last executing test programs: 1m12.729300108s ago: executing program 3 (id=1464): r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x100) (async) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x1}) (async, rerun: 64) r2 = socket$igmp(0x2, 0x3, 0x2) (rerun: 64) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1, 0x4024013, r2, 0xbb265000) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000003080500000000000000000001000000050003000100000006000240000000000c0004"], 0x30}}, 0x0) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) close(r2) (async) setsockopt$inet6_int(r4, 0x29, 0x13, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x0, 0x0, 0xe, 0x1}, @enum, @restrict={0x8, 0x0, 0x0, 0xb, 0x2}]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r9, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x77f1}]}, 0x34}}, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180572000000000000000000000000009500000001006abcb4a7200482d0b56c7f55000054621b20f89fb40873f9396135e5830b00f0eb5255b8ecaa52a963db88109f3b5714d2e65e8690cd7cef2994ed199613b49c2709acc44e6271ade756a665d1bee61b52638b59dec887c72b2e1ba816c9a9a76dc5c15d06"], &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_REVISION_MATCH(r11, 0x29, 0x44, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x54, r13, 0x11, 0x0, 0x0, {0x25}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x9b}, {0xc}}]}, 0x54}}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r14, @ANYBLOB="0c009900090000007400000008002600800900000800270001000000"], 0x38}}, 0x20000000) ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x89e0, 0x0) 1m1.542336293s ago: executing program 3 (id=1464): r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x100) (async) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x1}) (async, rerun: 64) r2 = socket$igmp(0x2, 0x3, 0x2) (rerun: 64) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1, 0x4024013, r2, 0xbb265000) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000003080500000000000000000001000000050003000100000006000240000000000c0004"], 0x30}}, 0x0) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) close(r2) (async) setsockopt$inet6_int(r4, 0x29, 0x13, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x0, 0x0, 0xe, 0x1}, @enum, @restrict={0x8, 0x0, 0x0, 0xb, 0x2}]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r9, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x77f1}]}, 0x34}}, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180572000000000000000000000000009500000001006abcb4a7200482d0b56c7f55000054621b20f89fb40873f9396135e5830b00f0eb5255b8ecaa52a963db88109f3b5714d2e65e8690cd7cef2994ed199613b49c2709acc44e6271ade756a665d1bee61b52638b59dec887c72b2e1ba816c9a9a76dc5c15d06"], &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_REVISION_MATCH(r11, 0x29, 0x44, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x54, r13, 0x11, 0x0, 0x0, {0x25}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x9b}, {0xc}}]}, 0x54}}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r14, @ANYBLOB="0c009900090000007400000008002600800900000800270001000000"], 0x38}}, 0x20000000) ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x89e0, 0x0) 50.480899844s ago: executing program 3 (id=1464): r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x100) (async) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x1}) (async, rerun: 64) r2 = socket$igmp(0x2, 0x3, 0x2) (rerun: 64) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1, 0x4024013, r2, 0xbb265000) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000003080500000000000000000001000000050003000100000006000240000000000c0004"], 0x30}}, 0x0) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) close(r2) (async) setsockopt$inet6_int(r4, 0x29, 0x13, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x0, 0x0, 0xe, 0x1}, @enum, @restrict={0x8, 0x0, 0x0, 0xb, 0x2}]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r9, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x77f1}]}, 0x34}}, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180572000000000000000000000000009500000001006abcb4a7200482d0b56c7f55000054621b20f89fb40873f9396135e5830b00f0eb5255b8ecaa52a963db88109f3b5714d2e65e8690cd7cef2994ed199613b49c2709acc44e6271ade756a665d1bee61b52638b59dec887c72b2e1ba816c9a9a76dc5c15d06"], &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_REVISION_MATCH(r11, 0x29, 0x44, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x54, r13, 0x11, 0x0, 0x0, {0x25}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x9b}, {0xc}}]}, 0x54}}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r14, @ANYBLOB="0c009900090000007400000008002600800900000800270001000000"], 0x38}}, 0x20000000) ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x89e0, 0x0) 39.44982828s ago: executing program 3 (id=1464): r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x100) (async) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x1}) (async, rerun: 64) r2 = socket$igmp(0x2, 0x3, 0x2) (rerun: 64) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1, 0x4024013, r2, 0xbb265000) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000003080500000000000000000001000000050003000100000006000240000000000c0004"], 0x30}}, 0x0) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) close(r2) (async) setsockopt$inet6_int(r4, 0x29, 0x13, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x0, 0x0, 0xe, 0x1}, @enum, @restrict={0x8, 0x0, 0x0, 0xb, 0x2}]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r9, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x77f1}]}, 0x34}}, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180572000000000000000000000000009500000001006abcb4a7200482d0b56c7f55000054621b20f89fb40873f9396135e5830b00f0eb5255b8ecaa52a963db88109f3b5714d2e65e8690cd7cef2994ed199613b49c2709acc44e6271ade756a665d1bee61b52638b59dec887c72b2e1ba816c9a9a76dc5c15d06"], &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_REVISION_MATCH(r11, 0x29, 0x44, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x54, r13, 0x11, 0x0, 0x0, {0x25}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x9b}, {0xc}}]}, 0x54}}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r14, @ANYBLOB="0c009900090000007400000008002600800900000800270001000000"], 0x38}}, 0x20000000) ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x89e0, 0x0) 26.91747943s ago: executing program 3 (id=1464): r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x100) (async) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x1}) (async, rerun: 64) r2 = socket$igmp(0x2, 0x3, 0x2) (rerun: 64) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1, 0x4024013, r2, 0xbb265000) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000003080500000000000000000001000000050003000100000006000240000000000c0004"], 0x30}}, 0x0) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) close(r2) (async) setsockopt$inet6_int(r4, 0x29, 0x13, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x0, 0x0, 0xe, 0x1}, @enum, @restrict={0x8, 0x0, 0x0, 0xb, 0x2}]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r9, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x77f1}]}, 0x34}}, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180572000000000000000000000000009500000001006abcb4a7200482d0b56c7f55000054621b20f89fb40873f9396135e5830b00f0eb5255b8ecaa52a963db88109f3b5714d2e65e8690cd7cef2994ed199613b49c2709acc44e6271ade756a665d1bee61b52638b59dec887c72b2e1ba816c9a9a76dc5c15d06"], &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_REVISION_MATCH(r11, 0x29, 0x44, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x54, r13, 0x11, 0x0, 0x0, {0x25}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x9b}, {0xc}}]}, 0x54}}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r14, @ANYBLOB="0c009900090000007400000008002600800900000800270001000000"], 0x38}}, 0x20000000) ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x89e0, 0x0) 12.566798942s ago: executing program 3 (id=1464): r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x100) (async) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x1}) (async, rerun: 64) r2 = socket$igmp(0x2, 0x3, 0x2) (rerun: 64) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1, 0x4024013, r2, 0xbb265000) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000003080500000000000000000001000000050003000100000006000240000000000c0004"], 0x30}}, 0x0) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) close(r2) (async) setsockopt$inet6_int(r4, 0x29, 0x13, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x0, 0x0, 0xe, 0x1}, @enum, @restrict={0x8, 0x0, 0x0, 0xb, 0x2}]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r9, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x77f1}]}, 0x34}}, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180572000000000000000000000000009500000001006abcb4a7200482d0b56c7f55000054621b20f89fb40873f9396135e5830b00f0eb5255b8ecaa52a963db88109f3b5714d2e65e8690cd7cef2994ed199613b49c2709acc44e6271ade756a665d1bee61b52638b59dec887c72b2e1ba816c9a9a76dc5c15d06"], &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_REVISION_MATCH(r11, 0x29, 0x44, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x54, r13, 0x11, 0x0, 0x0, {0x25}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x9b}, {0xc}}]}, 0x54}}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r14, @ANYBLOB="0c009900090000007400000008002600800900000800270001000000"], 0x38}}, 0x20000000) ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x89e0, 0x0) 2.766233753s ago: executing program 0 (id=2936): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000007540), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000007580)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x40080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x3c, r4, 0x801, 0x0, 0x1, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, 0x3c}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x3c, r4, 0x801, 0x0, 0x1, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0x10}, {0xc, 0x9}}}]}]}, 0x70}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x47}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r13, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x101, 0x47}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x95}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r17 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r17, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="90000000", @ANYRES16=r15, @ANYBLOB="01002cbd7000fadbdf254400000008000300", @ANYRES32=r16, @ANYBLOB="0a001800030303030303000068005a806400038014"], 0x90}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) sendmsg$NL80211_CMD_SET_POWER_SAVE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r11, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)={0x70, r9, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x4, 0x54}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x1) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r8, 0x1, 0x0, 0x8, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x2, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote, 0xdd}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2) (async) r18 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1020100}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x2e0, r18, 0x100, 0x70bd2b, 0x27dfdbff, {}, [@TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffff7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x26b6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe91}, @TIPC_NLA_CON_NODE={0x2, 0x2, 0xc0000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2a61}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff1}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7e4}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x83e}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x345ca6de}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x401}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3d7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @private2, 0x2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x143a, @loopback, 0x8}}}}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe63b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5cb}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x8800}, 0x20000004) (async) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1020100}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x2e0, r18, 0x100, 0x70bd2b, 0x27dfdbff, {}, [@TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffff7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x26b6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe91}, @TIPC_NLA_CON_NODE={0x2, 0x2, 0xc0000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2a61}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff1}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7e4}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x83e}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x345ca6de}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x401}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3d7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @private2, 0x2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x143a, @loopback, 0x8}}}}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe63b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5cb}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x8800}, 0x20000004) 2.522563527s ago: executing program 2 (id=2940): accept(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000080)=0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r2, @ANYBLOB="4400028040000100240001006c625f706f72745f73746174730000000000000000000000000000f7ffffff00050003329410b27a0e00"], 0x60}, 0x1, 0xf000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x24, r5, 0x1, 0xf0bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x20004804) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r8, &(0x7f00000000c0)={0x1d, r9}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0xe8, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [{{0x8}, {0xcc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7, 0x8, 0x4, 0x1}, {0x9, 0x8, 0x4, 0x5}, {0x3ff, 0x40, 0x7, 0x3ba562ae}, {0x7, 0x5, 0x1, 0x10001}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}]}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x804}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x427, 0x70bd27, 0x0, {}, [{0x34, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0f1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x843) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="000000000000000014001a8010"], 0x34}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.45518518s ago: executing program 0 (id=2941): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010000100"/20, @ANYRES32=r1, @ANYBLOB="000000000000000014001680100001800c0005000000000000000000040014"], 0x38}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x64}}, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000000c0)=0x41) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {}, {0x5, 0x3}}}, 0x24}}, 0x40004) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) sendmsg$nl_generic(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001500010000200000000000000a"], 0x14}}, 0x0) pwritev(r2, &(0x7f0000000840)=[{&(0x7f0000000880)="80fd02000000", 0x6}], 0x1, 0xfffffffc, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010000100"/20, @ANYRES32=r1, @ANYBLOB="000000000000000014001680100001800c0005000000000000000000040014"], 0x38}}, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x64}}, 0x0) (async) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000000c0)=0x41) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {}, {0x5, 0x3}}}, 0x24}}, 0x40004) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) (async) sendmsg$nl_generic(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001500010000200000000000000a"], 0x14}}, 0x0) (async) pwritev(r2, &(0x7f0000000840)=[{&(0x7f0000000880)="80fd02000000", 0x6}], 0x1, 0xfffffffc, 0x0) (async) 2.268303752s ago: executing program 1 (id=2942): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000b80)=ANY=[@ANYBLOB="0180c200000000000000000086dd602c96ed00180000fe800000000000000000000000000000fe8000000000000000000000000000aa00020000000000000708846ddaa35696f9a4000100000128"], 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000fc0), r2) r4 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r2) sendmsg$NLBL_CIPSOV4_C_LISTALL(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0103701b122a34bf6a0e04"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40440d0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="88000000", @ANYRESDEC=r2, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="8b3904339926dec85cb3f5d055863fdf115f715d510b45ef0f2756b356b444c93852f1"], 0x88}, 0x1, 0x0, 0x0, 0x20004000}, 0x8085) write(r1, &(0x7f0000000500)="240000001e005f02141f00fffffffff801000000080000000000000008000902009ea5b1", 0x24) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.937967219s ago: executing program 1 (id=2944): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x3, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x37cb7880}, {0x0, 0xfe, 0x10, 0x4000000}, {0x6, 0x0, 0x0, 0x8007}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 1.852438827s ago: executing program 2 (id=2945): sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400e0000", @ANYBLOB="cf0400000000000000001300", @ANYBLOB="0400130006001200000000000600b500850100000a0006"], 0x40}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f00f9ffff7f00000000000001"], 0x114}], 0x1}, 0x0) socketpair(0xf, 0x5, 0x1, &(0x7f00000003c0)) 1.724318771s ago: executing program 0 (id=2946): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r2, 0x110, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x748f}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7ff}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8800}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000240)=@security={'security\x00', 0xe, 0x4, 0x14f8, 0xffffffff, 0x0, 0x208, 0x0, 0xffffffff, 0xffffffff, 0x1428, 0x1428, 0x1428, 0xffffffff, 0x4, &(0x7f0000000200), {[{{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [0x7, 0x2], 0x5, 0x4, 0x1, [@empty, @mcast1, @empty, @private0, @private0, @dev={0xfe, 0x80, '\x00', 0x44}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x41}, @remote, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @loopback, @empty, @private2], 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0x10d8, 0x1108, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.net/syz0\x00', 0x3d, {0x4}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x2, 0x4}, {0x4, 0x3, 0x9}, 0xffffffff, 0x8}}}, {{@ipv6={@local, @private1, [0xffffffff, 0xff000000, 0xffffffff], [0xff000000, 0xffffffff, 0xffffffff], 'ipvlan0\x00', 'pim6reg\x00', {0xff}, {0xff}, 0x0, 0x2, 0x1, 0x10}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0xffff}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 'vlan0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1558) writev(r1, &(0x7f0000001900)=[{&(0x7f00000017c0)="813a04168cd5abcfd9f0f83e3b8e50", 0xf}, {&(0x7f0000001800)="5b7d1e280fe3ea8b62eab86f5ef60f4160d9ac074bb79fe09afd73f13191a1a0e849352462c35b5d3b9f8601aa6222a90af060236d42785237eaaebbd872313f0580c16ff905c9cb839388fbb7b2487889e293b85e998981b0cec70e324597c7221262bd65002cfbc92ced82ac408023254c8b1b22831d2cdf0ae5b39ece2358919ca18fafcf20bb4a142121ce38699f44a5c997eb44507022e1a730a418050d4c4e1fd414910b343ea69fc93486e96dccf5f7ec9b5cc2f7dc5e2e956d9a7414cb02838937ac5429267c649c6de55f1d0523", 0xd2}], 0x2) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x28, 0x3f7, 0x200, 0x70bd29, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x4000000) sendmsg$nl_route(r1, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)=@ipmr_getroute={0x1c, 0x1a, 0x400, 0x70bd2a, 0x25dfdbfd, {0x80, 0x0, 0x0, 0x40, 0xfd, 0x1, 0x0, 0x1, 0x2000}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x200008c0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000001c80)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x50, r4, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x800}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2400c090}, 0x45) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = epoll_create(0x80) epoll_pwait(r6, &(0x7f0000001cc0)=[{}, {}, {}, {}], 0x4, 0x40, &(0x7f0000001d00)={[0x3]}, 0x8) r7 = socket$inet(0x2, 0x2, 0x56ca) bind$pptp(r1, &(0x7f0000001d40)={0x18, 0x2, {0x3, @broadcast}}, 0x1e) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000001dc0)=0x0, &(0x7f0000001e00)=0x4) sendmsg$nl_route(r5, &(0x7f0000001f00)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x2050}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)=@bridge_delneigh={0x68, 0x1d, 0xba1, 0x70bd2a, 0x25dfdbfd, {0xa, 0x0, 0x0, r8, 0x40, 0x80, 0xb}, [@NDA_MASTER={0x8, 0x9, 0x2}, @NDA_LLADDR={0xa, 0x2, @local}, @NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x64010102}, @NDA_DST_IPV4={0x8, 0x1, @local}, @NDA_VNI={0x8, 0x7, 0xffff}, @NDA_PROTOCOL={0x5, 0xc, 0x3}, @NDA_PROTOCOL={0x5, 0xc, 0x7}, @NDA_PROBES={0x8, 0x4, 0x4e}, @NDA_VNI={0x8, 0x7, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008010}, 0x20040000) clock_gettime(0x0, &(0x7f0000001f40)={0x0, 0x0}) nanosleep(&(0x7f0000001f80)={r9, r10+10000000}, &(0x7f0000001fc0)) clock_gettime(0x0, &(0x7f0000002000)) r11 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route(r5, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)=@getnexthop={0x34, 0x6a, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_MASTER={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0xc000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000002240)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002200)={&(0x7f0000002180)={0x74, r2, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x10}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x20}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x4880) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000002280)={0x0, 0x0}, &(0x7f00000022c0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000002300)={{{@in=@dev={0xac, 0x14, 0x14, 0x38}, @in6=@local, 0x4e24, 0x9e6, 0x4e24, 0x2, 0x2, 0x90, 0xa0, 0xc, r8, r13}, {0xba25, 0x3ff, 0x1, 0x6, 0x1319, 0xfffffffffffffffe, 0x100000000000, 0x9}, {0x400, 0x9, 0x97, 0x5}, 0x3, 0x6e6bb5, 0x1, 0x0, 0x1, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d6, 0x2b}, 0xa, @in6=@mcast2, 0x0, 0x0, 0x3, 0x6, 0x0, 0x7a, 0x1}}, 0xe8) connect$inet(r7, &(0x7f0000002400)={0x2, 0x4e21, @empty}, 0x10) sendmsg$netlink(r1, &(0x7f0000003600)={&(0x7f0000002440)=@proc={0x10, 0x0, 0x25dfdbfc, 0x40}, 0xc, &(0x7f00000035c0)=[{&(0x7f0000002480)={0x6c, 0x39, 0x300, 0x70bd29, 0x25dfdbff, "", [@nested={0x4a, 0x2b, 0x0, 0x1, [@nested={0x4, 0x13d}, @typed={0x8, 0x115, 0x0, 0x0, @fd=r6}, @nested={0x4, 0x114}, @generic="c3d0307e2d45f1599cc8957c2b4fbddfa93a0ded263e55a9802e851493d68b1d629e8afeeab8aa156055", @typed={0x8, 0x12a, 0x0, 0x0, @u32=0x8b1}, @nested={0x4, 0xba}]}, @typed={0x8, 0xf7, 0x0, 0x0, @uid=r13}, @typed={0x8, 0x79, 0x0, 0x0, @uid=r13}]}, 0x6c}, {&(0x7f0000002500)={0x10b8, 0x2e, 0x100, 0x70bd25, 0x25dfdbfe, "", [@typed={0x9, 0x3f, 0x0, 0x0, @str='},+-\x00'}, @generic="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", @typed={0x8, 0x82, 0x0, 0x0, @fd=r1}, @nested={0x8a, 0x18, 0x0, 0x1, [@generic="de625781aac9ab17568e644a7daa88f86f94fc70ba9a8747b83017da53ee4886926d06781badc6559427ffde22826fce395e82356bb48ca2f25eb1adb911dfa7e4324e2833bb47296776fc31f1b09d402dab516799531f635733472f77619a7b3b2ff8c727c2a54c2f5ab975d4c2fa676f1092fe48cffd60f836e882ba7ca2b9d37c", @nested={0x4, 0x12}]}, @typed={0x8, 0xe4, 0x0, 0x0, @pid=r12}]}, 0x10b8}], 0x2, 0x0, 0x0, 0x1}, 0x0) 1.550677814s ago: executing program 1 (id=2947): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000003000900000000060015000400000014001680100008800c00038008000a00"], 0x38}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0017"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.537908661s ago: executing program 2 (id=2948): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x2}, 0xe) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x40132, 0xffffffffffffffff, 0x32e64000) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r2, @ANYRES32=r2, @ANYRES8=r0], 0x3c}, 0x1, 0x0, 0x0, 0xc814}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRESOCT, @ANYBLOB="010000696467650000000000000000000000cbb7cf3e"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x7d, 0x4}}]}, 0x38}}, 0x40040) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x54, &(0x7f00000004c0)=[@in6={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3ff}, @in6={0xa, 0x4e23, 0xfff, @mcast1, 0x5}, @in6={0xa, 0x4e21, 0x8, @mcast2, 0x9}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000000c0)={r9, 0x5, 0x10}, &(0x7f0000000080)=0xc) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r10, 0x800448d5, &(0x7f0000000100)) ioctl$sock_bt_hci(r4, 0x400448cb, &(0x7f0000000540)="a42d4e768ba2439e599aeb410460177f71bcc4c2caa9879bd747a568e3fb1afa22faeeb8489eae118c65ed98bfe37db6144c0cf6072093fd0fedea7b1f9e680c3cfb93137d61189dd8d425d96d87813dfd5e6760c12f5f0406982fbad7632297653afcc53404cf6624095c6d4de6fb04cdfb005246ab4e5ea1860e2f9ae42918a47590a3a4b2785baf013eed24d0e93704c8dfc8bab1e57c9cb02db2e31c14b09b68c4f51b5c870cba8b2c97cbe8cb44d3a42083353e1a3db9141fdbbc5b3c2dabfbdb482c987041670e78af5b9a07495bea4e59006d11ce8740f864bc28") socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x91671000) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r11, 0x0, 0x3, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r11, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) 1.512801947s ago: executing program 4 (id=2949): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x427, 0x70bd27, 0x0, {}, [{0x34, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0f1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x843) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001100010000000000000000000700", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80"], 0x34}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.393186634s ago: executing program 1 (id=2950): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES32=r0], 0x0, 0x64, 0x0, 0x0, 0x40000, 0x0, @void, @value}, 0x28) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="23000000010011", 0x7) 1.392554058s ago: executing program 4 (id=2951): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r1 = socket(0x10, 0x3, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000400), 0x4) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESHEX, @ANYRES64=r1, @ANYRES32=r0], 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0xe) recvmmsg$unix(r4, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f0000000740)=""/27, 0x1b}, {&(0x7f00000007c0)=""/109, 0x6d}, {&(0x7f0000000080)=""/104, 0x68}, {&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000000ac0)=""/116, 0x74}, {&(0x7f0000000d40)=""/139, 0x8b}], 0x9}}], 0x5e, 0x10000, 0x0) write(r1, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYRES32], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbb8e, @void, @value}, 0x94) 1.254512309s ago: executing program 2 (id=2952): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x427, 0x70bd27, 0x0, {}, [{0x34, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0f1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x843) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a8010"], 0x34}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 2) 1.215620858s ago: executing program 1 (id=2953): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000000)={0x7, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @local}}}, 0x108) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x890c, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2000}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}}, 0x0) 1.191565645s ago: executing program 4 (id=2954): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0xffff, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r4, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027000000000008000100150008000500"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00ff000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fddbdf256c00000008000300", @ANYRES32=r8], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1f, 0xf, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0xb2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r12 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r12, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r12, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r12, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000580)="e7", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000900)="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", 0x206}, {&(0x7f0000000640)="af2f73aed926f8ab1ab2166fa8d5a50c6b437453fccb9377038248ee4aa75e292bfb00ae7f253a787a332ab8d436cf68eab711fcb99d41e512d1c13a6c9e30c0ecd7207b78f90eb07a4b42a9352edf581e699f48f139796a817823bf2fe7e20495f035459d9624b503f5ed2cb4bf0a976dc91bb254", 0x75}], 0x2}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001100)="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", 0x331}], 0x1}}], 0x3, 0x400c404) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r11, 0x0) preadv(r11, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x1b, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x7ba8bed2}, [@ldst={0x0, 0x0, 0x0, 0x2, 0x4, 0xfffffffffffffff0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf13}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @map_fd={0x18, 0x9, 0x1, 0x0, r1}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}]}, &(0x7f0000000240)='syzkaller\x00', 0x7, 0x4f, &(0x7f0000000280)=""/79, 0x41100, 0x1, '\x00', r4, 0x25, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[r10, r11], &(0x7f0000000380)=[{0x5, 0x2, 0x4, 0xf}, {0x3, 0x5, 0xa, 0x8}], 0x10, 0x0, @void, @value}, 0x94) r13 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r13, 0x29, 0x3, 0x0, 0x0) 638.560997ms ago: executing program 0 (id=2955): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100)=""/218, &(0x7f0000000000)=0x616378a3) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000080)=0x4e468a92, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x78, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @mcast2}]}, 0x2c}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40110029}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@can_newroute={0x3c, 0x18, 0x100, 0x70bd2c, 0x25dfdbfb, {0x1d, 0x1, 0x1}, [@CGW_DST_IF={0x8, 0xa, r6}, @CGW_DST_IF={0x8, 0xa, r7}, @CGW_MOD_SET={0x15, 0x4, {{{0x4, 0x1}, 0x8, 0x0, 0x0, 0x0, "5595abcb2f1ddec6"}, 0x7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f0000000540)={0x8, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0xfffffffffffffdba, &(0x7f00000001c0)={&(0x7f0000000040)={0x40, r8, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x40}}, 0x24000050) 638.28623ms ago: executing program 2 (id=2956): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002100010000000000fcdbdf2502000000000000000000000006001d004e24000006001c"], 0x2c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r2, &(0x7f000018efdc)="240000005a001f0214f9f407000904fcffffff1010000300feffffff0800000000000000", 0x24) 485.817251ms ago: executing program 0 (id=2957): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x1f0, 0x0, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_TUPLE_ORIG={0x94, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xc7}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_TUPLE_REPLY={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010101}}}]}, @CTA_NAT_SRC={0x90, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00'}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00'}, @CTA_NAT_PROTO={0x4}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x81}, @CTA_FILTER={0x3c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x306}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xb06}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x48a}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x110}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x801}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x44084}, 0x880) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f00000002c0)=0x80) r2 = socket$netlink(0x10, 0x3, 0xb) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000003c0)={r1, 0xe000000000000000, 0xa, 0x6}) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/uts\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x11088a88}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x48}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0xd}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x58}, 0x1, 0x0, 0x0, 0x2204c041}, 0x800) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f00000006c0)={'ip_vti0\x00', &(0x7f00000005c0)={'gre0\x00', 0x0, 0x7800, 0x8, 0x80000001, 0x8001, {{0x2b, 0x4, 0x2, 0x19, 0xac, 0x68, 0x0, 0x20, 0x29, 0x0, @broadcast, @remote, {[@lsrr={0x83, 0x27, 0x31, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @multicast2, @multicast1, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @cipso={0x86, 0x1c, 0x3, [{0x5, 0xd, "ed1ac4781f2439249e7d4e"}, {0x1, 0x9, "85eecea6835415"}]}, @timestamp={0x44, 0x24, 0x14, 0x0, 0x4, [0xfff, 0x2, 0x932, 0x22860c24, 0x80000001, 0x4, 0x641000, 0x80000000]}, @generic={0x88, 0x8, "3bd85b3b40e7"}, @noop, @rr={0x7, 0x23, 0x64, [@rand_addr=0x64010100, @local, @multicast1, @multicast1, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x22}, @remote, @dev={0xac, 0x14, 0x14, 0x32}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$nl_route(r5, &(0x7f00000008c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000700)=@setlink={0x168, 0x13, 0x300, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x41, 0xd}, [@IFLA_PHYS_SWITCH_ID={0x23, 0x24, "c8bcf8e555fc9009412b47d9eb7e39b781d498d3a8f4aeb526d347dc390416"}, @IFLA_PHYS_PORT_ID={0x18, 0x22, "2d5535d05314f26f2cd808c0c4d284d599e4cebb"}, @IFLA_VFINFO_LIST={0x104, 0x16, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x6, 0xcc8}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x0, 0x2}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2, 0x60000000000000}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x3, 0x6}}, @IFLA_VF_VLAN={0x10, 0x2, {0x1, 0x4ba, 0xde}}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x400}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x1, 0x3361}}]}, {0x68, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xed67, @local}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2, 0x8}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7, 0x8}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7ff}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x7aa, 0x6}}, @IFLA_VF_TRUST={0xc, 0x9, {0xd, 0x7ff}}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x1, 0x2b}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xd8c1, 0x200}}]}]}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x168}, 0x1, 0x0, 0x0, 0x40080}, 0x24008880) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f0000000900), &(0x7f0000000940)=0x8) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x48, r3, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x43}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0xe203c510cf52424e}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x40}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x103}]}, 0x48}, 0x1, 0x0, 0x0, 0x24004000}, 0x880) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, r3, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x39}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000005}, 0x40000) nanosleep(&(0x7f0000000bc0)={0x0, 0x3938700}, &(0x7f0000000c00)) sendmsg$nl_route_sched(r5, 0xffffffffffffffff, 0x20000000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r9, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0xa00000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x24, r10, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x8000) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x90, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xd}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xf}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x824}, 0xc080) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r3, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44081}, 0x20) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000002540)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002500)={&(0x7f0000001040)=@newchain={0x1494, 0x64, 0x0, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xffff, 0xb}, {0x5, 0x6}, {0x598f6ba649f16b49, 0x18f91256d6af08e8}}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x6}}, @filter_kind_options=@f_cgroup={{0xb}, {0x1444, 0x2, [@TCA_CGROUP_POLICE={0x1440, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x81}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0xa9, 0x1e, 0x8f, 0x2, 0x8, 0x9c, 0x4, 0xfffffffe, 0x8, 0x3b, 0x3, 0x7, 0x0, 0x3, 0x0, 0xffff, 0x5, 0xe, 0x0, 0x7, 0x10001, 0x5, 0x3, 0x1755, 0xb06, 0x400, 0xe207, 0x8, 0x2, 0x7, 0x7, 0xa, 0xa, 0x2, 0x8, 0x7, 0x9, 0x10000, 0x5, 0xfffffffa, 0xd4, 0x0, 0x9, 0x3, 0xa02a, 0x3, 0x79, 0x3, 0x10, 0x4, 0x2, 0x9, 0x1, 0x7, 0x4, 0x9, 0x1, 0x8, 0x6, 0xf7, 0x4, 0x4, 0x7, 0xff, 0x1000, 0xa, 0x7fffffff, 0x401, 0xff, 0x3, 0x8001, 0x5, 0x5f4e26, 0x0, 0x6, 0x8, 0x2, 0x1ff, 0x5, 0x0, 0x9, 0x4, 0x4, 0x2, 0x5, 0x0, 0x0, 0x8, 0x8, 0x3, 0x9, 0x0, 0x2, 0x0, 0x4, 0xffffffff, 0x8, 0x4, 0x4, 0xf9, 0x6, 0x5, 0x0, 0x4c5fb4d4, 0xb1c, 0x7f, 0xea, 0xfff7, 0x9, 0x10, 0x2, 0x0, 0x8, 0x2dc, 0x1000, 0x1ff, 0x1, 0x1, 0x2, 0x2eb1, 0x9, 0x5, 0x40, 0x6, 0x2, 0xfffffbff, 0xfffffffb, 0x1, 0xfffffffe, 0x7, 0x5, 0x2c, 0x8001, 0x3, 0x9f, 0x8000, 0x1, 0x9, 0x8, 0xfff, 0x4, 0x2, 0x4, 0xa86a, 0x2, 0xffff, 0x5ca, 0x8, 0xd82, 0xffff, 0xfff, 0x9, 0xb7, 0x2, 0x0, 0xffff, 0x3ff, 0x61b, 0x51, 0x3, 0x70c, 0x3, 0x3, 0x2, 0x7c, 0xb5, 0xf, 0x3, 0x9, 0xd94a, 0x3, 0x3ff, 0x3, 0x793, 0x5, 0xa00, 0x1, 0x75, 0x7, 0x2, 0x2, 0x9, 0x7, 0x8, 0x5, 0x0, 0x34, 0x4, 0x5bc, 0xcc2, 0xfffffe00, 0x7, 0x0, 0x401, 0x3, 0x5, 0x6, 0xd5, 0x5, 0xd1fb, 0xfffffffc, 0x9, 0x401, 0x2, 0xa8d, 0x7c354441, 0xffffffd4, 0x7, 0x8, 0x1, 0xdf, 0xa, 0x9, 0x9, 0x5d, 0x8, 0x80, 0x7, 0xb, 0x978, 0x8000, 0x1000, 0x80000000, 0xee24, 0xa4, 0xe67, 0x2, 0x1, 0x8, 0x2, 0x6, 0x4, 0x9, 0x6, 0xfffff801, 0x2, 0x0, 0x2, 0x0, 0x8, 0x1, 0x3ff, 0x795, 0x10, 0x1, 0x4, 0x7, 0xf, 0x0, 0x7c1, 0x6f, 0x947, 0x40, 0x7, 0x0, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x40, 0xbc, 0x4bc, 0x9, 0x80000000, 0x0, 0x61, 0x2, 0x4, 0x8, 0xf8d, 0xffffffff, 0x9, 0x0, 0x9f7, 0x8, 0x10001, 0x7, 0x1c, 0x5, 0x5, 0x7, 0x80000000, 0x5, 0x2, 0xdcc, 0x3, 0x1, 0x3, 0x7, 0x0, 0x512, 0xffff, 0x400, 0x9, 0xfffffffe, 0x6c1f, 0x3, 0xfffffc00, 0x6, 0x2, 0xfff, 0x10000, 0x7, 0x3, 0x8, 0x87, 0x6, 0x200, 0x7, 0x100, 0x9, 0x1, 0x6, 0x8, 0x7fff, 0x2, 0xd, 0xff, 0x7, 0x1, 0x3, 0x8, 0x0, 0x1, 0x26, 0x0, 0x5d7b7faf, 0x6b, 0x9, 0x7, 0x4d, 0x2, 0xffffff81, 0x1ce00, 0x2, 0x0, 0xffffff7a, 0x5, 0x15, 0x4, 0x1fa, 0x3af1, 0xa, 0x400, 0x3, 0x8001, 0x51f, 0x8, 0xb, 0x8000, 0x8, 0x8001, 0x8, 0x34a0, 0x4, 0xdc, 0x5, 0x1ffc000, 0x1, 0xaf, 0xb5, 0x1, 0x1, 0x7, 0xffff, 0x6, 0x8000, 0x2, 0x80000001, 0x1, 0x90, 0x7, 0x7e27, 0xa0, 0x8, 0xb, 0x14, 0x3, 0x6, 0x401, 0xd8c, 0x8, 0x9, 0x6, 0xfffffff7, 0xb, 0x9, 0x80, 0xf, 0x80000001, 0x200, 0x3, 0x9, 0x2, 0x4, 0x7, 0x2e, 0x8, 0xc, 0x5, 0xb, 0xfffffff6, 0x7, 0x7, 0x3d9, 0x8001, 0x8, 0x6, 0x5, 0x8, 0xfff, 0x5, 0x5, 0x3, 0x2, 0x4, 0x7, 0x200, 0xc62, 0x4, 0x86ea, 0x3, 0x0, 0x10001, 0x1, 0x40, 0x5, 0x80000000, 0x1, 0xff, 0x1, 0x0, 0x5, 0xb5, 0x5, 0x2, 0x5532, 0x6, 0x3, 0x2, 0x7, 0x5, 0x1, 0x9, 0xffffffad, 0x101, 0x3, 0x8, 0x8000, 0x5, 0x8, 0x3, 0xfffffffa, 0x81000000, 0x7, 0xffff, 0x6, 0x5, 0x5, 0xff, 0x54, 0x6, 0xfff, 0xa, 0x0, 0x3, 0x7fffffff, 0x6, 0xffffffff, 0x311fe63f, 0x8, 0x40, 0x4, 0x1362, 0x400, 0x2, 0xfc4, 0x5, 0xd92, 0x3, 0xc, 0x55, 0x80000000, 0xf, 0x80000001, 0x20e, 0x1, 0xfffffff9, 0x5, 0x788, 0x800, 0x3, 0x9, 0x401, 0x3, 0x8, 0x101, 0x7, 0xa, 0xfffffffa, 0xffffffff, 0x4, 0x6, 0x4, 0x255, 0x5, 0x7, 0x60, 0x3, 0x9, 0xff, 0x4, 0x8001, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0xb, 0x9, 0x1000, 0x82d, 0x6, 0x7, 0x0, 0x2, 0x4, 0x8, 0x7f, 0x9fa, 0x7, 0x80000000, 0x1, 0x5, 0x2, 0x8001, 0x9, 0xf58, 0x8, 0x8, 0x4, 0x0, 0x8, 0x6, 0x9, 0xd, 0x0, 0x2533, 0x4d0, 0x6be9, 0x4, 0x88, 0x0, 0x400, 0xffff2571, 0x6, 0x1, 0x101, 0x4, 0x30, 0x2, 0x3, 0x0, 0x3, 0x7, 0x10001, 0x9, 0xa976, 0x9, 0xffffffff, 0x6, 0x45b5, 0x401, 0x5, 0x40, 0x9, 0x9, 0xc, 0x5, 0x8, 0x33e2, 0x1f9, 0x1, 0x116263ac, 0x8, 0x0, 0x7, 0x2, 0x8, 0x1, 0x3, 0xd4f, 0x7, 0x800, 0x5, 0x7, 0x0, 0x5, 0x9, 0x8, 0xf, 0x1, 0x100, 0x4, 0x7, 0x8, 0xd, 0x80000000, 0x100, 0x4, 0x4, 0x7, 0x3, 0x10, 0x7, 0x5, 0xff, 0x4, 0x7fff, 0x8000, 0xbc2b, 0x67, 0xfffffffd, 0x3, 0xabdd, 0x6, 0x1, 0x7, 0x5, 0x401, 0x5, 0x9, 0xde16, 0x0, 0x7, 0x9, 0x200, 0xb, 0xfffffff9, 0x8000, 0x8, 0x1000, 0x2, 0xff, 0x7, 0x6, 0x1, 0x8, 0x1, 0x749, 0x0, 0x1, 0x9, 0x80000001, 0x400, 0x3, 0x7, 0x9f8b, 0x7, 0xfff, 0xfff, 0x101, 0x8, 0x74, 0x9, 0x4, 0x91, 0x5, 0x20000000, 0x2, 0xe0, 0x6, 0x3, 0x8, 0x6, 0x1, 0x9, 0x4, 0x6, 0x2, 0x5, 0x6441, 0x6, 0x8, 0xf, 0x0, 0xffffffff, 0x8, 0x6, 0x2, 0x5, 0x2, 0x8, 0x417, 0x7, 0xc369, 0x6, 0x575, 0xfff, 0x9, 0x3, 0xb, 0x4, 0x80, 0x1000, 0x2, 0x9, 0x8, 0x2, 0xb, 0xb, 0x200, 0x8, 0xfffff0c1, 0x1, 0x2, 0x6, 0x1, 0xf5, 0x6, 0x5, 0x2d3, 0x9599, 0x440, 0x3, 0x7f, 0x1, 0xe2, 0x5b, 0xacf, 0x80, 0x5, 0xfffffffc, 0x8, 0x4, 0x8, 0xd, 0x4, 0x9, 0x2, 0x85ed89ef, 0xf, 0x5, 0x200, 0xa, 0x3c, 0x891, 0x8000, 0x3, 0x3, 0x2, 0x101, 0x2d6dd58, 0xfffffff7, 0x3, 0x80000000, 0x400, 0x2, 0x15c4, 0x6, 0x1, 0x5, 0x3, 0x3, 0x3, 0x1, 0x6, 0x6, 0x40, 0xfbb1, 0x3, 0x1, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x82, 0xe520, 0x3, 0x4, 0x6, 0x7f, 0x7, 0x7a, 0x637b, 0x101, 0x80000000, 0x9e38, 0x8001, 0x3, 0x3, 0x3ff, 0x2d08d968, 0x10000, 0xfff, 0xf, 0x6, 0xff, 0x4ca70eec, 0x8001, 0x5598, 0x2000, 0x1, 0x9, 0x2, 0x8, 0x4, 0x8, 0x7ff, 0x9, 0x3, 0x3, 0x101, 0x7, 0x0, 0xaf, 0x9d, 0xa, 0x0, 0x7, 0x2, 0x7ff, 0x3, 0x7, 0x3, 0x2, 0x1, 0x81, 0x6, 0x6, 0x1, 0xb, 0x10, 0x84f, 0x401, 0x4, 0x3000, 0x4fa1, 0x5, 0x0, 0x9, 0xfffffff7, 0x0, 0xfffffb62, 0xb, 0x7fffffff, 0x4, 0xffffffff, 0x8000, 0x0, 0x100, 0xfffff023, 0x5, 0x6, 0xf, 0x5, 0x3c, 0x1, 0x1, 0x7, 0x9, 0x9, 0x9, 0x5, 0x2, 0xfffffffd, 0xd, 0x3, 0x3, 0x11, 0x553b, 0x5, 0x0, 0xffff6d8d, 0x7ff, 0x9, 0x5, 0x63, 0x0, 0x7, 0x38df6e0a, 0x0, 0x6, 0x1ff, 0xfffffffd, 0x0, 0x1, 0x8, 0x6, 0xfb18, 0x5, 0x6de, 0x7, 0x100, 0x7ff, 0x4, 0x9, 0x9, 0x10, 0x5, 0xfff, 0x800, 0x4, 0x0, 0x0, 0x5, 0xcd3, 0x5, 0x5, 0x1, 0x7aa3, 0x2, 0x0, 0x7fff, 0x8000, 0xa7, 0x8, 0xfff, 0x7, 0x4e1, 0x4, 0x6, 0x2, 0x0, 0x4, 0x0, 0x5, 0x7fffffff, 0xac, 0xe, 0x9, 0x1, 0x2, 0x9, 0x8, 0x7, 0x79e7797a, 0x3, 0x11b, 0x81, 0x3, 0xfffffffa, 0x24580, 0x3, 0x7, 0x3, 0x1, 0xffffffff, 0xb8, 0x3, 0x6, 0x7, 0xc, 0x80, 0x7, 0x1, 0x81, 0xffff, 0xfc, 0x4c, 0xffff, 0x2, 0xf, 0x8, 0xe8a, 0x9, 0x1e, 0x8001, 0x7ff, 0x68, 0x1, 0x1, 0x58, 0xffffffff, 0xfffffff7, 0x101, 0x93ce, 0x10001, 0x3, 0x3, 0x10, 0xb0, 0xffffff54, 0xf6, 0xcd8, 0xfffffffa, 0x9, 0xd, 0x421119ac, 0x9, 0x90f, 0x8, 0x0, 0x10, 0xffff4e63, 0x5, 0x7401, 0x95, 0x8, 0x7ff, 0x3, 0x2, 0xffffffff, 0x0, 0x1, 0x9, 0x2, 0x5, 0x3, 0x5, 0x7, 0xf759, 0x9, 0x2, 0x97, 0x4, 0x0, 0x8001, 0x9, 0x5, 0x7f, 0x7, 0x800, 0x10001, 0xd26b, 0x2ef6, 0x9, 0x3, 0xfffff21b, 0x10001, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0xd, 0xd, 0x9d68, 0x9, 0x2, 0x7, 0x17, 0x2, 0x1, 0x6, 0x3, 0x4, 0x38, 0x0, 0x8, 0x7ff, 0x3, 0xda, 0xb, 0x10000, 0x80000001, 0x7fffffff, 0xffff, 0x203, 0xa0, 0x3, 0x7, 0x43a, 0x8, 0x9, 0x10001, 0x4fe, 0x40, 0x2, 0x400, 0x4fc0, 0x2, 0x4, 0x7, 0xd8, 0x5, 0x6, 0x200, 0x1, 0x7fffffff, 0x8001, 0x8, 0xbb, 0x6, 0x1, 0x1, 0x0, 0x1, 0x0, 0x66, 0x8001, 0x4, 0x5d, 0x2, 0x401, 0x5723, 0x4, 0x20000, 0x512a, 0x9748, 0xe13, 0xfff, 0x0, 0x943, 0x7102, 0x9, 0x8, 0x0, 0x3, 0xffffffd5, 0x5c6, 0xfffff26e, 0xfffffffe, 0xf, 0xc, 0x7, 0x2, 0x0, 0x5, 0x7, 0xdb4b, 0x3, 0x7ff, 0x2c66, 0x8, 0x8, 0x2, 0x9, 0xd56, 0x5, 0xcd56, 0x9, 0x3, 0x8eed, 0xfffffff9, 0xfffffff8, 0x10000, 0x90b8, 0x7, 0x20, 0x8b4, 0x1, 0x7, 0x6, 0xff, 0xb2, 0x0, 0x2, 0x50, 0x3, 0x0, 0x2400000, 0x5, 0xf623, 0x2, 0x30, 0xc154, 0xfffffff9, 0x1, 0x7, 0x0, 0x4, 0xe, 0x7, 0x9, 0x0, 0x4, 0x0, 0x81, 0x10000000, 0x3ff, 0x3ff, 0x4, 0x9, 0xfffffff2, 0x0, 0xa, 0x1a, 0x7, 0x4, 0x5, 0x9, 0x0, 0x800, 0x5, 0xe, 0x6, 0x4, 0x101, 0x4, 0x4, 0x0, 0x0, 0x6, 0xb60, 0x8, 0x7ff, 0x80000001, 0x99, 0x4, 0x271e, 0x40, 0x9706, 0x8, 0x6, 0x5, 0x3, 0x10000, 0xffff, 0x7, 0x5, 0x5, 0x0, 0x9, 0x9, 0x6, 0x0, 0x2, 0x90, 0x5, 0x1, 0xa, 0x7fffffff, 0x2, 0x9, 0x8000, 0x4, 0x3, 0x9, 0x7ff, 0x7ff, 0x2, 0x6, 0x401, 0x7, 0xfffffff0, 0x2, 0x10, 0xff, 0x8, 0x6, 0x6, 0x0, 0x8, 0x7, 0xff, 0x5, 0xf2, 0xdc, 0x1, 0x2, 0x1, 0xffffff0e, 0x2bfffd4b, 0xb, 0x0, 0x59869c61, 0xffffffff, 0x4, 0x5, 0xfb, 0x6, 0x0, 0x5, 0x3, 0x4, 0xb027, 0xa163, 0x9, 0x7, 0x2, 0x24b5d27e, 0x1, 0x9, 0xd791, 0x1, 0x8, 0x2, 0x7, 0xc, 0xff8, 0x0, 0x4, 0x2, 0x64, 0x5, 0x4, 0x5130455e, 0x100]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x39e7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0xd5, 0x1}}]}, 0x1494}, 0x1, 0x0, 0x0, 0x20000800}, 0x10) r12 = syz_genetlink_get_family_id$gtp(&(0x7f00000025c0), r5) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000002680)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x31de622e27fdd56e}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x40, r12, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x19}}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000026c0)) sendmsg$802154_raw(r5, &(0x7f00000027c0)={&(0x7f0000002700)={0x24, @short={0x2, 0x3, 0xfffe}}, 0x14, &(0x7f0000002780)={&(0x7f0000002740)="2dc8bcea0682215c6a537613898c0e1e697f9fd2ca5bbe28825501e9e923ec58d42bcc5e2fa504dc1911261cb704bb45057290f34efd03a02df0", 0x3a}, 0x1, 0x0, 0x0, 0x24000010}, 0x4000) 395.254034ms ago: executing program 4 (id=2958): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, 0x0) r3 = socket(0x26, 0x800, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) (async) sendmsg$kcm(r3, &(0x7f00000007c0)={&(0x7f0000000200)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000440)="6ad68bb94459b8043b9d528d4bda44a6c711c54c3e7a076e21a9d26477dbff336f9f2c0261696b2db0ae04c50c3afc7fb3f50a8388c0b11afd5dc31f5735d68179b5cf044809664a726e0ea936bc2e5df3a7dfb9d46ae6de492a868fd9cc1896531c6418", 0x64}, {&(0x7f0000000540)="f8696fb534864b763ff9a879f792de58dac15cd383fd594a7ab806d3d7478d6ef496042762084eebd2b644c204cb19a8b0375af9f157e3c24123dafa9cdcba8e75fedf14832ae488e535099dc138c45f3f059872a9800a434b52a88268f96ab5bff89ec2c315a61cf9c83288fa4220039e7fdf8e895c89dfab73a1d4261ff4f04bc2dc471ab964aa8b57e37e261e08956b8c871fe47176cb570dcc2abdd02407d9dd06ef5bbbe21d03810afe35c64aa9cbf6205211e1fec2407d59fe7c9955297086ee8c96327958b9ea29ab183c664b5f62", 0xd2}], 0x2, &(0x7f0000000680)=[{0x110, 0x88, 0x7fffffff, "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"}], 0x110}, 0x881) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f0000000800)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459ba", 0x54}], 0x2, 0x0, 0x0, 0x80}], 0x1, 0x40800) (async) recvmsg(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f00000031c0)=""/95, 0x5f}], 0x2}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="ffff00001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028008001c000000000008001d0000000000"], 0x44}}, 0x0) recvmsg(r0, &(0x7f00000001c0)={&(0x7f0000000080)=@ax25={{0x3, @bcast}, [@rose, @remote, @null, @netrom, @rose, @remote, @remote, @rose]}, 0x80, &(0x7f0000000180), 0x31, &(0x7f00000002c0)=""/220, 0xcb}, 0x2022) 258.588587ms ago: executing program 2 (id=2959): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000340), &(0x7f0000000380)=0x4) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003fdffffff0000000a000a00272d5d29212b0000140007"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 243.648321ms ago: executing program 0 (id=2960): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_ethernet(0x18f, &(0x7f00000004c0)={@multicast, @empty, @void, {@ipv4={0x800, @igmp={{0x2b, 0x4, 0x3, 0x26, 0x181, 0x65, 0x0, 0x8, 0x2, 0x0, @remote, @private=0xa010100, {[@ssrr={0x89, 0xb, 0x92, [@private=0xa010100, @local]}, @ssrr={0x89, 0x1b, 0x8c, [@private=0xa010102, @loopback, @multicast2, @remote, @loopback, @multicast1]}, @timestamp_addr={0x44, 0x44, 0x68, 0x1, 0x2, [{@empty, 0x4}, {@remote, 0x2}, {@loopback, 0xfffffff8}, {@remote, 0x3}, {@multicast1, 0x3}, {@dev={0xac, 0x14, 0x14, 0x44}, 0xbe21}, {@rand_addr=0x64010101, 0x8}, {@loopback, 0x8}]}, @timestamp_addr={0x44, 0x2c, 0xd3, 0x1, 0x0, [{@rand_addr=0x64010100, 0x9}, {@local, 0x5}, {@loopback, 0xc2b}, {@private=0xa010101, 0x400}, {@private=0xa010100, 0x7}]}]}}, {0x14, 0x67, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, "eac6cc5639dbfa187064bc30387f4264c403fe7fbb4b39136c309ce1e280213d67dad89e8987ffa33f00d0e51b663937e5fe7213864d7eba0d0c4e710316b0be3c1a204a27ae0e19a0593d5b3b411ccbc3ed4b59906913da7d835e96801677dd5b4795be472fa4e80fc1fa33b4f7c6b9d3356d282235d8ea5bbfd443223f781c95e865eb80172dc33940d1d50e2257d7c8a69eeba3dc377e07d60b57a94a416457cce7cd4afc63be0442067ec64c189fa9cba71dca07ed0d4961e94a7b515c61ad36995148b4fca6735e741e27"}}}}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0x17) ioctl$TUNSETGROUP(r2, 0x400454ce, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_TXQLEN={0x8, 0xd, 0xb19}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x40}}, 0x0) 195.544283ms ago: executing program 1 (id=2961): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000003000900000000060015000400000014001680100008800c00038008000a00"], 0x38}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0018"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 126.644752ms ago: executing program 4 (id=2962): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x427, 0x70bd27, 0x0, {}, [{0x34, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0f1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x843) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a8010"], 0x34}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 4 (id=2963): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) (async, rerun: 32) r3 = accept4(r2, 0x0, 0x0, 0x80800) (rerun: 32) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x4ce1}, 0x8) recvmsg$qrtr(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/187, 0xbb}], 0x1, &(0x7f00000004c0)=[{0x110, 0x0, 0x0, ""/252}, {0x70, 0x0, 0x0, ""/92}, {0x1010, 0x0, 0x0, ""/4096}], 0x1190, 0x10000}, 0x38, 0x2100) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) (async, rerun: 64) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0x4000, r1}, 0x18) (async, rerun: 64) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r5 = socket(0x2, 0x80805, 0x0) (async) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000100)={r7, 0xa11c}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000440)=@raw=[@cb_func={0x18, 0x5, 0x4, 0x0, 0x2}, @generic={0x29, 0x9, 0x9, 0xb, 0x8}, @alu={0x4, 0x0, 0x2, 0xb, 0x2, 0xc, 0x4}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x152}], 0x0, 0x20000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffe69) (async) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1300000056000100000000000000000007"], 0x18}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYRES64=r0], 0xb40}, 0x1, 0x0, 0x0, 0x4040000}, 0x4001) kernel console output (not intermixed with test programs): ode_noprof+0x217/0x3c0 [ 274.548444][T13419] ? __pfx__copy_from_iter+0x10/0x10 [ 274.548474][T13419] ? __build_skb_around+0x257/0x3e0 [ 274.548505][T13419] ? netlink_sendmsg+0x642/0xb30 [ 274.548529][T13419] ? skb_put+0x11b/0x210 [ 274.548560][T13419] netlink_sendmsg+0x6b2/0xb30 [ 274.548597][T13419] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.548626][T13419] ? aa_sock_msg_perm+0x94/0x160 [ 274.548652][T13419] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 274.548677][T13419] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.548704][T13419] __sock_sendmsg+0x219/0x270 [ 274.548729][T13419] ____sys_sendmsg+0x52d/0x830 [ 274.548766][T13419] ? __pfx_____sys_sendmsg+0x10/0x10 [ 274.548805][T13419] ? import_iovec+0x74/0xa0 [ 274.548840][T13419] ___sys_sendmsg+0x21f/0x2a0 [ 274.548871][T13419] ? __pfx____sys_sendmsg+0x10/0x10 [ 274.548942][T13419] ? __fget_files+0x2a/0x420 [ 274.548969][T13419] ? __fget_files+0x3a0/0x420 [ 274.549010][T13419] __sys_sendmmsg+0x227/0x430 [ 274.549046][T13419] ? __pfx___sys_sendmmsg+0x10/0x10 [ 274.549087][T13419] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 274.549136][T13419] ? ksys_write+0x1f0/0x250 [ 274.549159][T13419] ? rcu_is_watching+0x15/0xb0 [ 274.549190][T13419] __x64_sys_sendmmsg+0xa0/0xc0 [ 274.549223][T13419] do_syscall_64+0xf6/0x210 [ 274.549253][T13419] ? clear_bhb_loop+0x60/0xb0 [ 274.549286][T13419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.549318][T13419] RIP: 0033:0x7fc0cbf8e969 [ 274.549335][T13419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.549351][T13419] RSP: 002b:00007fc0ccd2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 274.549371][T13419] RAX: ffffffffffffffda RBX: 00007fc0cc1b5fa0 RCX: 00007fc0cbf8e969 [ 274.549385][T13419] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 274.549399][T13419] RBP: 00007fc0ccd2e090 R08: 0000000000000000 R09: 0000000000000000 [ 274.549411][T13419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.549422][T13419] R13: 0000000000000000 R14: 00007fc0cc1b5fa0 R15: 00007ffc98ae0f48 [ 274.549452][T13419] [ 274.878166][T13415] netlink: 'syz.4.2079': attribute type 29 has an invalid length. [ 274.918678][T13422] netlink: 500 bytes leftover after parsing attributes in process `syz.4.2079'. [ 274.989763][T13425] netlink: 'syz.1.2083': attribute type 1 has an invalid length. [ 275.006686][T13425] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2083'. [ 275.407341][T13330] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.451661][T13447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2089'. [ 275.511176][T13455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.564860][T13458] FAULT_INJECTION: forcing a failure. [ 275.564860][T13458] name failslab, interval 1, probability 0, space 0, times 0 [ 275.580045][T13458] CPU: 0 UID: 0 PID: 13458 Comm: syz.1.2093 Not tainted 6.15.0-rc6-syzkaller-00168-g239af1970bcb #0 PREEMPT(full) [ 275.580070][T13458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 275.580082][T13458] Call Trace: [ 275.580089][T13458] [ 275.580097][T13458] dump_stack_lvl+0x189/0x250 [ 275.580131][T13458] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.580157][T13458] ? __pfx__printk+0x10/0x10 [ 275.580180][T13458] ? ref_tracker_alloc+0x318/0x460 [ 275.580204][T13458] should_fail_ex+0x414/0x560 [ 275.580226][T13458] should_failslab+0xa8/0x100 [ 275.580252][T13458] kmem_cache_alloc_noprof+0x73/0x3c0 [ 275.580276][T13458] ? skb_clone+0x212/0x3a0 [ 275.580307][T13458] skb_clone+0x212/0x3a0 [ 275.580337][T13458] __netlink_deliver_tap+0x404/0x850 [ 275.580370][T13458] ? netlink_deliver_tap+0x2e/0x1b0 [ 275.580393][T13458] netlink_deliver_tap+0x19c/0x1b0 [ 275.580415][T13458] netlink_unicast+0x72f/0x8d0 [ 275.580450][T13458] netlink_sendmsg+0x805/0xb30 [ 275.580480][T13458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.580505][T13458] ? aa_sock_msg_perm+0x94/0x160 [ 275.580528][T13458] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 275.580549][T13458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.580571][T13458] __sock_sendmsg+0x219/0x270 [ 275.580593][T13458] ____sys_sendmsg+0x52d/0x830 [ 275.580623][T13458] ? __pfx_____sys_sendmsg+0x10/0x10 [ 275.580657][T13458] ? import_iovec+0x74/0xa0 [ 275.580688][T13458] ___sys_sendmsg+0x21f/0x2a0 [ 275.580716][T13458] ? __pfx____sys_sendmsg+0x10/0x10 [ 275.580776][T13458] ? __fget_files+0x2a/0x420 [ 275.580799][T13458] ? __fget_files+0x3a0/0x420 [ 275.580834][T13458] __sys_sendmmsg+0x227/0x430 [ 275.580866][T13458] ? __pfx___sys_sendmmsg+0x10/0x10 [ 275.580900][T13458] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 275.580943][T13458] ? ksys_write+0x1f0/0x250 [ 275.580964][T13458] ? rcu_is_watching+0x15/0xb0 [ 275.580991][T13458] __x64_sys_sendmmsg+0xa0/0xc0 [ 275.581019][T13458] do_syscall_64+0xf6/0x210 [ 275.581046][T13458] ? clear_bhb_loop+0x60/0xb0 [ 275.581069][T13458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.581086][T13458] RIP: 0033:0x7fc0cbf8e969 [ 275.581102][T13458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.581118][T13458] RSP: 002b:00007fc0ccd2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 275.581138][T13458] RAX: ffffffffffffffda RBX: 00007fc0cc1b5fa0 RCX: 00007fc0cbf8e969 [ 275.581151][T13458] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 275.581163][T13458] RBP: 00007fc0ccd2e090 R08: 0000000000000000 R09: 0000000000000000 [ 275.581174][T13458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.581184][T13458] R13: 0000000000000000 R14: 00007fc0cc1b5fa0 R15: 00007ffc98ae0f48 [ 275.581211][T13458] [ 275.883670][T13330] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.968117][T13465] syzkaller0: entered promiscuous mode [ 275.994125][T13465] syzkaller0: entered allmulticast mode [ 276.049844][T13468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2096'. [ 276.059714][T13468] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2096'. [ 276.073347][T13330] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.114321][T13468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2096'. [ 276.157775][T13330] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.265850][ T55] Bluetooth: hci3: command tx timeout [ 276.271815][ T30] audit: type=1107 audit(1747696440.693:4): pid=13473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='XÓº…r‘ª—Zlv5*FV_Õ¾%…ï!ŸÐl:@´!³žjãßæ//¬­¦+'{¦#u/ÿÝÊ 1‹F=Í{ƒÉdR~¿̠Ƚâè„S¿ÿ~>IÎj¤4ÄèE§üöås.'SDÃÿüé×🰦q(« –¢Ë´F$äöÜ*.=&ïù=ÇuŸÄrUJØÙÙŦ©ËÓk&Ìzº>ñåãå»HZ¡Š­vs5lc÷]mâ|ïvuÓò&"˜oÀ¸ûŠBvâ)beíÀ¿|£èu" W¢–XPk‚’ÃÎᙘl_uÊ/C±ð"m÷¤èµ>ðžâÀŽó þò†@ØWà0ì0óßbY«8´ZàâÿV¿â5òî¯ þ}N,Ò½idø×óh4ìÜtð¿úd%«§æ¥N…º*§IMÐIRºÇy>ÈŽ‰8„P¼I~3R¾qNeûÕ7ØžÒý½v÷MØή˜Ï[ëÇÆÃØù&*-û9h0?i'mYý`O0ú³]iŽ` %É–'Vë® uhÁÛ§|ì˜"¡dt$ó¥ÈÃðÄÖéÂ%Jã(lŠ(Ë™5^Àm[±+d§ Õuü¡ I~hÎv‰ „Ð|íõc;"‹±D,$}0Q(ã 1Úc$È-êÃêkŒ@HRM ~ôÒì•–+Ô#ÇÔ枂»¸#lô:  |Ѻ!Ýß–Žóˆ1ÞT)J[l œ†&¡Ø'ê4¶QÁí›1ŒzuêÀ—¨é¦péP3‹Ô`mÈ×Ö9“Ïr%ã¥û†æ“ŠcS0tê ÄYwß p8ýɘªëB±²wµŠtsj+uÍN£+8â2aÊ°ÊÅ;ÕŸÇÄ ÞƒxÂÅ* [ 276.271815][ T30] VíѤ¬që-ß¿7,Ü@ÕÝÉžZZ—!ÀïšéÔÿ! :Ïþ·v/¤œ"' [ 276.643711][T13330] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 276.730228][T13330] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 276.803873][T13499] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.844030][T13330] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 276.846020][T13501] xt_CT: No such helper "syz1" [ 276.862686][T13504] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.897385][T13330] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 277.180432][T13330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.241351][T13330] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.274931][T10487] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.282184][T10487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.326353][ T3001] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.333584][ T3001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.710151][T13549] netlink: 'syz.4.2117': attribute type 2 has an invalid length. [ 277.730367][T13549] __nla_validate_parse: 3 callbacks suppressed [ 277.730385][T13549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2117'. [ 277.781538][T13548] xt_hashlimit: size too large, truncated to 1048576 [ 277.807775][T13555] netlink: 'syz.4.2117': attribute type 1 has an invalid length. [ 277.974090][T13330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.223853][T13575] FAULT_INJECTION: forcing a failure. [ 278.223853][T13575] name failslab, interval 1, probability 0, space 0, times 0 [ 278.243529][T13330] veth0_vlan: entered promiscuous mode [ 278.270680][T13575] CPU: 1 UID: 0 PID: 13575 Comm: syz.4.2127 Not tainted 6.15.0-rc6-syzkaller-00168-g239af1970bcb #0 PREEMPT(full) [ 278.270708][T13575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 278.270720][T13575] Call Trace: [ 278.270728][T13575] [ 278.270736][T13575] dump_stack_lvl+0x189/0x250 [ 278.270773][T13575] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.270800][T13575] ? __pfx__printk+0x10/0x10 [ 278.270825][T13575] ? __pfx___might_resched+0x10/0x10 [ 278.270843][T13575] ? fs_reclaim_acquire+0x7d/0x100 [ 278.270877][T13575] should_fail_ex+0x414/0x560 [ 278.270902][T13575] should_failslab+0xa8/0x100 [ 278.270930][T13575] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 278.270956][T13575] ? __alloc_skb+0x112/0x2d0 [ 278.270984][T13575] __alloc_skb+0x112/0x2d0 [ 278.271012][T13575] netlink_ack+0x146/0xa50 [ 278.271031][T13575] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 278.271057][T13575] ? ref_tracker_free+0x63a/0x7d0 [ 278.271077][T13575] ? __copy_skb_header+0xa7/0x550 [ 278.271112][T13575] netlink_rcv_skb+0x2a0/0x490 [ 278.271135][T13575] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 278.271159][T13575] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 278.271207][T13575] ? netlink_deliver_tap+0x2e/0x1b0 [ 278.271230][T13575] ? netlink_deliver_tap+0x2e/0x1b0 [ 278.271257][T13575] netlink_unicast+0x75b/0x8d0 [ 278.271288][T13575] netlink_sendmsg+0x805/0xb30 [ 278.271320][T13575] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.271346][T13575] ? aa_sock_msg_perm+0x94/0x160 [ 278.271371][T13575] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 278.271394][T13575] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.271418][T13575] __sock_sendmsg+0x219/0x270 [ 278.271440][T13575] ____sys_sendmsg+0x52d/0x830 [ 278.271473][T13575] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.271507][T13575] ? import_iovec+0x74/0xa0 [ 278.271537][T13575] ___sys_sendmsg+0x21f/0x2a0 [ 278.271566][T13575] ? __pfx____sys_sendmsg+0x10/0x10 [ 278.271634][T13575] ? __fget_files+0x2a/0x420 [ 278.271657][T13575] ? __fget_files+0x3a0/0x420 [ 278.271689][T13575] __sys_sendmmsg+0x227/0x430 [ 278.271721][T13575] ? __pfx___sys_sendmmsg+0x10/0x10 [ 278.271755][T13575] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 278.271796][T13575] ? ksys_write+0x1f0/0x250 [ 278.271816][T13575] ? rcu_is_watching+0x15/0xb0 [ 278.271842][T13575] __x64_sys_sendmmsg+0xa0/0xc0 [ 278.271869][T13575] do_syscall_64+0xf6/0x210 [ 278.271894][T13575] ? clear_bhb_loop+0x60/0xb0 [ 278.271916][T13575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.271933][T13575] RIP: 0033:0x7f037e38e969 [ 278.271948][T13575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.271964][T13575] RSP: 002b:00007f037f288038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 278.271983][T13575] RAX: ffffffffffffffda RBX: 00007f037e5b5fa0 RCX: 00007f037e38e969 [ 278.271996][T13575] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 278.272008][T13575] RBP: 00007f037f288090 R08: 0000000000000000 R09: 0000000000000000 [ 278.272019][T13575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.272029][T13575] R13: 0000000000000000 R14: 00007f037e5b5fa0 R15: 00007ffe302807e8 [ 278.272057][T13575] [ 278.622345][T13330] veth1_vlan: entered promiscuous mode [ 278.645739][ T55] Bluetooth: hci3: command tx timeout [ 278.691084][T13330] veth0_macvtap: entered promiscuous mode [ 278.701951][T13330] veth1_macvtap: entered promiscuous mode [ 278.721863][T13330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.733714][T13330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.744298][T13330] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.757519][T13330] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.768810][T13330] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.778025][T13330] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.871366][T13584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2132'. [ 278.982269][ T3001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.015477][ T3001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.119529][T13601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2135'. [ 279.138684][T10487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.152172][T10487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.221823][T13609] tipc: Enabling of bearer rejected, failed to enable media [ 279.250396][T13609] tipc: Enabling of bearer rejected, failed to enable media [ 279.298896][T13609] tipc: Enabling of bearer rejected, failed to enable media [ 279.319629][T13609] tipc: Enabling of bearer rejected, failed to enable media [ 279.339018][T13609] tipc: Enabling of bearer rejected, failed to enable media [ 279.389578][T13609] tipc: Enabling of bearer rejected, failed to enable media [ 279.434034][T13619] FAULT_INJECTION: forcing a failure. [ 279.434034][T13619] name failslab, interval 1, probability 0, space 0, times 0 [ 279.448448][T13609] tipc: Enabling of bearer rejected, failed to enable media [ 279.458311][T13609] tipc: Enabling of bearer rejected, failed to enable media [ 279.481067][T13619] CPU: 0 UID: 0 PID: 13619 Comm: syz.2.2141 Not tainted 6.15.0-rc6-syzkaller-00168-g239af1970bcb #0 PREEMPT(full) [ 279.481095][T13619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 279.481109][T13619] Call Trace: [ 279.481116][T13619] [ 279.481125][T13619] dump_stack_lvl+0x189/0x250 [ 279.481160][T13619] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.481189][T13619] ? __pfx__printk+0x10/0x10 [ 279.481206][T13619] ? __lock_acquire+0xaac/0xd20 [ 279.481249][T13619] should_fail_ex+0x414/0x560 [ 279.481276][T13619] should_failslab+0xa8/0x100 [ 279.481305][T13619] kmem_cache_alloc_noprof+0x73/0x3c0 [ 279.481330][T13619] ? skb_clone+0x212/0x3a0 [ 279.481363][T13619] skb_clone+0x212/0x3a0 [ 279.481396][T13619] __netlink_deliver_tap+0x404/0x850 [ 279.481433][T13619] ? netlink_deliver_tap+0x2e/0x1b0 [ 279.481476][T13619] netlink_deliver_tap+0x19c/0x1b0 [ 279.481503][T13619] netlink_sendskb+0x68/0x140 [ 279.481527][T13619] netlink_rcv_skb+0x2a0/0x490 [ 279.481552][T13619] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 279.481578][T13619] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 279.481622][T13619] ? netlink_deliver_tap+0x2e/0x1b0 [ 279.481646][T13619] ? netlink_deliver_tap+0x2e/0x1b0 [ 279.481676][T13619] netlink_unicast+0x75b/0x8d0 [ 279.481709][T13619] netlink_sendmsg+0x805/0xb30 [ 279.481743][T13619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.481771][T13619] ? aa_sock_msg_perm+0x94/0x160 [ 279.481808][T13619] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 279.481830][T13619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.481854][T13619] __sock_sendmsg+0x219/0x270 [ 279.481888][T13619] ____sys_sendmsg+0x52d/0x830 [ 279.481921][T13619] ? __pfx_____sys_sendmsg+0x10/0x10 [ 279.481955][T13619] ? import_iovec+0x74/0xa0 [ 279.481987][T13619] ___sys_sendmsg+0x21f/0x2a0 [ 279.482017][T13619] ? __pfx____sys_sendmsg+0x10/0x10 [ 279.482080][T13619] ? __fget_files+0x2a/0x420 [ 279.482110][T13619] ? __fget_files+0x3a0/0x420 [ 279.482147][T13619] __sys_sendmmsg+0x227/0x430 [ 279.482180][T13619] ? __pfx___sys_sendmmsg+0x10/0x10 [ 279.482217][T13619] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 279.482261][T13619] ? ksys_write+0x1f0/0x250 [ 279.482283][T13619] ? rcu_is_watching+0x15/0xb0 [ 279.482312][T13619] __x64_sys_sendmmsg+0xa0/0xc0 [ 279.482343][T13619] do_syscall_64+0xf6/0x210 [ 279.482369][T13619] ? clear_bhb_loop+0x60/0xb0 [ 279.482394][T13619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.482413][T13619] RIP: 0033:0x7f812c38e969 [ 279.482430][T13619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.482446][T13619] RSP: 002b:00007f812d2c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 279.482467][T13619] RAX: ffffffffffffffda RBX: 00007f812c5b5fa0 RCX: 00007f812c38e969 [ 279.482481][T13619] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 279.482494][T13619] RBP: 00007f812d2c0090 R08: 0000000000000000 R09: 0000000000000000 [ 279.482506][T13619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.482517][T13619] R13: 0000000000000000 R14: 00007f812c5b5fa0 R15: 00007fff56672288 [ 279.482547][T13619] [ 279.483706][T13609] tipc: Enabling of bearer rejected, failed to enable media [ 279.725056][T13627] netlink: 'syz.0.2142': attribute type 2 has an invalid length. [ 279.730164][T13609] tipc: Enabling of bearer rejected, failed to enable media [ 279.891206][T13609] tipc: Enabling of bearer rejected, failed to enable media [ 279.911374][T13630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2144'. [ 279.932990][T13623] netlink: 'syz.0.2142': attribute type 4 has an invalid length. [ 279.965018][T13609] tipc: Enabling of bearer rejected, failed to enable media [ 279.975473][T13609] tipc: Enabling of bearer rejected, failed to enable media [ 279.995154][T13632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2145'. [ 280.009819][T13609] tipc: Enabling of bearer rejected, failed to enable media [ 280.064788][T13632] netlink: 'syz.1.2145': attribute type 10 has an invalid length. [ 280.225687][T13639] netlink: 'syz.2.2149': attribute type 39 has an invalid length. [ 280.301718][T13644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2151'. [ 280.311539][T13644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2151'. [ 280.330078][T13646] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 581 [ 280.457876][T13649] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 281.853784][T13673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2158'. [ 282.150475][T13688] Cannot find set identified by id 752 to match [ 282.182554][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 282.192750][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 282.200850][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 282.210438][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 282.221458][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 282.502678][T13708] openvswitch: netlink: Duplicate key (type 0). [ 282.691933][T13715] netlink: 'syz.2.2172': attribute type 6 has an invalid length. [ 283.164743][T13734] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}zR3âëp(@O' [ 283.176579][T13734] CPU: 1 UID: 0 PID: 13734 Comm: syz.2.2178 Not tainted 6.15.0-rc6-syzkaller-00168-g239af1970bcb #0 PREEMPT(full) [ 283.176609][T13734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 283.176622][T13734] Call Trace: [ 283.176639][T13734] [ 283.176648][T13734] dump_stack_lvl+0x189/0x250 [ 283.176683][T13734] ? lockdep_hardirqs_on+0x9c/0x150 [ 283.176711][T13734] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.176741][T13734] ? __pfx__printk+0x10/0x10 [ 283.176766][T13734] ? kernfs_path_from_node+0x2b/0x260 [ 283.176798][T13734] ? kernfs_path_from_node+0x216/0x260 [ 283.176831][T13734] sysfs_warn_dup+0x8e/0xa0 [ 283.176859][T13734] sysfs_do_create_link_sd+0xc0/0x110 [ 283.176890][T13734] device_add_class_symlinks+0x1cf/0x240 [ 283.176918][T13734] device_add+0x475/0xb50 [ 283.176946][T13734] wiphy_register+0x199a/0x26b0 [ 283.176995][T13734] ? __pfx_wiphy_register+0x10/0x10 [ 283.177023][T13734] ? minstrel_ht_alloc+0x893/0x990 [ 283.177065][T13734] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 283.177103][T13734] ieee80211_register_hw+0x33e1/0x4120 [ 283.177144][T13734] ? ieee80211_register_hw+0x1471/0x4120 [ 283.177175][T13734] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 283.177201][T13734] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 283.177239][T13734] ? __hrtimer_setup+0x187/0x210 [ 283.177288][T13734] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 283.177316][T13734] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 283.177385][T13734] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 283.177419][T13734] ? trace_kmalloc+0x1f/0xd0 [ 283.177443][T13734] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 283.177473][T13734] ? kstrndup+0xbf/0x160 [ 283.177507][T13734] hwsim_new_radio_nl+0xea4/0x1b10 [ 283.177546][T13734] ? __pfx___nla_validate_parse+0x10/0x10 [ 283.177590][T13734] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 283.177650][T13734] ? __nla_parse+0x40/0x60 [ 283.177683][T13734] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 283.177727][T13734] genl_family_rcv_msg_doit+0x215/0x300 [ 283.177770][T13734] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 283.177820][T13734] ? bpf_lsm_capable+0x9/0x20 [ 283.177851][T13734] ? security_capable+0x7e/0x2e0 [ 283.177883][T13734] genl_rcv_msg+0x60e/0x790 [ 283.177923][T13734] ? __pfx_genl_rcv_msg+0x10/0x10 [ 283.177955][T13734] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 283.178009][T13734] netlink_rcv_skb+0x219/0x490 [ 283.178036][T13734] ? __pfx_genl_rcv_msg+0x10/0x10 [ 283.178071][T13734] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 283.178125][T13734] ? down_read+0x1ad/0x2e0 [ 283.178160][T13734] genl_rcv+0x28/0x40 [ 283.178190][T13734] netlink_unicast+0x75b/0x8d0 [ 283.178227][T13734] netlink_sendmsg+0x805/0xb30 [ 283.178266][T13734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.178298][T13734] ? aa_sock_msg_perm+0x94/0x160 [ 283.178325][T13734] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 283.178350][T13734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.178378][T13734] __sock_sendmsg+0x219/0x270 [ 283.178404][T13734] ____sys_sendmsg+0x505/0x830 [ 283.178443][T13734] ? __pfx_____sys_sendmsg+0x10/0x10 [ 283.178494][T13734] ? import_iovec+0x74/0xa0 [ 283.178526][T13734] ___sys_sendmsg+0x21f/0x2a0 [ 283.178557][T13734] ? __pfx____sys_sendmsg+0x10/0x10 [ 283.178625][T13734] ? __fget_files+0x2a/0x420 [ 283.178668][T13734] ? __fget_files+0x3a0/0x420 [ 283.178706][T13734] __x64_sys_sendmsg+0x19b/0x260 [ 283.178737][T13734] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 283.178784][T13734] ? do_syscall_64+0xba/0x210 [ 283.178815][T13734] do_syscall_64+0xf6/0x210 [ 283.178842][T13734] ? clear_bhb_loop+0x60/0xb0 [ 283.178867][T13734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.178886][T13734] RIP: 0033:0x7f812c38e969 [ 283.178904][T13734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.178921][T13734] RSP: 002b:00007f812d2c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 283.178942][T13734] RAX: ffffffffffffffda RBX: 00007f812c5b5fa0 RCX: 00007f812c38e969 [ 283.178956][T13734] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 283.178969][T13734] RBP: 00007f812c410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 283.178980][T13734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.178992][T13734] R13: 0000000000000000 R14: 00007f812c5b5fa0 R15: 00007fff56672288 [ 283.179024][T13734] [ 283.762419][T13745] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2182'. [ 283.919937][T13754] netlink: 'syz.2.2186': attribute type 1 has an invalid length. [ 283.963353][T13758] netlink: 'syz.0.2185': attribute type 11 has an invalid length. [ 283.971355][T13758] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2185'. [ 283.985404][T13758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2185'. [ 284.027772][T13754] 8021q: adding VLAN 0 to HW filter on device bond4 [ 284.152840][T13759] bond4: (slave gretap2): making interface the new active one [ 284.219267][T13759] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 284.232133][T13754] bond4: entered promiscuous mode [ 284.254499][T13754] gretap2: entered promiscuous mode [ 284.266268][ T5832] Bluetooth: hci3: command tx timeout [ 284.276479][T13754] bond4: entered allmulticast mode [ 284.287602][T13777] netlink: 'syz.0.2192': attribute type 10 has an invalid length. [ 284.305684][T13754] gretap2: entered allmulticast mode [ 284.404747][T13689] chnl_net:caif_netlink_parms(): no params data found [ 284.561052][T13788] FAULT_INJECTION: forcing a failure. [ 284.561052][T13788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.579079][T13797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2197'. [ 284.595265][T13788] CPU: 1 UID: 0 PID: 13788 Comm: syz.4.2195 Not tainted 6.15.0-rc6-syzkaller-00168-g239af1970bcb #0 PREEMPT(full) [ 284.595293][T13788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 284.595305][T13788] Call Trace: [ 284.595313][T13788] [ 284.595321][T13788] dump_stack_lvl+0x189/0x250 [ 284.595353][T13788] ? __lock_acquire+0xaac/0xd20 [ 284.595385][T13788] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.595420][T13788] ? __pfx__printk+0x10/0x10 [ 284.595440][T13788] ? __might_fault+0xb0/0x130 [ 284.595476][T13788] should_fail_ex+0x414/0x560 [ 284.595501][T13788] _copy_from_iter+0x1db/0x15a0 [ 284.595533][T13788] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 284.595556][T13788] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 284.595583][T13788] ? __pfx__copy_from_iter+0x10/0x10 [ 284.595609][T13788] ? __build_skb_around+0x257/0x3e0 [ 284.595637][T13788] ? netlink_sendmsg+0x642/0xb30 [ 284.595675][T13788] ? skb_put+0x11b/0x210 [ 284.595706][T13788] netlink_sendmsg+0x6b2/0xb30 [ 284.595740][T13788] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.595768][T13788] ? aa_sock_msg_perm+0x94/0x160 [ 284.595794][T13788] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 284.595817][T13788] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.595843][T13788] __sock_sendmsg+0x219/0x270 [ 284.595868][T13788] ____sys_sendmsg+0x52d/0x830 [ 284.595902][T13788] ? __pfx_____sys_sendmsg+0x10/0x10 [ 284.595941][T13788] ? import_iovec+0x74/0xa0 [ 284.595974][T13788] ___sys_sendmsg+0x21f/0x2a0 [ 284.596006][T13788] ? __pfx____sys_sendmsg+0x10/0x10 [ 284.596079][T13788] ? __might_fault+0xb0/0x130 [ 284.596110][T13788] __sys_sendmmsg+0x227/0x430 [ 284.596150][T13788] ? __pfx___sys_sendmmsg+0x10/0x10 [ 284.596188][T13788] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 284.596233][T13788] ? ksys_write+0x1f0/0x250 [ 284.596257][T13788] ? rcu_is_watching+0x15/0xb0 [ 284.596286][T13788] __x64_sys_sendmmsg+0xa0/0xc0 [ 284.596317][T13788] do_syscall_64+0xf6/0x210 [ 284.596346][T13788] ? clear_bhb_loop+0x60/0xb0 [ 284.596372][T13788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.596398][T13788] RIP: 0033:0x7f037e38e969 [ 284.596416][T13788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.596434][T13788] RSP: 002b:00007f037f288038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 284.596455][T13788] RAX: ffffffffffffffda RBX: 00007f037e5b5fa0 RCX: 00007f037e38e969 [ 284.596471][T13788] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 284.596484][T13788] RBP: 00007f037f288090 R08: 0000000000000000 R09: 0000000000000000 [ 284.596497][T13788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 284.596509][T13788] R13: 0000000000000000 R14: 00007f037e5b5fa0 R15: 00007ffe302807e8 [ 284.596540][T13788] [ 285.106127][T13689] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.113302][T13689] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.142188][T13689] bridge_slave_0: entered allmulticast mode [ 285.153401][T13689] bridge_slave_0: entered promiscuous mode [ 285.161997][T13689] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.170530][T13689] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.178124][T13689] bridge_slave_1: entered allmulticast mode [ 285.185813][T13689] bridge_slave_1: entered promiscuous mode [ 285.209934][T13815] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2202'. [ 285.231145][T13808] netlink: 'syz.4.2199': attribute type 1 has an invalid length. [ 285.254513][T13808] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.377425][T13689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.402278][T13689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.402670][T13825] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.534242][T13827] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 285.561784][T13829] FAULT_INJECTION: forcing a failure. [ 285.561784][T13829] name failslab, interval 1, probability 0, space 0, times 0 [ 285.591006][T13829] CPU: 1 UID: 0 PID: 13829 Comm: syz.4.2209 Not tainted 6.15.0-rc6-syzkaller-00168-g239af1970bcb #0 PREEMPT(full) [ 285.591034][T13829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 285.591047][T13829] Call Trace: [ 285.591055][T13829] [ 285.591063][T13829] dump_stack_lvl+0x189/0x250 [ 285.591100][T13829] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.591129][T13829] ? __pfx__printk+0x10/0x10 [ 285.591155][T13829] ? ref_tracker_alloc+0x318/0x460 [ 285.591180][T13829] should_fail_ex+0x414/0x560 [ 285.591205][T13829] should_failslab+0xa8/0x100 [ 285.591234][T13829] kmem_cache_alloc_noprof+0x73/0x3c0 [ 285.591259][T13829] ? skb_clone+0x212/0x3a0 [ 285.591292][T13829] skb_clone+0x212/0x3a0 [ 285.591324][T13829] __netlink_deliver_tap+0x404/0x850 [ 285.591361][T13829] ? netlink_deliver_tap+0x2e/0x1b0 [ 285.591386][T13829] netlink_deliver_tap+0x19c/0x1b0 [ 285.591411][T13829] netlink_unicast+0x72f/0x8d0 [ 285.591443][T13829] netlink_sendmsg+0x805/0xb30 [ 285.591475][T13829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.591503][T13829] ? aa_sock_msg_perm+0x94/0x160 [ 285.591528][T13829] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 285.591551][T13829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.591582][T13829] __sock_sendmsg+0x219/0x270 [ 285.591606][T13829] ____sys_sendmsg+0x52d/0x830 [ 285.591640][T13829] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.591676][T13829] ? import_iovec+0x74/0xa0 [ 285.591707][T13829] ___sys_sendmsg+0x21f/0x2a0 [ 285.591737][T13829] ? __pfx____sys_sendmsg+0x10/0x10 [ 285.591808][T13829] ? __might_fault+0xb0/0x130 [ 285.591839][T13829] __sys_sendmmsg+0x227/0x430 [ 285.591873][T13829] ? __pfx___sys_sendmmsg+0x10/0x10 [ 285.591910][T13829] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 285.591956][T13829] ? ksys_write+0x1f0/0x250 [ 285.591978][T13829] ? rcu_is_watching+0x15/0xb0 [ 285.592006][T13829] __x64_sys_sendmmsg+0xa0/0xc0 [ 285.592040][T13829] do_syscall_64+0xf6/0x210 [ 285.592068][T13829] ? clear_bhb_loop+0x60/0xb0 [ 285.592093][T13829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.592111][T13829] RIP: 0033:0x7f037e38e969 [ 285.592128][T13829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.592146][T13829] RSP: 002b:00007f037f288038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 285.592167][T13829] RAX: ffffffffffffffda RBX: 00007f037e5b5fa0 RCX: 00007f037e38e969 [ 285.592181][T13829] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 285.592194][T13829] RBP: 00007f037f288090 R08: 0000000000000000 R09: 0000000000000000 [ 285.592207][T13829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 285.592218][T13829] R13: 0000000000000000 R14: 00007f037e5b5fa0 R15: 00007ffe302807e8 [ 285.592249][T13829] [ 285.891737][T13689] team0: Port device team_slave_0 added [ 285.901107][T13689] team0: Port device team_slave_1 added [ 285.981109][T13837] 8021q: adding VLAN 0 to HW filter on device bond5 [ 286.086346][T13839] wg2: entered promiscuous mode [ 286.091404][T13839] wg2: entered allmulticast mode [ 286.277640][T13854] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2214'. [ 286.304215][T13858] x_tables: duplicate underflow at hook 4 [ 286.320065][T13689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.329035][T13689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.356999][ T5832] Bluetooth: hci3: command tx timeout [ 286.364842][T13689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.388068][T13689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.395033][T13689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.421972][T13689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.599626][T13870] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.670985][T13689] hsr_slave_0: entered promiscuous mode [ 286.698231][T13689] hsr_slave_1: entered promiscuous mode [ 286.704644][T13689] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.736256][T13689] Cannot create hsr debugfs directory [ 286.752086][T13873] FAULT_INJECTION: forcing a failure. [ 286.752086][T13873] name failslab, interval 1, probability 0, space 0, times 0 [ 286.803227][T13873] CPU: 1 UID: 0 PID: 13873 Comm: syz.2.2222 Not tainted 6.15.0-rc6-syzkaller-00168-g239af1970bcb #0 PREEMPT(full) [ 286.803261][T13873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 286.803273][T13873] Call Trace: [ 286.803281][T13873] [ 286.803289][T13873] dump_stack_lvl+0x189/0x250 [ 286.803325][T13873] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.803353][T13873] ? __pfx__printk+0x10/0x10 [ 286.803377][T13873] ? __pfx___might_resched+0x10/0x10 [ 286.803395][T13873] ? fs_reclaim_acquire+0x7d/0x100 [ 286.803429][T13873] should_fail_ex+0x414/0x560 [ 286.803454][T13873] should_failslab+0xa8/0x100 [ 286.803481][T13873] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 286.803508][T13873] ? __alloc_skb+0x112/0x2d0 [ 286.803536][T13873] __alloc_skb+0x112/0x2d0 [ 286.803563][T13873] netlink_ack+0x146/0xa50 [ 286.803583][T13873] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 286.803610][T13873] ? ref_tracker_free+0x63a/0x7d0 [ 286.803629][T13873] ? __copy_skb_header+0xa7/0x550 [ 286.803666][T13873] netlink_rcv_skb+0x2a0/0x490 [ 286.803689][T13873] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 286.803713][T13873] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 286.803754][T13873] ? netlink_deliver_tap+0x2e/0x1b0 [ 286.803776][T13873] ? netlink_deliver_tap+0x2e/0x1b0 [ 286.803803][T13873] netlink_unicast+0x75b/0x8d0 [ 286.803834][T13873] netlink_sendmsg+0x805/0xb30 [ 286.803866][T13873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.803892][T13873] ? aa_sock_msg_perm+0x94/0x160 [ 286.803916][T13873] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 286.803938][T13873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.803962][T13873] __sock_sendmsg+0x219/0x270 [ 286.803985][T13873] ____sys_sendmsg+0x52d/0x830 [ 286.804018][T13873] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.804053][T13873] ? import_iovec+0x74/0xa0 [ 286.804084][T13873] ___sys_sendmsg+0x21f/0x2a0 [ 286.804113][T13873] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.804181][T13873] ? __might_fault+0xb0/0x130 [ 286.804212][T13873] __sys_sendmmsg+0x227/0x430 [ 286.804261][T13873] ? __pfx___sys_sendmmsg+0x10/0x10 [ 286.804296][T13873] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 286.804340][T13873] ? ksys_write+0x1f0/0x250 [ 286.804361][T13873] ? rcu_is_watching+0x15/0xb0 [ 286.804389][T13873] __x64_sys_sendmmsg+0xa0/0xc0 [ 286.804418][T13873] do_syscall_64+0xf6/0x210 [ 286.804445][T13873] ? clear_bhb_loop+0x60/0xb0 [ 286.804469][T13873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.804488][T13873] RIP: 0033:0x7f812c38e969 [ 286.804505][T13873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.804521][T13873] RSP: 002b:00007f812d2c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 286.804543][T13873] RAX: ffffffffffffffda RBX: 00007f812c5b5fa0 RCX: 00007f812c38e969 [ 286.804557][T13873] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 286.804571][T13873] RBP: 00007f812d2c0090 R08: 0000000000000000 R09: 0000000000000000 [ 286.804583][T13873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 286.804594][T13873] R13: 0000000000000000 R14: 00007f812c5b5fa0 R15: 00007fff56672288 [ 286.804623][T13873] [ 286.815642][T13878] netlink: 'syz.1.2223': attribute type 1 has an invalid length. [ 286.877543][T13879] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 286.879027][T13877] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 287.365873][T13897] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2230'. [ 287.525594][T13904] netlink: 'syz.0.2232': attribute type 11 has an invalid length. [ 287.620721][T13689] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.649274][T13908] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.839517][T13689] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.974311][T13689] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.995678][T13920] netlink: 'syz.0.2239': attribute type 10 has an invalid length. [ 288.169549][T13689] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.324914][T13934] 8021q: VLANs not supported on gre0 [ 288.366197][T13934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2243'. [ 288.426319][ T5832] Bluetooth: hci3: command tx timeout [ 288.538289][T13941] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.571186][T13689] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 288.620282][T13689] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 288.642618][T13689] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 288.693496][T13689] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 288.979124][T13952] FAULT_INJECTION: forcing a failure. [ 288.979124][T13952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.006766][T13952] CPU: 0 UID: 0 PID: 13952 Comm: syz.0.2250 Not tainted 6.15.0-rc6-syzkaller-00168-g239af1970bcb #0 PREEMPT(full) [ 289.006797][T13952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 289.006810][T13952] Call Trace: [ 289.006818][T13952] [ 289.006827][T13952] dump_stack_lvl+0x189/0x250 [ 289.006861][T13952] ? __lock_acquire+0xaac/0xd20 [ 289.006916][T13952] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.006966][T13952] ? __pfx__printk+0x10/0x10 [ 289.006987][T13952] ? __might_fault+0xb0/0x130 [ 289.007029][T13952] should_fail_ex+0x414/0x560 [ 289.007056][T13952] _copy_from_user+0x2d/0xb0 [ 289.007090][T13952] kstrtouint_from_user+0xc4/0x170 [ 289.007119][T13952] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 289.007164][T13952] proc_fail_nth_write+0x88/0x240 [ 289.007196][T13952] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 289.007239][T13952] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 289.007273][T13952] vfs_write+0x27b/0xa90 [ 289.007315][T13952] ? __pfx_vfs_write+0x10/0x10 [ 289.007340][T13952] ? __fget_files+0x2a/0x420 [ 289.007374][T13952] ? __fget_files+0x3a0/0x420 [ 289.007402][T13952] ? __fget_files+0x2a/0x420 [ 289.007441][T13952] ksys_write+0x145/0x250 [ 289.007464][T13952] ? rcu_is_watching+0x15/0xb0 [ 289.007486][T13952] ? __pfx_ksys_write+0x10/0x10 [ 289.007516][T13952] ? do_syscall_64+0xba/0x210 [ 289.007549][T13952] do_syscall_64+0xf6/0x210 [ 289.007579][T13952] ? clear_bhb_loop+0x60/0xb0 [ 289.007606][T13952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.007626][T13952] RIP: 0033:0x7f707d78d41f [ 289.007645][T13952] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 289.007663][T13952] RSP: 002b:00007f707e5ce030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 289.007685][T13952] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f707d78d41f [ 289.007700][T13952] RDX: 0000000000000001 RSI: 00007f707e5ce0a0 RDI: 0000000000000006 [ 289.007713][T13952] RBP: 00007f707e5ce090 R08: 0000000000000000 R09: 0000000000000000 [ 289.007726][T13952] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 289.007739][T13952] R13: 0000000000000000 R14: 00007f707d9b5fa0 R15: 00007ffec80702b8 [ 289.007774][T13952] [ 289.052513][T13689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.061281][T13956] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 289.123098][T13689] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.281917][T13959] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2252'. [ 289.311869][T10487] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.319073][T10487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.391550][T10487] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.398842][T10487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.695536][T13981] veth0: entered promiscuous mode [ 289.726733][T13979] netlink: 'syz.0.2260': attribute type 1 has an invalid length. [ 289.734509][T13979] netlink: 'syz.0.2260': attribute type 3 has an invalid length. [ 289.786267][T13979] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2260'. [ 289.831304][T13980] veth0: left promiscuous mode [ 289.832333][T13979] NCSI netlink: No device for ifindex 131080 [ 289.848652][T13986] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2261'. [ 290.077860][T13689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.089587][T13995] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2264'. [ 290.227091][T13689] veth0_vlan: entered promiscuous mode [ 290.256061][T13689] veth1_vlan: entered promiscuous mode [ 290.354345][T13689] veth0_macvtap: entered promiscuous mode [ 290.382647][T13689] veth1_macvtap: entered promiscuous mode [ 290.416124][T13689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.436994][T13689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.464080][T13689] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.483566][T13689] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.505644][ T55] Bluetooth: hci3: command tx timeout [ 290.545628][T13689] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.554374][T13689] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.849280][T10487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.855811][T14027] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2274'. [ 290.884725][T10487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.977517][T10487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.989226][T14031] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2276'. [ 291.006666][T10487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.028789][T14034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2277'. [ 291.116452][T14034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2277'. [ 291.142117][T14034] netlink: 'syz.1.2277': attribute type 15 has an invalid length. [ 291.317983][T14051] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2279'. [ 291.384701][T14051] openvswitch: netlink: Flow key attr not present in new flow. [ 291.596286][T14055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2282'. [ 293.386295][T14083] netlink: 'syz.1.2289': attribute type 11 has an invalid length. [ 293.478752][T14091] openvswitch: netlink: Flow key attr not present in new flow. [ 294.062098][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 294.071142][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 294.078251][ T30] audit: type=1800 audit(1747696458.503:5): pid=14118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2300" name="memory.events" dev="tmpfs" ino=2607 res=0 errno=0 [ 294.110670][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 294.128995][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 294.145981][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 294.162110][ T30] audit: type=1804 audit(1747696458.503:6): pid=14118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2300" name="/newroot/509/memory.events" dev="tmpfs" ino=2607 res=1 errno=0 [ 294.225333][T14133] xt_CT: You must specify a L4 protocol and not use inversions on it [ 294.230797][T14133] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 294.598371][T14128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.623218][T14128] bond_slave_0: left allmulticast mode [ 294.654351][T14128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.673190][T14128] bond_slave_1: left allmulticast mode [ 294.683853][T14128] bond0 (unregistering): Released all slaves [ 294.709254][ T10] syz0: Port: 1 Link DOWN [ 294.721630][T14136] macvlan2: entered promiscuous mode [ 294.729015][T14136] macvlan2: entered allmulticast mode [ 294.956878][T14149] openvswitch: netlink: Flow key attr not present in new flow. [ 295.117988][T14154] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 295.151514][T14158] __nla_validate_parse: 8 callbacks suppressed [ 295.151533][T14158] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2313'. [ 295.391888][T14169] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 296.161820][T14126] chnl_net:caif_netlink_parms(): no params data found [ 296.267455][ T55] Bluetooth: hci3: command tx timeout [ 296.579855][T14126] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.589305][T14219] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2328'. [ 296.598149][T14126] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.614137][T14126] bridge_slave_0: entered allmulticast mode [ 296.642050][T14126] bridge_slave_0: entered promiscuous mode [ 296.745533][T14178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2317'. [ 296.797162][T14126] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.826414][T14226] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2317'. [ 296.860878][T14126] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.868906][T14226] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2317'. [ 296.881819][T14126] bridge_slave_1: entered allmulticast mode [ 296.893591][T14126] bridge_slave_1: entered promiscuous mode [ 297.057610][T14239] netlink: 788 bytes leftover after parsing attributes in process `syz.1.2332'. [ 297.180710][T14126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.205450][T14126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.313802][T14242] netlink: 'syz.4.2333': attribute type 1 has an invalid length. [ 297.347672][T14126] team0: Port device team_slave_0 added [ 297.361288][T14126] team0: Port device team_slave_1 added [ 297.431442][T14247] netlink: 'syz.4.2333': attribute type 11 has an invalid length. [ 297.441423][T14247] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2333'. [ 297.482740][T14242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.580972][T14247] veth7: entered promiscuous mode [ 297.590844][T14242] erspan0: left promiscuous mode [ 297.599103][T14242] erspan0: entered allmulticast mode [ 297.656359][T14126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.685033][T14126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.719761][T14126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.779467][T14126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.786037][T14252] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 297.794845][T14126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.841705][T14126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.081342][T14126] hsr_slave_0: entered promiscuous mode [ 298.138585][T14263] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2339'. [ 298.154916][T14126] hsr_slave_1: entered promiscuous mode [ 298.172607][T14126] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.197520][T14126] Cannot create hsr debugfs directory [ 298.231100][T14267] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2340'. [ 298.356021][ T55] Bluetooth: hci3: command tx timeout [ 298.714539][T14283] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2345'. [ 298.841044][T14126] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.062244][T14126] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.267925][T14126] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.413244][T14126] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.514830][T14327] netlink: 'syz.4.2360': attribute type 2 has an invalid length. [ 299.837079][T14126] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 299.865082][T14126] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 299.970740][T14126] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 300.009852][T14126] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 300.349691][T14126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.381303][ T30] audit: type=1800 audit(1747696464.803:7): pid=14357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2371" name="memory.events" dev="tmpfs" ino=2683 res=0 errno=0 [ 300.383553][T14357] delete_channel: no stack [ 300.416795][ T30] audit: type=1804 audit(1747696464.803:8): pid=14357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2371" name="/newroot/524/memory.events" dev="tmpfs" ino=2683 res=1 errno=0 [ 300.427172][T14355] macvlan2: entered promiscuous mode [ 300.446238][ T55] Bluetooth: hci3: command tx timeout [ 300.521234][T14361] netlink: 'syz.2.2372': attribute type 4 has an invalid length. [ 300.588996][T14357] __nla_validate_parse: 7 callbacks suppressed [ 300.589015][T14357] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2371'. [ 300.610161][T14126] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.628543][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.635833][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.739573][T14371] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2374'. [ 300.820956][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.828238][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.140110][T14384] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 301.203238][T14387] set match dimension is over the limit! [ 301.230689][ T55] block nbd2: Receive control failed (result -32) [ 301.511113][T14126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.603319][T14126] veth0_vlan: entered promiscuous mode [ 301.652787][T14126] veth1_vlan: entered promiscuous mode [ 301.771142][T14126] veth0_macvtap: entered promiscuous mode [ 301.813245][T14126] veth1_macvtap: entered promiscuous mode [ 301.888799][T14126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.931408][T14126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.991688][T14126] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.035472][T14126] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.071197][T14126] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.089601][T14126] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.273486][T14434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2391'. [ 302.434183][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.447930][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.507661][ T55] Bluetooth: hci3: command tx timeout [ 302.545637][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.592080][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.763882][T14449] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2396'. [ 302.783112][T14449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2396'. [ 302.811193][T14449] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2396'. [ 302.843688][T14449] netlink: 'syz.2.2396': attribute type 2 has an invalid length. [ 302.853686][T14449] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2396'. [ 302.983799][T14453] pimreg13: entered allmulticast mode [ 303.170076][T14462] netlink: 146852 bytes leftover after parsing attributes in process `syz.2.2400'. [ 303.242640][T14462] netlink: zone id is out of range [ 303.266088][T14462] netlink: get zone limit has 8 unknown bytes [ 303.352476][T14467] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2401'. [ 303.366128][T14467] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 303.468975][T14470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2401'. [ 304.561516][T14474] netlink: 'syz.0.2402': attribute type 1 has an invalid length. [ 304.776543][T14487] netlink: 'syz.1.2406': attribute type 7 has an invalid length. [ 304.794889][T14487] netlink: 'syz.1.2406': attribute type 7 has an invalid length. [ 304.989132][T14496] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 305.062139][T14500] xt_TCPMSS: Only works on TCP SYN packets [ 305.307807][T14515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.335078][T14519] dvmrp5: entered allmulticast mode [ 305.367311][T14519] dvmrp5: left allmulticast mode [ 305.400907][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 305.415960][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 305.426490][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 305.436437][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 305.444092][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 305.534800][T14530] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.681966][T14530] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.750949][T14530] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.816348][T14530] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.839669][T14541] Bluetooth: MGMT ver 1.23 [ 305.870445][T14540] bridge_slave_0: default FDB implementation only supports local addresses [ 305.990129][T14530] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.994541][T14540] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 306.031527][T14530] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.044343][T14540] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 306.051292][T14530] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.075746][T14530] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.102124][T14529] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.201408][T14529] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.359544][T14555] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 306.378713][T14529] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.478350][T14529] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.574368][T14522] chnl_net:caif_netlink_parms(): no params data found [ 306.642475][T14563] xt_CT: You must specify a L4 protocol and not use inversions on it [ 306.756083][T14565] __nla_validate_parse: 8 callbacks suppressed [ 306.756103][T14565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2429'. [ 306.900264][T14522] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.954551][T14522] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.965785][T14522] bridge_slave_0: entered allmulticast mode [ 306.973675][T14522] bridge_slave_0: entered promiscuous mode [ 307.007276][T14522] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.022851][T14576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2432'. [ 307.035546][T14522] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.042930][T14522] bridge_slave_1: entered allmulticast mode [ 307.062646][T14576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2432'. [ 307.078518][T14522] bridge_slave_1: entered promiscuous mode [ 307.202090][T14522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.234620][T14522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.258598][T14585] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2435'. [ 307.320050][T14589] openvswitch: netlink: EtherType 50a is less than min 600 [ 307.466017][ T5832] Bluetooth: hci3: command tx timeout [ 307.484078][T14594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2438'. [ 307.517434][T14594] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2438'. [ 307.571017][T14522] team0: Port device team_slave_0 added [ 307.619701][T14522] team0: Port device team_slave_1 added [ 307.768020][T14522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.775028][T14522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.813929][T14522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.847194][T14522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.854222][T14522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.912176][T14522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.000297][ T10] IPVS: starting estimator thread 0... [ 308.153848][T14615] IPVS: using max 30 ests per chain, 72000 per kthread [ 308.178231][T14522] hsr_slave_0: entered promiscuous mode [ 308.196634][T14522] hsr_slave_1: entered promiscuous mode [ 308.210510][T14522] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.227928][T14522] Cannot create hsr debugfs directory [ 308.277434][T14620] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2442'. [ 308.484880][T14628] netlink: 212404 bytes leftover after parsing attributes in process `syz.0.2444'. [ 308.884451][T14649] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2449'. [ 308.949301][T14522] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.041379][T14656] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 309.106811][T14655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2452'. [ 309.211041][T14666] netlink: 'syz.2.2453': attribute type 1 has an invalid length. [ 309.238940][T14522] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.364623][T14667] bond5: (slave gretap3): making interface the new active one [ 309.379986][T14667] bond5: (slave gretap3): Enslaving as an active interface with an up link [ 309.492182][T14678] openvswitch: netlink: Key type 5894 is out of range max 32 [ 309.533614][T14522] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.552185][ T5832] Bluetooth: hci3: command tx timeout [ 309.686410][T14529] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.723890][T14522] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.762568][T14694] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 309.771299][T14695] x_tables: duplicate underflow at hook 1 [ 309.805140][T14529] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.848914][T14529] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.897674][T14529] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.223857][T14522] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 310.292233][T14522] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 310.333262][T14522] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 310.352732][T14522] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 310.734228][T14522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.832331][T14522] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.867505][ T2984] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.874671][ T2984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.930414][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.937627][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.148625][T14741] veth0_to_bridge: entered allmulticast mode [ 311.359950][T14740] veth0_to_bridge: left allmulticast mode [ 311.612149][T14758] netlink: 'syz.4.2477': attribute type 21 has an invalid length. [ 311.626439][ T5832] Bluetooth: hci3: command tx timeout [ 311.653540][T14758] IPv6: NLM_F_CREATE should be specified when creating new route [ 311.678456][T14758] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 311.685748][T14758] IPv6: NLM_F_CREATE should be set when creating new route [ 311.693200][T14758] IPv6: NLM_F_CREATE should be set when creating new route [ 311.700455][T14758] IPv6: NLM_F_CREATE should be set when creating new route [ 311.838755][T14763] __nla_validate_parse: 4 callbacks suppressed [ 311.838773][T14763] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2477'. [ 311.979010][T14763] netlink: 'syz.4.2477': attribute type 39 has an invalid length. [ 312.117942][T14771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2481'. [ 312.436574][T14522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.680071][T14522] veth0_vlan: entered promiscuous mode [ 312.714461][T14522] veth1_vlan: entered promiscuous mode [ 312.797074][T14796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2487'. [ 312.817207][T14522] veth0_macvtap: entered promiscuous mode [ 312.865999][T14522] veth1_macvtap: entered promiscuous mode [ 312.922099][T14522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.952897][T14522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.009471][T14802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2489'. [ 313.025038][T14522] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.044064][T14522] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.085514][T14522] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.094273][T14522] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.115470][T14806] netlink: 212404 bytes leftover after parsing attributes in process `syz.4.2492'. [ 313.320637][T14813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.429306][T14813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.536057][ T2984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.543926][ T2984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.650267][ T2947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.668093][ T2947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.705659][ T5832] Bluetooth: hci3: command tx timeout [ 313.747982][T14827] sctp: [Deprecated]: syz.4.2498 (pid 14827) Use of struct sctp_assoc_value in delayed_ack socket option. [ 313.747982][T14827] Use struct sctp_sack_info instead [ 313.830159][T14833] netlink: 'syz.2.2501': attribute type 3 has an invalid length. [ 314.115052][T14850] syzkaller0: entered promiscuous mode [ 314.135138][T14851] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2503'. [ 314.145587][T14850] syzkaller0: entered allmulticast mode [ 314.196753][T14847] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2502'. [ 315.746291][T14866] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2509'. [ 315.955682][T14875] sctp: [Deprecated]: syz.2.2512 (pid 14875) Use of struct sctp_assoc_value in delayed_ack socket option. [ 315.955682][T14875] Use struct sctp_sack_info instead [ 316.053803][T14879] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 316.070455][T14875] netlink: 'syz.2.2512': attribute type 4 has an invalid length. [ 316.209320][T14881] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2515'. [ 316.228368][T14881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2515'. [ 316.434729][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 316.447703][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 316.456322][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 316.467801][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 316.476963][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 316.688211][T14895] team0: Port device team_slave_0 removed [ 316.733126][T14902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.986833][T14915] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 317.932060][T14887] chnl_net:caif_netlink_parms(): no params data found [ 317.997911][T14960] __nla_validate_parse: 3 callbacks suppressed [ 317.997932][T14960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2537'. [ 318.031942][T14960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2537'. [ 318.099539][T14963] openvswitch: netlink: Missing key (keys=40, expected=100) [ 318.288700][T14887] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.315608][T14887] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.322961][T14887] bridge_slave_0: entered allmulticast mode [ 318.347331][T14887] bridge_slave_0: entered promiscuous mode [ 318.377035][T14887] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.402736][T14887] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.414576][T14887] bridge_slave_1: entered allmulticast mode [ 318.450660][T14887] bridge_slave_1: entered promiscuous mode [ 318.505889][ T5832] Bluetooth: hci3: command tx timeout [ 318.552088][T14887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.565102][T14887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.683094][T14887] team0: Port device team_slave_0 added [ 318.714905][T14887] team0: Port device team_slave_1 added [ 318.900325][T14887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.917664][T14983] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2544'. [ 318.927046][T14887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.985625][T14887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.014854][T14984] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2544'. [ 319.042878][T14887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.055302][T14887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.146259][T14887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.461361][T14887] hsr_slave_0: entered promiscuous mode [ 319.538824][T14887] hsr_slave_1: entered promiscuous mode [ 319.563041][T14887] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 319.642265][T14887] Cannot create hsr debugfs directory [ 319.716712][T15012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2548'. [ 319.754410][T15012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2548'. [ 319.781090][T15014] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 320.014154][T15026] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2551'. [ 320.324734][T15037] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2554'. [ 320.487396][T15044] netlink: 'syz.1.2556': attribute type 11 has an invalid length. [ 320.560412][T14887] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.589112][ T5832] Bluetooth: hci3: command tx timeout [ 320.666543][T14887] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.776952][T14887] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.886211][T14887] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.240247][T15070] netlink: 'syz.0.2563': attribute type 1 has an invalid length. [ 321.259688][T15072] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2564'. [ 321.285442][T15073] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2564'. [ 321.423913][T14887] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 321.450884][T14887] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 321.493807][T14887] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 321.539327][T14887] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 321.614635][T15086] netlink: 'syz.1.2569': attribute type 32 has an invalid length. [ 321.664193][T15087] netlink: 'syz.2.2568': attribute type 1 has an invalid length. [ 321.682389][T15087] netlink: 'syz.2.2568': attribute type 1 has an invalid length. [ 321.690735][T15086] netlink: 'syz.1.2569': attribute type 32 has an invalid length. [ 321.720322][T15094] syzkaller1: entered promiscuous mode [ 321.726924][T15094] syzkaller1: entered allmulticast mode [ 321.977066][T14887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.064154][T14887] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.146320][ T3001] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.153554][ T3001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.239928][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.247155][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.318889][T15119] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 322.540302][T14887] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 322.572908][T14887] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 322.674045][ T5832] Bluetooth: hci3: command tx timeout [ 323.125021][T14887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.139647][T15151] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 323.196128][T15151] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 323.257130][T15151] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 323.269151][T14887] veth0_vlan: entered promiscuous mode [ 323.305040][T14887] veth1_vlan: entered promiscuous mode [ 323.332245][T15151] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 323.378952][T15160] netlink: 'syz.1.2592': attribute type 9 has an invalid length. [ 323.386361][T15151] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 323.446052][T15151] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 323.469326][T14887] veth0_macvtap: entered promiscuous mode [ 323.476873][T15151] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 323.504283][T14887] veth1_macvtap: entered promiscuous mode [ 323.516253][T15151] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 323.538815][T15151] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 323.559563][T15151] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 323.588269][T14887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.622937][T14887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.663301][T15166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.678980][T14887] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.711773][T14887] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.734794][T14887] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.759031][T14887] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.076709][ T2947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.105020][ T2947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.229817][T15188] bridge: RTM_NEWNEIGH with invalid ether address [ 324.254144][T13038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.262898][T13038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.514713][T15202] __nla_validate_parse: 5 callbacks suppressed [ 324.514730][T15202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2607'. [ 324.564795][T15204] sock: sock_set_timeout: `syz.2.2608' (pid 15204) tries to set negative timeout [ 324.766559][T15209] netlink: 'syz.1.2610': attribute type 142 has an invalid length. [ 325.057984][T15226] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2614'. [ 325.182865][T15234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2617'. [ 325.474933][T15244] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2619'. [ 325.493789][T15244] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2619'. [ 325.541468][T15248] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2619'. [ 325.587877][T15244] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2619'. [ 327.003136][T15255] openvswitch: netlink: Message has 4 unknown bytes. [ 327.199844][T15264] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2626'. [ 327.222182][T15264] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2626'. [ 327.452151][T15273] netlink: 'syz.0.2627': attribute type 11 has an invalid length. [ 327.480959][T15280] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2629'. [ 327.509284][T15280] netlink: 'syz.2.2629': attribute type 7 has an invalid length. [ 327.513156][T15283] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 327.527479][T15280] netlink: 'syz.2.2629': attribute type 8 has an invalid length. [ 327.690549][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 327.712980][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 327.721913][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 327.736435][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 327.744283][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 327.788355][T15282] syzkaller1: entered promiscuous mode [ 327.794255][T15282] syzkaller1: entered allmulticast mode [ 327.928314][T15280] gretap0: entered promiscuous mode [ 327.934927][T15280] gretap0: left promiscuous mode [ 328.325647][T15310] netlink: 'syz.1.2638': attribute type 9 has an invalid length. [ 328.333446][T15310] netlink: 'syz.1.2638': attribute type 6 has an invalid length. [ 328.451470][T15310] openvswitch: netlink: Message has 8 unknown bytes. [ 329.538823][T15288] chnl_net:caif_netlink_parms(): no params data found [ 329.786580][ T5832] Bluetooth: hci3: command tx timeout [ 329.800546][T15370] netlink: 'syz.1.2653': attribute type 10 has an invalid length. [ 329.848144][T15288] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.872170][T15288] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.886477][T15288] bridge_slave_0: entered allmulticast mode [ 329.904918][T15288] bridge_slave_0: entered promiscuous mode [ 329.924572][T15370] veth0_vlan: entered allmulticast mode [ 330.000835][T15288] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.026482][T15288] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.034709][T15288] bridge_slave_1: entered allmulticast mode [ 330.064185][T15288] bridge_slave_1: entered promiscuous mode [ 330.173395][T15384] __nla_validate_parse: 5 callbacks suppressed [ 330.173415][T15384] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2657'. [ 330.200397][T15384] netlink: zone id is out of range [ 330.204540][T15288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.225883][T15384] netlink: zone id is out of range [ 330.253716][T15288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.281036][T15384] netlink: zone id is out of range [ 330.301848][T15384] netlink: zone id is out of range [ 330.328417][T15384] netlink: zone id is out of range [ 330.333696][T15384] netlink: zone id is out of range [ 330.339362][T15384] netlink: zone id is out of range [ 330.344629][T15384] netlink: zone id is out of range [ 330.352775][T15392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2661'. [ 330.381624][T15384] netlink: zone id is out of range [ 330.434041][T15392] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2661'. [ 330.461373][T15288] team0: Port device team_slave_0 added [ 330.498096][T15288] team0: Port device team_slave_1 added [ 330.622201][T15288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.630054][T15288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.681433][T15288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.708520][T15403] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2664'. [ 330.728317][T15405] ÿ: renamed from dummy0 (while UP) [ 330.751984][T15288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.769436][T15288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.847697][T15288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.866495][ T5832] Bluetooth: hci3: command tx timeout [ 331.880347][T15288] hsr_slave_0: entered promiscuous mode [ 331.889598][T15288] hsr_slave_1: entered promiscuous mode [ 331.896030][T15288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 331.907488][T15288] Cannot create hsr debugfs directory [ 331.973571][T15424] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2670'. [ 332.068175][T15429] geneve1: entered allmulticast mode [ 332.216610][T15434] netlink: 'syz.0.2674': attribute type 1 has an invalid length. [ 332.282534][T15440] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2676'. [ 332.331001][T15437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2675'. [ 332.489314][T15437] hsr_slave_1 (unregistering): left promiscuous mode [ 332.680199][T15288] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.887856][T15288] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.088072][T15288] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.116012][T15466] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2685'. [ 333.208571][T15468] xt_CT: No such helper "snmp" [ 333.259640][T15288] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.362478][T15479] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2688'. [ 333.603584][T15485] batman_adv: batadv0: Adding interface: gretap2 [ 333.655870][T15485] batman_adv: batadv0: The MTU of interface gretap2 is too small (1442) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 333.722821][T15485] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 333.819001][T15494] net_ratelimit: 18 callbacks suppressed [ 333.819021][T15494] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 333.831293][T15494] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 333.851714][T15288] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 333.896235][T15288] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 333.941887][T15288] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 333.955769][ T5832] Bluetooth: hci3: command tx timeout [ 334.006683][T15288] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 334.482078][T15288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.543934][T15288] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.600311][T13038] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.607540][T13038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.624394][T15526] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.2704'. [ 334.687760][T15530] tipc: Enabling of bearer rejected, already enabled [ 334.727863][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.735056][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.964988][T15288] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 334.992200][T15549] netlink: 'syz.2.2709': attribute type 1 has an invalid length. [ 335.004259][T15549] netlink: 'syz.2.2709': attribute type 1 has an invalid length. [ 335.030759][T15553] netlink: 'syz.0.2710': attribute type 4 has an invalid length. [ 335.253034][T15567] raw_sendmsg: syz.2.2712 forgot to set AF_INET. Fix it! [ 335.563234][T15288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.663619][T15581] netlink: 'syz.4.2714': attribute type 29 has an invalid length. [ 335.747977][T15586] __nla_validate_parse: 1 callbacks suppressed [ 335.748000][T15586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2716'. [ 335.764409][T15586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2716'. [ 335.783895][T15288] veth0_vlan: entered promiscuous mode [ 335.889824][T15288] veth1_vlan: entered promiscuous mode [ 335.907589][T15590] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2717'. [ 336.036182][ T5832] Bluetooth: hci3: command tx timeout [ 336.044887][T15596] syz.4.2719 (15596) used obsolete PPPIOCDETACH ioctl [ 336.081840][T15288] veth0_macvtap: entered promiscuous mode [ 336.125136][T15288] veth1_macvtap: entered promiscuous mode [ 336.154182][T13038] tipc: Subscription rejected, illegal request [ 336.232144][T15288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.290988][T15288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.344886][T15608] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2723'. [ 336.399299][T15288] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.436139][T15288] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.452743][T15288] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.462297][T15288] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.641047][T15621] 8021q: VLANs not supported on gre0 [ 336.833573][ T3001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.866266][ T3001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.960763][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.980601][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.980678][T15635] netlink: 'syz.4.2732': attribute type 1 has an invalid length. [ 337.142351][T15645] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2735'. [ 337.903457][T15677] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2743'. [ 337.923507][T15677] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2743'. [ 337.966200][T15677] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2743'. [ 338.010621][T15677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2743'. [ 338.533599][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 338.543393][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 338.552490][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 338.567070][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 338.576330][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 338.970967][T15680] chnl_net:caif_netlink_parms(): no params data found [ 339.092181][T15680] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.099533][T15680] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.107321][T15680] bridge_slave_0: entered allmulticast mode [ 339.114864][T15680] bridge_slave_0: entered promiscuous mode [ 339.123809][T15680] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.132447][T15680] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.140372][T15680] bridge_slave_1: entered allmulticast mode [ 339.153503][T15680] bridge_slave_1: entered promiscuous mode [ 339.203504][T15680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.216845][T15680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.264295][T15680] team0: Port device team_slave_0 added [ 339.281142][T15680] team0: Port device team_slave_1 added [ 339.321294][T15680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.328621][T15680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.354976][T15680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.370206][T15680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.383220][T15680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.410625][T15680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.468631][T15680] hsr_slave_0: entered promiscuous mode [ 339.480532][T15680] hsr_slave_1: entered promiscuous mode [ 339.487598][T15680] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 339.495924][T15680] Cannot create hsr debugfs directory [ 339.688884][T15693] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2746'. [ 339.765779][T15693] gretap0: entered promiscuous mode [ 339.860463][T15680] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.889654][T15680] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.917637][T15693] 0ªî{X¹¦: renamed from gretap0 [ 339.925068][T15693] 0ªî{X¹¦: left promiscuous mode [ 339.933616][T15693] 0ªî{X¹¦: entered allmulticast mode [ 339.964037][T15693] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 340.026529][T15700] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 340.050616][T15700] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 340.158280][T15680] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.202695][T15680] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.358088][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 340.368766][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 340.376989][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 340.384949][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 340.410121][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 340.454326][T15680] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.465992][T15680] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.587471][T15680] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.598864][T15680] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.668460][ T55] Bluetooth: hci2: command tx timeout [ 340.805922][T15724] batadv_slave_1: default FDB implementation only supports local addresses [ 341.013826][T15733] __nla_validate_parse: 3 callbacks suppressed [ 341.013845][T15733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2755'. [ 341.098478][T15680] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 341.196977][T15680] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 341.268138][T15680] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 341.299869][T15680] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 341.571528][T15761] netlink: 'syz.0.2761': attribute type 10 has an invalid length. [ 341.580618][T15759] tipc: Started in network mode [ 341.596322][T15759] tipc: Node identity ffffa848, cluster identity 4711 [ 341.597043][T15761] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2761'. [ 341.603109][T15759] tipc: Node number set to 4294944840 [ 341.637415][T15759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2763'. [ 341.690296][T15763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2764'. [ 341.704329][T15761] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.735565][T15763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2764'. [ 341.746045][T15761] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.754251][T15761] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.779755][T15761] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.797046][T15761] team0: Port device geneve0 added [ 341.914570][T15680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.007138][T15775] x_tables: duplicate entry at hook 3 [ 342.024211][T15680] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.024618][T15775] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2767'. [ 342.063947][T15775] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 342.384771][T15789] sock: sock_timestamping_bind_phc: sock not bind to device [ 342.424066][T15789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2772'. [ 342.433516][ T55] Bluetooth: hci3: command tx timeout [ 342.487140][T15787] netlink: 'syz.2.2772': attribute type 1 has an invalid length. [ 342.494968][T15787] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2772'. [ 342.753833][ T55] Bluetooth: hci2: command tx timeout [ 344.016330][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.023580][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.078063][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.085293][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.236727][T15712] chnl_net:caif_netlink_parms(): no params data found [ 344.366110][T15800] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2776'. [ 344.515345][ T55] Bluetooth: hci3: command tx timeout [ 344.659530][T15810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2779'. [ 344.684725][T15712] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.737203][T15712] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.744586][T15712] bridge_slave_0: entered allmulticast mode [ 344.780167][T15712] bridge_slave_0: entered promiscuous mode [ 344.807439][T15712] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.820037][T15712] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.827278][ T55] Bluetooth: hci2: command tx timeout [ 344.834247][T15712] bridge_slave_1: entered allmulticast mode [ 344.843480][T15712] bridge_slave_1: entered promiscuous mode [ 344.936009][T15712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.000668][T15712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.047850][T15831] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 345.213344][T15712] team0: Port device team_slave_0 added [ 345.230323][T15712] team0: Port device team_slave_1 added [ 345.242173][T15680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.424255][T15712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.453591][T15712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.516159][T15712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.552160][T15712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.574034][T15712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.603228][T15712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.762261][T15858] netlink: 'syz.4.2792': attribute type 28 has an invalid length. [ 345.772472][T15858] netlink: 'syz.4.2792': attribute type 3 has an invalid length. [ 345.839375][T15712] hsr_slave_0: entered promiscuous mode [ 345.876475][T15712] hsr_slave_1: entered promiscuous mode [ 345.882951][T15712] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 345.916092][T15712] Cannot create hsr debugfs directory [ 346.192090][T15680] veth0_vlan: entered promiscuous mode [ 346.391107][T15680] veth1_vlan: entered promiscuous mode [ 346.557645][T15680] veth0_macvtap: entered promiscuous mode [ 346.592168][ T55] Bluetooth: hci3: command tx timeout [ 346.638438][T15896] __nla_validate_parse: 3 callbacks suppressed [ 346.638459][T15896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2804'. [ 346.869227][T15680] veth1_macvtap: entered promiscuous mode [ 346.905846][ T55] Bluetooth: hci2: command tx timeout [ 346.982015][T15712] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.026819][T15680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.062584][T15680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.124927][T15712] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.189158][T15680] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.207807][T15680] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.229879][T15680] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.256093][T15680] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.343475][T15712] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.455968][T15712] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.611405][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.646453][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.802946][T13038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.830846][T13038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.208183][T15712] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 348.266582][T15712] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 348.309897][T15712] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 348.313503][T15945] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2818'. [ 348.342529][T15712] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 348.456943][T15952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2820'. [ 348.668718][ T55] Bluetooth: hci3: command tx timeout [ 348.861066][T15954] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2820'. [ 348.883005][T15955] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2820'. [ 349.336377][T15712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.419651][T15972] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 349.469842][T15712] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.489277][T15973] netlink: 'syz.1.2824': attribute type 11 has an invalid length. [ 349.498152][T15973] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2824'. [ 349.555224][T13038] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.562466][T13038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.575041][T15983] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2828'. [ 349.589793][T13038] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.597116][T13038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.860544][T15989] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2831'. [ 349.876953][T15989] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2831'. [ 350.052267][T15997] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2834'. [ 350.251943][T16007] vxcan0: tx drop: invalid da for name 0x0000000000000003 [ 350.449000][T15712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.617774][T15712] veth0_vlan: entered promiscuous mode [ 350.648661][T15712] veth1_vlan: entered promiscuous mode [ 350.719188][T15712] veth0_macvtap: entered promiscuous mode [ 350.751239][T15712] veth1_macvtap: entered promiscuous mode [ 350.793623][T15712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.814975][T15712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.848777][T15712] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.872794][T15712] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.898130][T15712] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.916273][T15712] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.974964][T16032] x_tables: duplicate underflow at hook 2 [ 351.168147][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.195592][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.302854][T10487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.324548][T10487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.379070][T16046] netlink: 'syz.0.2851': attribute type 2 has an invalid length. [ 351.419101][T16047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.441333][T16047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.474919][T16047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.525652][T16047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.677248][T16058] __nla_validate_parse: 8 callbacks suppressed [ 351.677266][T16058] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2854'. [ 352.057081][T16077] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2860'. [ 353.367127][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 353.375906][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 353.383576][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 353.396630][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 353.410892][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 353.824404][T16113] chnl_net:caif_netlink_parms(): no params data found [ 353.942075][T16113] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.950374][T16113] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.958187][T16113] bridge_slave_0: entered allmulticast mode [ 353.966254][T16113] bridge_slave_0: entered promiscuous mode [ 353.974285][T16113] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.982486][T16113] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.990937][T16113] bridge_slave_1: entered allmulticast mode [ 353.999999][T16113] bridge_slave_1: entered promiscuous mode [ 354.053760][T16113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.066720][T16113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.113475][T16113] team0: Port device team_slave_0 added [ 354.132644][T16113] team0: Port device team_slave_1 added [ 354.173937][T16113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.181532][T16113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.208856][T16113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.229475][T16113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.238179][T16113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.264417][T16113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.341078][T16113] hsr_slave_0: entered promiscuous mode [ 354.349938][T16113] hsr_slave_1: entered promiscuous mode [ 354.357594][T16113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 354.365928][T16113] Cannot create hsr debugfs directory [ 354.519202][T16113] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.642301][T16113] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.683275][T16126] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2865'. [ 354.790418][T16113] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.878492][T16113] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.936941][T16134] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2869'. [ 355.239382][T16141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2872'. [ 355.271612][T16142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2872'. [ 355.282356][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 355.291224][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 355.299896][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 355.310008][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 355.317981][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 355.343481][T16113] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 355.368060][T16113] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 355.381806][T16113] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 355.394266][T16113] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 355.459734][T16152] netlink: 'syz.0.2874': attribute type 4 has an invalid length. [ 355.467967][ T5832] Bluetooth: hci1: command tx timeout [ 355.512611][T16152] netlink: 'syz.0.2874': attribute type 4 has an invalid length. [ 355.781842][T16113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.829018][T16162] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2877'. [ 355.849756][T16113] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.922347][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.929610][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.958956][T16164] netlink: 'syz.1.2878': attribute type 2 has an invalid length. [ 356.002978][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.010170][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.073362][T16168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2880'. [ 356.113749][T16168] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2880'. [ 356.211657][T16171] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (8) [ 356.288991][T16113] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 356.723001][T16197] netlink: 'syz.0.2888': attribute type 11 has an invalid length. [ 356.834961][T16201] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2889'. [ 356.902008][T16113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.041775][T16143] chnl_net:caif_netlink_parms(): no params data found [ 357.109604][T16219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.245549][T16224] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2894'. [ 357.267177][T16224] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2894'. [ 357.311934][T16224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2894'. [ 357.329047][T16224] netlink: 'syz.2.2894': attribute type 30 has an invalid length. [ 357.387936][ T5832] Bluetooth: hci3: command tx timeout [ 357.440024][T16224] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.449387][T16224] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.458467][T16224] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.469788][T16224] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.488283][T16224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2894'. [ 357.507943][T16224] netlink: 'syz.2.2894': attribute type 30 has an invalid length. [ 357.546983][ T5832] Bluetooth: hci1: command tx timeout [ 357.584399][T16143] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.592632][T16143] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.613368][T16143] bridge_slave_0: entered allmulticast mode [ 357.636502][T16143] bridge_slave_0: entered promiscuous mode [ 357.686699][T16143] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.704697][T16143] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.736499][T16143] bridge_slave_1: entered allmulticast mode [ 357.756107][T16143] bridge_slave_1: entered promiscuous mode [ 357.799525][T16249] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2900'. [ 357.934347][T16143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.995219][T16258] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2903'. [ 358.022294][T16251] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2901'. [ 358.068024][T16143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.223502][T16143] team0: Port device team_slave_0 added [ 358.238645][T16260] netlink: 'syz.0.2905': attribute type 2 has an invalid length. [ 358.275969][T16143] team0: Port device team_slave_1 added [ 358.293492][T16113] veth0_vlan: entered promiscuous mode [ 358.480174][T16143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.494414][T16273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2907'. [ 358.495251][T16143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.542909][T16273] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 358.551811][T16273] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.591334][T16143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.606096][T16113] veth1_vlan: entered promiscuous mode [ 358.613260][T16273] smc: net device bond0 applied user defined pnetid SYZ2 [ 358.630336][T16275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2908'. [ 358.643553][T16143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.652432][T16143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.681168][T16143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.695996][T16276] smc: net device bond0 erased user defined pnetid SYZ2 [ 358.776557][T16279] netlink: 'syz.1.2909': attribute type 8 has an invalid length. [ 358.956582][T16113] veth0_macvtap: entered promiscuous mode [ 359.005952][T16143] hsr_slave_0: entered promiscuous mode [ 359.013030][T16143] hsr_slave_1: entered promiscuous mode [ 359.047006][T16143] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 359.054657][T16143] Cannot create hsr debugfs directory [ 359.107967][T16290] netlink: 'syz.1.2913': attribute type 1 has an invalid length. [ 359.243651][T16113] veth1_macvtap: entered promiscuous mode [ 359.283213][T16295] bond1: (slave gretap1): making interface the new active one [ 359.293156][T16295] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 359.465795][ T5832] Bluetooth: hci3: command tx timeout [ 359.490704][T16113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.594496][T16113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.635808][ T5832] Bluetooth: hci1: command tx timeout [ 359.700538][T16113] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.723151][T16113] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.733360][T16113] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.742352][T16113] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.920173][T16143] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.933601][T16324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.117342][T16143] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.139169][T16334] netlink: 'syz.0.2927': attribute type 1 has an invalid length. [ 360.241491][T16334] bond8: entered promiscuous mode [ 360.249098][T16334] 8021q: adding VLAN 0 to HW filter on device bond8 [ 360.348828][T16338] 8021q: adding VLAN 0 to HW filter on device bond8 [ 360.357921][T16338] bond8: (slave wireguard0): The slave device specified does not support setting the MAC address [ 360.414448][T16338] bond8: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 360.489032][T16338] bond8: (slave wireguard0): making interface the new active one [ 360.497725][T16338] wireguard0: entered promiscuous mode [ 360.514427][T16338] bond8: (slave wireguard0): Enslaving as an active interface with an up link [ 360.841597][T16358] netlink: 'syz.1.2929': attribute type 4 has an invalid length. [ 360.854542][T16143] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.113547][T16358] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 361.175066][T16143] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.437610][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.475285][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.545363][ T5832] Bluetooth: hci3: command tx timeout [ 361.552608][T16371] nbd: must specify at least one socket [ 361.574316][T16371] block nbd2: NBD_DISCONNECT [ 361.587256][T16371] block nbd2: Send disconnect failed -32 [ 361.593205][T16371] block nbd2: shutting down sockets [ 361.662720][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.672262][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.705833][ T5832] Bluetooth: hci1: command tx timeout [ 361.752255][T16143] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 361.774329][T16143] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 361.814570][T16143] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 361.834908][T16379] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.856314][T16143] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 362.050752][T16389] __nla_validate_parse: 11 callbacks suppressed [ 362.050772][T16389] netlink: 152064 bytes leftover after parsing attributes in process `syz.4.2864'. [ 362.078113][T16383] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 362.090806][T16389] netlink: zone id is out of range [ 362.111959][T16383] tipc: Enabled bearer , priority 10 [ 362.122290][T16389] netlink: zone id is out of range [ 362.145715][T16389] netlink: zone id is out of range [ 362.150909][T16389] netlink: zone id is out of range [ 362.170688][T16389] netlink: zone id is out of range [ 362.180257][T16389] netlink: zone id is out of range [ 362.192116][T16394] FAULT_INJECTION: forcing a failure. [ 362.192116][T16394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.214382][T16389] netlink: zone id is out of range [ 362.246219][T16389] netlink: zone id is out of range [ 362.254690][T16389] netlink: zone id is out of range [ 362.264205][T16143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.273115][T16394] CPU: 0 UID: 0 PID: 16394 Comm: syz.1.2939 Not tainted 6.15.0-rc6-syzkaller-00168-g239af1970bcb #0 PREEMPT(full) [ 362.273141][T16394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 362.273154][T16394] Call Trace: [ 362.273162][T16394] [ 362.273171][T16394] dump_stack_lvl+0x189/0x250 [ 362.273213][T16394] ? __lock_acquire+0xaac/0xd20 [ 362.273243][T16394] ? __pfx_dump_stack_lvl+0x10/0x10 [ 362.273273][T16394] ? __pfx__printk+0x10/0x10 [ 362.273293][T16394] ? __might_fault+0xb0/0x130 [ 362.273331][T16394] should_fail_ex+0x414/0x560 [ 362.273356][T16394] _copy_from_user+0x2d/0xb0 [ 362.273386][T16394] ___sys_sendmsg+0x158/0x2a0 [ 362.273416][T16394] ? __pfx____sys_sendmsg+0x10/0x10 [ 362.273480][T16394] ? __fget_files+0x2a/0x420 [ 362.273505][T16394] ? __fget_files+0x3a0/0x420 [ 362.273540][T16394] __sys_sendmmsg+0x227/0x430 [ 362.273573][T16394] ? __pfx___sys_sendmmsg+0x10/0x10 [ 362.273610][T16394] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 362.273654][T16394] ? ksys_write+0x1f0/0x250 [ 362.273675][T16394] ? rcu_is_watching+0x15/0xb0 [ 362.273703][T16394] __x64_sys_sendmmsg+0xa0/0xc0 [ 362.273732][T16394] do_syscall_64+0xf6/0x210 [ 362.273769][T16394] ? clear_bhb_loop+0x60/0xb0 [ 362.273804][T16394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.273820][T16394] RIP: 0033:0x7fa21698e969 [ 362.273835][T16394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.273851][T16394] RSP: 002b:00007fa2177e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 362.273870][T16394] RAX: ffffffffffffffda RBX: 00007fa216bb5fa0 RCX: 00007fa21698e969 [ 362.273883][T16394] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 362.273895][T16394] RBP: 00007fa2177e9090 R08: 0000000000000000 R09: 0000000000000000 [ 362.273906][T16394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.273917][T16394] R13: 0000000000000000 R14: 00007fa216bb5fa0 R15: 00007ffc747d37a8 [ 362.273945][T16394] [ 362.283180][T16389] netlink: zone id is out of range [ 362.342877][T16143] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.533059][T16404] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 362.596525][T16107] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.603758][T16107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.663250][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.670806][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.900941][T16417] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2943'. [ 363.117389][T16143] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 363.322347][T16433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2948'. [ 363.332075][T16433] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2948'. [ 363.478027][T16440] FAULT_INJECTION: forcing a failure. [ 363.478027][T16440] name failslab, interval 1, probability 0, space 0, times 0 [ 363.496192][T16440] CPU: 1 UID: 0 PID: 16440 Comm: syz.2.2952 Not tainted 6.15.0-rc6-syzkaller-00168-g239af1970bcb #0 PREEMPT(full) [ 363.496224][T16440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 363.496237][T16440] Call Trace: [ 363.496245][T16440] [ 363.496254][T16440] dump_stack_lvl+0x189/0x250 [ 363.496294][T16440] ? __pfx_dump_stack_lvl+0x10/0x10 [ 363.496324][T16440] ? __pfx__printk+0x10/0x10 [ 363.496352][T16440] ? __pfx___might_resched+0x10/0x10 [ 363.496384][T16440] should_fail_ex+0x414/0x560 [ 363.496412][T16440] should_failslab+0xa8/0x100 [ 363.496442][T16440] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 363.496472][T16440] ? __alloc_skb+0x112/0x2d0 [ 363.496503][T16440] __alloc_skb+0x112/0x2d0 [ 363.496535][T16440] netlink_sendmsg+0x5c6/0xb30 [ 363.496571][T16440] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.496601][T16440] ? aa_sock_msg_perm+0x94/0x160 [ 363.496627][T16440] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 363.496652][T16440] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.496678][T16440] __sock_sendmsg+0x219/0x270 [ 363.496704][T16440] ____sys_sendmsg+0x52d/0x830 [ 363.496740][T16440] ? __pfx_____sys_sendmsg+0x10/0x10 [ 363.496780][T16440] ? import_iovec+0x74/0xa0 [ 363.496814][T16440] ___sys_sendmsg+0x21f/0x2a0 [ 363.496846][T16440] ? __pfx____sys_sendmsg+0x10/0x10 [ 363.496922][T16440] ? __fget_files+0x2a/0x420 [ 363.496950][T16440] ? __fget_files+0x3a0/0x420 [ 363.496990][T16440] __sys_sendmmsg+0x227/0x430 [ 363.497038][T16440] ? __pfx___sys_sendmmsg+0x10/0x10 [ 363.497076][T16440] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 363.497122][T16440] ? ksys_write+0x1f0/0x250 [ 363.497145][T16440] ? rcu_is_watching+0x15/0xb0 [ 363.497175][T16440] __x64_sys_sendmmsg+0xa0/0xc0 [ 363.497206][T16440] do_syscall_64+0xf6/0x210 [ 363.497235][T16440] ? clear_bhb_loop+0x60/0xb0 [ 363.497265][T16440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.497302][T16440] RIP: 0033:0x7f812c38e969 [ 363.497321][T16440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.497340][T16440] RSP: 002b:00007f812d2c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 363.497362][T16440] RAX: ffffffffffffffda RBX: 00007f812c5b5fa0 RCX: 00007f812c38e969 [ 363.497378][T16440] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 363.497393][T16440] RBP: 00007f812d2c0090 R08: 0000000000000000 R09: 0000000000000000 [ 363.497406][T16440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.497418][T16440] R13: 0000000000000000 R14: 00007f812c5b5fa0 R15: 00007fff56672288 [ 363.497451][T16440] [ 363.788844][ T5832] Bluetooth: hci3: command tx timeout [ 363.795245][T16443] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2954'. [ 363.806693][T16443] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.814905][T16443] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.909621][T16447] netlink: 'syz.4.2954': attribute type 7 has an invalid length. [ 363.994721][T16447] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2954'. [ 364.092847][T16448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2954'. [ 364.183516][T16143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.218717][T16453] netlink: 'syz.2.2956': attribute type 3 has an invalid length. [ 364.347923][T16143] veth0_vlan: entered promiscuous mode [ 364.378206][T16143] veth1_vlan: entered promiscuous mode [ 364.458332][T16143] veth0_macvtap: entered promiscuous mode [ 364.494575][T16143] veth1_macvtap: entered promiscuous mode [ 364.549837][T16464] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2959'. [ 364.573525][T16143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.691974][T16143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.723460][T16143] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.737041][T16143] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.746109][T16143] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.755341][T16143] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.781515][T16466] tap0: tun_chr_ioctl cmd 1074025678 [ 364.793615][T16466] tap0: group set to 0 [ 364.805780][ T1519] unregister_netdevice: waiting for lo to become free. Usage count = 5 [ 364.814704][ T1519] ref_tracker: lo@ffff8880561ca610 has 4/4 users at [ 364.814704][ T1519] dst_init+0xd9/0x450 [ 364.814704][ T1519] dst_alloc+0x12a/0x170 [ 364.814704][ T1519] rt_dst_clone+0x52/0x680 [ 364.814704][ T1519] ip_mc_finish_output+0x10a/0x5f0 [ 364.814704][ T1519] ip_mc_output+0x3a3/0x590 [ 364.814704][ T1519] iptunnel_xmit+0x571/0xa00 [ 364.814704][ T1519] udp_tunnel_xmit_skb+0x266/0x3c0 [ 364.814704][ T1519] tipc_udp_xmit+0x7c7/0xab0 [ 364.814704][ T1519] tipc_udp_send_msg+0x27f/0x3f0 [ 364.814704][ T1519] tipc_bearer_xmit_skb+0x2b3/0x400 [ 364.814704][ T1519] tipc_disc_timeout+0x580/0x6d0 [ 364.814704][ T1519] call_timer_fn+0x17e/0x5f0 [ 364.814704][ T1519] __run_timer_base+0x61a/0x860 [ 364.814704][ T1519] run_timer_softirq+0xb7/0x180 [ 364.814704][ T1519] handle_softirqs+0x283/0x870 [ 364.814704][ T1519] __irq_exit_rcu+0xca/0x1f0 [ 364.814704][ T1519] [ 365.062625][ T2984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.070902][ T2984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.119808][ T2984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.127875][ T2984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50