last executing test programs: 2m12.654756847s ago: executing program 0 (id=6062): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pread64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc) r1 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES64=r1, @ANYBLOB="6c8fef80b9cd23fd16a8638217ef95e19f54ec3b1cff4c152c137ff6d3d1fb25e4a980da7ada7b219c72b648096ff31e118a2ce12eebf86f8da6d6e260974a9fadd8aa992a2ee5cc7fdf2c96dc08bb44d682a843e82709c0f4ce8f869b8c56147213664c1a80822d1f04d355fa5e21cd048b83bd4339e5d7b52d64b561ce0a617174a7", @ANYRESHEX=r1, @ANYRES8=r0], 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m12.186495112s ago: executing program 0 (id=6065): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket(0x10, 0x803, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async, rerun: 32) pipe(&(0x7f0000000040)={0xffffffffffffffff}) (rerun: 32) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r1, &(0x7f0000000000), &(0x7f0000000600)=@udp=r2, 0x2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5}, 0x14) (async) syz_emit_ethernet(0x56, &(0x7f0000000300)={@local, @empty, @void, {@canfd={0xd, {{0x1, 0x1, 0x1}, 0x3b, 0x1, 0x0, 0x0, "4d0add85c3eed996f77413be280cc965c5ef172b8ffeffa8f95e4b6c62af7d3ced909fe31139355352048d4328792c2a0b422a0ee1fc8ed1ff2bfd537a99fdb3"}}}}, 0x0) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00', 0x0, 0x6f92971662672db3}, &(0x7f0000000100)=0x20) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000008e4245e02438190d04909e9136be727c3c6cf4b07883a094b2e0f335c334b188a17cc0826782d7151662074c1b142067ba4090c1db1b7c9a9a1c21f3da4cfc9228e4a8fb5b6e1c2a2d70ec146d4290db268afe12312a649033f24fda26820fc14ff21a0d8fcbb9f727a9b646d1a519302068ab2feca64780818d615ce989f1a80625ea48592a341056fafa0c6e80dce8b19ea4f38ceb3c980d1b0be605cf55b54cb322d467d7e9d0ee4223df5c40542a7da478726a5a914", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xba6}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4df}, {0x56}}], {{0x4, 0x1, 0x3, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m11.388756752s ago: executing program 0 (id=6070): r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000002080)={@remote, 0x0}, &(0x7f00000020c0)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001100)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="44000280400001002400010071756575655f6964000000000000000000000000000000000000400000000000050003000300000008000400fdffffff08000600", @ANYRES32=r6], 0x60}}, 0x48004) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002180)={'ip6tnl0\x00', &(0x7f0000002100)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0xa4, 0x2, 0x13, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x40, 0x80000000, 0xffffee67}}) sendmmsg$inet(r0, &(0x7f00000024c0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000340)="f2fa4464f2832dad1b1ce40aff1564f9ff1dab36e09a63495d134ead3e11aff47c31fc2dbef6d3689b4d7301f33331a755bb77b4f0179d2253f432b8ee980102f463bddf19c86dae3773f7908a624e3daf10c6540a4d94c889717df2978e5d45f2d00c567ef0a5a960bdeeb144", 0x6d}, {&(0x7f00000003c0)="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", 0xfd}, {&(0x7f00000004c0)="9bc8725c4d718fb448cf640b6578c0eacb7a2b39bdf47c53f1047978ee1e63a6a2134298065e3b590d90e8e243c1d5dd6c50a5db4a251eced9ccf26d305d8c23dfaceaaecab61e3f6efdb360286aa3bdc0a6c4ae2b4e2c3e745adc78d5eaeb20e13bd84070f88729ca11e1a70bd28c6b4a5faf7c8de1bd63f45fde748e54518e9f75f15a04e862afa119970bdb379e1d12b59ceeb3ce97e35fb38cc606d3265566042db3c68a49", 0xa7}, {&(0x7f0000000580)="8ca2f47d424c3871aa3142574dad0c94db18391d028bdea17ae1ea713edf967cca9e6d017273893f84dbe170ca7d68c1356de71c7c8512abf776a6a28ec4b3d847c94140cf7798fcfe5c9f675a9debf07c933602b6d58f6614235be7a8d11ebaea4ece08867cd897f6315320da2b02bbd1583e971f16a6422f1b515b16d04823bc6710f021570a60f35c61740c73cd0520734491ff84ed32a4b028deeea84056bf89fc8da37ff4ec03699e70607efc5daef7367a67fb679d68f0a0efaa22e1b93739fda770ae2de69565e9c28306967a41b34bae828d1c202e2536389cf799041a5451f331343b900ed8a4fb5f9a2fced7a1", 0xf2}, {&(0x7f0000000680)="cae55a398673aa39dadeecf9b414d63b316fa22d9a25d415e472287150b1bf3dc5ef24bbcad8bb1c3bddb1793f4017a9896e31e4a289432c72262772ba1a3e5713a1ab1237e3f3fcba071d971b781b", 0x4f}], 0x5, &(0x7f0000000780)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x4f, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x3a}, 0x92}, {@private=0xa010102, 0x400}, {@rand_addr=0x64010102, 0xfeda}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0xbc, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0xbc, 0x3, 0x2, [{@remote}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}]}, @rr={0x7, 0x7, 0xc9, [@empty]}, @cipso={0x86, 0x17, 0x0, [{0x0, 0x4, "146f"}, {0x5, 0xd, "5a322557614e13c1707f9c"}]}, @noop, @cipso={0x86, 0x4a, 0xffffffffffffffff, [{0x7, 0x4, "fb79"}, {0x2, 0xc, "1710e1263ed98fc23ace"}, {0x7, 0x10, "1070aa0865d5a0e9ae34ba65cf9e"}, {0x1, 0x7, "93adfde0f6"}, {0x2, 0x2}, {0x6, 0x6, "119abb25"}, {0x1, 0x11, "8be98aebf3ce8bbd324df2b85b69c8"}, {0x0, 0x4, "6d94"}]}, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0x1, [{@rand_addr=0x64010100, 0x5}, {@local, 0x9}, {@remote, 0x2}, {@rand_addr=0x64010101, 0x1}, {@loopback, 0x8000}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x40}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0xad, 0x3, 0xc, [{@multicast1, 0x2}, {@rand_addr=0x64010102, 0x7}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x1}]}, @timestamp_addr={0x44, 0xc, 0x5e, 0x1, 0x9, [{@remote, 0x6}]}, @timestamp_addr={0x44, 0x14, 0x72, 0x1, 0xd, [{@remote, 0x137d}, {@local, 0x366}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0xf4, 0x0, 0x7, {[@lsrr={0x83, 0x2b, 0xca, [@dev={0xac, 0x14, 0x14, 0x1d}, @empty, @rand_addr=0x64010102, @remote, @local, @broadcast, @remote, @multicast2, @loopback, @multicast2]}, @end, @timestamp_addr={0x44, 0x54, 0x92, 0x1, 0x9, [{@empty, 0x6}, {@multicast1, 0x4}, {@remote, 0x2}, {@loopback}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@remote, 0x5}, {@loopback, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@rand_addr=0x64010101, 0x4}, {@local, 0x9}]}, @timestamp={0x44, 0x10, 0x13, 0x0, 0x0, [0xcd6, 0x6, 0x5]}, @lsrr={0x83, 0x17, 0xa8, [@loopback, @empty, @rand_addr=0x64010102, @remote, @private=0xa010101]}, @lsrr={0x83, 0xf, 0x66, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @private=0xa010102]}, @cipso={0x86, 0x16, 0x2, [{0x5, 0x10, "a078ca0714c333b45e9b35fe8703"}]}, @timestamp={0x44, 0x18, 0x5e, 0x0, 0x3, [0x4, 0x5, 0x3, 0x992, 0x8]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}], 0x2b0}}, {{&(0x7f0000000a40)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000001fc0)=[{&(0x7f0000000a80)="dfa622e285fe80c6971be82499914bc4c5226f95839f71f07da74913b7bc7c3bb693a80ba3cc0f2c87bd504488ffc25513d5a70718e6c7f21eb81e06cc626bf06052f3ebcc679aad59ed8b6fad36e6f86a473d28be8525c2412d8345f2", 0x5d}, {&(0x7f0000000b00)="1c4c22ab42f385b6b17e9ac9e020ebbcc2c43400d06e7ce49aeef31e094ef7e472972a11253e524298bc0edb9475e3e4136e78f184dd941f7a255efe56541dab5ba707818742390cce990cd5eadcea4d3808861593fcea02e5da58398d587bc9d359301bf89197999e2e76d7558ac853824a6e76c6435f1dbda2f0c1bd576e26e5ca289a9e0b75384484f3e1411b3408aaaf4e7dff64bb3c2d49a7b335c1bcd5e21a6be40ce1a61f6697fdb0523b08db6beb1bc890ad7f7cb423dbcce6dca7c47e1e95246263b04289673d000657d3f0e030b52a7ec7244829cf8ad459f6d717b21fd28c96f530b83455e466e132dddf9caf00cc8675", 0xf6}, {&(0x7f0000000c00)="2355f76211adf5a5904a40d68ae63b76d588bb4d0d4207c264f576701a74cd4369944ed9571cb082a39e41380052676bbd8c567d49c63967b45a2cd632ae91984d0475238de90eb5f34b5f839a20e2ad6c48f93d0f46e1a96748b35ba8d5a60bdc53252d15f96683d94d0b078ca30a", 0x6f}, {&(0x7f0000000c80)="583fb970a82ba7e6a867be52f83ae5de4ecc9b2bfd127cdedbd43d3e8a53ccf113583195993e57089283e6aa06a60285caf8e1212aee70d3e8750b0ee6071cc42658b062349fe92f2e17c0404154651f01169a8df984329924fab0be3786e862c65472b54b1629eb85063827052c07b3fb752812ee1ee7dacad5028766db0c666a6f8b61e4ac579317c10002a051c4ee78c22c90bd85bf9185cb063c54355848ef88add672171526cddf477b63e3c0e93f77", 0xb2}, {&(0x7f0000000d40)="9b6a7099437f46fc8b94ae1c4e9bac30862aabb62800f3711f8ac358b9e83a268c5ba0279470df077f23bcb2ac0a855455f31b0ae4a85d621030b23b10a006622ecc138ba6e15f8625a5a5334518d1bc2bb8da1e7984703ef95d64bca7379de33f56b90be6b901ebb448c073c4b0803e6c8b6e63b8695cb9b0b2ca476876ddf04146d98fd5bdf2799fb3d770a6e22f5932758566e5600df3c16055517fd37a358ecf0527bfaf5ade70ca3c758bdeed1043f2a95f6859ce7cda76aa201dc3989b153ec48a917c716b8920e8f416aa31bd9e6c64d92e913fb5af82c09c2c2c6043ff173ba0f9672069374f7440b3ca07fca8a08822324b83f077", 0xf9}, {&(0x7f0000000e40)="cb30715490ad3a88318f8a04cb20c0ef974ab929295094ee6068c770cb1568071326b35f4f58b741ac59b827c704", 0x2e}, {&(0x7f0000000e80)="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", 0x1000}, {&(0x7f0000001e80)="054b31c958b43f17d1eb5e6590eb97b727e312f9b3959f65ca4e268643afe3eba90fba", 0x23}, {&(0x7f0000001ec0)="76bfb3147eb4855cffc46c5dc7ac26e33d2f5f5e8f49b870a2edf567875c5562a851a8ca769f8d502c6649ed3678be", 0x2f}, {&(0x7f0000001f00)="bde02337103c9d5eee14db643fa4b50adfca07789e6c4585707097c44a44e4a61e03cb655b836bd7131e772713d327adfb31fd7b14c37f3d7e874887719f197db6ae5429cc1369678aecb01f5b391d17c8b9dddf77c60e0289bfff27f91f243fa4bbbf1a03858eacef0ac0657424c9af9996f4ad1cc9d651358df12bd5de3d4638f82fcaea15", 0x86}], 0xa, &(0x7f00000021c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @rand_addr=0x64010102, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xe}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @private=0xa010102, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x50000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x29}, @dev={0xac, 0x14, 0x14, 0x16}}}}, @ip_retopts={{0xcc, 0x0, 0x7, {[@noop, @end, @noop, @timestamp_prespec={0x44, 0x44, 0x62, 0x3, 0x7, [{@remote, 0xf}, {@loopback, 0x2}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x6}, {@local, 0xfffffffa}, {@remote, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@multicast2, 0x4}, {@multicast1, 0x5}]}, @timestamp_addr={0x44, 0x34, 0x8b, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x2a}, 0x10001}, {@local, 0x3ff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0xffffff81}, {@local, 0x764}, {@loopback, 0x5}, {@local, 0x8}]}, @generic={0x89, 0xe, "08fbb00db18cb42a49a76ea6"}, @rr={0x7, 0x7, 0x5e, [@multicast2]}, @noop, @lsrr={0x83, 0x2b, 0x6c, [@loopback, @multicast2, @multicast1, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0xd}, @dev={0xac, 0x14, 0x14, 0x28}, @rand_addr=0x64010102, @rand_addr=0x64010100, @loopback, @multicast2]}]}}}], 0x1a8}}, {{&(0x7f0000002380)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000002480)=[{&(0x7f00000023c0)="a5f586e2808af5781280ad3ad49542a3dfc6cbc3874b5859282b4d3b5fe9ac5b9977ed8a1666427b05c41a8067f7a02384bfd2300b3f61efcac2d6d40a050e6908e575ae11c33d10dade18e0490f6ac1269b34112dcbf292f869983556dd52d783d0dc1b65d97d009a3c", 0x6a}, {&(0x7f0000002440)="c9ad9561fce6de6d0255948f6be7eddd6ccf54ca0f30d8b8307b718858a0ff56ec1d4d61936f68d107d14345abf96edab8c147be77f846a1", 0x38}], 0x2}}], 0x3, 0x40) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)={0x114, 0x2a, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x102, 0xf2, 0x0, 0x1, [@nested={0x10, 0xa6, 0x0, 0x1, [@nested={0x4, 0xfb}, @typed={0x8, 0xb9, 0x0, 0x0, @u32=0xb2}]}, @typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2m10.625073588s ago: executing program 0 (id=6073): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000003180)={&(0x7f0000003140)={0x24, r3, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x25dfdbfe, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x8}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c049) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000000)={r8}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000001c0)={r8, 0x6, 0x3a, "b0eca8fdde5bb38f2dfddf5bdd8e92e42ecec6a43a22b13e36b7384870a982c5312a226807b3b0b17d7a9e0c34e38efbca09227f9b47f38ef63d"}, 0x42) r9 = socket(0x2b, 0x80801, 0x1) listen(r9, 0x7) setsockopt$inet6_int(r9, 0x29, 0x3, &(0x7f0000000140)=0xfff, 0x4) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008894) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, &(0x7f0000000440)={'syztnl2\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x700, 0x8, 0x0, 0x4, {{0x18, 0x4, 0x3, 0x3c, 0x60, 0x64, 0x0, 0xe, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x24, 0xa7, 0x1, 0x4, [{@remote, 0x2}, {@local, 0xffff8001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@remote, 0x3ff}]}, @generic={0x89, 0x8, "8a8c686cbe76"}, @lsrr={0x83, 0x7, 0x3c, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x17, 0xa9, [@dev={0xac, 0x14, 0x14, 0x3c}, @empty, @multicast2, @multicast1, @broadcast]}]}}}}}) sendmsg$nl_route(r10, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@ipv6_getaddrlabel={0x30, 0x4a, 0x200, 0x70bd28, 0x25dfdbfd, {0xa, 0x0, 0x37, 0x0, r11, 0x800}, [@IFAL_ADDRESS={0x14, 0x1, @private1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x4008091) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xf, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2m9.782887519s ago: executing program 0 (id=6078): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) syz_emit_ethernet(0x7a, &(0x7f0000000100)={@multicast, @remote, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x40, 0x3a, 0x0, @private0, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x0, '\x00', {0xd, 0x6, '\x00', 0xf4e, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x15}, @mcast1, [@fragment={0x3a, 0x0, 0xc, 0x0, 0x0, 0x1, 0x68}], '\r\x00\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) (async) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e) (async) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x19, &(0x7f0000000ec0)=r4, 0x4) write$cgroup_type(r4, &(0x7f0000000080), 0x9) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0xfffffffffffffe2f, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x0, 0x3, 'syz2\x00'}]}], {0x14}}, 0x60}, 0x1, 0x0, 0x0, 0x20044841}, 0x802) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0xfffffffffffffe2f, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x0, 0x3, 'syz2\x00'}]}], {0x14}}, 0x60}, 0x1, 0x0, 0x0, 0x20044841}, 0x802) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x1010, r0, 0x20d04000) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000140001ec4a2cec481e43a50001"], 0x28}}, 0x4000000) 2m9.258733381s ago: executing program 0 (id=6081): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f00000000c0)=0xfffffffe, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b000000000000dc2959981ce8ea3b025c2cd7e825f843edd6ddbc1168df0f849da84d565bf85d5c804e6251d068545e39b9862d422e670aafdeede329172c0900"/75, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000003009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) sendmmsg$inet(r0, &(0x7f0000000fc0)=[{{&(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001300)=[{&(0x7f0000002b00)='1', 0x1}], 0x1}}], 0x1, 0x48c4) sendmmsg$inet_sctp(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=@in6={0xa, 0xa, 0x10, @dev={0xfe, 0x80, '\x00', 0x41}, 0x9}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, &(0x7f0000000300)=[@dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x18, 0x4000}], 0x1, 0x20000840) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x8, 0x6, 0xc075, @vifc_lcl_addr=@broadcast, @broadcast}, 0x10) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001f40)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'vxcan1\x00', {0xff}, {0xff}}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x95, 0x4}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x18}, {0x1}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x7, 0x81, 0x2}}}, {{@uncond, 0x0, 0x268, 0x290, 0x0, {}, [@common=@inet=@iprange={{0x68}, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4=@rand_addr=0x64010102, @ipv4=@loopback, 0x31}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0xffffff23, 0x6, 0xfffff7e7}}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x556) 2m4.497809031s ago: executing program 1 (id=6104): r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) sendto$inet(r0, 0x0, 0x0, 0x404c0c6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) (async) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x408001, 0x0) 2m4.160325685s ago: executing program 1 (id=6107): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async, rerun: 32) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async, rerun: 32) sendto$inet(r0, &(0x7f00000002c0)='J', 0x1, 0x4000, 0x0, 0x0) (async) sendmmsg(r0, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="89f3", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000001800)="a9", 0x1}], 0x1}}], 0x2, 0x4000045) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) (async, rerun: 32) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) (async, rerun: 32) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x271d, 0x0, &(0x7f0000000040)) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x40, 0x2, 0x1}, 0x10) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r2, 0x1c5a7adcb1c518b3, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xffffff4e, 0x803, 0x2}}}}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40002) 2m3.622820847s ago: executing program 1 (id=6111): r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000100)=0x2, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000140)={0x0, 'netdevsim0\x00', {0x4}, 0x520f}) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x28) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000240)={r5, 0x35, 0x31, "4e921af42d61bf72fbfb5ce2473f0670a174f70c6b4812d8565b2694ad29b028128714704964333c67e120f53f98602692"}, 0x39) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000280)={{0x4, 0x4}, 0x100, './file0\x00'}) pread64(r2, &(0x7f00000003c0)=""/119, 0x77, 0x6) setsockopt$MRT_DONE(r3, 0x0, 0xc9, 0x0, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000440)=0x8) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x810, r3, 0x1fb48000) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r3) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)={0x254, r7, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7b1, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x3, @remote, 0xab7}}}}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x13f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000000}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x844}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x20000041}, 0x4008082) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000800)={r6, 0xd2, "e41d8093e1bc029f2b179e2db75127c9e23b6946899defe6be3613b5211de73cc5fb1787953124d7c61631ea3e1f9915d50340e23c4ecfbd412bca1325177153a4368f6de895c86c906d0206d01fffea0495776531b44b78eeba2345585184b908dbec3ece3bcaba98a47c4261e6185bc0268c98e5f228c3dd44ff3b1f5236e7c43a4aac7353c47e9d6195e298e80851fb8728ff84b4c19bebed36b536803fc631bf816cf9955d3777a1cc46db88fbb261e282b7a031f7b9a750086d313c0c7e5f2f15f6e84c009e74552ce0687f7f71398a"}, &(0x7f0000000900)=0xda) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000940)=0x2e7e, 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000980), &(0x7f00000009c0)=0x4) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000a00)={{0x3d63}, 0x100, './file0\x00'}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000b40)={r4, 0xe}, &(0x7f0000000b80)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000bc0)={r9, 0xa}, &(0x7f0000000c00)=0xc) sendmsg$nl_route(r3, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)=@ipv6_newrule={0x44, 0x20, 0x400, 0x70bd2d, 0x25dfdbff, {0xa, 0x80, 0x20, 0xf3, 0x81, 0x0, 0x0, 0x7, 0x4}, [@FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @FRA_SRC={0x14, 0x2, @private1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f0000000d80)={{r3}, "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"}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000001d80)={r5, 0xff}, &(0x7f0000001dc0)=0x8) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001e00)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f0000001e40)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, &(0x7f0000001e80)={{0xa, 0x4e23, 0x8, @loopback, 0x8}, {0xa, 0x4e23, 0x0, @mcast1, 0x2}, 0x1, {[0x3, 0x4, 0x788, 0x80000000, 0x3, 0x5857, 0x2446, 0x8001]}}, 0x5c) 2m2.73036536s ago: executing program 4 (id=6113): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c0009000900"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x184, r3, 0x300, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x80000001}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x30}, {0x6, 0x11, 0x101}, {0x8, 0x15, 0xe9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x453}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6}, {0x8, 0x15, 0x7ff}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x11, 0x343}, {0x8, 0x15, 0x381}}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000801}, 0x4008000) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036677265000030000280140007002001000000000000000000000000000014000600fc020000000000000000000000000000040012000800280070cf00000c0019800500060014000000080004"], 0x8c}}, 0x0) 2m2.314523841s ago: executing program 1 (id=6115): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6(0xa, 0x3, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) recvmmsg(r3, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x430, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x360, 0xffffffff, 0xffffffff, 0x360, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @empty, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x228, 0x270, 0x0, {}, [@common=@inet=@length={{0x28}, {0x101, 0x556}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x490) r4 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 2m2.314037394s ago: executing program 4 (id=6116): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0x40, 0x7, 0x10, @loopback, @loopback, 0x700, 0x20, 0x3, 0x4}}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000340)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@private=0xa010100}]}, 0x1c}}, 0x0) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001304000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x11, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRES64=r0, @ANYRESHEX=r0], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) 2m1.888667755s ago: executing program 2 (id=6118): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000002c0)={0xe0, 0x11, 0x509, 0x0, 0x0, "", [@generic="113c2d9b38402aff6ec2f31166d97833f0f8ac30073eff5aaa90ef4e67d4d71828ded4e460d643d5fe600b15cafc4e6367740fd939728fe10c222557a0e48cc54ad5fdfc9d96eab83adb23e6ea0e30003b415709fe9e9350a9b902a2fb292a57b89faa24ff367c2ce45b80daa96489871ba8845ef4d57736723c2ec516cbbcde6afb99d265f81bc4e9", @generic="1847a803d02973685ab61f218a66b934b7160571e984e5f5d6ad7eff4305326d0affb35c79b457adbe3f0bf08fc949402f059090cf6bf0007718a6968a12e721a9f1fa73"]}, 0xe0}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000088}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x17, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x73}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x40}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) socket$nl_crypto(0x10, 0x3, 0x15) (async) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000002c0)={0xe0, 0x11, 0x509, 0x0, 0x0, "", [@generic="113c2d9b38402aff6ec2f31166d97833f0f8ac30073eff5aaa90ef4e67d4d71828ded4e460d643d5fe600b15cafc4e6367740fd939728fe10c222557a0e48cc54ad5fdfc9d96eab83adb23e6ea0e30003b415709fe9e9350a9b902a2fb292a57b89faa24ff367c2ce45b80daa96489871ba8845ef4d57736723c2ec516cbbcde6afb99d265f81bc4e9", @generic="1847a803d02973685ab61f218a66b934b7160571e984e5f5d6ad7eff4305326d0affb35c79b457adbe3f0bf08fc949402f059090cf6bf0007718a6968a12e721a9f1fa73"]}, 0xe0}], 0x1}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000088}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x17, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x73}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x40}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) (async) 2m1.715472636s ago: executing program 4 (id=6119): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @func_proto]}}, 0x0, 0x3e}, 0x20) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001e008d2a00000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000803028"], 0x30}}, 0x0) 2m1.30476088s ago: executing program 2 (id=6120): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400026530000000000000000000000000000000937afd6966c6dfc68d36b80927464302abca901a8de49a5fad86b85cb787409415520e521bd95d674eb138a6d463daf622474d70cddaacf42cf994e4dc93a111e551cb4d612ae7bfb456a1efb4390c985e7c38da91e1522eae10b49120bc2be297b519fd50240ff5d2e567bdaa6711af3e3ee619d6c068c9fb79f943b4d42b93f277bca044c93c718a03e99e538b93cfe5e564c5d9f9d80cb5e20199556e917f591f1af0b2"], 0x2c}}, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x1, 0x8}, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001400bd7f4366c07a2cbfb7eb01"], 0x14}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xec0, 0x30, 0xb, 0x0, 0x0, {}, [{0xeac, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe60, 0x2, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r8}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/225, 0xe1, 0x1, &(0x7f0000000440)=""/192, 0xc0}, &(0x7f0000000540)=0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r3, &(0x7f0000000180)="f307daf977e7dd193e61e61f6d03dd4009596eec0da919ecaa12517142891298486f0006baf8af5312b7df2cb191f524d215b78040f26a73ce9f2e104b571ba3b1a6fc5ce27114bc09c46bccc4f35d8b236dad0128d1f3a7a9d2201cc7fa3147f3ad6a", &(0x7f0000000200)=""/110, 0x4}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r9, &(0x7f0000000080), &(0x7f00000000c0)=""/102}, 0x20) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x53, &(0x7f0000000000)=0x2, 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000001}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000040)=0x24, 0x4) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r11, 0x12, 0x2, 0x0, &(0x7f0000000200)) socket$rds(0x15, 0x5, 0x0) 2m1.113466933s ago: executing program 4 (id=6121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000690003050000000000001c5200000006"], 0x18}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080002"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000690003050000000000001c5200000006"], 0x18}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080002"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) (async) 2m0.483328636s ago: executing program 4 (id=6123): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x34, r4, 0x3, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x4}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0x8044) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000000)={&(0x7f0000000180)={0x4c, 0x0, 0x100, 0x2, 0x0, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x2}}]}, 0x4c}}, 0x20000011) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 2m0.202478704s ago: executing program 2 (id=6124): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0x102030405060708, {0x0, 0x0, 0x4}, 0xff}, 0x18) connect$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0x0, {0x0, 0xee}, 0x2}, 0x18) (async) sendmsg$can_j1939(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20048804}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000300080012"], 0x44}}, 0x0) 2m0.148373834s ago: executing program 1 (id=6125): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000140)=@ethtool_per_queue_op={0x4b, 0xf, [0x2, 0x8, 0x10000, 0x7, 0x100, 0xfffffff9, 0xfffffffb, 0xb3, 0x3, 0x10001, 0x3107a6ef, 0xa889, 0xff, 0x401, 0x6, 0xfffffffd, 0xe03b, 0x2, 0x2, 0x2, 0x7f, 0x6, 0x7, 0x84, 0x0, 0x0, 0x9, 0x9, 0x1, 0x8, 0x0, 0xab, 0xb09, 0x1e, 0x2, 0xfffffffb, 0x10, 0x6, 0x0, 0x7, 0x5, 0xffff, 0x2, 0xf974, 0x45c, 0x0, 0x7e, 0x4, 0x0, 0xffffffff, 0x100, 0x1d65, 0x2, 0x4, 0x80e, 0x9, 0xffff0001, 0x1, 0x3, 0x10000, 0x100, 0xb12, 0x10001, 0x800, 0x1, 0x5, 0x4, 0x8, 0x2, 0xa, 0x10001, 0xffff, 0x2, 0x0, 0xb, 0x3ff, 0x8, 0x68, 0x800, 0x1000, 0xffffaa53, 0x1, 0x5a5, 0xc, 0x1, 0x1, 0x9, 0x52, 0x2, 0x2, 0x3, 0x2, 0x3, 0x7f, 0x10, 0x6, 0x9, 0x9, 0x3, 0x7fffffff, 0x400, 0x8, 0x4, 0x401, 0xfffffff9, 0x6867bc93, 0x8, 0x6, 0x10000, 0x834, 0x1, 0x1, 0xa021, 0xc, 0x3, 0x5b, 0x6, 0x2, 0x1, 0x4d51, 0x5, 0xc, 0x1a5, 0x1, 0x7, 0x8, 0x101, 0x3]}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb9}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x8, 0x6, 0x101}, 0x14}}, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="850000000b00000018550000090000000000000000000000b7080000000000007b8af8ff00000000b7080000b4ffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000adca5ad630b935a35360a7d1fe0b8f4c73a674e922cff36d93dced4c1d69f16aacb410da5f0e87041fef4cb75b72aa376d0a4fef817a5096a4f52f0f0097ed56d43e43c446563ae2ff70dadaa8c4cd9cc6ae1c40b28c07af866565bae0ce5ce6cd4011a515bba49ccfa2f62a13ce61c7ab3d2f921f0eb075c87584a75b1e0552e81efd3bf1b1134383264493dbd9", @ANYRES32, @ANYBLOB="00e400007fa44e1b0bcc00000000b70500000800000085000000a5000000f9b80e27954c447b63793beeb6d953d0ef0ba127b3c6cced8d20615c2d17e56307683f4b8ba0544b53522f77f3ec6d8146ef62dacaf0ed5cdece38906a407a101a99f5d38a506d7e99f8c70846e05896a982b73bd76a3671961a7e95e42341316b7e6f31b3a7540513e81705aa46a37e82512cdd3cb189aad78bc9fadcbaefb38c55d39f95adf2ab1b7f489b6952f6f56cbdfb9f"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0xb, 0x7, 0x7}, 0x10, 0x5e5c, 0xffffffffffffffff, 0x2, &(0x7f00000003c0)=[0x1], &(0x7f0000000400)=[{0x2, 0x3, 0x10, 0xc}, {0x1, 0x4, 0x3}], 0x10, 0x4}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000006301040000000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@generic={&(0x7f0000000500)='./file0\x00', 0x0, 0x8}, 0x18) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18280000", @ANYRES32=0x1, @ANYBLOB="bd0000000600000085000000300000001863006d05000000000000000000f000186800000500000000000000ff0700002724200001000000"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x2862d, r2, 0x3, &(0x7f0000000580)=[r3], &(0x7f00000005c0)=[{0x4, 0x5, 0x10, 0x2}, {0x2, 0x1, 0xf, 0x1}, {0x4, 0x3, 0x1, 0x4}], 0x10, 0x4}, 0x94) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r7, 0x6b, 0x5, 0x0, &(0x7f00000023c0)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x25, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}}, 0x9c) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000008c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000700)={0x178, r8, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x164, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "ac6d9a3c9ddbed6544ed58f68ef57642592e7a03f89073c056f31e66add49e68"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "384ce17d306707bbd0a11d67d7822474"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8e2c2143ecb7638aad4247e007406ac563723bf1575c6237c1f3ad5cf1341035"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "2fb9bea26483a121c5d38c073f62e0cba25e1ff4f5c5a20d72563626f4deb4e8"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f9cfd271790ba411b566dc5d4883d145"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b06221af3bb0f497d7bde151c3e77e45344e65690e654b7b027a9f64432aa9cc"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9e2d790a50e533ab975f98fe11b2bc09c46f651c363deac82f95de06ccde8d3f"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xe}, @NL802154_KEY_ATTR_ID={0x58, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xff}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "90503515858ac40e01bbfa8a5ad5b9902b4670b25e1eaa4883d4152a34538781"}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x40000}, 0x4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x8, 0x25, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) ioctl$FS_IOC_GETFSUUID(r4, 0x80111500, &(0x7f0000000000)) 1m59.786825015s ago: executing program 2 (id=6126): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) 1m59.671116839s ago: executing program 2 (id=6127): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x4, 0x25dfdbfb, {0xa, 0x40, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x13}, [@FRA_SRC={0x14, 0x2, @private2}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x5c}}, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r5, 0x20, 0x40e28}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008001}, 0x8000) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'ipvlan0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000140)={@private1, 0x0}, &(0x7f0000000180)=0x14) (async) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000011c0)=@newqdisc={0x88, 0x24, 0xd0f, 0x70bd2d, 0x3, {0x60, 0x0, 0x0, r11, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x10, [0x2, 0x9, 0x6, 0x9, 0x8, 0x9, 0x8, 0x6, 0x5, 0x2, 0x2, 0x4, 0x8, 0x2, 0xfe, 0xf], 0x0, [0x0, 0x3, 0xd, 0x6, 0x5, 0xf, 0x7, 0x8, 0x2, 0xfb42, 0xc4b, 0x7ff, 0x9, 0x0, 0xb, 0x54], [0xfff9, 0x9, 0xffff, 0xff, 0x2, 0x9f1, 0x1, 0x3b27, 0x1, 0xd, 0x337, 0x5, 0x91b, 0x3, 0x20, 0x7]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) (async) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r2, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000080}, 0x40) 1m59.4165963s ago: executing program 4 (id=6128): r0 = socket$can_j1939(0x1d, 0x2, 0x7) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000069106b0000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000040)=0x4c, 0x4) (async) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000400)={r2, 0x80000000, 0xfffc, "9f8f92620577f78d49dd52675bd1a9cafe64823227c0423c84a321a2ef1f0b9162ca0a80b194f61a95186d400d8a912a716b06006889c67f9f2adaf37b81962186395a4710aa03fd4e4b85ee694e75cc514723cd0d4822f3ab38da99537a479cbc161fd05b6dfcbbcf8e0e48"}) (async) sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNGETVNETLE(r3, 0x800454dd, &(0x7f00000006c0)) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) (async) r6 = socket$xdp(0x2c, 0x3, 0x0) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040), 0x6) (async) ioctl$sock_bt_hci(r7, 0x800448d7, 0x0) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f00000001c0)=0x20000, 0x4) r8 = socket$unix(0x1, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000700)={0xf5c, 0x3, 0x4, 0x10001}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r9, {0xb, 0xd}, {0x8008}, {0x8}}}, 0x24}}, 0x40004) (async) recvmmsg(r10, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000340)=""/162, 0xa2}, {&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f0000000480)=""/52, 0x34}, {&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f00000005c0)=""/159, 0x9f}, {&(0x7f0000000740)=""/171, 0xab}, {&(0x7f0000000080)=""/60, 0x3c}, {&(0x7f0000007ec0)=""/4103, 0x1007}, {&(0x7f0000003ac0)=""/4107, 0x100b}, {&(0x7f0000000900)=""/225, 0xe1}], 0xa}, 0x3}], 0x1, 0x40010022, 0x0) (async) r11 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r11, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x0, 0x0, @mcast2, 0x7}], 0x1c) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x148, 0x1a, 0x633, 0x0, 0x25dfdbfd, {{@in6=@local, @in=@broadcast, 0x0, 0x4000, 0x4e24, 0x8001, 0x0, 0x80}, {@in6=@remote, 0x0, 0x32}, @in6=@loopback, {0x323, 0x80000001, 0x0, 0xc0, 0x4000, 0x0, 0x0, 0x8}, {}, {}, 0x70bd29, 0x3503, 0xa, 0x5}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_max_qsize={0x8}]}, 0x148}, 0x1, 0x0, 0x0, 0x4000}, 0x200080d4) (async, rerun: 64) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c000000020603000000000000000000070000001c00078008000840000000e2050015000200000008001240000000040500010006000000050005000200000005000400050000000900020073797a3100000000150003006861"], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) (rerun: 64) 1m59.268114714s ago: executing program 1 (id=6130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r3, &(0x7f0000000000)='yeah\x00', 0x5) r4 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r4, 0x29, 0x17, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket(0xa, 0x3, 0x3a) getsockopt$nfc_llcp(r6, 0x3a, 0x1, 0x0, 0x20000000) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090a010400000000000000000a0000040900010073797a31000000000900020073797a310000000008000a40fffffffc0800054000000024080003400000004408000f400000000214000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000100001002fbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="02010000000000de130003006e657464657673696d30000000000000200016801c00018018000c8014"], 0x54}}, 0x24040800) bind$netlink(r7, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x40000000}, 0xc) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x7c, 0x13, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_OBJ_USERDATA={0x44, 0x8, "54a9130a8ee37297d9a9317cf76787e818d862188e22edb212a74de61e002d1f2602c7b848c533aab9bc467f9d22380905ae80de0d2baf1113253caa1a993dc1"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r9 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_proto_private(r9, 0x89e0, &(0x7f0000003180)) bind$netlink(r7, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfd}, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x9, 0x31, 0xffffffffffffffff, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r10, 0x0, 0x0, 0x2004c000, &(0x7f0000000140)={0x2, 0x4e21, @remote}, 0x10) close(r0) ioctl$XFS_IOC_FSGROWFSDATA(r2, 0x4010586e, &(0x7f0000000040)={0x401, 0x6}) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)={'some', 0x20, 0x3, 0x20, 0x7}, 0x2f) 1m55.677350417s ago: executing program 2 (id=6132): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000080)={'virt_wifi0\x00', @broadcast}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async, rerun: 32) r3 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000001680)=@buf={0x1000, &(0x7f0000000680)="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"}) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000500), 0x10) (async) sendmsg$can_bcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) (async, rerun: 64) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x7, 0x0, 0x0, {0x0, 0xea60}, {}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "4acede967c288ef4"}}, 0x20000408}}, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xffffffffffffffe0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETLINK(r5, 0x400454cd, 0x10e) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x64, 0x4, 0x440, 0x100000c, 0x2c0, 0x1f0, 0x2c0, 0xffffffff, 0xffffffff, 0x3a8, 0x3a8, 0x3a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x1f0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'syzkaller0\x00', {0x0, 0x4, 0x63, 0x100081, 0xfffffffb, 0x3, 0x84, 0xfff, 0x20}}}]}, @common=@unspec=@AUDIT={0x28}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0xff, 'syz_tun\x00', 'lo\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x4, 0x6, [0x9, 0x2e, 0xb, 0x3c, 0x2d, 0x20, 0x21, 0x29, 0x36, 0xd, 0x1a, 0x2, 0x24, 0x5, 0x33, 0x1d], 0x0, 0x4, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xe8, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x1, 0x800, 0x8, 0x7}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7f, 0x9, 0x2, 0x6, 0x1, 0x7f, 0x1, 0x6]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x34, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x3a}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xa}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_RTT={0x8, 0x7, 0x7}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000016c0)={0x0, 0x1, 0x1, [0x8, 0x0, 0x3, 0xffffffffffffffff, 0x9], [0x3ff, 0x4, 0x6, 0x4, 0x9, 0x1, 0xa, 0x8000, 0x1e, 0x5, 0x2, 0x2, 0x5, 0x1, 0x7, 0x6, 0x2c00000, 0x65, 0x8, 0x5, 0x100000000, 0x800, 0x8, 0x2, 0x3a, 0x3e, 0x4, 0xc45, 0x7, 0x7, 0x3, 0x2c, 0x5, 0x0, 0x7, 0x1, 0x5, 0x168c, 0x80000001, 0x4fc, 0x6, 0x0, 0x1, 0x6, 0x8, 0x4, 0x100000000, 0x5, 0x1, 0x70f5, 0x4, 0x7, 0xc2, 0x6, 0xfffffffffffffe01, 0x1, 0xffffffff, 0x7, 0x6, 0x2, 0x10001, 0x4, 0x200, 0x8, 0x54, 0xd, 0x1000, 0x8001, 0x2, 0x3ff, 0x0, 0x8b1f, 0x2, 0x1, 0xabfc, 0x80000000, 0x6, 0x80, 0x4, 0x1, 0x100000000, 0xd, 0xceb, 0x2, 0x7, 0x2, 0x9, 0x1, 0x2, 0x7, 0x1ff, 0x8001, 0x5, 0x6f, 0x3, 0x1, 0x2, 0x9, 0x4, 0xac0e, 0xbb2, 0x9, 0x1, 0xffffffffffffffff, 0x7fff, 0x1, 0xefb, 0x6ac, 0x4, 0x4, 0x8, 0x1000, 0x1, 0x81, 0x2, 0x101, 0x90e8, 0x4, 0x0, 0x3, 0xff]}) (async, rerun: 64) r8 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) syz_emit_ethernet(0x7a, &(0x7f0000000280)=ANY=[@ANYBLOB="856b934629faaaaaaaaaaaaa86dd60381f3400142f00fc000000000000000000020000000000000000000000000001042081000002892f00000800000086dd88a888be0000000000080022eb00000000200000000200000000000000000000000800655800"/111], 0x0) (async, rerun: 64) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m43.381606365s ago: executing program 32 (id=6130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r3, &(0x7f0000000000)='yeah\x00', 0x5) r4 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r4, 0x29, 0x17, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket(0xa, 0x3, 0x3a) getsockopt$nfc_llcp(r6, 0x3a, 0x1, 0x0, 0x20000000) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090a010400000000000000000a0000040900010073797a31000000000900020073797a310000000008000a40fffffffc0800054000000024080003400000004408000f400000000214000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000100001002fbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="02010000000000de130003006e657464657673696d30000000000000200016801c00018018000c8014"], 0x54}}, 0x24040800) bind$netlink(r7, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x40000000}, 0xc) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x7c, 0x13, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_OBJ_USERDATA={0x44, 0x8, "54a9130a8ee37297d9a9317cf76787e818d862188e22edb212a74de61e002d1f2602c7b848c533aab9bc467f9d22380905ae80de0d2baf1113253caa1a993dc1"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r9 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_proto_private(r9, 0x89e0, &(0x7f0000003180)) bind$netlink(r7, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfd}, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x9, 0x31, 0xffffffffffffffff, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r10, 0x0, 0x0, 0x2004c000, &(0x7f0000000140)={0x2, 0x4e21, @remote}, 0x10) close(r0) ioctl$XFS_IOC_FSGROWFSDATA(r2, 0x4010586e, &(0x7f0000000040)={0x401, 0x6}) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)={'some', 0x20, 0x3, 0x20, 0x7}, 0x2f) 1m42.578326871s ago: executing program 33 (id=6128): r0 = socket$can_j1939(0x1d, 0x2, 0x7) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000069106b0000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000040)=0x4c, 0x4) (async) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000400)={r2, 0x80000000, 0xfffc, "9f8f92620577f78d49dd52675bd1a9cafe64823227c0423c84a321a2ef1f0b9162ca0a80b194f61a95186d400d8a912a716b06006889c67f9f2adaf37b81962186395a4710aa03fd4e4b85ee694e75cc514723cd0d4822f3ab38da99537a479cbc161fd05b6dfcbbcf8e0e48"}) (async) sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNGETVNETLE(r3, 0x800454dd, &(0x7f00000006c0)) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) (async) r6 = socket$xdp(0x2c, 0x3, 0x0) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040), 0x6) (async) ioctl$sock_bt_hci(r7, 0x800448d7, 0x0) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f00000001c0)=0x20000, 0x4) r8 = socket$unix(0x1, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000700)={0xf5c, 0x3, 0x4, 0x10001}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r9, {0xb, 0xd}, {0x8008}, {0x8}}}, 0x24}}, 0x40004) (async) recvmmsg(r10, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000340)=""/162, 0xa2}, {&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f0000000480)=""/52, 0x34}, {&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f00000005c0)=""/159, 0x9f}, {&(0x7f0000000740)=""/171, 0xab}, {&(0x7f0000000080)=""/60, 0x3c}, {&(0x7f0000007ec0)=""/4103, 0x1007}, {&(0x7f0000003ac0)=""/4107, 0x100b}, {&(0x7f0000000900)=""/225, 0xe1}], 0xa}, 0x3}], 0x1, 0x40010022, 0x0) (async) r11 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r11, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x0, 0x0, @mcast2, 0x7}], 0x1c) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x148, 0x1a, 0x633, 0x0, 0x25dfdbfd, {{@in6=@local, @in=@broadcast, 0x0, 0x4000, 0x4e24, 0x8001, 0x0, 0x80}, {@in6=@remote, 0x0, 0x32}, @in6=@loopback, {0x323, 0x80000001, 0x0, 0xc0, 0x4000, 0x0, 0x0, 0x8}, {}, {}, 0x70bd29, 0x3503, 0xa, 0x5}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_max_qsize={0x8}]}, 0x148}, 0x1, 0x0, 0x0, 0x4000}, 0x200080d4) (async, rerun: 64) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c000000020603000000000000000000070000001c00078008000840000000e2050015000200000008001240000000040500010006000000050005000200000005000400050000000900020073797a3100000000150003006861"], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) (rerun: 64) 1m39.662313002s ago: executing program 34 (id=6132): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000080)={'virt_wifi0\x00', @broadcast}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async, rerun: 32) r3 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000001680)=@buf={0x1000, &(0x7f0000000680)="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"}) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000500), 0x10) (async) sendmsg$can_bcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) (async, rerun: 64) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x7, 0x0, 0x0, {0x0, 0xea60}, {}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "4acede967c288ef4"}}, 0x20000408}}, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xffffffffffffffe0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETLINK(r5, 0x400454cd, 0x10e) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x64, 0x4, 0x440, 0x100000c, 0x2c0, 0x1f0, 0x2c0, 0xffffffff, 0xffffffff, 0x3a8, 0x3a8, 0x3a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x1f0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'syzkaller0\x00', {0x0, 0x4, 0x63, 0x100081, 0xfffffffb, 0x3, 0x84, 0xfff, 0x20}}}]}, @common=@unspec=@AUDIT={0x28}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0xff, 'syz_tun\x00', 'lo\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x4, 0x6, [0x9, 0x2e, 0xb, 0x3c, 0x2d, 0x20, 0x21, 0x29, 0x36, 0xd, 0x1a, 0x2, 0x24, 0x5, 0x33, 0x1d], 0x0, 0x4, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xe8, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x1, 0x800, 0x8, 0x7}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7f, 0x9, 0x2, 0x6, 0x1, 0x7f, 0x1, 0x6]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x34, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x3a}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xa}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_RTT={0x8, 0x7, 0x7}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000016c0)={0x0, 0x1, 0x1, [0x8, 0x0, 0x3, 0xffffffffffffffff, 0x9], [0x3ff, 0x4, 0x6, 0x4, 0x9, 0x1, 0xa, 0x8000, 0x1e, 0x5, 0x2, 0x2, 0x5, 0x1, 0x7, 0x6, 0x2c00000, 0x65, 0x8, 0x5, 0x100000000, 0x800, 0x8, 0x2, 0x3a, 0x3e, 0x4, 0xc45, 0x7, 0x7, 0x3, 0x2c, 0x5, 0x0, 0x7, 0x1, 0x5, 0x168c, 0x80000001, 0x4fc, 0x6, 0x0, 0x1, 0x6, 0x8, 0x4, 0x100000000, 0x5, 0x1, 0x70f5, 0x4, 0x7, 0xc2, 0x6, 0xfffffffffffffe01, 0x1, 0xffffffff, 0x7, 0x6, 0x2, 0x10001, 0x4, 0x200, 0x8, 0x54, 0xd, 0x1000, 0x8001, 0x2, 0x3ff, 0x0, 0x8b1f, 0x2, 0x1, 0xabfc, 0x80000000, 0x6, 0x80, 0x4, 0x1, 0x100000000, 0xd, 0xceb, 0x2, 0x7, 0x2, 0x9, 0x1, 0x2, 0x7, 0x1ff, 0x8001, 0x5, 0x6f, 0x3, 0x1, 0x2, 0x9, 0x4, 0xac0e, 0xbb2, 0x9, 0x1, 0xffffffffffffffff, 0x7fff, 0x1, 0xefb, 0x6ac, 0x4, 0x4, 0x8, 0x1000, 0x1, 0x81, 0x2, 0x101, 0x90e8, 0x4, 0x0, 0x3, 0xff]}) (async, rerun: 64) r8 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) syz_emit_ethernet(0x7a, &(0x7f0000000280)=ANY=[@ANYBLOB="856b934629faaaaaaaaaaaaa86dd60381f3400142f00fc000000000000000000020000000000000000000000000001042081000002892f00000800000086dd88a888be0000000000080022eb00000000200000000200000000000000000000000800655800"/111], 0x0) (async, rerun: 64) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) 38.318664994s ago: executing program 3 (id=6155): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000001c0)={r0, &(0x7f0000000300)='hash:ip,port,n\xff\x85et\x00\xdf\xd4un\x12[\xd2\x03\xfcBeC98\xe9\xee\xec\x05\'\xcd\x8f\xa2z\x17\xeeLm#\xb4\xbd\xb6V\x8a\x1e\xdc\xbe\x16\xcf\xa0\x83\xe0\x11\xae\x1a\x11_\xf9\xea\n2\r\xae\x8d\xb5\xd3Ei\x89p\x98\x1c\x8d[;\x9e\xee%\x94W18\x9b\x95\x02pbJ\x06\xd8\x1f\xbfr\x88\xfd\xc1\xca\xee\x16\xd0\xc1q\n|\x82\x8c\tOo6\x88\x01\xa8\xd3-\xdc\xeb\xedE\xe3(f0\xf6\x8b\x99O\xcb\x1c\xcb\xaf\x12.\xa8~\xc9\xa8\xedg{\x15\xd2\x03\x04\v\xf6\x0e]b\xc9', 0x20200, &(0x7f0000000100)={@_ha_fsid={[0x8, 0xc2]}, {0x38, 0x88d3, 0x3, 0x3}}, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x64}) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x406}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x6, 0x6, 0x101, 0x70bd26, 0x25dfdbfd, {0x7, 0x0, 0xa}, [@typed={0x8, 0x2d, 0x0, 0x0, @fd=r0}]}, 0x1c}}, 0x1) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000580)={&(0x7f00000003c0)="c28884fdc70715686440a1aa96b05a4821ecf9553ffa09952a9daca933d79492b9c049c6f3f125b88f5e70ee060bddc5a2f0bf05e99b90b160de3b5b4b76b53a4ec6a7144ca3bb088f4a4df4d4693303025db260031b60c48af9e29bd607c5936cd663fc1ba804011cfbfbca08a3c17af5245d4e999fbe28a26dad3b1559378130632a8ae8", &(0x7f0000000480)=""/32, &(0x7f00000004c0)="4efb2b5cc25731b371474f76fb157f1fa8a25d398891e21550bea20c211d994309578e84792caef2e1befab2546e27ed8743c98a6189a617e55229c59c2625bccdf705e23e490f72d082c75527407fcd94c59e2c9ce4b4fa", &(0x7f0000000540)="dbab6b51e1898c6f7705b0404e5cd966f947c266600405c4", 0x6, r1, 0x4}, 0x38) 34.589893826s ago: executing program 3 (id=6156): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000c"], 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket(0x400000000010, 0x3, 0xf) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c000180060006006558000014000280100014800c00", @ANYRES8=r0], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r1, &(0x7f0000000440)={&(0x7f0000000300)={0xa, 0x4e24, 0xffffffff, @mcast1, 0x10000}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x7}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x2b}}}], 0x60}, 0x48010) 29.419909871s ago: executing program 3 (id=6157): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000300000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="0000000000002d9d8aaf5dc79048", 0x0, 0x8ce3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)=0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x2, 0x3}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0xf}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f5764000000000c00028008001400ffffffff"], 0x3c}}, 0x0) 24.480407103s ago: executing program 3 (id=6158): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6(0xa, 0x3, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r3, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x430, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x360, 0xffffffff, 0xffffffff, 0x360, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @empty, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x228, 0x270, 0x0, {}, [@common=@inet=@length={{0x28}, {0x101, 0x556}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x490) r4 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 19.910465185s ago: executing program 3 (id=6159): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000002c0)) r2 = socket$pppoe(0x18, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) syz_emit_ethernet(0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20003, [0xc0b, 0x869, 0xb70, 0xeb2]}) syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYRESOCT=r2], 0x0) socket$kcm(0x29, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$sock_int(r3, 0x1, 0x7, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x19, &(0x7f0000001780), 0x1, 0x0, 0x10}, 0x884) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'ip6gre0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0x40047438, &(0x7f0000000440)="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") ioctl$PPPIOCCONNECT(r7, 0x4004743a, &(0x7f00000000c0)) pread64(r1, 0x0, 0x0, 0x100008) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x4048850) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x27, 0x0, 0x1}, 0x6) 15.733309127s ago: executing program 3 (id=6160): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8}]}, 0x3c}}, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffffffffffcff) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRES8=r1, @ANYRESOCT=r0, @ANYBLOB="6474ed7a254d9a59d22f663a91469b13bdeed4ca48"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) syz_emit_ethernet(0x75, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000670000000000069078ac1414bbac1414aa00004001", @ANYRES8=r1, @ANYRES32=r1, @ANYBLOB="5002000090780000c8fd75a55cea55431a0df064535453f7c0b9376f3fa20800d19af9e68bd0c75e46b1c0d4c5a14e8ce3e28fd739913a5d1064c377167a0081cbec2d91defd7c58b758a1e7dc89bd8f93290b"], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES64=r4], 0x14}, 0x1, 0x0, 0x0, 0x4044908}, 0x400c041) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r5) sendmsg$nl_route(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@newneigh={0x34, 0x1c, 0x400, 0x70bd27, 0x25dfdbfb, {0x7, 0x0, 0x0, r4, 0x4, 0x97, 0x1}, [@NDA_SRC_VNI={0x8, 0xb, 0x3}, @NDA_PROTOCOL={0x5, 0xc, 0x3}, @NDA_PROTOCOL={0x5}]}, 0x34}}, 0x80) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x46, 0x9, 0x4, 0x25dfdbfd, {0x2}}, 0x14}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000006d0001000000000000000000003c0000", @ANYRES32=r6, @ANYBLOB="000000000000000018003480140035"], 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r5) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r10, &(0x7f0000000780)={0xa, 0x0, 0xfffffffc, @mcast2, 0x2}, 0xa) sendto$inet6(r2, &(0x7f00000008c0)="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", 0xfd, 0x20008000, &(0x7f00000009c0)={0xa, 0x4e21, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x21}, 0x6}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000b40)=ANY=[@ANYBLOB="18020000", @ANYRES16=r9, @ANYBLOB="10002cbd7000fedbdf252b00000008000300", @ANYRES32=r11, @ANYBLOB="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"], 0x218}, 0x1, 0x0, 0x0, 0x81}, 0x8004) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) 0s ago: executing program 35 (id=6160): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8}]}, 0x3c}}, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffffffffffcff) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRES8=r1, @ANYRESOCT=r0, @ANYBLOB="6474ed7a254d9a59d22f663a91469b13bdeed4ca48"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) syz_emit_ethernet(0x75, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000670000000000069078ac1414bbac1414aa00004001", @ANYRES8=r1, @ANYRES32=r1, @ANYBLOB="5002000090780000c8fd75a55cea55431a0df064535453f7c0b9376f3fa20800d19af9e68bd0c75e46b1c0d4c5a14e8ce3e28fd739913a5d1064c377167a0081cbec2d91defd7c58b758a1e7dc89bd8f93290b"], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES64=r4], 0x14}, 0x1, 0x0, 0x0, 0x4044908}, 0x400c041) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r5) sendmsg$nl_route(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@newneigh={0x34, 0x1c, 0x400, 0x70bd27, 0x25dfdbfb, {0x7, 0x0, 0x0, r4, 0x4, 0x97, 0x1}, [@NDA_SRC_VNI={0x8, 0xb, 0x3}, @NDA_PROTOCOL={0x5, 0xc, 0x3}, @NDA_PROTOCOL={0x5}]}, 0x34}}, 0x80) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x46, 0x9, 0x4, 0x25dfdbfd, {0x2}}, 0x14}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000006d0001000000000000000000003c0000", @ANYRES32=r6, @ANYBLOB="000000000000000018003480140035"], 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r5) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r10, &(0x7f0000000780)={0xa, 0x0, 0xfffffffc, @mcast2, 0x2}, 0xa) sendto$inet6(r2, &(0x7f00000008c0)="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", 0xfd, 0x20008000, &(0x7f00000009c0)={0xa, 0x4e21, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x21}, 0x6}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000b40)=ANY=[@ANYBLOB="18020000", @ANYRES16=r9, @ANYBLOB="10002cbd7000fedbdf252b00000008000300", @ANYRES32=r11, @ANYBLOB="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"], 0x218}, 0x1, 0x0, 0x0, 0x81}, 0x8004) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) kernel console output (not intermixed with test programs): file or directory [ 691.454930][T25512] 8021q: VLANs not supported on xfrm0 [ 691.609956][T25520] SET target dimension over the limit! [ 691.858075][T25532] netlink: 'syz.0.4911': attribute type 13 has an invalid length. [ 691.893847][T25531] macvlan0: left promiscuous mode [ 691.898620][T25535] netlink: 'syz.4.4913': attribute type 1 has an invalid length. [ 691.924763][T25531] netlink: 'syz.3.4914': attribute type 2 has an invalid length. [ 692.339932][T25548] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 692.506635][T25558] xt_l2tp: invalid flags combination: 8 [ 692.536987][T25558] xt_l2tp: invalid flags combination: 8 [ 693.317889][T25599] __nla_validate_parse: 8 callbacks suppressed [ 693.317911][T25599] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4934'. [ 693.317933][T25599] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4934'. [ 693.456186][T25611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4935'. [ 693.456288][T25611] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4935'. [ 693.546267][T25613] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4936'. [ 693.549513][T25614] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4936'. [ 693.701967][T25621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4939'. [ 693.713969][T25620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4939'. [ 693.766067][T25623] veth0_macvtap: entered allmulticast mode [ 693.766223][T25623] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 693.796615][T25614] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4936'. [ 693.801863][T25615] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4936'. [ 693.833623][T25625] netlink: 'syz.4.4938': attribute type 21 has an invalid length. [ 694.177669][T25641] hashlimit_mt_check_common: 23 callbacks suppressed [ 694.177693][T25641] xt_hashlimit: size too large, truncated to 1048576 [ 694.302773][ T4938] Bluetooth: hci0: command 0x0c1a tx timeout [ 694.742155][T25660] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 695.083620][ T31] audit: type=1804 audit(1789742156.503:20): pid=25677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4950" name="/newroot/417/cgroup.controllers" dev="tmpfs" ino=2149 res=1 errno=0 [ 695.083896][ T31] audit: type=1800 audit(1789742156.503:21): pid=25677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4950" name="cgroup.controllers" dev="tmpfs" ino=2149 res=0 errno=0 [ 695.400784][T25685] bond0 (unregistering): Released all slaves [ 695.568839][T25683] bond0 (unregistering): Released all slaves [ 695.827223][T25719] netlink: 'syz.0.4958': attribute type 8 has an invalid length. [ 696.057052][T25731] xt_hashlimit: size too large, truncated to 1048576 [ 696.567143][T25756] netlink: 'syz.2.4969': attribute type 13 has an invalid length. [ 697.139184][T25777] batman_adv: batadv0: Adding interface: syzkaller0 [ 697.139209][T25777] batman_adv: batadv0: Interface activated: syzkaller0 [ 697.348816][T25797] netlink: 'syz.4.4980': attribute type 1 has an invalid length. [ 697.348845][T25797] netlink: 'syz.4.4980': attribute type 1 has an invalid length. [ 697.407321][T25797] nbd: must specify a size in bytes for the device [ 697.407599][T25797] nbd: must specify an index to disconnect [ 698.028390][T25816] xt_hashlimit: size too large, truncated to 1048576 [ 698.110183][T25817] xt_hashlimit: size too large, truncated to 1048576 [ 698.207451][T25819] xt_hashlimit: size too large, truncated to 1048576 [ 698.336849][T25830] __nla_validate_parse: 28 callbacks suppressed [ 698.336872][T25830] netlink: 3080 bytes leftover after parsing attributes in process `syz.4.4988'. [ 698.336889][T25830] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.4988'. [ 698.637641][T25843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4990'. [ 698.906771][T25849] 8021q: adding VLAN 0 to HW filter on device macsec3 [ 698.945545][T25852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 698.965669][T25856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4994'. [ 699.321610][T25866] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4998'. [ 699.331829][T25864] block nbd0: Unsupported socket: should be TCP or UNIX. [ 699.363581][T25866] syzkaller0: entered promiscuous mode [ 699.363606][T25866] syzkaller0: entered allmulticast mode [ 699.400985][T25866] tipc: Enabled bearer , priority 0 [ 699.449536][T25865] tipc: Resetting bearer [ 699.490746][T25865] tipc: Disabling bearer [ 699.560088][T25870] netlink: 'syz.0.5000': attribute type 32 has an invalid length. [ 699.560112][T25870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5000'. [ 699.610871][T25870] bond7: Setting coupled_control to off (0) [ 699.929724][T25885] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5004'. [ 699.948093][T25889] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5004'. [ 700.237020][T25909] netlink: 'syz.2.5010': attribute type 83 has an invalid length. [ 700.468048][T25916] netlink: 'syz.3.5013': attribute type 1 has an invalid length. [ 700.468067][T25916] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.5013'. [ 700.468079][T25916] netlink: 'syz.3.5013': attribute type 1 has an invalid length. [ 700.468088][T25916] netlink: 2016 bytes leftover after parsing attributes in process `syz.3.5013'. [ 700.877981][T25930] syzkaller0: entered promiscuous mode [ 700.878007][T25930] syzkaller0: entered allmulticast mode [ 701.253417][T25951] tipc: Resetting bearer [ 701.253461][T25951] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 701.398481][T25951] tipc: Disabling bearer [ 701.440136][T25951] batman_adv: batadv0: Removing interface: syzkaller0 [ 702.767172][T11261] IPVS: starting estimator thread 0... [ 702.853224][T26026] IPVS: using max 28 ests per chain, 67200 per kthread [ 702.989836][T26038] netlink: 'syz.0.5041': attribute type 4 has an invalid length. [ 703.291930][T26051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 703.348209][T26059] __nla_validate_parse: 5 callbacks suppressed [ 703.348232][T26059] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5048'. [ 703.464644][T26063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5049'. [ 703.651194][T26059] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5048'. [ 703.817475][T26067] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.5050'. [ 703.921218][T26072] team0: mtu less than device minimum [ 703.989261][T26081] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 704.496855][T26100] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5062'. [ 704.647215][T26106] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5065'. [ 704.647247][T26106] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5065'. [ 704.731243][T26113] netlink: 'syz.2.5064': attribute type 2 has an invalid length. [ 704.731267][T26113] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5064'. [ 704.886463][ T75] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 704.968935][T26126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5070'. [ 705.043062][T26137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5072'. [ 705.083129][T26137] team0 (unregistering): Port device team_slave_0 removed [ 705.089688][T26137] team0 (unregistering): Port device team_slave_1 removed [ 705.452626][ T4938] Bluetooth: hci0: ISO packet too small [ 705.787778][T26124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 706.625076][T26219] ipt_ah: unknown flags FF [ 706.849461][T26235] ipt_REJECT: TCP_RESET invalid for non-tcp [ 707.227039][T26253] tipc: Enabling of bearer rejected, failed to enable media [ 707.374753][T26259] tipc: Enabling of bearer rejected, failed to enable media [ 707.759524][T11252] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 707.936080][T26276] netlink: 'syz.3.5107': attribute type 1 has an invalid length. [ 708.298172][T26301] IPv6: NLM_F_CREATE should be specified when creating new route [ 708.365906][T26301] __nla_validate_parse: 9 callbacks suppressed [ 708.365928][T26301] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5111'. [ 708.410397][T26309] Unsupported ieee802154 address type: 0 [ 708.440575][T26311] netlink: 'syz.4.5115': attribute type 10 has an invalid length. [ 708.625905][T26314] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5116'. [ 708.667779][T26318] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5116'. [ 708.978579][T26331] netlink: ct family unspecified [ 709.181094][T26341] netlink: 'syz.2.5123': attribute type 1 has an invalid length. [ 709.248663][T26341] 8021q: adding VLAN 0 to HW filter on device bond4 [ 709.271878][T26341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5123'. [ 709.308438][T26341] bond4: (slave bridge3): making interface the new active one [ 709.310251][T26341] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 709.452427][T26353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5127'. [ 709.670851][T26366] netlink: 'syz.0.5131': attribute type 29 has an invalid length. [ 709.707484][T26375] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5131'. [ 709.850141][T26380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5136'. [ 709.850165][T26380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5136'. [ 709.850192][T26380] netlink: 'syz.2.5136': attribute type 15 has an invalid length. [ 709.887719][T26380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5136'. [ 709.887743][T26380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5136'. [ 709.887769][T26380] netlink: 'syz.2.5136': attribute type 15 has an invalid length. [ 709.913984][ T1378] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 709.914118][ T1378] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 709.914234][ T1378] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 709.914331][ T1378] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 709.928894][T26381] netlink: 'syz.1.5135': attribute type 3 has an invalid length. [ 709.969493][T26384] netlink: 'syz.2.5136': attribute type 15 has an invalid length. [ 709.970565][T26384] netlink: 'syz.2.5136': attribute type 15 has an invalid length. [ 710.435611][T26410] syzkaller0: entered promiscuous mode [ 710.435636][T26410] syzkaller0: entered allmulticast mode [ 710.684955][T26422] tipc: Enabling of bearer rejected, failed to enable media [ 711.006518][T26444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 711.293482][T26458] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 711.461907][T26476] x_tables: duplicate underflow at hook 2 [ 711.543773][T26481] netlink: 'syz.3.5165': attribute type 1 has an invalid length. [ 711.543797][T26481] netlink: 'syz.3.5165': attribute type 2 has an invalid length. [ 711.659850][T26487] syzkaller0: entered promiscuous mode [ 711.659876][T26487] syzkaller0: entered allmulticast mode [ 711.849104][T26491] bond4: entered promiscuous mode [ 711.849472][T26491] 8021q: adding VLAN 0 to HW filter on device bond4 [ 713.257740][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.274470][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.274512][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.274540][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.274566][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.274592][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.274618][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.274645][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.274671][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.274699][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.274724][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.274754][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.274779][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.274805][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.274831][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.274857][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.274883][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.274910][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.274936][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.274962][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.274990][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.275015][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.275042][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.275068][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.275094][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.275123][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.275149][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.275178][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.275203][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.275236][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.275263][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.275289][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.275316][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.275341][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.275368][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.275394][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.275419][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.275445][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.275472][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.275500][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.275526][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.275554][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.275580][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.275606][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.275631][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.275658][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.275684][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.275707][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.275733][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.275761][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.275787][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.275812][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.275839][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.275865][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.275893][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.277860][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.277891][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.277909][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.277927][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.277945][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.277962][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.278502][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.278536][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.278562][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 713.278587][T26531] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 714.747764][T26490] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 714.751728][T26521] __nla_validate_parse: 12 callbacks suppressed [ 714.751749][T26521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5175'. [ 715.015589][T26542] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5179'. [ 715.017307][T26538] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 715.068614][T26548] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5181'. [ 715.071341][T26551] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5181'. [ 715.078002][T26548] validate_nla: 6 callbacks suppressed [ 715.078049][T26548] netlink: 'syz.1.5181': attribute type 9 has an invalid length. [ 715.078076][T26548] netlink: 23 bytes leftover after parsing attributes in process `syz.1.5181'. [ 715.826007][T26574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5189'. [ 716.101193][T26587] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5191'. [ 716.101232][T26587] netlink: 'syz.4.5191': attribute type 1 has an invalid length. [ 716.264646][T26596] sctp: [Deprecated]: syz.2.5193 (pid 26596) Use of int in max_burst socket option. [ 716.264646][T26596] Use struct sctp_assoc_value instead [ 716.448197][T26611] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5197'. [ 716.779714][T26623] gre0: entered promiscuous mode [ 716.779742][T26623] gre0: entered allmulticast mode [ 716.844229][T26625] x_tables: duplicate underflow at hook 2 [ 716.934217][T26627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5201'. [ 719.301921][T26606] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 719.481944][T26657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5209'. [ 720.183434][T26699] bridge0: port 3(veth1_to_bridge) entered blocking state [ 720.183632][T26699] bridge0: port 3(veth1_to_bridge) entered disabled state [ 720.183896][T26699] veth1_to_bridge: entered allmulticast mode [ 720.189271][T26699] veth1_to_bridge: entered promiscuous mode [ 720.189521][T26699] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 720.190392][T26699] bridge0: port 3(veth1_to_bridge) entered blocking state [ 720.190493][T26699] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 720.361258][T26707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5222'. [ 720.377067][ T4938] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 720.462261][T26714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5221'. [ 720.846135][T26730] tipc: New replicast peer: 172.20.20.187 [ 720.846845][T26730] tipc: Enabled bearer , priority 10 [ 721.093998][T26738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5235'. [ 721.096517][T26738] netlink: 'syz.1.5235': attribute type 2 has an invalid length. [ 721.096537][T26738] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5235'. [ 721.552994][T26769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5243'. [ 721.611521][T26760] team0: Device veth1_macvtap failed to register rx_handler [ 721.639646][T26761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5240'. [ 722.092331][T26784] openvswitch: netlink: Message has 8 unknown bytes. [ 722.197981][T26789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5247'. [ 722.283912][T26791] tc action pedit unable to extract header offset for header type (0x5) [ 722.283937][T26791] tc action pedit unable to extract header offset for header type (0x5) [ 722.283952][T26791] tc action pedit unable to extract header offset for header type (0x5) [ 722.283966][T26791] tc action pedit unable to extract header offset for header type (0x5) [ 722.283981][T26791] tc action pedit unable to extract header offset for header type (0x5) [ 722.283995][T26791] tc action pedit unable to extract header offset for header type (0x5) [ 722.284019][T26791] tc action pedit unable to extract header offset for header type (0x5) [ 722.284034][T26791] tc action pedit unable to extract header offset for header type (0x5) [ 722.284049][T26791] tc action pedit unable to extract header offset for header type (0x5) [ 722.284063][T26791] tc action pedit unable to extract header offset for header type (0x5) [ 722.284090][T26791] 0: reclassify loop, rule prio 0, protocol 800 [ 722.704433][T26809] netlink: 'syz.0.5254': attribute type 1 has an invalid length. [ 722.740599][T26809] 8021q: adding VLAN 0 to HW filter on device bond9 [ 722.760243][T26809] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5254'. [ 722.814931][T26811] syzkaller0: entered promiscuous mode [ 722.814956][T26811] syzkaller0: entered allmulticast mode [ 722.834833][T26813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5253'. [ 722.906203][T26821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 723.098007][T26819] netlink: 'syz.1.5253': attribute type 11 has an invalid length. [ 723.218617][T26830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5259'. [ 723.263099][T26828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 723.263127][T26828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 723.267394][T26828] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 723.267420][T26828] batman_adv: batadv0: Removing interface: syzkaller0 [ 723.709486][T26863] lo: entered promiscuous mode [ 723.733402][T26863] netlink: 'syz.3.5266': attribute type 2 has an invalid length. [ 723.733429][T26863] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 723.981939][T26876] netlink: 'syz.3.5270': attribute type 1 has an invalid length. [ 723.985008][T20919] Bluetooth: hci4: command 0x0405 tx timeout [ 724.028460][T26870] team0: Port device team_slave_0 removed [ 724.786412][T26910] hsr_slave_0: left promiscuous mode [ 724.788889][T26910] hsr_slave_1: left promiscuous mode [ 725.155876][T26941] netlink: 'syz.0.5288': attribute type 1 has an invalid length. [ 725.418913][T26948] __nla_validate_parse: 15 callbacks suppressed [ 725.418937][T26948] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5292'. [ 725.459919][T26962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5299'. [ 725.459950][T26962] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5299'. [ 725.684275][T26972] ip_tables: iptables: counters copy to user failed while replacing table [ 725.970912][T26983] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 726.270565][T26995] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5306'. [ 726.270715][T26995] netlink: 6 bytes leftover after parsing attributes in process `syz.4.5306'. [ 726.421786][T27001] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.5310'. [ 726.596982][T27010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5311'. [ 726.601536][T27011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5312'. [ 727.320305][T27045] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5322'. [ 727.568415][T27055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5323'. [ 728.031452][T27083] openvswitch: netlink: Flow key attr not present in new flow. [ 728.398209][T27100] tunl0: entered promiscuous mode [ 728.420030][T27100] netlink: 'syz.0.5340': attribute type 4 has an invalid length. [ 728.768579][T27121] GUP no longer grows the stack in syz.2.5347 (27121): 200000003000-20000000a000 (200000001000) [ 728.768619][T27121] CPU: 0 UID: 0 PID: 27121 Comm: syz.2.5347 Not tainted syzkaller #0 PREEMPT(full) [ 728.768645][T27121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 728.768660][T27121] Call Trace: [ 728.768670][T27121] [ 728.768680][T27121] dump_stack_lvl+0xe8/0x150 [ 728.768721][T27121] __get_user_pages+0x23b6/0x2750 [ 728.768755][T27121] ? lock_acquire+0x115/0x350 [ 728.768798][T27121] ? __gup_longterm_locked+0xc3b/0x15c0 [ 728.768836][T27121] __gup_longterm_locked+0xd52/0x15c0 [ 728.768871][T27121] ? lock_acquire+0x115/0x350 [ 728.768913][T27121] gup_fast_fallback+0x1d92/0x20e0 [ 728.768980][T27121] ? __pfx_gup_fast_fallback+0x10/0x10 [ 728.769015][T27121] ? lock_acquire+0x115/0x350 [ 728.769036][T27121] ? is_valid_gup_args+0x11f/0x200 [ 728.769068][T27121] ? get_user_pages_fast+0x4d/0xb0 [ 728.769103][T27121] __iov_iter_get_pages_alloc+0x378/0xa40 [ 728.769140][T27121] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 728.769170][T27121] iov_iter_get_pages2+0x5e/0xa0 [ 728.769203][T27121] __se_sys_vmsplice+0x7b5/0x1660 [ 728.769262][T27121] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 728.769299][T27121] ? __pfx_futex_wait+0x10/0x10 [ 728.769421][T27121] do_syscall_64+0x166/0x520 [ 728.769451][T27121] ? trace_irq_disable+0x3b/0x140 [ 728.769479][T27121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.769504][T27121] ? clear_bhb_loop+0x70/0xc0 [ 728.769533][T27121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.769557][T27121] RIP: 0033:0x7f8016b9e159 [ 728.769580][T27121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 728.769600][T27121] RSP: 002b:00007f80179cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 728.769627][T27121] RAX: ffffffffffffffda RBX: 00007f8016e25fa0 RCX: 00007f8016b9e159 [ 728.769645][T27121] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 728.769660][T27121] RBP: 00007f8016c3506b R08: 0000000000000000 R09: 0000000000000000 [ 728.769674][T27121] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 728.769688][T27121] R13: 00007f8016e26038 R14: 00007f8016e25fa0 R15: 00007ffed62d7558 [ 728.769725][T27121] [ 729.089294][T27127] netlink: 'syz.0.5349': attribute type 10 has an invalid length. [ 729.116629][T27127] geneve4: entered promiscuous mode [ 729.116655][T27127] geneve4: entered allmulticast mode [ 729.151074][ T4938] Bluetooth: hci4: link tx timeout [ 729.151298][ T4938] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 729.256999][T27127] veth7: entered promiscuous mode [ 729.257026][T27127] veth7: entered allmulticast mode [ 729.884638][T27210] xt_hashlimit: invalid interval [ 729.967193][T27215] syzkaller0: entered promiscuous mode [ 729.967220][T27215] syzkaller0: entered allmulticast mode [ 730.062773][T27133] Bluetooth: hci0: command 0x0c1a tx timeout [ 730.071372][T20919] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 730.169310][T27219] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 730.490212][T27240] __nla_validate_parse: 14 callbacks suppressed [ 730.490244][T27240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5365'. [ 730.971199][T27253] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5372'. [ 731.128419][T27267] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5373'. [ 731.185176][T20919] Bluetooth: hci4: command 0x0405 tx timeout [ 731.537782][T27285] dvmrp8: entered allmulticast mode [ 731.564720][T27285] ip_tables: iptables: counters copy to user failed while replacing table [ 731.707672][T27294] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5380'. [ 731.829387][T27176] tipc: Subscription rejected, illegal request [ 731.920047][T27292] sctp: [Deprecated]: syz.0.5379 (pid 27292) Use of int in maxseg socket option. [ 731.920047][T27292] Use struct sctp_assoc_value instead [ 731.968439][T27308] netlink: 'syz.2.5383': attribute type 1 has an invalid length. [ 732.040751][T27291] syzkaller0: entered promiscuous mode [ 732.040777][T27291] syzkaller0: entered allmulticast mode [ 732.187806][T27308] 8021q: adding VLAN 0 to HW filter on device bond5 [ 732.229184][T27322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5385'. [ 732.229211][T27322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5385'. [ 732.628207][T27342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5389'. [ 733.084702][T27349] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5391'. [ 735.322247][T27308] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 735.486770][T27354] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5393'. [ 735.636703][T27349] bond_slave_0: entered promiscuous mode [ 735.636729][T27349] bond_slave_0: entered allmulticast mode [ 735.784342][T27354] veth8: entered promiscuous mode [ 735.784366][T27354] veth8: entered allmulticast mode [ 736.235892][T27389] gre4: entered promiscuous mode [ 736.525379][T27400] netlink: 'syz.3.5402': attribute type 1 has an invalid length. [ 736.601662][T27405] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5403'. [ 736.649184][T27408] netlink: 'syz.0.5404': attribute type 5 has an invalid length. [ 736.827014][T27405] netlink: 'syz.1.5403': attribute type 2 has an invalid length. [ 737.009116][T27421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5408'. [ 737.009160][T27421] netlink: 'syz.0.5408': attribute type 10 has an invalid length. [ 737.009182][T27421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5408'. [ 737.649857][T27184] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 737.733514][T27450] sctp: [Deprecated]: syz.0.5413 (pid 27450) Use of int in maxseg socket option. [ 737.733514][T27450] Use struct sctp_assoc_value instead [ 737.991070][T27472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5414'. [ 737.991489][T27473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5414'. [ 738.161156][T27480] netlink: 'syz.4.5418': attribute type 8 has an invalid length. [ 738.319656][T27480] bond5: option packets_per_slave: invalid value (18446744073709551615) [ 738.319685][T27480] bond5: option packets_per_slave: allowed values 0 - 65535 [ 738.355446][T27480] bond5 (unregistering): Released all slaves [ 738.487455][T27495] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5421'. [ 738.499921][T27495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5421'. [ 738.561382][T27499] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5421'. [ 738.791843][T27510] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5424'. [ 738.806064][T27510] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5424'. [ 738.881233][T27510] macsec3: entered promiscuous mode [ 738.980063][T27524] macsec3: entered promiscuous mode [ 739.035488][T27158] wlan1: Trigger new scan to find an IBSS to join [ 739.190507][T27530] netlink: Setting conntrack mark requires 'commit' flag. [ 739.190543][T27530] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 739.397206][T27539] IPVS: rr: UDP [fe80::aa]:8080 - no destination available [ 739.415537][T27541] openvswitch: netlink: IP tunnel dst address not specified [ 739.415572][T27541] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 739.421460][T27541] IPVS: set_ctl: invalid protocol: 255 172.30.1.3:20004 [ 739.779293][T27556] netlink: 'syz.3.5437': attribute type 178 has an invalid length. [ 739.779629][T27558] netlink: 'syz.3.5437': attribute type 178 has an invalid length. [ 740.208058][T27584] xt_policy: too many policy elements [ 741.338485][T27637] netlink: 'syz.0.5459': attribute type 7 has an invalid length. [ 741.384432][T27637] netlink: 'syz.0.5459': attribute type 7 has an invalid length. [ 741.503808][ T4938] Bluetooth: hci4: command 0x0405 tx timeout [ 741.738960][T27627] No such timeout policy "s" [ 741.738975][T27627] netlink: Failed to associated timeout policy 's' [ 741.767858][T27655] Unsupported ieee802154 address type: 0 [ 741.851283][T27650] __nla_validate_parse: 10 callbacks suppressed [ 741.851307][T27650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5464'. [ 741.940868][T27661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5468'. [ 741.954640][T27661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5468'. [ 742.001029][T27661] netlink: 'syz.2.5468': attribute type 9 has an invalid length. [ 742.433191][T27683] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5475'. [ 742.439231][T27683] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5475'. [ 742.778848][T27708] xt_CT: You must specify a L4 protocol and not use inversions on it [ 742.790030][T27710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5483'. [ 742.827597][T27711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5483'. [ 742.926845][T27714] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5485'. [ 743.017788][T27723] netlink: 'syz.0.5489': attribute type 11 has an invalid length. [ 743.100930][T27722] xt_CT: You must specify a L4 protocol and not use inversions on it [ 743.132365][T27722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5486'. [ 743.175445][T27733] ip_tables: iptables: counters copy to user failed while replacing table [ 743.237601][T27732] syzkaller1: entered promiscuous mode [ 743.237638][T27732] syzkaller1: entered allmulticast mode [ 743.870843][T27770] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5501'. [ 743.994018][T27184] wlan1: Trigger new scan to find an IBSS to join [ 744.059569][T27782] netlink: 'syz.4.5506': attribute type 1 has an invalid length. [ 744.235927][T27790] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 744.235949][T27790] IPv6: NLM_F_CREATE should be set when creating new route [ 744.252987][ T4938] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 744.574504][T27810] hsr0 speed is unknown, defaulting to 1000 [ 744.657674][T27812] batman_adv: batadv0: Adding interface: dummy0 [ 744.657695][T27812] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 744.657730][T27812] batman_adv: batadv0: Interface activated: dummy0 [ 744.734429][T27812] batadv0: mtu less than device minimum [ 744.737370][T27812] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 744.738843][T27812] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 744.740309][T27812] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 744.741823][T27812] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 744.744091][T27812] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 744.747663][T27812] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 744.751509][T27812] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 744.755289][T27812] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 744.758793][T27812] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 745.174139][T27822] SET target dimension over the limit! [ 745.460506][T27828] veth0_to_bond: entered allmulticast mode [ 745.844053][T27856] netlink: 'syz.2.5526': attribute type 2 has an invalid length. [ 745.955664][T27861] netlink: 'syz.1.5528': attribute type 10 has an invalid length. [ 746.364379][T27163] wlan1: Creating new IBSS network, BSSID 62:4c:25:08:be:ff [ 746.855798][T27903] __nla_validate_parse: 10 callbacks suppressed [ 746.855820][T27903] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5542'. [ 746.939740][T27906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5543'. [ 746.991215][T27911] netlink: 'syz.4.5543': attribute type 16 has an invalid length. [ 747.601531][T27936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5551'. [ 747.607198][T27936] veth1_vlan: left promiscuous mode [ 747.611153][T27938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5551'. [ 748.153576][T27958] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5557'. [ 748.316703][T27964] netlink: 'syz.0.5560': attribute type 11 has an invalid length. [ 748.320544][T27969] netlink: 'syz.0.5560': attribute type 11 has an invalid length. [ 748.408563][T27967] netlink: 136 bytes leftover after parsing attributes in process `syz.2.5562'. [ 748.737933][T27995] netlink: 'syz.0.5567': attribute type 4 has an invalid length. [ 749.107586][T28009] bond5: entered allmulticast mode [ 749.136510][T28015] x_tables: duplicate underflow at hook 3 [ 749.201571][T28019] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 749.370478][T28027] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5578'. [ 749.396054][T28019] bond6 (unregistering): Released all slaves [ 749.928370][T28055] net_ratelimit: 12 callbacks suppressed [ 749.928390][T28055] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 750.436485][T28084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5587'. [ 750.471704][T28084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5587'. [ 750.581545][T28094] netlink: 'syz.1.5590': attribute type 4 has an invalid length. [ 750.600165][T28095] netlink: 'syz.1.5590': attribute type 4 has an invalid length. [ 750.800563][T28099] pimreg3: entered allmulticast mode [ 750.905218][T28115] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5594'. [ 751.280047][T28127] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.816912][T28164] ip_tables: iptables: counters copy to user failed while replacing table [ 752.274171][T28180] __nla_validate_parse: 5 callbacks suppressed [ 752.274195][T28180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5610'. [ 752.489797][T28190] netlink: 'syz.4.5613': attribute type 3 has an invalid length. [ 752.489825][T28190] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5613'. [ 752.506498][T28183] rdma_rxe: rxe_newlink: failed to add wg1 [ 753.143952][T28228] tipc: Enabling of bearer rejected, failed to enable media [ 756.079866][T28225] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 756.288215][T28255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5629'. [ 756.288255][T28255] netlink: 'syz.3.5629': attribute type 1 has an invalid length. [ 756.288271][T28255] netlink: 'syz.3.5629': attribute type 2 has an invalid length. [ 756.369860][T28259] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 756.586415][T28268] xt_hashlimit: size too large, truncated to 1048576 [ 756.874277][T28291] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5640'. [ 756.879487][T28291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5640'. [ 756.903530][T28291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5640'. [ 757.153528][T28298] 8021q: adding VLAN 0 to HW filter on device bond11 [ 757.169126][T28298] macvlan9: entered promiscuous mode [ 757.169187][T28298] macvlan9: entered allmulticast mode [ 757.171063][T28298] bond11: (slave macvlan9): Error -22 calling dev_set_mtu [ 757.230439][T28302] netlink: 'syz.0.5644': attribute type 1 has an invalid length. [ 757.285794][T28299] bond8: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 757.295473][T28299] bond8 (unregistering): Released all slaves [ 757.347841][T28311] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5641'. [ 757.420169][T28299] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5641'. [ 757.485258][T28308] 8021q: adding VLAN 0 to HW filter on device bond12 [ 757.488096][T28308] bond11: (slave bond12): making interface the new active one [ 757.488744][T28308] bond11: (slave bond12): Enslaving as an active interface with an up link [ 757.548122][T28310] bond11: (slave gretap1): Enslaving as a backup interface with an up link [ 757.870303][T28339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5651'. [ 757.870332][T28339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5651'. [ 758.396390][T28367] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5659'. [ 758.456063][T28371] ip6gre1: entered promiscuous mode [ 758.459761][T28364] xt_hashlimit: size too large, truncated to 1048576 [ 758.596917][T28374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5661'. [ 758.823321][T28385] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 759.120071][T28397] netlink: 'syz.2.5668': attribute type 1 has an invalid length. [ 759.151356][T28405] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 759.160655][T28407] netlink: 'syz.4.5669': attribute type 2 has an invalid length. [ 759.160676][T28407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5669'. [ 759.170787][T28399] netlink: 'syz.2.5668': attribute type 1 has an invalid length. [ 759.170840][T28399] netlink: 500 bytes leftover after parsing attributes in process `syz.2.5668'. [ 759.278598][T28412] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5669'. [ 759.310063][T28414] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5673'. [ 759.472512][T28407] IPv6: NLM_F_CREATE should be specified when creating new route [ 759.516578][T27145] nci: nci_rx_work: unknown MT 0x1 [ 759.528074][T28414] netlink: 'syz.0.5673': attribute type 2 has an invalid length. [ 760.180112][T28420] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 760.302996][T28449] netlink: 'syz.1.5675': attribute type 33 has an invalid length. [ 760.340620][T28449] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 760.359830][T28449] bond8 (unregistering): Released all slaves [ 760.448467][T28456] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 760.501360][T28459] netlink: 'syz.3.5679': attribute type 1 has an invalid length. [ 760.543034][T28459] veth7: entered allmulticast mode [ 760.587488][T28467] netlink: 'syz.0.5680': attribute type 2 has an invalid length. [ 760.867283][T28481] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 761.000174][T28483] xt_hashlimit: size too large, truncated to 1048576 [ 761.505588][T28505] netlink: 'syz.4.5691': attribute type 58 has an invalid length. [ 762.189077][T28516] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 762.248151][T28516] bond8: (slave lo): Enslaving as an active interface with an up link [ 762.248424][T28516] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 762.427858][T28525] __nla_validate_parse: 12 callbacks suppressed [ 762.427883][T28525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5698'. [ 763.021095][T28553] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5703'. [ 763.050047][T28525] team0 (unregistering): Port device team_slave_1 removed [ 763.107423][T28525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 763.125214][T28547] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5701'. [ 763.398872][T28558] Cannot find del_set index 3 as target [ 763.531627][T28558] bond9: entered allmulticast mode [ 763.545940][T28562] bond9 (unregistering): Released all slaves [ 763.617786][T28573] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5709'. [ 763.999786][T28603] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5717'. [ 764.078256][T28608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.182339][T28613] netlink: Invalid conntrack helper [ 764.182364][T28613] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 764.298181][T28616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.298949][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.639562][T28618] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5722'. [ 765.102403][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.754478][T28632] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 765.818157][T28636] xt_ecn: cannot match TCP bits for non-tcp packets [ 765.978535][T28642] ip_tables: iptables: counters copy to user failed while replacing table [ 766.152384][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.812375][T28581] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 767.044332][T28647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5729'. [ 767.044359][T28647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5729'. [ 767.044424][T28647] vlan0: entered promiscuous mode [ 767.164263][T28653] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5733'. [ 767.185368][T28657] netlink: 3604 bytes leftover after parsing attributes in process `syz.1.5735'. [ 767.192925][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.336556][T28658] openvswitch: netlink: Unknown key attributes 20 [ 767.431457][T28671] erspan1: entered allmulticast mode [ 767.460004][T28673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5738'. [ 767.540097][T28673] 8021q: adding VLAN 0 to HW filter on device bond13 [ 767.640503][T28679] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5742'. [ 767.695185][T28682] netlink: zone id is out of range [ 767.745334][T28684] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5741'. [ 767.745373][T28684] netlink: 'syz.1.5741': attribute type 7 has an invalid length. [ 767.745388][T28684] netlink: 'syz.1.5741': attribute type 8 has an invalid length. [ 767.745402][T28684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5741'. [ 767.869841][T28691] ipvlan0: entered promiscuous mode [ 767.869867][T28691] ipvlan0: entered allmulticast mode [ 768.356574][T28711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5748'. [ 768.499009][T28713] x_tables: unsorted entry at hook 2 [ 768.707567][T28721] netlink: 'syz.1.5750': attribute type 16 has an invalid length. [ 768.707594][T28721] netlink: 'syz.1.5750': attribute type 17 has an invalid length. [ 768.739749][T28724] x_tables: duplicate underflow at hook 3 [ 768.792551][T28721] 8021q: adding VLAN 0 to HW filter on device team0 [ 768.798569][T28721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 768.894231][T28721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 768.900504][T28721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 768.926712][T28721] veth1_vlan: left promiscuous mode [ 768.929947][T28721] vlan0: left promiscuous mode [ 768.947236][T28721] veth1_vlan: entered promiscuous mode [ 769.016569][T27180] bridge0: port 1(1¾x9ÿ) entered blocking state [ 769.016684][T27180] bridge0: port 1(1¾x9ÿ) entered forwarding state [ 769.038033][T27180] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.038144][T27180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 769.137355][T28723] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 769.232382][ T7711] net_ratelimit: 13 callbacks suppressed [ 769.232405][ T7711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.232759][T21842] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 769.318994][T28745] veth0: entered promiscuous mode [ 769.371307][T28743] veth0: left promiscuous mode [ 769.381186][T27145] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 769.433819][T28749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5760'. [ 769.660145][T28764] netlink: Unknown conntrack attr (type=1030, max=9) [ 769.660184][T28764] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 769.913585][T27158] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 770.143418][T25412] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 770.167573][T28779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5767'. [ 770.169606][T28779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5767'. [ 770.169884][T28780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5767'. [ 770.362837][T28784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5769'. [ 770.396211][T27178] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 770.396469][T27178] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 770.513721][T21842] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 770.515096][T28791] bond12: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 770.521801][T28791] bond12 (unregistering): Released all slaves [ 770.936497][T28822] ip6t_rpfilter: unknown options [ 771.704484][T28854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.704722][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.974577][T28864] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 771.977233][T28866] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 772.553154][T28895] __nla_validate_parse: 8 callbacks suppressed [ 772.553178][T28895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5794'. [ 772.687601][T28906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5796'. [ 773.323480][T28931] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5802'. [ 773.535056][T28943] Bluetooth: hci0: unsupported parameter 5135 [ 773.535080][T28943] Bluetooth: hci0: unsupported parameter 8192 [ 773.535094][T28943] Bluetooth: hci0: unsupported parameter 5135 [ 773.535108][T28943] Bluetooth: hci0: unsupported parameter 8192 [ 774.232695][T27176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.516655][T28973] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 774.553309][T28975] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5816'. [ 774.553343][T28975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5816'. [ 774.624796][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 774.660135][T28980] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 774.767093][T28983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5821'. [ 774.771201][T28983] x_tables: unsorted entry at hook 3 [ 774.931236][T29003] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5823'. [ 775.083826][T29008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 775.149612][T29019] netlink: 'syz.1.5824': attribute type 12 has an invalid length. [ 775.294632][T29024] pim6reg1: entered promiscuous mode [ 775.294656][T29024] pim6reg1: entered allmulticast mode [ 775.379106][T29029] lo: entered promiscuous mode [ 775.389280][T29029] tunl0: entered promiscuous mode [ 775.391671][T29031] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5829'. [ 775.398360][T29029] gre0: entered promiscuous mode [ 775.421259][T29029] gretap0: entered promiscuous mode [ 775.432148][T29029] erspan0: entered promiscuous mode [ 775.438398][T29029] ip_vti0: entered promiscuous mode [ 775.440274][T29029] ip6_vti0: entered promiscuous mode [ 775.460442][T29029] sit0: entered promiscuous mode [ 775.473566][T29029] ip6tnl0: entered promiscuous mode [ 775.609350][T29029] ip6gre0: entered promiscuous mode [ 775.621458][T29029] syz_tun: entered promiscuous mode [ 775.631542][T29029] ip6gretap0: entered promiscuous mode [ 775.669456][T29029] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.669654][T29029] bridge0: port 1(1¾x9ÿ) entered disabled state [ 775.670109][T29029] bridge0: entered promiscuous mode [ 775.685889][T29029] team0: entered promiscuous mode [ 775.685913][T29029] team_slave_0: entered promiscuous mode [ 775.686441][T29029] team_slave_1: entered promiscuous mode [ 775.719712][T29029] dummy0: entered promiscuous mode [ 775.855306][T29029] nlmon0: entered promiscuous mode [ 775.874406][T29029] batadv0: entered promiscuous mode [ 775.909560][T29029] vxcan0: entered promiscuous mode [ 775.947498][T29029] vxcan1: entered promiscuous mode [ 775.964128][T29029] veth0: entered promiscuous mode [ 775.990418][T29029] veth1: entered promiscuous mode [ 776.025134][T29029] wg0: entered promiscuous mode [ 776.059886][T29029] wg1: entered promiscuous mode [ 776.068990][T29029] wg2: entered promiscuous mode [ 776.085559][T29029] veth0_to_bridge: entered promiscuous mode [ 776.150578][T29029] veth1_to_bridge: entered promiscuous mode [ 776.222983][T29029] veth0_to_bond: entered promiscuous mode [ 776.525895][T29029] veth1_to_bond: entered promiscuous mode [ 776.547087][T29029] bond_slave_1: entered promiscuous mode [ 776.582434][T29029] veth0_to_team: entered promiscuous mode [ 776.607793][T29029] veth1_to_team: entered promiscuous mode [ 776.651568][T29029] veth0_to_batadv: entered promiscuous mode [ 776.670145][T29029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 776.670190][T29029] batadv_slave_0: entered promiscuous mode [ 776.689386][T29029] veth1_to_batadv: entered promiscuous mode [ 776.726382][T29029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 776.726425][T29029] batadv_slave_1: entered promiscuous mode [ 776.757977][T29029] veth0_to_hsr: entered promiscuous mode [ 776.775868][T29029] hsr_slave_0: entered promiscuous mode [ 776.799501][T29029] veth1_to_hsr: entered promiscuous mode [ 776.820810][T29029] hsr_slave_1: entered promiscuous mode [ 776.841278][T29029] veth1_virt_wifi: entered promiscuous mode [ 776.859675][T29029] veth0_virt_wifi: entered promiscuous mode [ 776.918581][T29029] vlan0: entered promiscuous mode [ 776.944824][T29029] vlan1: entered promiscuous mode [ 776.966679][T29029] macvlan0: entered promiscuous mode [ 776.985028][T29029] macvlan1: entered promiscuous mode [ 776.985161][T29029] ipvlan0: entered promiscuous mode [ 776.985273][T29029] ipvlan1: entered promiscuous mode [ 776.985544][T29029] macvtap0: entered promiscuous mode [ 776.987284][T29029] macsec0: entered promiscuous mode [ 777.029316][T29029] geneve0: entered promiscuous mode [ 777.029453][T29029] geneve1: entered promiscuous mode [ 777.029657][T29029] mac80211_hwsim hwsim46 wlan1: entered promiscuous mode [ 777.029766][T29029] sit1: entered promiscuous mode [ 777.029850][T29029] team1: entered promiscuous mode [ 777.029953][T29029] team2: entered promiscuous mode [ 777.030053][T29029] vxlan0: entered promiscuous mode [ 777.030136][T29029] gretap1: entered promiscuous mode [ 777.030219][T29029] macvlan2: entered promiscuous mode [ 777.030339][T29029] gre1: entered promiscuous mode [ 777.030421][T29029] ip6gre1: entered promiscuous mode [ 777.030503][T29029] bond1: entered promiscuous mode [ 777.030514][T29029] gretap2: entered promiscuous mode [ 777.042955][T29029] gretap3: entered promiscuous mode [ 777.043301][T29029] vxlan1: entered promiscuous mode [ 777.085579][T29029] ip6erspan0: entered promiscuous mode [ 777.086026][T29029] netdevsim netdevsim1 eth0: entered promiscuous mode [ 777.086476][T29029] netdevsim netdevsim1 eth1: entered promiscuous mode [ 777.086898][T29029] netdevsim netdevsim1 eth2: entered promiscuous mode [ 777.089369][T29029] netdevsim netdevsim1 eth3: entered promiscuous mode [ 777.089845][T29029] mac80211_hwsim hwsim51 wlan2: entered promiscuous mode [ 777.090365][T29029] ip6tnl1: entered promiscuous mode [ 777.104664][T29029] gtp0: entered promiscuous mode [ 777.105556][T29029] gre2: entered promiscuous mode [ 777.127535][T29029] bridge1: entered promiscuous mode [ 777.148813][T29029] bond2: entered promiscuous mode [ 777.176603][T29029] bond3: entered promiscuous mode [ 777.176663][T29029] geneve3: entered promiscuous mode [ 777.264437][T29029] vti60: entered promiscuous mode [ 777.264591][T29029] gre3: entered promiscuous mode [ 777.264720][T29029] mac80211_hwsim hwsim52 wlan3: entered promiscuous mode [ 777.264871][T29029] syztnl1: entered promiscuous mode [ 777.310289][T29029] mac80211_hwsim hwsim55 wlan4: entered promiscuous mode [ 777.310424][T29029] mac80211_hwsim hwsim56 wlan5: entered promiscuous mode [ 777.310524][T29029] bond6: entered promiscuous mode [ 777.310952][T29029] bond0: entered promiscuous mode [ 777.337681][T29029] bridge2: entered promiscuous mode [ 777.338113][T29029] vxcan2: entered promiscuous mode [ 777.340423][T29029] ip6tnl2: entered promiscuous mode [ 777.340747][T29029] macvlan3: entered promiscuous mode [ 777.341460][T29029] sit2: entered promiscuous mode [ 777.366056][T29029] bridge3: entered promiscuous mode [ 777.366242][T29029] bond7: entered promiscuous mode [ 777.366386][T29029] xfrm1: entered promiscuous mode [ 777.366537][T29029] veth2: entered promiscuous mode [ 777.366712][T29029] veth3: entered promiscuous mode [ 777.369046][T29029] ip6erspan1: entered promiscuous mode [ 777.414405][T29029] macvlan4: entered promiscuous mode [ 777.414626][T29029] pimreg3: entered promiscuous mode [ 777.450527][T29029] vlan4: entered promiscuous mode [ 777.472537][T29029] sit3: entered promiscuous mode [ 777.481860][T29029] bond8: entered promiscuous mode [ 777.496003][T29029] mac80211_hwsim hwsim45 pim6reg0: entered promiscuous mode [ 777.496194][T29029] erspan1: entered promiscuous mode [ 777.496442][T29029] gtp1: entered promiscuous mode [ 777.504025][T29029] ip6tnl3: entered promiscuous mode [ 777.504163][T29029] ip6tnl4: entered promiscuous mode [ 777.504305][T29029] ip6tnl5: entered promiscuous mode [ 777.505367][T29029] mac80211_hwsim hwsim62 wlan6: entered promiscuous mode [ 777.583509][T27156] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.672168][T27145] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.672226][T27145] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.672264][T27145] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.814374][T29058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5835'. [ 777.887251][T29059] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5834'. [ 777.943493][T29066] netlink: 'syz.3.5836': attribute type 83 has an invalid length. [ 778.239565][T29075] Bluetooth: hci0: unsupported parameter 5135 [ 778.239590][T29075] Bluetooth: hci0: unsupported parameter 8192 [ 778.239604][T29075] Bluetooth: hci0: unsupported parameter 5135 [ 778.239617][T29075] Bluetooth: hci0: unsupported parameter 8192 [ 778.519957][T29087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5841'. [ 778.559388][T29093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5841'. [ 778.810388][T29103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5845'. [ 778.869714][T29103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 778.871021][T29103] netlink: 'syz.2.5845': attribute type 2 has an invalid length. [ 778.957287][T29108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5846'. [ 779.134613][T29112] mac80211_hwsim hwsim43 wlan0: entered promiscuous mode [ 779.160749][T29115] netlink: 'syz.3.5848': attribute type 22 has an invalid length. [ 779.160772][T29115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5848'. [ 779.316790][T29126] veth1_to_bond: entered allmulticast mode [ 779.318329][T29126] veth1_to_bond: entered promiscuous mode [ 779.343219][T27182] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 779.347818][T29115] netlink: 'syz.3.5848': attribute type 22 has an invalid length. [ 779.347841][T29115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5848'. [ 779.483916][T29132] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5852'. [ 779.483946][T29132] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5852'. [ 779.615017][T29122] veth1_to_bond: left promiscuous mode [ 779.615228][T29122] veth1_to_bond: left allmulticast mode [ 780.803293][T29177] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.822602][ T1386] bridge0: port 3(veth1_to_bridge) entered disabled state [ 802.161900][T27139] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 805.531664][T27152] tipc: Subscription rejected, illegal request [ 805.706123][T29211] __nla_validate_parse: 6 callbacks suppressed [ 805.706145][T29211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5871'. [ 805.958749][ T4938] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 805.971896][ T4938] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 805.987607][ T4938] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 805.988631][ T4938] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 805.989279][ T4938] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 806.033252][T29220] xt_hashlimit: size too large, truncated to 1048576 [ 806.689136][T29242] syzkaller1: entered promiscuous mode [ 806.689162][T29242] syzkaller1: entered allmulticast mode [ 807.086481][T29221] hsr0 speed is unknown, defaulting to 1000 [ 807.565786][T29270] 8021q: adding VLAN 0 to HW filter on device bond14 [ 807.645752][T29291] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5890'. [ 807.686290][T29276] 8021q: adding VLAN 0 to HW filter on device bond15 [ 807.802076][T29278] xt_hashlimit: size too large, truncated to 1048576 [ 808.062941][T20919] Bluetooth: hci2: command tx timeout [ 808.091794][T29308] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5894'. [ 808.092840][T29308] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5894'. [ 808.092968][T29308] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5894'. [ 808.093097][T29308] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5894'. [ 808.093513][T29308] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5894'. [ 808.093827][T29308] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5894'. [ 808.094115][T29308] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5894'. [ 808.094407][T29308] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5894'. [ 808.441153][T29320] bond0: (slave ip6tnl0): refused to change device type [ 808.479557][T29320] IPVS: length: 239 != 24 [ 808.838129][T29342] netlink: 'syz.1.5902': attribute type 7 has an invalid length. [ 808.838154][T29342] netlink: 'syz.1.5902': attribute type 8 has an invalid length. [ 808.896921][T29344] openvswitch: netlink: Key type 1542 is out of range max 32 [ 809.114857][T29221] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.114972][T29221] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.115135][T29221] bridge_slave_0: entered allmulticast mode [ 809.133232][T29221] bridge_slave_0: entered promiscuous mode [ 809.191514][T29221] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.191702][T29221] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.191860][T29221] bridge_slave_1: entered allmulticast mode [ 809.218544][T29221] bridge_slave_1: entered promiscuous mode [ 809.407443][T29221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 809.437594][T29221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 809.623104][T29221] team0: Port device team_slave_0 added [ 809.634680][T29221] team0: Port device team_slave_1 added [ 809.715007][T29365] xt_hashlimit: size too large, truncated to 1048576 [ 809.810196][T29221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 809.810215][T29221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.810244][T29221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 809.834069][T29221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 809.834114][T29221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.834196][T29221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 810.144923][T20919] Bluetooth: hci2: command tx timeout [ 810.243509][T29377] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.279054][T29374] geneve4: entered promiscuous mode [ 810.279078][T29374] geneve4: entered allmulticast mode [ 810.320782][T29221] hsr_slave_0: entered promiscuous mode [ 810.328223][T29221] hsr_slave_1: entered promiscuous mode [ 810.330707][T29221] debugfs: 'hsr0' already exists in 'hsr' [ 810.330729][T29221] Cannot create hsr debugfs directory [ 810.333081][T27163] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 810.333218][T27163] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 810.333321][T27163] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 810.333437][T27163] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0 [ 810.756599][T20919] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 810.856690][T29405] __nla_validate_parse: 132 callbacks suppressed [ 810.856712][T29405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5917'. [ 810.856739][T29405] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5917'. [ 810.891334][T29390] gtp1: entered promiscuous mode [ 810.891359][T29390] gtp1: entered allmulticast mode [ 811.032324][T29221] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 811.032365][T29221] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.082273][T29410] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5918'. [ 811.214121][T29221] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 811.214161][T29221] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.375949][T29221] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 811.376001][T29221] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.436431][T29414] syzkaller0: entered promiscuous mode [ 811.436458][T29414] syzkaller0: entered allmulticast mode [ 811.459898][T29419] Cannot find del_set index 4 as target [ 811.484811][T29421] Cannot find del_set index 4 as target [ 811.525051][T29221] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 811.525093][T29221] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.645698][T29428] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5923'. [ 811.906456][T29438] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5927'. [ 811.923003][T29436] netlink: 'syz.1.5927': attribute type 1 has an invalid length. [ 811.923023][T29436] netlink: 'syz.1.5927': attribute type 2 has an invalid length. [ 811.923036][T29436] netlink: 'syz.1.5927': attribute type 3 has an invalid length. [ 811.923048][T29436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5927'. [ 811.985702][T27163] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 812.049726][T29221] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 812.068070][T29221] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 812.070400][T29221] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 812.090495][T29221] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 812.091474][T29221] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 812.131333][T29221] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 812.139961][T29221] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 812.155327][T29221] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 812.222461][T20919] Bluetooth: hci2: command tx timeout [ 812.505549][T29221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 812.574624][T29221] 8021q: adding VLAN 0 to HW filter on device team0 [ 812.577027][T29457] FAULT_INJECTION: forcing a failure. [ 812.577027][T29457] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 812.577063][T29457] CPU: 1 UID: 0 PID: 29457 Comm: syz.3.5931 Not tainted syzkaller #0 PREEMPT(full) [ 812.577088][T29457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 812.577102][T29457] Call Trace: [ 812.577111][T29457] [ 812.577120][T29457] dump_stack_lvl+0xe8/0x150 [ 812.577160][T29457] should_fail_ex+0x410/0x560 [ 812.577190][T29457] _copy_from_iter+0x1d3/0x1660 [ 812.577220][T29457] ? __alloc_skb+0x27a/0x7a0 [ 812.577248][T29457] ? __alloc_skb+0x27a/0x7a0 [ 812.577276][T29457] ? __alloc_skb+0x27a/0x7a0 [ 812.577300][T29457] ? __pfx__copy_from_iter+0x10/0x10 [ 812.577323][T29457] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 812.577358][T29457] ? __alloc_skb+0x27a/0x7a0 [ 812.577381][T29457] ? __alloc_skb+0x27a/0x7a0 [ 812.577413][T29457] ? netlink_sendmsg+0x650/0xb40 [ 812.577447][T29457] ? skb_put+0x112/0x210 [ 812.577477][T29457] netlink_sendmsg+0x6c0/0xb40 [ 812.577522][T29457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 812.577566][T29457] ? apparmor_socket_sendmsg+0x98/0x360 [ 812.577594][T29457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 812.577627][T29457] sock_sendmsg_nosec+0x13a/0x180 [ 812.577666][T29457] ____sys_sendmsg+0x54e/0x850 [ 812.577710][T29457] ? __pfx_____sys_sendmsg+0x10/0x10 [ 812.577749][T29457] ? import_iovec+0x73/0xa0 [ 812.577781][T29457] ___sys_sendmsg+0x2a5/0x360 [ 812.577810][T29457] ? __lock_acquire+0x747/0x2de0 [ 812.577838][T29457] ? __pfx____sys_sendmsg+0x10/0x10 [ 812.577906][T29457] ? __fget_files+0x2a/0x420 [ 812.577937][T29457] ? __fget_files+0x3a2/0x420 [ 812.577980][T29457] __x64_sys_sendmsg+0x1b1/0x290 [ 812.578013][T29457] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 812.578065][T29457] do_syscall_64+0x166/0x520 [ 812.578091][T29457] ? trace_irq_disable+0x3b/0x140 [ 812.578113][T29457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.578137][T29457] ? clear_bhb_loop+0x70/0xc0 [ 812.578166][T29457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.578190][T29457] RIP: 0033:0x7fb537f9e159 [ 812.578210][T29457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 812.578231][T29457] RSP: 002b:00007fb538ea6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 812.578256][T29457] RAX: ffffffffffffffda RBX: 00007fb538225fa0 RCX: 00007fb537f9e159 [ 812.578273][T29457] RDX: 0000000000000000 RSI: 0000200000001240 RDI: 0000000000000004 [ 812.578288][T29457] RBP: 00007fb538ea6090 R08: 0000000000000000 R09: 0000000000000000 [ 812.578302][T29457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 812.578316][T29457] R13: 00007fb538226038 R14: 00007fb538225fa0 R15: 00007fff7f02d158 [ 812.578353][T29457] [ 812.651605][T27139] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.651880][T27139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 812.841731][T29458] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 812.890595][T27163] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.890919][T27163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 813.039096][T29221] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 813.557166][T29486] netlink: 'syz.2.5934': attribute type 1 has an invalid length. [ 813.613692][T29487] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5936'. [ 813.634219][T29486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5934'. [ 813.717626][T29495] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 814.153951][T29221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 814.510161][T29529] ipt_ECN: cannot use operation on non-tcp rule [ 814.528999][T29531] ipt_ECN: cannot use operation on non-tcp rule [ 814.652501][T29536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5949'. [ 814.687833][T29538] netlink: 'syz.3.5950': attribute type 11 has an invalid length. [ 814.824751][T29549] openvswitch: netlink: Message has 264 unknown bytes. [ 814.867477][T29221] veth0_vlan: entered promiscuous mode [ 814.882955][T29551] netlink: 'syz.3.5953': attribute type 21 has an invalid length. [ 814.882977][T29551] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5953'. [ 814.919545][T29221] veth1_vlan: entered promiscuous mode [ 815.056227][T29556] openvswitch: netlink: IP tunnel dst address not specified [ 815.106526][T29221] veth0_macvtap: entered promiscuous mode [ 815.140163][T29221] veth1_macvtap: entered promiscuous mode [ 815.334156][T29568] bond9: Removing last ns target with arp_interval on [ 815.370202][T29221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 815.467529][T29221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 815.532280][T27139] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.532753][T27139] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.532797][T27139] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.532835][T27139] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.864981][T29582] netlink: 'syz.2.5960': attribute type 4 has an invalid length. [ 815.865265][T29582] netlink: 'syz.2.5960': attribute type 4 has an invalid length. [ 815.865520][T29582] netlink: 'syz.2.5960': attribute type 4 has an invalid length. [ 815.865755][T29582] netlink: 'syz.2.5960': attribute type 4 has an invalid length. [ 815.972679][T29588] __nla_validate_parse: 3 callbacks suppressed [ 815.972703][T29588] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5961'. [ 815.975109][T29588] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5961'. [ 816.029273][T23705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.029298][T23705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.122887][T23705] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.122910][T23705] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.207478][T29588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5961'. [ 816.410562][T29598] netlink: 112 bytes leftover after parsing attributes in process `syz.3.5964'. [ 816.586888][T29604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5965'. [ 816.978345][T20919] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 816.988391][T29617] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 816.988438][T29617] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 817.028216][ T4938] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 817.045872][ T4938] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 817.047135][ T4938] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 817.049923][ T4938] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 817.051870][ T4938] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 817.051897][T29618] netlink: 'syz.4.5970': attribute type 1 has an invalid length. [ 817.114694][T29618] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 817.144225][T29618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5970'. [ 817.144609][T29618] 8021q: VLANs not supported on ip_vti0 [ 817.474599][T17647] tipc: Resetting bearer [ 817.547276][T17647] tipc: Disabling bearer [ 817.673312][T29643] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.5975'. [ 817.673343][T29643] veth0_to_bond: default FDB implementation only supports local addresses [ 818.155640][T29663] netlink: 'syz.4.5980': attribute type 64 has an invalid length. [ 818.186363][T29659] syzkaller0: entered promiscuous mode [ 818.186387][T29659] syzkaller0: entered allmulticast mode [ 818.247537][T29658] xt_CT: No such helper "netbios-ns" [ 818.409918][T29619] hsr0 speed is unknown, defaulting to 1000 [ 818.431079][T29671] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5982'. [ 818.457714][T29672] netlink: 'syz.0.5982': attribute type 12 has an invalid length. [ 818.486617][T29669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5982'. [ 819.183065][T20919] Bluetooth: hci5: command tx timeout [ 819.257846][T29698] netlink: 'syz.0.5990': attribute type 29 has an invalid length. [ 819.325797][T29699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 820.209535][T29717] Bluetooth: ISO socket layer initialized [ 820.281915][T29721] netlink: 'syz.0.5996': attribute type 1 has an invalid length. [ 820.293407][T29720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 820.387701][T29721] 8021q: adding VLAN 0 to HW filter on device bond16 [ 820.750906][T29732] netlink: 'syz.0.5999': attribute type 21 has an invalid length. [ 820.750931][T29732] netlink: 'syz.0.5999': attribute type 22 has an invalid length. [ 820.750947][T29732] netlink: 'syz.0.5999': attribute type 23 has an invalid length. [ 820.750963][T29732] netlink: 'syz.0.5999': attribute type 25 has an invalid length. [ 820.750978][T29732] netlink: 'syz.0.5999': attribute type 26 has an invalid length. [ 820.750993][T29732] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5999'. [ 820.855952][T29732] netlink: 'syz.0.5999': attribute type 12 has an invalid length. [ 820.855977][T29732] netlink: 'syz.0.5999': attribute type 29 has an invalid length. [ 821.262975][T20919] Bluetooth: hci5: command tx timeout [ 821.340479][T29619] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.342290][T29619] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.344010][T29619] bridge_slave_0: entered allmulticast mode [ 821.378995][T29619] bridge_slave_0: entered promiscuous mode [ 821.471099][T29619] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.476377][T29619] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.479676][T29619] bridge_slave_1: entered allmulticast mode [ 821.504283][T29619] bridge_slave_1: entered promiscuous mode [ 821.781268][T29619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 821.828537][T29619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 821.945367][T29619] team0: Port device team_slave_0 added [ 821.964930][T29619] team0: Port device team_slave_1 added [ 822.056087][T29619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 822.056107][T29619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 822.056137][T29619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 822.060010][T29619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 822.060027][T29619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 822.060057][T29619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 822.340460][T29774] __nla_validate_parse: 1 callbacks suppressed [ 822.340483][T29774] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6005'. [ 823.019276][T29619] hsr_slave_0: entered promiscuous mode [ 823.036358][T29619] hsr_slave_1: entered promiscuous mode [ 823.044570][T29619] debugfs: 'hsr0' already exists in 'hsr' [ 823.044625][T29619] Cannot create hsr debugfs directory [ 823.343038][T20919] Bluetooth: hci5: command tx timeout [ 823.899541][T29817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6013'. [ 824.018945][T29813] x_tables: duplicate underflow at hook 1 [ 824.479479][T29830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6020'. [ 824.479502][T29830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6020'. [ 824.560400][T29831] netlink: 'syz.4.6018': attribute type 7 has an invalid length. [ 824.859884][T29840] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6022'. [ 824.885352][T29843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6022'. [ 824.885377][T29843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6022'. [ 824.901621][T29619] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 824.901668][T29619] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.167179][T29845] netlink: 'syz.4.6023': attribute type 4 has an invalid length. [ 825.167203][T29845] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6023'. [ 825.256160][T29845] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 825.425442][T20919] Bluetooth: hci5: command tx timeout [ 825.456747][T29619] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 825.456788][T29619] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.897742][T29859] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 826.118749][T29619] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 826.118793][T29619] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.411567][T29619] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 826.411609][T29619] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.497210][T29862] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.6028'. [ 827.341417][T29883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6033'. [ 827.405988][T29892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6033'. [ 827.498541][T29882] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6032'. [ 827.966157][T29899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6035'. [ 828.206543][T29904] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6037'. [ 828.617987][T29619] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 828.647363][T29619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 828.663121][T29619] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 828.704940][T29619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 828.708244][T29619] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 828.754884][T29619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 828.756426][T29619] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 828.970465][T29619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 829.571312][T29619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 829.732391][T29930] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 829.800077][T29619] 8021q: adding VLAN 0 to HW filter on device team0 [ 829.890380][T27173] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.890511][T27173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 830.018327][T27163] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.018452][T27163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 830.105875][T29936] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6044'. [ 830.191252][T29905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6036'. [ 830.603388][T29950] smc: net device team0 applied user defined pnetid SYZ2 [ 830.610033][T29937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6045'. [ 831.064331][T29944] can: request_module (can-proto-0) failed. [ 831.433067][T29957] netlink: NAT attribute has 5 unknown bytes [ 831.433106][T29957] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 831.841761][T29971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6052'. [ 831.841801][T29971] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6052'. [ 832.885144][T30000] netlink: 'syz.2.6058': attribute type 1 has an invalid length. [ 832.885170][T30000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6058'. [ 832.940089][T30000] netlink: 'syz.2.6058': attribute type 1 has an invalid length. [ 832.940116][T30000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6058'. [ 833.655363][T29619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 834.001245][T30024] syzkaller0: entered promiscuous mode [ 834.001272][T30024] syzkaller0: entered allmulticast mode [ 834.418669][T27173] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 834.613241][T29619] veth0_vlan: entered promiscuous mode [ 834.621817][T30036] netlink: 'syz.1.6068': attribute type 1 has an invalid length. [ 834.848840][T30036] bond9: entered promiscuous mode [ 834.849285][T30036] 8021q: adding VLAN 0 to HW filter on device bond9 [ 834.977301][T30048] netlink: 228 bytes leftover after parsing attributes in process `syz.0.6070'. [ 834.979994][T29619] veth1_vlan: entered promiscuous mode [ 835.788217][T29619] veth0_macvtap: entered promiscuous mode [ 835.821626][T29619] veth1_macvtap: entered promiscuous mode [ 835.868592][T29619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 835.889352][T29619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 836.002495][T27158] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.148004][T27142] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.148397][T27142] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.195470][T30063] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6074'. [ 836.213565][T27146] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.643350][T27142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.643375][T27142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.785385][T27146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.785411][T27146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.985716][T30078] netlink: Conntrack attr has 8 unknown bytes [ 836.985755][T30078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 836.991541][T30079] netlink: Conntrack attr has 8 unknown bytes [ 836.991579][T30079] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 837.220453][T30082] Unknown options in mask 4 [ 837.298065][T30087] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6083'. [ 837.865565][T30099] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5966'. [ 838.450538][T30102] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6088'. [ 838.462218][T30102] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6088'. [ 838.494857][T30102] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 838.495019][T30102] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 838.520352][T20919] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 838.535516][T20919] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 838.538085][T20919] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 838.550280][T20919] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 838.554500][T20919] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 838.920464][T30126] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6092'. [ 839.777299][T30133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6093'. [ 839.777439][T30133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 839.923594][T30133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 840.406570][T30145] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6096'. [ 840.677869][T20919] Bluetooth: hci3: command tx timeout [ 840.681398][T30152] rdma_rxe: rxe_newlink: failed to add lo [ 840.810320][T30148] netlink: 'syz.2.6097': attribute type 4 has an invalid length. [ 841.373224][T27149] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 841.373268][T27149] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.899193][T30178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6105'. [ 841.930544][T27149] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 841.930586][T27149] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.159318][T30112] hsr0 speed is unknown, defaulting to 1000 [ 842.226455][T30173] bridge7: entered allmulticast mode [ 842.257992][T30178] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 842.259898][T30178] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6105'. [ 842.702718][T20919] Bluetooth: hci3: command tx timeout [ 843.299342][T27149] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 843.299384][T27149] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.474894][T30203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6113'. [ 843.906252][T27149] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 843.906295][T27149] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.040116][T30216] netlink: NAT attribute has 8 unknown bytes [ 844.040156][T30216] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 844.269699][T30221] sctp: [Deprecated]: syz.3.6117 (pid 30221) Use of int in max_burst socket option deprecated. [ 844.269699][T30221] Use struct sctp_assoc_value instead [ 844.469574][T30220] xt_hashlimit: size too large, truncated to 1048576 [ 844.774720][T30232] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6119'. [ 844.798418][T20919] Bluetooth: hci3: command tx timeout [ 845.245902][T30238] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6121'. [ 845.245955][T30238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6121'. [ 845.282839][T27169] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 845.341537][T30238] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6121'. [ 845.341584][T30238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6121'. [ 845.889966][T30249] netlink: 'syz.3.6122': attribute type 1 has an invalid length. [ 846.100443][T30258] netlink: 'syz.4.6123': attribute type 17 has an invalid length. [ 846.100471][T30258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6123'. [ 846.100504][T30258] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6123'. [ 846.219150][T30258] gretap0: entered promiscuous mode [ 846.253676][T30258] gretap0: left promiscuous mode [ 846.481499][T30244] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 846.867105][T20919] Bluetooth: hci3: command tx timeout [ 846.976349][T30112] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.976482][T30112] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.976679][T30112] bridge_slave_0: entered allmulticast mode [ 847.042506][T30112] bridge_slave_0: entered promiscuous mode [ 847.506659][T20919] Bluetooth: hci0: command 0x0c1a tx timeout [ 847.580358][T30283] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6129'. [ 847.580426][T30283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6129'. [ 847.914565][T30287] Can't find ip_set type ha [ 848.356623][T30112] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.356919][T30112] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.357442][T30112] bridge_slave_1: entered allmulticast mode [ 848.430873][T30112] bridge_slave_1: entered promiscuous mode [ 848.496178][T30283] netlink: 'syz.3.6129': attribute type 12 has an invalid length. [ 848.496244][T30283] netlink: 'syz.3.6129': attribute type 29 has an invalid length. [ 848.496280][T30283] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6129'. [ 848.496323][T30283] netlink: 'syz.3.6129': attribute type 1 has an invalid length. [ 848.496374][T30283] netlink: 'syz.3.6129': attribute type 3 has an invalid length. [ 848.496408][T30283] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6129'. [ 849.150675][T30291] netlink: 'syz.1.6130': attribute type 12 has an invalid length. [ 849.571400][T27149] bridge_slave_1: left promiscuous mode [ 849.597021][T27149] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.820215][T27149] bridge_slave_0: left allmulticast mode [ 849.820286][T27149] bridge_slave_0: left promiscuous mode [ 849.820964][T27149] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.762171][T30311] xt_hashlimit: size too large, truncated to 1048576 [ 851.762234][T30311] xt_hashlimit: max too large, truncated to 1048576 [ 851.762269][T30311] xt_hashlimit: invalid rate [ 854.128182][T30329] xt_hashlimit: size too large, truncated to 1048576 [ 854.706261][T27149] bond2 (unregistering): (slave ip6gre1): Releasing backup interface [ 854.706334][T27149] ip6gre1 (unregistering): left promiscuous mode [ 857.284558][T27149] bond11 (unregistering): (slave gretap1): Releasing backup interface [ 857.579423][T27149] bond1 (unregistering): (slave geneve2): Releasing active interface [ 858.939621][T27149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 859.073291][T27149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 859.117331][T27149] bond0 (unregistering): Released all slaves [ 859.617122][T27149] bond1 (unregistering): Released all slaves [ 859.702688][T27149] bond2 (unregistering): Released all slaves [ 859.827376][T27149] bond3 (unregistering): Released all slaves [ 859.892903][T27149] bond4 (unregistering): Released all slaves [ 859.965742][T27149] bond5 (unregistering): Released all slaves [ 860.031853][T27149] bond6 (unregistering): Released all slaves [ 860.378312][T27149] bond7 (unregistering): Released all slaves [ 860.548225][T27149] bond8 (unregistering): Released all slaves [ 860.747495][T27149] bond9 (unregistering): Released all slaves [ 860.986667][T27149] bond10 (unregistering): Released all slaves [ 861.166177][T27149] bond11 (unregistering): (slave bond12): Releasing backup interface [ 861.168771][T27149] bond11 (unregistering): Released all slaves [ 861.293193][T27149] bond12 (unregistering): Released all slaves [ 861.507569][T27149] bond13 (unregistering): Released all slaves [ 861.627859][T27149] bond14 (unregistering): Released all slaves [ 861.691271][T27149] bond15 (unregistering): Released all slaves [ 861.911769][T27149] bond16 (unregistering): Released all slaves [ 862.850308][T30306] ÿÿÿÿÿÿ: renamed from virt_wifi0 (while UP) [ 866.414434][T30112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 866.707737][T30112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 867.183479][ T4938] Bluetooth: hci4: command 0x0405 tx timeout [ 867.976065][ T4938] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 868.047636][ T4938] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 868.075195][ T4938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 868.103864][ T4938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 868.111561][ T4938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 868.889801][T20919] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 868.898777][T20919] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 869.054851][T20919] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 869.057572][T20919] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 869.074294][T20919] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 870.303120][ T4938] Bluetooth: hci1: command tx timeout [ 871.148301][T30112] team0: Port device team_slave_0 added [ 871.262499][ T4938] Bluetooth: hci6: command tx timeout [ 871.541792][T30112] team0: Port device team_slave_1 added [ 872.034241][T20919] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 872.053973][T20919] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 872.140253][T20919] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 872.227027][T20919] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 872.244328][T20919] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 872.382535][ T4938] Bluetooth: hci1: command tx timeout [ 873.342381][ T4938] Bluetooth: hci6: command tx timeout [ 874.465338][ T4938] Bluetooth: hci1: command tx timeout [ 874.465500][ T4938] Bluetooth: hci4: command tx timeout [ 875.432258][T20919] Bluetooth: hci6: command tx timeout [ 876.547353][ T4938] Bluetooth: hci1: command tx timeout [ 876.547514][T20919] Bluetooth: hci4: command tx timeout [ 876.739800][T30112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 876.739842][T30112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 876.739900][T30112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 877.502541][T20919] Bluetooth: hci6: command tx timeout [ 878.140486][T30112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 878.140544][T30112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 878.140610][T30112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 878.545086][ T1112] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 878.624088][T20919] Bluetooth: hci4: command tx timeout [ 880.705740][T20919] Bluetooth: hci4: command tx timeout [ 882.754751][T30112] hsr_slave_0: entered promiscuous mode [ 882.789815][T30112] hsr_slave_1: entered promiscuous mode [ 882.805470][T30112] debugfs: 'hsr0' already exists in 'hsr' [ 882.805534][T30112] Cannot create hsr debugfs directory [ 886.037442][T27149] hsr_slave_0: left promiscuous mode [ 886.182420][T27149] hsr_slave_1: left promiscuous mode [ 886.215050][T27149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 886.215119][T27149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 886.495007][T27149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 886.495071][T27149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 886.809742][T30415] netlink: 112 bytes leftover after parsing attributes in process `syz.3.6142'. [ 891.658539][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 891.838116][T30336] hsr0 speed is unknown, defaulting to 1000 [ 893.720178][T30351] hsr0 speed is unknown, defaulting to 1000 [ 893.901692][T30425] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6143'. [ 894.087807][T30341] hsr0 speed is unknown, defaulting to 1000 [ 896.696374][T30436] xt_hashlimit: size too large, truncated to 1048576 [ 896.793511][T27149] IPVS: stop unused estimator thread 0... [ 902.327497][ T4938] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 902.331625][ T4938] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 902.378389][ T4938] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 902.506813][ T4938] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 902.509296][ T4938] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 904.703315][T20919] Bluetooth: hci0: command tx timeout [ 904.780650][T27141] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 904.780718][T27141] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 904.780815][T27141] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.780882][T27141] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 42763 - 0 [ 904.780949][T27141] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 905.172336][T30459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6146'. [ 905.304401][T30461] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6146'. [ 905.304438][T30461] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6146'. [ 905.410063][T30455] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 906.782511][T20919] Bluetooth: hci0: command tx timeout [ 907.375991][T27141] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 907.376034][T27141] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 907.376064][T27141] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.376093][T27141] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 42763 - 0 [ 907.376135][T27141] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 908.862177][T20919] Bluetooth: hci0: command tx timeout [ 910.008157][T27141] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 910.008226][T27141] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 910.008284][T27141] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.008358][T27141] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 42763 - 0 [ 910.008415][T27141] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 910.283513][T30474] netlink: 'syz.3.6148': attribute type 1 has an invalid length. [ 910.942472][T20919] Bluetooth: hci0: command tx timeout [ 911.191286][T24845] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 911.225577][T30474] 8021q: adding VLAN 0 to HW filter on device bond1 [ 912.811188][T27141] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 912.811281][T27141] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 912.811350][T27141] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.811409][T27141] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 42763 - 0 [ 912.811478][T27141] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 914.314106][T30448] hsr0 speed is unknown, defaulting to 1000 [ 915.421120][T30498] xt_hashlimit: size too large, truncated to 1048576 [ 920.609187][T27141] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.908507][T27141] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.038962][ T4938] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 928.091068][ T4938] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 928.109390][ T4938] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 928.144969][ T4938] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 928.161449][ T4938] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 928.736718][T27141] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.239450][T30351] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.245354][T30351] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.245815][T30351] bridge_slave_0: entered allmulticast mode [ 929.299752][T30351] bridge_slave_0: entered promiscuous mode [ 929.618566][T20919] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 929.641139][T20919] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 929.665514][T20919] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 929.683273][T20919] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 929.688135][T20919] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 930.382605][T20919] Bluetooth: hci2: command tx timeout [ 931.728650][T27141] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.822636][ T4938] Bluetooth: hci3: command tx timeout [ 932.462291][ T4938] Bluetooth: hci2: command tx timeout [ 933.225245][T20919] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 933.255367][T20919] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 933.292616][T20919] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 933.305438][T20919] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 933.322481][T20919] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 933.902778][T20919] Bluetooth: hci3: command tx timeout [ 933.999218][T30572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 934.542627][T20919] Bluetooth: hci2: command tx timeout [ 935.423123][T20919] Bluetooth: hci7: command tx timeout [ 935.983281][T20919] Bluetooth: hci3: command tx timeout [ 936.622765][T20919] Bluetooth: hci2: command tx timeout [ 937.502976][T20919] Bluetooth: hci7: command tx timeout [ 938.063590][T20919] Bluetooth: hci3: command tx timeout [ 939.585022][ T4938] Bluetooth: hci7: command tx timeout [ 941.663717][ T4938] Bluetooth: hci7: command tx timeout [ 943.218973][T30621] xt_hashlimit: size too large, truncated to 1048576 [ 943.990806][ T4938] Bluetooth: hci5: command 0x0406 tx timeout [ 944.247485][T30549] hsr0 speed is unknown, defaulting to 1000 [ 944.376299][T30448] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.376563][T30448] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.376959][T30448] bridge_slave_0: entered allmulticast mode [ 944.471293][ T41] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 944.642718][T30448] bridge_slave_0: entered promiscuous mode [ 945.320710][T30448] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.321000][T30448] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.321455][T30448] bridge_slave_1: entered allmulticast mode [ 945.357012][T30448] bridge_slave_1: entered promiscuous mode [ 945.717932][T30571] hsr0 speed is unknown, defaulting to 1000 [ 946.275471][T30558] hsr0 speed is unknown, defaulting to 1000 [ 946.360362][T30448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 946.808246][T30448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 948.094572][T30448] team0: Port device team_slave_0 added [ 948.160826][T30448] team0: Port device team_slave_1 added [ 949.778830][T30448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 949.811146][T30448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 949.811206][T30448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 950.094849][T30448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 950.094885][T30448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 950.094945][T30448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 951.568178][T27141] bridge_slave_1: left promiscuous mode [ 951.568891][T27141] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.619762][T27141] bridge_slave_0: left allmulticast mode [ 951.619850][T27141] bridge_slave_0: left promiscuous mode [ 951.620436][T27141] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.858447][T27141] pimreg3: left allmulticast mode [ 952.112312][T27141] bridge_slave_1: left allmulticast mode [ 952.112378][T27141] bridge_slave_1: left promiscuous mode [ 952.112991][T27141] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.411201][T27141] bridge_slave_0: left allmulticast mode [ 952.411260][T27141] bridge_slave_0: left promiscuous mode [ 952.411693][T27141] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.518719][T27141] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.652775][T27141] ¾x9ÿ: left allmulticast mode [ 952.653380][T27141] bridge0: port 1(1¾x9ÿ) entered disabled state [ 953.014863][T27141] pimreg3: left allmulticast mode [ 955.963184][T27141] bond1 (unregistering): (slave gretap1): Releasing active interface [ 957.075863][T27141] bond4 (unregistering): (slave bridge3): Releasing active interface [ 957.560539][T27141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 957.650531][T27141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 957.672837][T27141] bond0 (unregistering): Released all slaves [ 957.717183][T27141] bond1 (unregistering): Released all slaves [ 957.825674][T27141] bond2 (unregistering): Released all slaves [ 958.005541][T27141] bond3 (unregistering): Released all slaves [ 958.284873][T27141] bond4 (unregistering): Released all slaves [ 958.485026][T27141] bond5 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 958.523290][T27141] bond5 (unregistering): Released all slaves [ 958.675732][T27141] bond6 (unregistering): Released all slaves [ 958.747932][T27141] bond7 (unregistering): Released all slaves [ 958.845714][T27141] bond8 (unregistering): Released all slaves [ 958.975841][T27141] bond9 (unregistering): Released all slaves [ 960.218478][T27141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 960.355306][T27141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 960.438682][T27141] bond0 (unregistering): Released all slaves [ 960.969895][T27141] bond5 (unregistering): (slave ip6gre2): Releasing backup interface [ 961.130140][ T4938] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 961.156551][ T4938] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 961.158086][ T4938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 961.161105][ T4938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 961.188229][ T4938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 962.754101][T27141] bond1 (unregistering): (slave gretap2): Removing an active aggregator [ 962.760618][T27141] bond1 (unregistering): (slave gretap2): Releasing backup interface [ 963.053614][T27141] bond3 (unregistering): (slave geneve3): Releasing active interface [ 963.262444][T20919] Bluetooth: hci1: command tx timeout [ 963.619233][T27141] bond1 (unregistering): Released all slaves [ 963.710169][T27141] bond2 (unregistering): Released all slaves [ 963.842982][T27141] bond3 (unregistering): Released all slaves [ 964.009096][T27141] bond4 (unregistering): Released all slaves [ 964.079501][T27141] bond5 (unregistering): Released all slaves [ 964.189812][T27141] bond6 (unregistering): Released all slaves [ 964.439904][T27141] bond0 (unregistering): Released all slaves [ 964.607968][T27141] bond7 (unregistering): Released all slaves [ 964.716339][T27141] bond8 (unregistering): (slave lo): Releasing backup interface [ 964.717713][T27141] bond8 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 964.719581][T27141] bond8 (unregistering): Released all slaves [ 964.975119][T27141] bond9 (unregistering): Released all slaves [ 965.342696][T20919] Bluetooth: hci1: command tx timeout [ 965.529857][T30448] hsr_slave_0: entered promiscuous mode [ 965.557299][T30448] hsr_slave_1: entered promiscuous mode [ 965.585042][T30448] debugfs: 'hsr0' already exists in 'hsr' [ 965.585109][T30448] Cannot create hsr debugfs directory [ 967.433642][T20919] Bluetooth: hci1: command tx timeout [ 968.866897][T27141] tipc: Disabling bearer [ 968.867314][T27141] tipc: Left network mode [ 969.522439][T20919] Bluetooth: hci1: command tx timeout [ 970.318656][ T4938] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 970.336908][ T4938] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 970.382012][ T4938] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 970.554009][ T4938] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 970.555933][ T4938] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 972.702928][T20919] Bluetooth: hci4: command tx timeout [ 974.792441][T20919] Bluetooth: hci4: command tx timeout [ 976.863348][T20919] Bluetooth: hci4: command tx timeout [ 977.116952][T27175] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 978.951584][T20919] Bluetooth: hci4: command tx timeout [ 980.640557][T30643] hsr0 speed is unknown, defaulting to 1000 [ 983.440730][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 984.932186][T30549] bridge0: port 1(bridge_slave_0) entered blocking state [ 984.932479][T30549] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.932974][T30549] bridge_slave_0: entered allmulticast mode [ 985.155146][T30549] bridge_slave_0: entered promiscuous mode [ 985.809271][T30654] hsr0 speed is unknown, defaulting to 1000 [ 987.146607][T30571] bridge0: port 1(bridge_slave_0) entered blocking state [ 987.146934][T30571] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.147428][T30571] bridge_slave_0: entered allmulticast mode [ 987.259308][T30571] bridge_slave_0: entered promiscuous mode [ 987.923890][ T4938] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 987.952957][ T4938] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 987.983757][ T4938] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 988.013022][ T4938] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 988.015646][ T4938] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 988.623477][T30571] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.623746][T30571] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.624204][T30571] bridge_slave_1: entered allmulticast mode [ 988.802897][T30571] bridge_slave_1: entered promiscuous mode [ 989.456033][T20919] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 989.471172][T20919] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 989.480655][T20919] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 989.493544][T20919] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 989.495015][T20919] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 990.142578][T20919] Bluetooth: hci0: command tx timeout [ 991.512588][T20919] Bluetooth: hci5: command tx timeout [ 992.222395][T20919] Bluetooth: hci0: command tx timeout [ 993.159642][ T4938] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 993.171243][ T4938] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 993.214736][ T4938] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 993.263035][ T4938] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 993.268493][ T4938] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 993.582245][ T4938] Bluetooth: hci5: command tx timeout [ 994.311228][ T4938] Bluetooth: hci0: command tx timeout [ 995.503423][ T4938] Bluetooth: hci2: command tx timeout [ 995.663289][T20919] Bluetooth: hci5: command tx timeout [ 996.392148][ T4938] Bluetooth: hci0: command tx timeout [ 997.583996][ T4938] Bluetooth: hci2: command tx timeout [ 997.742427][T20919] Bluetooth: hci5: command tx timeout [ 999.663121][T20919] Bluetooth: hci2: command tx timeout [ 1001.744543][T20919] Bluetooth: hci2: command tx timeout [ 1002.981338][T30708] hsr0 speed is unknown, defaulting to 1000 [ 1003.636033][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1004.111727][T30712] hsr0 speed is unknown, defaulting to 1000 [ 1006.005530][T30720] hsr0 speed is unknown, defaulting to 1000 [ 1007.894039][T30643] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.894328][T30643] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.935974][T30643] bridge_slave_0: entered allmulticast mode [ 1007.987459][T30643] bridge_slave_0: entered promiscuous mode [ 1008.423551][T30643] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.423809][T30643] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.424108][T30643] bridge_slave_1: entered allmulticast mode [ 1008.486787][T30643] bridge_slave_1: entered promiscuous mode [ 1009.017808][T30654] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.018109][T30654] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.018539][T30654] bridge_slave_0: entered allmulticast mode [ 1009.087387][T30654] bridge_slave_0: entered promiscuous mode [ 1009.347367][T30654] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.347665][T30654] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.348234][T30654] bridge_slave_1: entered allmulticast mode [ 1009.394260][T30654] bridge_slave_1: entered promiscuous mode [ 1009.661237][T30643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1010.265519][T30643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1010.396308][T27175] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1011.006107][T30654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1012.063358][T30654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1012.131265][T30643] team0: Port device team_slave_0 added [ 1012.223829][T30643] team0: Port device team_slave_1 added [ 1012.241427][T30654] team0: Port device team_slave_0 added [ 1012.832286][T30654] team0: Port device team_slave_1 added [ 1013.439992][T30643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1013.440051][T30643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1013.440117][T30643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1013.541073][T30654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1013.541106][T30654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1013.541147][T30654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1013.733145][T30654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1013.733204][T30654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1013.733273][T30654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1013.806966][T30643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1013.807005][T30643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1013.807062][T30643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1015.963301][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1016.867493][T30654] hsr_slave_0: entered promiscuous mode [ 1016.929301][T30654] hsr_slave_1: entered promiscuous mode [ 1016.959546][T30654] debugfs: 'hsr0' already exists in 'hsr' [ 1016.971544][T30654] Cannot create hsr debugfs directory [ 1017.167298][T30643] hsr_slave_0: entered promiscuous mode [ 1017.199786][T30643] hsr_slave_1: entered promiscuous mode [ 1017.200731][T30643] debugfs: 'hsr0' already exists in 'hsr' [ 1017.200751][T30643] Cannot create hsr debugfs directory [ 1020.591426][T27141] hsr_slave_0: left promiscuous mode [ 1020.603372][T27141] hsr_slave_1: left promiscuous mode [ 1020.611639][T27141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1020.611663][T27141] batadv0: mtu less than device minimum [ 1020.613328][T27141] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1020.618594][T27141] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1020.621732][T27141] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1020.625006][T27141] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1020.628225][T27141] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1020.631410][T27141] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1020.634682][T27141] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1020.637955][T27141] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1020.641127][T27141] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1021.006643][T27141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1021.061315][T27141] batman_adv: batadv0: Interface deactivated: dummy0 [ 1021.061396][T27141] batman_adv: batadv0: Removing interface: dummy0 [ 1021.166554][T27141] hsr_slave_0: left promiscuous mode [ 1021.168712][T27141] hsr_slave_1: left promiscuous mode [ 1021.171410][T27141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1021.171474][T27141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1021.248382][T27141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1021.248448][T27141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1021.413475][T27141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1021.422606][T27141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1021.646951][T27141] veth0_macvtap: left promiscuous mode [ 1021.647109][T27141] veth0_vlan: left promiscuous mode [ 1021.649299][T27141] veth1_macvtap: left promiscuous mode [ 1021.649340][T27141] veth0_macvtap: left promiscuous mode [ 1021.649478][T27141] veth1_vlan: left promiscuous mode [ 1021.649548][T27141] veth0_vlan: left promiscuous mode [ 1021.794023][ T4938] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1021.803135][ T4938] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1021.805539][ T4938] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1021.829162][ T4938] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1021.839364][ T4938] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1022.634387][ T1428] smc: removing ib device syz2 [ 1022.889426][T27141] team0 (unregistering): Port device team_slave_1 removed [ 1022.938558][T27141] team0 (unregistering): Port device team_slave_0 removed [ 1023.691543][T27141] team0 (unregistering): Port device team_slave_1 removed [ 1023.724361][T27141] team0 (unregistering): Port device team_slave_0 removed [ 1023.912133][ T4938] Bluetooth: hci3: command tx timeout [ 1024.415852][T27141] team0 (unregistering): Port device team_slave_1 removed [ 1024.441658][T27141] team0 (unregistering): Port device team_slave_0 removed [ 1024.767872][T27141] smc: removing net device team0 with user defined pnetid SYZ2 [ 1025.028487][ T7707] syz2: Port: 1 Link DOWN [ 1025.302906][T29033] ================================================================== [ 1025.302926][T29033] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x230/0x250 [ 1025.302963][T29033] Read of size 1 at addr ffff888033918e09 by task kworker/0:2/29033 [ 1025.302990][T29033] [ 1025.303003][T29033] CPU: 0 UID: 0 PID: 29033 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 1025.303030][T29033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1025.303046][T29033] Workqueue: events smc_ib_port_event_work [ 1025.303095][T29033] Call Trace: [ 1025.303104][T29033] [ 1025.303114][T29033] dump_stack_lvl+0xe8/0x150 [ 1025.303149][T29033] print_address_description+0x55/0x1e0 [ 1025.303180][T29033] ? __ethtool_get_link_ksettings+0x230/0x250 [ 1025.303204][T29033] print_report+0x58/0x70 [ 1025.303232][T29033] kasan_report+0x117/0x150 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1025.303262][T29033] ? __ethtool_get_link_ksettings+0x230/0x250 [ 1025.303292][T29033] __ethtool_get_link_ksettings+0x230/0x250 [ 1025.303320][T29033] __ethtool_get_link_ksettings+0x11f/0x250 [ 1025.303347][T29033] ib_get_eth_speed+0x180/0x7f0 [ 1025.303382][T29033] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 1025.303420][T29033] ? do_raw_spin_unlock+0xf5/0x200 [ 1025.303470][T29033] ? rxe_query_port+0x6b/0x3d0 [ 1025.303517][T29033] rxe_query_port+0x93/0x3d0 [ 1025.303554][T29033] ib_query_port+0x16e/0x830 [ 1025.303593][T29033] smc_ib_port_event_work+0x147/0x920 [ 1025.303635][T29033] ? rcu_is_watching+0x16/0xb0 [ 1025.303664][T29033] ? process_scheduled_works+0x97a/0x1630 [ 1025.303695][T29033] process_scheduled_works+0xc3d/0x1630 [ 1025.303745][T29033] ? __pfx_process_scheduled_works+0x10/0x10 [ 1025.303780][T29033] ? assign_work+0x3cf/0x5d0 [ 1025.303813][T29033] worker_thread+0xa47/0xfb0 [ 1025.303860][T29033] kthread+0x38b/0x480 [ 1025.303883][T29033] ? __pfx_worker_thread+0x10/0x10 [ 1025.303917][T29033] ? __pfx_kthread+0x10/0x10 [ 1025.303940][T29033] ret_from_fork+0x514/0xb70 [ 1025.303964][T29033] ? __pfx_ret_from_fork+0x10/0x10 [ 1025.304008][T29033] ? __switch_to+0xc89/0x1420 [ 1025.304041][T29033] ? __pfx_kthread+0x10/0x10 [ 1025.304064][T29033] ret_from_fork_asm+0x1a/0x30 [ 1025.304109][T29033] [ 1025.304119][T29033] [ 1025.304125][T29033] Allocated by task 18504: [ 1025.304136][T29033] kasan_save_track+0x3e/0x80 [ 1025.304159][T29033] __kasan_kmalloc+0x93/0xb0 [ 1025.304183][T29033] __kvmalloc_node_noprof+0x50f/0x820 [ 1025.304206][T29033] alloc_netdev_mqs+0xa9/0x12a0 [ 1025.304237][T29033] rtnl_create_link+0x321/0xd70 [ 1025.304270][T29033] rtnl_newlink_create+0x258/0x7b0 [ 1025.304298][T29033] rtnl_newlink+0x166d/0x1c30 [ 1025.304322][T29033] rtnetlink_rcv_msg+0x802/0xc00 [ 1025.304346][T29033] netlink_rcv_skb+0x226/0x4a0 [ 1025.304375][T29033] netlink_unicast+0x7bd/0x940 [ 1025.304402][T29033] netlink_sendmsg+0x813/0xb40 [ 1025.304434][T29033] sock_sendmsg_nosec+0x13a/0x180 [ 1025.304468][T29033] __sys_sendto+0x408/0x5a0 [ 1025.304490][T29033] __x64_sys_sendto+0xde/0x100 [ 1025.304514][T29033] do_syscall_64+0x166/0x520 [ 1025.304539][T29033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.304561][T29033] [ 1025.304567][T29033] Freed by task 27141: [ 1025.304578][T29033] kasan_save_track+0x3e/0x80 [ 1025.304599][T29033] kasan_save_free_info+0x40/0x50 [ 1025.304641][T29033] __kasan_slab_free+0x5c/0x80 [ 1025.304663][T29033] kfree+0x1c5/0x650 [ 1025.304691][T29033] device_release+0xc4/0x1f0 [ 1025.304717][T29033] kobject_put+0x222/0x550 [ 1025.304745][T29033] netdev_run_todo+0xeee/0x1060 [ 1025.304773][T29033] default_device_exit_batch+0x6d9/0x760 [ 1025.304798][T29033] ops_undo_list+0x4b4/0x8d0 [ 1025.304820][T29033] cleanup_net+0x572/0x810 [ 1025.304842][T29033] process_scheduled_works+0xc3d/0x1630 [ 1025.304869][T29033] worker_thread+0xa47/0xfb0 [ 1025.304896][T29033] kthread+0x38b/0x480 [ 1025.304914][T29033] ret_from_fork+0x514/0xb70 [ 1025.304932][T29033] ret_from_fork_asm+0x1a/0x30 [ 1025.304963][T29033] [ 1025.304975][T29033] The buggy address belongs to the object at ffff888033918000 [ 1025.304975][T29033] which belongs to the cache kmalloc-cg-4k of size 4096 [ 1025.304996][T29033] The buggy address is located 3593 bytes inside of [ 1025.304996][T29033] freed 4096-byte region [ffff888033918000, ffff888033919000) [ 1025.305019][T29033] [ 1025.305025][T29033] The buggy address belongs to the physical page: [ 1025.305050][T29033] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33918 [ 1025.305071][T29033] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1025.305089][T29033] memcg:ffff888033919011 [ 1025.305100][T29033] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1025.305121][T29033] page_type: f5(slab) [ 1025.305141][T29033] raw: 00fff00000000040 ffff88801b04b500 dead000000000100 dead000000000122 [ 1025.305162][T29033] raw: 0000000000000000 0000000300040004 00000000f5000000 ffff888033919011 [ 1025.305184][T29033] head: 00fff00000000040 ffff88801b04b500 dead000000000100 dead000000000122 [ 1025.305204][T29033] head: 0000000000000000 0000000300040004 00000000f5000000 ffff888033919011 [ 1025.305225][T29033] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1025.305245][T29033] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1025.305258][T29033] page dumped because: kasan: bad access detected [ 1025.305274][T29033] page_owner tracks the page as allocated [ 1025.305283][T29033] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9652, tgid 9652 (syz.1.984), ts 228855886681 [ 1025.305318][T29033] post_alloc_hook+0x1f9/0x250 [ 1025.305349][T29033] get_page_from_freelist+0x2209/0x2280 [ 1025.305372][T29033] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 1025.305394][T29033] allocate_slab+0x7d/0x620 [ 1025.305421][T29033] refill_objects+0x2d5/0x350 [ 1025.305447][T29033] __pcs_replace_empty_main+0x2c8/0x6c0 [ 1025.305474][T29033] __kvmalloc_node_noprof+0x63c/0x820 [ 1025.305496][T29033] futex_hash_allocate+0x48f/0xe70 [ 1025.305521][T29033] copy_process+0x2923/0x43e0 [ 1025.305548][T29033] kernel_clone+0x2d7/0x940 [ 1025.305576][T29033] __se_sys_clone3+0x33c/0x360 [ 1025.305606][T29033] do_syscall_64+0x166/0x520 [ 1025.305629][T29033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.305651][T29033] page last free pid 5621 tgid 5621 ts 228836564220 stack trace: [ 1025.305666][T29033] __free_frozen_pages+0xc93/0xd90 [ 1025.305698][T29033] __slab_free+0x274/0x2c0 [ 1025.305717][T29033] qlist_free_all+0x99/0x100 [ 1025.305736][T29033] kasan_quarantine_reduce+0x148/0x160 [ 1025.305757][T29033] __kasan_slab_alloc+0x22/0x80 [ 1025.305779][T29033] kmem_cache_alloc_noprof+0x2b9/0x600 [ 1025.305810][T29033] do_getname+0x2e/0x250 [ 1025.305834][T29033] __se_sys_unlink+0x1e/0x140 [ 1025.305857][T29033] do_syscall_64+0x166/0x520 [ 1025.305880][T29033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.305902][T29033] [ 1025.305908][T29033] Memory state around the buggy address: [ 1025.305920][T29033] ffff888033918d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1025.305935][T29033] ffff888033918d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1025.305950][T29033] >ffff888033918e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1025.305963][T29033] ^ [ 1025.305984][T29033] ffff888033918e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1025.305999][T29033] ffff888033918f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1025.306012][T29033] ================================================================== [ 1025.581370][T29033] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1026.074307][T29033] CPU: 0 UID: 0 PID: 29033 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 1026.083803][T29033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1026.093904][T29033] Workqueue: events smc_ib_port_event_work [ 1026.099788][T29033] Call Trace: [ 1026.103114][T29033] [ 1026.106086][T29033] vpanic+0x56d/0xa60 [ 1026.110137][T29033] ? __pfx_vpanic+0x10/0x10 [ 1026.114721][T29033] panic+0xc5/0xd0 [ 1026.118506][T29033] ? __pfx_panic+0x10/0x10 [ 1026.122969][T29033] ? preempt_schedule_thunk+0x16/0x40 [ 1026.128474][T29033] ? __ethtool_get_link_ksettings+0x230/0x250 [ 1026.134622][T29033] ? preempt_schedule_thunk+0x16/0x40 [ 1026.140045][T29033] ? __ethtool_get_link_ksettings+0x230/0x250 [ 1026.146153][T29033] check_panic_on_warn+0x89/0xb0 [ 1026.151132][T29033] ? __ethtool_get_link_ksettings+0x230/0x250 [ 1026.157241][T29033] end_report+0x73/0x170 [ 1026.161542][T29033] ? __ethtool_get_link_ksettings+0x230/0x250 [ 1026.167654][T29033] kasan_report+0x128/0x150 [ 1026.172245][T29033] ? __ethtool_get_link_ksettings+0x230/0x250 [ 1026.178350][T29033] __ethtool_get_link_ksettings+0x230/0x250 [ 1026.184292][T29033] __ethtool_get_link_ksettings+0x11f/0x250 [ 1026.190239][T29033] ib_get_eth_speed+0x180/0x7f0 [ 1026.195364][T29033] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 1026.200826][T29033] ? do_raw_spin_unlock+0xf5/0x200 [ 1026.205990][T29033] ? rxe_query_port+0x6b/0x3d0 [ 1026.210809][T29033] rxe_query_port+0x93/0x3d0 [ 1026.215445][T29033] ib_query_port+0x16e/0x830 [ 1026.220085][T29033] smc_ib_port_event_work+0x147/0x920 [ 1026.225514][T29033] ? rcu_is_watching+0x16/0xb0 [ 1026.230322][T29033] ? process_scheduled_works+0x97a/0x1630 [ 1026.236180][T29033] process_scheduled_works+0xc3d/0x1630 [ 1026.241807][T29033] ? __pfx_process_scheduled_works+0x10/0x10 [ 1026.247838][T29033] ? assign_work+0x3cf/0x5d0 [ 1026.252506][T29033] worker_thread+0xa47/0xfb0 [ 1026.257151][T29033] kthread+0x38b/0x480 [ 1026.261247][T29033] ? __pfx_worker_thread+0x10/0x10 [ 1026.266400][T29033] ? __pfx_kthread+0x10/0x10 [ 1026.271039][T29033] ret_from_fork+0x514/0xb70 [ 1026.275656][T29033] ? __pfx_ret_from_fork+0x10/0x10 [ 1026.280837][T29033] ? __switch_to+0xc89/0x1420 [ 1026.285561][T29033] ? __pfx_kthread+0x10/0x10 [ 1026.290231][T29033] ret_from_fork_asm+0x1a/0x30 [ 1026.295049][T29033] [ 1026.298712][T29033] Kernel Offset: disabled [ 1026.303057][T29033] Rebooting in 86400 seconds..