.181615][ T36] bond8 (unregistering): (slave veth7): Releasing active interface [ 555.192804][ T36] bond8 (unregistering): (slave veth9): Releasing active interface [ 555.202760][ T36] bond8 (unregistering): Released all slaves [ 555.218447][ T36] bond9 (unregistering): Released all slaves [ 555.333083][ T36] bond10 (unregistering): Released all slaves [ 555.439184][ T36] bond11 (unregistering): Released all slaves [ 555.543243][ T5148] Bluetooth: hci0: command tx timeout [ 555.554033][ T36] bond12 (unregistering): Released all slaves [ 555.582828][T17010] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.592310][T17010] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.599621][T17010] bridge_slave_0: entered allmulticast mode [ 555.617206][T17010] bridge_slave_0: entered promiscuous mode [ 555.658962][ T5933] infiniband syz1: ib_query_port failed (-19) [ 555.752008][T17010] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.785390][T17010] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.830468][T17010] bridge_slave_1: entered allmulticast mode [ 555.882473][T17010] bridge_slave_1: entered promiscuous mode [ 555.918468][T17122] IPv6: addrconf: prefix option has invalid lifetime [ 555.925324][T17122] IPv6: addrconf: prefix option has invalid lifetime [ 555.994254][T17124] netlink: 'syz.5.3057': attribute type 10 has an invalid length. [ 556.007966][ T36] : left promiscuous mode [ 556.152393][T17124] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 556.171163][ T36] 9: left promiscuous mode [ 556.188398][T17124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 556.211634][T17137] netlink: 'syz.2.3060': attribute type 17 has an invalid length. [ 556.219504][T17137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3060'. [ 556.251392][T17136] netlink: 1044 bytes leftover after parsing attributes in process `syz.2.3060'. [ 556.284023][T17137] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3060'. [ 556.296886][T17010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 556.355134][T17010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.460363][ T36] tipc: Left network mode [ 556.547389][T17151] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3064'. [ 556.574123][T17010] team0: Port device team_slave_0 added [ 556.605220][ T36] IPVS: stopping master sync thread 11230 ... [ 556.609244][T17010] team0: Port device team_slave_1 added [ 556.927305][T17010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 556.991822][T17010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.074889][T17010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.119407][T17180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3072'. [ 557.145299][T17010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.155008][T17182] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3071'. [ 557.160826][T17010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.231234][T17010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.275156][T17180] xfrm1: entered promiscuous mode [ 557.280261][T17180] xfrm1: entered allmulticast mode [ 557.289236][T17177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3070'. [ 557.314221][T17177] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3070'. [ 557.485774][T17200] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.3074'. [ 557.542016][T17200] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 557.621830][ T5148] Bluetooth: hci0: command tx timeout [ 557.629561][T17010] hsr_slave_0: entered promiscuous mode [ 557.665616][T17010] hsr_slave_1: entered promiscuous mode [ 557.704777][T17010] debugfs: 'hsr0' already exists in 'hsr' [ 557.719482][T17010] Cannot create hsr debugfs directory [ 557.734937][T17200] bridge_slave_0: invalid flags given to default FDB implementation [ 557.918559][T17217] IPVS: length: 8 != 1152 [ 557.933681][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.947478][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.974947][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.994620][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 558.075652][ T36] veth0_macvtap: left promiscuous mode [ 558.282858][ T36] pimreg (unregistering): left allmulticast mode [ 558.575755][ T36] team0 (unregistering): Port device team_slave_1 removed [ 559.002892][T17229] batadv_slave_0: entered promiscuous mode [ 559.051394][ T6752] lec:lec_start_xmit: lec0:No lecd attached [ 559.095622][T17234] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3081'. [ 559.124373][T17229] batadv_slave_0: left promiscuous mode [ 559.785399][T17262] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 559.795575][T17262] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 559.956553][T17265] macvlan0: left promiscuous mode [ 560.392911][T17281] bridge0: left promiscuous mode [ 560.438760][ T36] IPVS: stop unused estimator thread 0... [ 560.735223][ T30] audit: type=1107 audit(1770362729.382:4): pid=17294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='@!JVx&K6뱶MՂG/s<{mV8_Z2x7<ě4S;Бgq4 ?oH}X73jͷr)R rejected, failed to enable media [ 598.653014][T17678] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3193'. [ 599.049073][T17690] syzkaller0: entered promiscuous mode [ 599.059780][T17690] syzkaller0: entered allmulticast mode [ 601.609258][T17751] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 601.676905][T17752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3211'. [ 602.011579][T17694] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 602.149929][T17754] xt_CT: You must specify a L4 protocol and not use inversions on it [ 602.233754][T17756] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3215'. [ 602.460757][T17774] : renamed from hsr0 (while UP) [ 602.508530][T17782] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3219'. [ 602.525679][T17785] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3219'. [ 602.875362][T17810] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3223'. [ 603.120294][T17823] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3229'. [ 603.127082][T17826] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3230'. [ 603.149320][T17823] xt_CT: You must specify a L4 protocol and not use inversions on it [ 603.195563][T17829] "syz.0.3231" (17829) uses obsolete ecb(arc4) skcipher [ 603.232431][T17830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3229'. [ 603.310143][T17839] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3232'. [ 603.377046][T17832] netlink: 'syz.5.3232': attribute type 1 has an invalid length. [ 603.405761][T17832] netlink: 'syz.5.3232': attribute type 3 has an invalid length. [ 603.553717][T17850] netlink: 'syz.0.3236': attribute type 29 has an invalid length. [ 603.792508][T17863] __nla_validate_parse: 2 callbacks suppressed [ 603.792532][T17863] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3240'. [ 603.840180][T17870] netlink: 'syz.5.3242': attribute type 4 has an invalid length. [ 604.020543][T17880] netlink: 'syz.2.3246': attribute type 10 has an invalid length. [ 604.079050][T17880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.112564][T17880] team0: Port device bond0 added [ 604.144939][T17888] syzkaller1: entered promiscuous mode [ 604.150470][T17888] syzkaller1: entered allmulticast mode [ 604.187995][T17891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3248'. [ 604.213831][T17891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3248'. [ 604.363774][T17900] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3250'. [ 604.417542][T17909] netlink: 'syz.5.3250': attribute type 12 has an invalid length. [ 604.457912][T17909] bond4: option primary_reselect: invalid value (255) [ 604.470145][T17909] bond4 (unregistering): Released all slaves [ 604.678828][T17919] netlink: 'syz.0.3255': attribute type 10 has an invalid length. [ 604.757172][T17919] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 604.869045][T17935] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3258'. [ 605.021607][T17939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3260'. [ 605.054328][T17939] openvswitch: netlink: Flow actions attr not present in new flow. [ 605.074358][T17937] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 605.261556][T17954] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3263'. [ 605.378919][T17960] sctp: [Deprecated]: syz.0.3265 (pid 17960) Use of int in max_burst socket option. [ 605.378919][T17960] Use struct sctp_assoc_value instead [ 605.415928][T17962] SET target dimension over the limit! [ 605.518282][T17971] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3268'. [ 605.528932][T17972] x_tables: duplicate underflow at hook 2 [ 605.576978][T17971] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3268'. [ 605.587135][T17971] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3268'. [ 605.620237][T17976] Bluetooth: MGMT ver 1.23 [ 606.265342][T18000] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 606.271869][T18000] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 608.478252][T17965] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 608.514988][T17987] netlink: 'syz.2.3272': attribute type 1 has an invalid length. [ 608.819572][T18017] __nla_validate_parse: 2 callbacks suppressed [ 608.819595][T18017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3281'. [ 608.903721][T18018] syzkaller0: create flow: hash 2152681200 index 1 [ 608.956902][T11175] syzkaller0: tun_net_xmit 76 [ 608.967699][T11175] syzkaller0: tun_net_xmit 48 [ 608.981753][T13519] syzkaller0: tun_net_xmit 76 [ 609.098401][T18017] syzkaller0: delete flow: hash 2152681200 index 1 [ 611.367649][T18083] bridge_slave_0: left allmulticast mode [ 611.399318][T18083] bridge_slave_0: left promiscuous mode [ 611.399988][T18085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3301'. [ 611.431577][T18083] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.449919][T18083] bridge_slave_1: left allmulticast mode [ 611.463436][T18083] bridge_slave_1: left promiscuous mode [ 611.477386][T18083] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.672734][T18083] bond0: (slave bond_slave_0): Releasing backup interface [ 611.688965][T18083] bond0: (slave bond_slave_1): Releasing backup interface [ 611.714166][T18083] team0: Port device team_slave_0 removed [ 611.728742][T18083] team0: Port device team_slave_1 removed [ 611.735909][T18083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 611.743874][T18083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.753191][T18083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 611.760610][T18083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 611.770747][T18083] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 611.788194][T18085] bridge_slave_1: left allmulticast mode [ 611.795412][T18085] bridge_slave_1: left promiscuous mode [ 611.804221][T18085] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.819360][T18085] bridge_slave_0: left allmulticast mode [ 611.826872][T18085] bridge_slave_0: left promiscuous mode [ 611.833916][T18085] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.307941][T18082] wlan0 speed is unknown, defaulting to 1000 [ 612.595012][T18122] netlink: 'syz.0.3310': attribute type 4 has an invalid length. [ 612.620307][T18122] netlink: 'syz.0.3310': attribute type 1 has an invalid length. [ 612.659899][T18122] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3310'. [ 613.030646][T18148] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 613.106783][T18156] netlink: 88 bytes leftover after parsing attributes in process `syz.6.3321'. [ 613.152449][T18156] netem: invalid attributes len -24 [ 613.159125][T18156] netem: change failed [ 613.356543][T18175] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3324'. [ 613.456379][ T30] audit: type=1800 audit(1770362782.072:5): pid=18170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3323" name="memory.events" dev="tmpfs" ino=199 res=0 errno=0 [ 613.842427][T18201] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3333'. [ 613.881437][T18200] IPVS: set_ctl: invalid protocol: 43 100.1.1.1:20003 [ 613.899578][T18200] IPVS: set_ctl: invalid protocol: 108 10.1.1.2:20000 [ 614.132838][T18225] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 614.337013][T18236] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3341'. [ 614.354763][T18231] bond2: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 614.369800][T18231] bond2 (unregistering): Released all slaves [ 614.424343][T18236] syzkaller0: entered promiscuous mode [ 614.429869][T18236] syzkaller0: entered allmulticast mode [ 614.770584][T18257] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3349'. [ 614.792149][T18259] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3348'. [ 614.802537][T18256] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3349'. [ 614.998112][T18268] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3352'. [ 615.039906][T18273] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 615.076496][T18273] bond1 (unregistering): Released all slaves [ 615.194958][T18279] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 615.208639][T18284] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3356'. [ 615.225707][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.235461][T18279] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 615.270903][T18287] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3356'. [ 615.346436][T18289] netlink: 'syz.2.3358': attribute type 6 has an invalid length. [ 615.378891][T18289] netlink: 'syz.2.3358': attribute type 6 has an invalid length. [ 615.576292][T18301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3361'. [ 615.680290][T18301] netlink: 'syz.0.3361': attribute type 5 has an invalid length. [ 615.717136][T18301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3361'. [ 615.766214][T18311] netlink: 'syz.6.3365': attribute type 1 has an invalid length. [ 616.100145][T18330] netlink: 'syz.6.3373': attribute type 1 has an invalid length. [ 616.151169][T18330] netlink: 'syz.6.3373': attribute type 1 has an invalid length. [ 616.183299][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.222488][T18333] tc_dump_action: action bad kind [ 616.264111][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.407330][T18349] batadv_slave_0: entered promiscuous mode [ 616.673983][T18348] batadv_slave_0: left promiscuous mode [ 616.726506][T18365] can: request_module (can-proto-5) failed. [ 616.809112][T18368] gretap0: entered promiscuous mode [ 616.824262][T13519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.834646][T18365] 8021q: VLANs not supported on tunl0 [ 617.139827][T18376] vlan1: entered allmulticast mode [ 617.161955][T18376] veth0_vlan: entered allmulticast mode [ 617.303398][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.327349][T18384] syzkaller0: entered promiscuous mode [ 617.341374][T18384] syzkaller0: entered allmulticast mode [ 617.963478][T18428] netlink: 'syz.1.3403': attribute type 13 has an invalid length. [ 618.277150][T18447] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 618.344327][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.371966][T18444] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 618.532135][T18456] netlink: 'syz.6.3410': attribute type 2 has an invalid length. [ 618.835070][T18477] netlink: 'syz.0.3416': attribute type 33 has an invalid length. [ 618.961302][T18477] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 619.007957][T18477] bond2 (unregistering): Released all slaves [ 619.062958][T18486] SET target dimension over the limit! [ 619.090449][T18490] __nla_validate_parse: 8 callbacks suppressed [ 619.090470][T18490] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3415'. [ 619.132229][T18483] syzkaller0: entered promiscuous mode [ 619.137759][T18483] syzkaller0: entered allmulticast mode [ 619.210227][T18491] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 619.229399][T18493] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3424'. [ 619.245276][T18493] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3424'. [ 619.250054][T18497] netlink: 'syz.0.3425': attribute type 12 has an invalid length. [ 619.390833][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.432146][T18503] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3427'. [ 619.587338][T18517] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3428'. [ 619.602904][T18517] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3428'. [ 619.697519][T18517] gretap0: entered promiscuous mode [ 619.730348][T18517] gretap0: left promiscuous mode [ 619.736240][T18527] delete_channel: no stack [ 619.871764][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.318772][T18547] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3438'. [ 620.430709][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.568147][T18554] bond2: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 620.606356][T18554] bond2 (unregistering): Released all slaves [ 620.657287][T18563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3441'. [ 620.668044][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.876502][T18572] validate_nla: 1 callbacks suppressed [ 620.876523][T18572] netlink: 'syz.6.3443': attribute type 1 has an invalid length. [ 620.900546][T18572] netlink: 220 bytes leftover after parsing attributes in process `syz.6.3443'. [ 621.248666][T18577] wlan0 speed is unknown, defaulting to 1000 [ 621.563518][T18615] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3454'. [ 621.611082][T18615] netlink: 'syz.6.3454': attribute type 3 has an invalid length. [ 621.952142][T18636] syzkaller0: entered promiscuous mode [ 621.961310][T18636] syzkaller0: entered allmulticast mode [ 622.469026][T18665] net_ratelimit: 1 callbacks suppressed [ 622.469045][T18665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.504633][T18665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.512823][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.557400][T18665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.601403][ T6752] lec:lec_start_xmit: lec0:No lecd attached [ 622.609587][T18666] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 622.628345][T18665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.826490][T18687] syzkaller1: left promiscuous mode [ 622.855338][T18687] syzkaller1: left allmulticast mode [ 623.054321][ T48] IPVS: starting estimator thread 0... [ 623.141121][T18698] IPVS: using max 27 ests per chain, 64800 per kthread [ 624.245928][T18770] netlink: 'syz.1.3498': attribute type 1 has an invalid length. [ 624.264200][T18770] netlink: 'syz.1.3498': attribute type 1 has an invalid length. [ 624.281916][T18770] netlink: 'syz.1.3498': attribute type 1 has an invalid length. [ 624.306347][T18770] netlink: 'syz.1.3498': attribute type 2 has an invalid length. [ 624.328877][T18770] __nla_validate_parse: 8 callbacks suppressed [ 624.328899][T18770] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3498'. [ 624.927636][T18802] netlink: 'syz.1.3506': attribute type 1 has an invalid length. [ 625.010387][T18802] 8021q: adding VLAN 0 to HW filter on device bond1 [ 625.087703][T18804] bond1: (slave geneve2): making interface the new active one [ 625.105532][T18804] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 625.240831][T18818] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3513'. [ 625.248061][T18820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3514'. [ 625.272208][T18818] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3513'. [ 626.011793][T18838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3520'. [ 626.023369][T18838] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3520'. [ 626.164988][T18838] geneve2: entered promiscuous mode [ 626.170256][T18838] geneve2: entered allmulticast mode [ 626.345525][T18846] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3522'. [ 626.759528][T18873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3529'. [ 626.794672][T18873] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3529'. [ 627.149389][T18895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3536'. [ 627.229893][ T50] tipc: Subscription rejected, illegal request [ 627.545454][T18916] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 627.590056][T18925] netlink: 'syz.2.3547': attribute type 1 has an invalid length. [ 627.624879][T18920] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 627.655618][T18925] bond2: entered promiscuous mode [ 627.661887][T18925] 8021q: adding VLAN 0 to HW filter on device bond2 [ 627.699335][T18931] dvmrp6: entered allmulticast mode [ 627.727924][T18925] bond2: (slave bridge0): making interface the new active one [ 627.737665][T18925] bridge0: entered promiscuous mode [ 627.773758][T18925] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 627.835424][T18938] mac80211_hwsim hwsim36 wlan1: Caught tx_queue_len zero misconfig [ 627.852900][T18938] bridge0: Caught tx_queue_len zero misconfig [ 627.941808][T18945] netlink: 'syz.5.3555': attribute type 10 has an invalid length. [ 628.021090][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5420 ms [ 628.029148][ C1] lec:lec_tx_timeout: lec0 [ 628.034318][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 628.575083][T18976] bond3: ARP target 1.0.0.0 is already present [ 628.585460][T18976] bond3: option arp_ip_target: invalid value (1) [ 628.603468][T18976] bond3 (unregistering): Released all slaves [ 628.669699][T18974] 8021q: adding VLAN 0 to HW filter on device bond2 [ 628.713011][T18988] macvlan2: entered promiscuous mode [ 628.718373][T18988] macvlan2: entered allmulticast mode [ 628.726860][T18988] bond2: entered allmulticast mode [ 628.732623][T18988] bond2: entered promiscuous mode [ 628.738746][T18988] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 628.751599][T18988] team0: Port device macvlan2 added [ 629.288778][T19021] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 629.357389][T19021] bond3 (unregistering): Released all slaves [ 629.383456][T19032] __nla_validate_parse: 9 callbacks suppressed [ 629.383470][T19032] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3578'. [ 629.529942][T19040] netlink: 'syz.5.3580': attribute type 83 has an invalid length. [ 629.544327][T19041] netlink: 'syz.5.3580': attribute type 83 has an invalid length. [ 629.581359][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88804c7d7c00: rx timeout, send abort [ 629.601169][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88804c7d7c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 629.739571][T19047] netlink: 'syz.2.3581': attribute type 5 has an invalid length. [ 630.502863][T19074] netlink: 'syz.0.3588': attribute type 1 has an invalid length. [ 630.607483][T19081] geneve3: entered promiscuous mode [ 630.644174][T19047] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 630.675484][T19047] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 630.735663][T19085] netlink: 'syz.6.3591': attribute type 1 has an invalid length. [ 630.754521][T19047] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 630.760478][T19047] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 630.863050][T19085] 8021q: adding VLAN 0 to HW filter on device bond2 [ 631.004950][ T24] wlan0 speed is unknown, defaulting to 1000 [ 631.037868][ T24] syz0: Port: 1 Link DOWN [ 631.082026][T19103] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3594'. [ 631.268777][T19120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3597'. [ 631.276423][T19047] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 631.295033][T19120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3597'. [ 631.312803][T19047] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 631.416439][T19128] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3599'. [ 631.507777][T19047] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 631.525495][T19047] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 631.549326][T19128] xt_TPROXY: Can be used only with -p tcp or -p udp [ 631.588177][T19135] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3601'. [ 631.677637][T19047] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 631.711036][T19047] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 631.895310][T19047] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 631.925587][T19047] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 632.124712][T19047] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 632.150528][T19047] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 632.312811][T19165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 632.454221][T19175] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3610'. [ 632.534857][T19178] openvswitch: netlink: IP tunnel dst address not specified [ 632.664628][T19189] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3612'. [ 632.722779][T19187] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.3613'. [ 632.808131][T19197] netlink: 'syz.0.3617': attribute type 13 has an invalid length. [ 632.810029][T19199] netlink: 'syz.0.3617': attribute type 2 has an invalid length. [ 632.829206][ T31] INFO: task syz.3.2239:14192 blocked for more than 143 seconds. [ 632.851113][ T31] Not tainted syzkaller #0 [ 632.866364][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 632.881435][ T31] task:syz.3.2239 state:D stack:27104 pid:14192 tgid:14183 ppid:5827 task_flags:0x400040 flags:0x00080002 [ 632.897733][T19198] netlink: 'syz.2.3616': attribute type 11 has an invalid length. [ 632.916111][ T31] Call Trace: [ 632.923925][ T31] [ 632.930407][ T31] __schedule+0x14ea/0x5050 [ 632.940576][ T31] ? __pfx___schedule+0x10/0x10 [ 632.952553][ T31] ? schedule+0x90/0x360 [ 632.962529][ T31] schedule+0x164/0x360 [ 632.970744][ T31] schedule_preempt_disabled+0x13/0x30 [ 632.977000][ T31] __mutex_lock+0x7fe/0x1300 [ 632.982191][ T31] ? __mutex_lock+0x5ac/0x1300 [ 632.987178][ T31] ? nfsd_nl_threads_get_doit+0x1ba/0x700 [ 632.993558][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 632.998712][ T31] ? __nlmsg_put+0xef/0x1b0 [ 633.003952][ T31] ? genlmsg_put+0x137/0x2e0 [ 633.008662][ T31] nfsd_nl_threads_get_doit+0x1ba/0x700 [ 633.014850][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 633.021281][ T31] ? dev_hard_start_xmit+0x78b/0x7f0 [ 633.026778][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 633.032965][ T31] ? __asan_memcpy+0x40/0x70 [ 633.037763][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 633.041582][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 633.044461][ T31] ? __dev_queue_xmit+0x274/0x3850 [ 633.051941][ C1] lec:lec_tx_timeout: lec0 [ 633.065817][ T31] genl_rcv_msg+0x61c/0x7a0 [ 633.070464][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 633.076558][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 633.083100][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 633.088789][ T31] netlink_rcv_skb+0x232/0x4b0 [ 633.094112][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 633.099364][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 633.105305][ T31] ? genl_rcv+0x19/0x40 [ 633.109696][ T31] ? down_read+0x272/0x2e0 [ 633.115376][ T31] ? genl_rcv+0xd/0x40 [ 633.119601][ T31] genl_rcv+0x28/0x40 [ 633.124198][ T31] netlink_unicast+0x80f/0x9b0 [ 633.129088][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 633.135000][ T31] ? __alloc_skb+0x193/0x390 [ 633.141858][ T31] ? netlink_sendmsg+0x650/0xb40 [ 633.146996][ T31] ? skb_put+0x11b/0x210 [ 633.151812][ T31] netlink_sendmsg+0x813/0xb40 [ 633.156695][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 633.162578][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 633.167649][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 633.173785][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 633.179193][ T31] ____sys_sendmsg+0xa68/0xad0 [ 633.185186][ T31] ? __might_fault+0xaf/0x130 [ 633.189989][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 633.195937][ T31] ? import_iovec+0x73/0xa0 [ 633.200649][ T31] ___sys_sendmsg+0x2a5/0x360 [ 633.206013][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 633.211355][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 633.216767][ T31] ? futex_wait+0x29a/0x380 [ 633.223050][ T31] ? __fget_files+0x2a/0x420 [ 633.227938][ T31] ? __fget_files+0x3a0/0x420 [ 633.233175][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 633.238348][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 633.244396][ T31] ? rcu_is_watching+0x15/0xb0 [ 633.249393][ T31] do_syscall_64+0xe2/0xf80 [ 633.254445][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.260710][ T31] ? trace_irq_disable+0x37/0x100 [ 633.266326][ T31] ? clear_bhb_loop+0x60/0xb0 [ 633.271447][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.277451][ T31] RIP: 0033:0x7ff5c939aeb9 [ 633.284424][ T31] RSP: 002b:00007ff5ca317028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 633.293809][ T31] RAX: ffffffffffffffda RBX: 00007ff5c9616090 RCX: 00007ff5c939aeb9 [ 633.302847][ T31] RDX: 0000000024048000 RSI: 0000200000000000 RDI: 0000000000000008 [ 633.311239][ T31] RBP: 00007ff5c9408c1f R08: 0000000000000000 R09: 0000000000000000 [ 633.319374][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.327991][ T31] R13: 00007ff5c9616128 R14: 00007ff5c9616090 R15: 00007ffe73d9ced8 [ 633.339287][ T31] [ 633.350818][ T31] [ 633.350818][ T31] Showing all locks held in the system: [ 633.361468][ T31] 1 lock held by khungtaskd/31: [ 633.361649][T19197] veth0_macvtap: left promiscuous mode [ 633.366342][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 633.389291][ T31] 4 locks held by kworker/1:1/48: [ 633.403817][ T31] #0: ffff8880b873a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 633.415168][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 633.424814][ T31] #2: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x23c0 [ 633.435205][ T31] #3: ffffffff9a2a6348 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x83/0x580 [ 633.447098][ T31] 2 locks held by getty/5585: [ 633.452233][ T31] #0: ffff88803038b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 633.479472][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 633.509443][ T31] 2 locks held by syz.4.1778/12563: [ 633.524288][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 633.547715][ T31] #1: ffffffff8e8793e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 633.560975][ T31] 2 locks held by syz.3.2239/14192: [ 633.566353][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 633.575374][ T31] #1: ffffffff8e8793e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1ba/0x700 [ 633.586057][ T31] 1 lock held by syz.2.3616/19192: [ 633.591730][ T31] #0: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 633.601304][ T31] 2 locks held by syz.2.3616/19198: [ 633.606677][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 633.615890][ T31] #1: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930 [ 633.626645][ T31] 2 locks held by syz.0.3617/19197: [ 633.632339][ T31] #0: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 633.642055][ T31] #1: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 633.653506][ T31] 3 locks held by dhcpcd-run-hook/19221: [ 633.659361][ T31] [ 633.662346][T19197] macvtap0: entered allmulticast mode [ 633.678014][ T31] ============================================= [ 633.678014][ T31] [ 633.688585][T19197] macvtap0: refused to change device tx_queue_len [ 633.704360][ T31] NMI backtrace for cpu 0 [ 633.704380][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 633.704402][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 633.704413][ T31] Call Trace: [ 633.704421][ T31] [ 633.704430][ T31] dump_stack_lvl+0xe8/0x150 [ 633.704462][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 633.704489][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 633.704521][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 633.704551][ T31] sys_info+0x135/0x170 [ 633.704573][ T31] watchdog+0xf90/0xfe0 [ 633.704600][ T31] ? watchdog+0x209/0xfe0 [ 633.704637][ T31] kthread+0x726/0x8b0 [ 633.704663][ T31] ? __pfx_watchdog+0x10/0x10 [ 633.704682][ T31] ? __pfx_kthread+0x10/0x10 [ 633.704707][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 633.704724][ T31] ? __pfx_kthread+0x10/0x10 [ 633.704748][ T31] ret_from_fork+0x51b/0xa40 [ 633.704769][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 633.704786][ T31] ? __switch_to+0xc82/0x1410 [ 633.704816][ T31] ? __pfx_kthread+0x10/0x10 [ 633.704840][ T31] ret_from_fork_asm+0x1a/0x30 [ 633.704882][ T31] [ 633.704890][ T31] Sending NMI from CPU 0 to CPUs 1: [ 633.826225][ C1] NMI backtrace for cpu 1 [ 633.826245][ C1] CPU: 1 UID: 0 PID: 19197 Comm: syz.0.3617 Not tainted syzkaller #0 PREEMPT(full) [ 633.826263][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 633.826273][ C1] RIP: 0010:kasan_check_range+0x97/0x2c0 [ 633.826297][ C1] Code: 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 3d 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 <0f> 85 9e 01 00 00 49 ff c3 48 ff c3 75 ee e9 1d 01 00 00 44 89 dd [ 633.826310][ C1] RSP: 0000:ffffc900030274f0 EFLAGS: 00000246 [ 633.826326][ C1] RAX: ffffffff82239b01 RBX: ffffffffffffffff RCX: ffffffff82239be3 [ 633.826338][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea0000fb0f80 [ 633.826349][ C1] RBP: ffffc900030277e8 R08: ffffea0000fb0f87 R09: 1ffffd40001f61f0 [ 633.826360][ C1] R10: dffffc0000000000 R11: fffff940001f61f0 R12: 0000000000000001 [ 633.826371][ C1] R13: 1ffffd40001f61f1 R14: fffff940001f61f1 R15: 1ffffd40001f61f0 [ 633.826382][ C1] FS: 0000000000000000(0000) GS:ffff8881257f5000(0000) knlGS:0000000000000000 [ 633.826394][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 633.826405][ C1] CR2: 00007f1ce9b09440 CR3: 0000000027296000 CR4: 00000000003526f0 [ 633.826422][ C1] Call Trace: [ 633.826429][ C1] [ 633.826438][ C1] free_swap_cache+0x63/0x300 [ 633.826460][ C1] free_pages_and_swap_cache+0x1de/0x5b0 [ 633.826484][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 633.826516][ C1] ? __virt_addr_valid+0x1c8/0x5b0 [ 633.826546][ C1] tlb_flush_mmu+0x6d3/0xa30 [ 633.826563][ C1] ? __pfx_down_write+0x10/0x10 [ 633.826583][ C1] tlb_finish_mmu+0xf9/0x230 [ 633.826601][ C1] exit_mmap+0x451/0xb30 [ 633.826614][ C1] ? uprobe_clear_state+0x20f/0x290 [ 633.826640][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 633.826652][ C1] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 633.826675][ C1] ? __pfx_exit_aio+0x10/0x10 [ 633.826698][ C1] ? uprobe_clear_state+0x27c/0x290 [ 633.826716][ C1] __mmput+0x118/0x430 [ 633.826738][ C1] exit_mm+0x168/0x220 [ 633.826758][ C1] do_exit+0x62e/0x2310 [ 633.826779][ C1] ? __pfx_do_exit+0x10/0x10 [ 633.826798][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 633.826819][ C1] do_group_exit+0x21b/0x2d0 [ 633.826837][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 633.826852][ C1] get_signal+0x1284/0x1330 [ 633.826882][ C1] arch_do_signal_or_restart+0xbc/0x830 [ 633.826904][ C1] ? __x64_sys_sendmsg+0x26f/0x2a0 [ 633.826924][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 633.826953][ C1] exit_to_user_mode_loop+0x86/0x480 [ 633.826973][ C1] ? rcu_is_watching+0x15/0xb0 [ 633.826990][ C1] do_syscall_64+0x2b7/0xf80 [ 633.827005][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.827020][ C1] ? trace_irq_disable+0x37/0x100 [ 633.827035][ C1] ? clear_bhb_loop+0x60/0xb0 [ 633.827052][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.827066][ C1] RIP: 0033:0x7fe0db59aeb9 [ 633.827080][ C1] Code: Unable to access opcode bytes at 0x7fe0db59ae8f. [ 633.827088][ C1] RSP: 002b:00007fe0dc4b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 633.827104][ C1] RAX: 000000000000002e RBX: 00007fe0db815fa0 RCX: 00007fe0db59aeb9 [ 633.827115][ C1] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 633.827125][ C1] RBP: 00007fe0db608c1f R08: 0000000000000000 R09: 0000000000000000 [ 633.827135][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.827144][ C1] R13: 00007fe0db816038 R14: 00007fe0db815fa0 R15: 00007ffd4065fd18 [ 633.827163][ C1] [ 634.177660][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 634.184554][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 634.193675][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 634.203814][ T31] Call Trace: [ 634.207090][ T31] [ 634.210013][ T31] vpanic+0x1e0/0x670 [ 634.214005][ T31] panic+0xc5/0xd0 [ 634.217762][ T31] ? __pfx_panic+0x10/0x10 [ 634.222193][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 634.227607][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 634.233766][ T31] watchdog+0xfda/0xfe0 [ 634.237934][ T31] ? watchdog+0x209/0xfe0 [ 634.242261][ T31] kthread+0x726/0x8b0 [ 634.246327][ T31] ? __pfx_watchdog+0x10/0x10 [ 634.251014][ T31] ? __pfx_kthread+0x10/0x10 [ 634.255644][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 634.260852][ T31] ? __pfx_kthread+0x10/0x10 [ 634.265448][ T31] ret_from_fork+0x51b/0xa40 [ 634.270038][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 634.275140][ T31] ? __switch_to+0xc82/0x1410 [ 634.279834][ T31] ? __pfx_kthread+0x10/0x10 [ 634.284427][ T31] ret_from_fork_asm+0x1a/0x30 [ 634.289210][ T31] [ 634.292375][ T31] Kernel Offset: disabled [ 634.296697][ T31] Rebooting in 86400 seconds..