last executing test programs: 15.285733936s ago: executing program 1 (id=878): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x17c, 0x1, 0x2, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_EXPECT_MASK={0x80, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_MASK={0x78, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_MASTER={0x70, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @loopback}}}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x78, r1, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xb5a}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xfffd}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x75}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9f48ce4d3636"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "972f0686f0a62db9a00d54897b080398"}]}, 0x78}, 0x1, 0x0, 0x0, 0x8011}, 0x4891) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xfffffff9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24044840}, 0x4000000) (async, rerun: 32) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xe0, 0x2, 0x2, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}, @CTA_EXPECT_NAT={0x90, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) (rerun: 32) r2 = socket$kcm(0x29, 0x2, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000680)={0x5, 0x0}, 0x8) (async, rerun: 32) r4 = accept4(r0, &(0x7f00000006c0)=@qipcrtr, &(0x7f0000000740)=0x80, 0x0) (rerun: 32) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r1, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4090) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000880)={r3, 0x1, 0x8}, 0xc) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r4) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x3c, 0x1, 0x8, 0x101, 0x0, 0x0, {0xc, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6002}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000a00)={0xffffa688, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a40)={r6, 0x1, 0x18}, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000ac0), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r8, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000804) r9 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000c00)={'wlan0\x00', 0x0}) (async, rerun: 64) r11 = gettid() (rerun: 64) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x48, r1, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x59}, @void, @val={0xc, 0x99, {0x1, 0x56}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x28}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_PID={0x8, 0x52, r11}]}, 0x48}, 0x1, 0x0, 0x0, 0x4048080}, 0x800) (async) r12 = socket(0x29, 0x0, 0x7f) sendmsg$NL80211_CMD_ASSOCIATE(r12, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0x94, r5, 0x5519ff5ebabda50c, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x42}}}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x0, 0x2, 0x3, 0x0, {0x5, 0x6b3, 0x0, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x0, 0x3ff, 0x8}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac=@device_b}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x300, 0x2, 0x6, 0x0, {0x1, 0x1ffb, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, 0x1, 0x4, 0xd8}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc0}, 0x8004) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f00), r12) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x68, r13, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x5, @link='syz0\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) (async, rerun: 64) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$nbd(&(0x7f0000001040), r14) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x2c, r8, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x67}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000001180)={0x8}, 0x8) 14.955946546s ago: executing program 1 (id=879): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x41}}, &(0x7f0000000480)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) connect$inet(r1, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10) epoll_create1(0x80000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x35, 0x1000, 0x62}, 0x2c) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f0000000000)={0x6, &(0x7f0000000140)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @link_local}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000340)={{0x3c, @broadcast, 0x4e23, 0x3, 'none\x00', 0x25, 0x8000, 0x7d}, {@broadcast, 0x4e20, 0x10000, 0x200, 0x5, 0x4}}, 0x44) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES16=r5, @ANYBLOB="91e12c6182c70dae81d0a737994ef2d57b4194e7210624e4", @ANYRES8, @ANYRESDEC=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r7}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_delrule={0x38, 0x21, 0x1, 0x0, 0x0, {0xa, 0x0, 0x10}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'syzkaller0\x00'}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 14.531030191s ago: executing program 1 (id=885): r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="02"], 0x10) socket$l2tp6(0xa, 0x2, 0x73) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x6) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f0000000080)) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004300)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x6}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0xffffffffffffffff}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newlink={0x20, 0x29, 0x10f}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) bind$can_raw(r5, &(0x7f00000004c0)={0x1d, r9}, 0x10) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) r10 = accept4(r0, 0x0, 0x0, 0x400000000000000) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x2, 0x2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000020000950000000800c400"/31], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 14.305869125s ago: executing program 1 (id=889): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async, rerun: 32) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/user\x00') (async, rerun: 32) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x8, @loopback, 0x10}, {0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00', 0x5}, 0x1, {[0x1, 0x0, 0x0, 0x8, 0x1, 0x5, 0xf7a]}}, 0x5c) (async, rerun: 32) ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) (rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r6) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) ioctl$SIOCSIFHWADDR(r6, 0x8b0b, &(0x7f0000000040)={'wlan1\x00', @random='\x00\x00 \x00'}) (async) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003a971f12e3a0000000000000001000000024000007f0000010204"], 0x110) (async) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r8, 0x1000000, 0x482, 0x0, 0x0) (async) bind$pptp(r3, &(0x7f00000018c0)={0x18, 0x2, {0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) (async) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000b80)=@newqdisc={0x46c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x440, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x6d, 0x2, 0xb069, 0x7, 0x4d, 0x3}, {0x8, 0x2, 0x7ff, 0x7f, 0xc5, 0x3}, 0x6, 0x0, 0xda2}}, @TCA_TBF_PBURST={0x8, 0x7, 0xfb3}, @TCA_TBF_PTAB={0x404, 0x3, [0xae6b, 0x400, 0x2, 0x3, 0x5, 0x9, 0x1, 0x8, 0x10000, 0x7ff, 0x8, 0x5, 0x8, 0x2, 0x3ff, 0x3, 0xca37, 0x0, 0x1, 0xd, 0xfffffff7, 0x800, 0x6, 0x8605, 0x0, 0x2, 0x5, 0x2, 0x1, 0xbba, 0x5, 0x5, 0x1, 0x7f, 0x9b6, 0x4, 0x1, 0x6, 0x0, 0x7, 0x35c0, 0x9, 0xc29, 0x88000000, 0x6, 0x0, 0x8, 0x8, 0x1, 0x100, 0x1, 0x4, 0x9, 0xffffffff, 0xfffffff8, 0x2a260000, 0x0, 0x100, 0x1, 0x3, 0x6, 0x9, 0x1, 0x5, 0x455, 0xfffffff3, 0xc, 0xffffffff, 0x7, 0x87e, 0x7, 0x8, 0xdbcf, 0xfffffff2, 0x1000, 0xfffffffd, 0x5, 0x8001, 0x80000001, 0xd, 0x2, 0xb, 0x6, 0x5, 0x9ee, 0x5, 0x3b, 0xfffff9f7, 0x40, 0x6, 0xffff, 0x2, 0x1, 0x80, 0x2, 0x605b, 0x200, 0x32, 0xfff, 0xffc, 0x5, 0x6, 0x3, 0x2, 0xe8, 0x8, 0x5, 0x200, 0x8b1c, 0x0, 0x6, 0x80000000, 0x101, 0x101, 0x7, 0x9, 0xf5d, 0x10000, 0x3, 0x3, 0x6, 0x2, 0x7fffffff, 0x8, 0x7, 0x4, 0x8000, 0x50c8405d, 0xa5, 0x200, 0x0, 0x7, 0xfffff3a5, 0x200, 0x1000, 0x6, 0x7, 0x2, 0x2, 0x2, 0x405, 0x5, 0x0, 0x7, 0x4, 0x1, 0x73440151, 0xa698, 0x4, 0x4, 0x6, 0x4, 0x3, 0x5, 0x9a8f, 0x5, 0xfffffffe, 0x0, 0x1000, 0x32, 0x2, 0x3, 0x8, 0x5, 0x81, 0x6, 0x9, 0x3, 0x9, 0x200, 0x7, 0x4, 0x8, 0x36197b7, 0x8001, 0x6, 0x1, 0x2, 0x3, 0x1, 0x7, 0x4, 0x101, 0x9, 0x3, 0x7, 0x4, 0x3, 0x4, 0x3b4d, 0xed1, 0x200, 0x0, 0x1000, 0x100, 0x55, 0x81, 0x80000000, 0x7, 0x44, 0x9, 0x1, 0x1d, 0xf, 0x9, 0x7, 0x3, 0x5d, 0x2, 0x7fff, 0x8, 0x9, 0x8, 0x62664108, 0x1ff, 0x800, 0x7ff, 0x2d71, 0x4, 0xf, 0x5, 0xcf8, 0x8, 0x7, 0xfffffffe, 0x6b, 0xcc87, 0x7, 0x0, 0xffff, 0xffffffb5, 0x7, 0x0, 0x2, 0x9, 0x5, 0x2, 0x4, 0x1, 0xb, 0xaf55, 0x0, 0x0, 0x5, 0x5a, 0x6, 0x1, 0x3, 0x0, 0xe15e, 0x4, 0x8, 0x5, 0xd, 0xd, 0x402]}, @TCA_TBF_BURST={0x8, 0x6, 0x4}]}}]}, 0x46c}}, 0x0) 14.012092654s ago: executing program 1 (id=893): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4) 2.418923035s ago: executing program 4 (id=992): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000)={0x9, 0x8c, 0x7, 0x8, 0x2, 0x3, 0x1, 0x80, 0x0, 0x4, 0x86, 0x9, 0x9, 0x7}, 0xe) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) close(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x34, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000d6ac3393e93ebebe7800627c270c90ff065d88694d251d5aaf522616de0e2e7c25f5e2369b6bdeaca6284d0ae5572678f444adbc98b3b6d53ec06c4741191566f7ed41667193311a67a9d93a1f0dbb57ff27164819624ae24c1d55e23d59e8154b95d9ffa119dc83727dccf2941b124ae799c92761b0672aeb5e732595111b0802e4b6", @ANYRES16=r5, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a0000"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}, 0x0, 0x0, 0x1}}, 0x2e) 2.362511362s ago: executing program 2 (id=993): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) socket(0x10, 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xffff}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r1}, 0x18) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0x8000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32) 2.271621177s ago: executing program 3 (id=994): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWSETELEM={0xa4, 0x1e, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x78, 0x3, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x44, 0x7, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0xa6}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xb8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x19}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x15}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc}, @NFTA_QUOTA_FLAGS={0x8}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x128}}, 0x0) r1 = socket(0x21, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271f, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000180)}, 0x10) recvmsg$can_bcm(r1, &(0x7f000001acc0)={&(0x7f00000196c0)=@hci, 0x80, &(0x7f000001ab80)=[{&(0x7f0000019740)=""/130, 0x82}, {&(0x7f0000019800)=""/93, 0x5d}, {&(0x7f0000019880)=""/171, 0xab}, {&(0x7f0000019940)=""/158, 0x9e}, {&(0x7f0000019a00)=""/4096, 0x1000}, {&(0x7f000001aa00)=""/30, 0x1e}, {&(0x7f000001aa40)=""/67, 0x43}, {&(0x7f000001aac0)=""/111, 0x6f}, {&(0x7f000001ab40)=""/62, 0x3e}], 0x9, &(0x7f000001ac40)=""/82, 0x52}, 0x2101) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000195c0), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@func_proto, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr, @func={0x4, 0x0, 0x0, 0xf, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f000001ad00)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000040000008900000008000300", @ANYRES32=r5, @ANYBLOB="14001d80100000f9dc5fadccdfad9fd60c15ae006a7fd7a657088f17ddda31dc1e78db210510bd65411654ae4c41e558f7425341f39839b1c07bf374be1a8b2c4ae626d183995d951efd91e017dc950b19d0d41eab46ab558a5034a6f2d3b10c4c4e0836c90ce99423d302a1f6b38301178ae3d7d3ab8d5b20f24d5675737eb89ac93e2e4fffcf3a1dcec601f30c1a71ae494f97dde97dd247a6a1da3a63037403566700fbdc47c9e4"], 0x30}, 0x1, 0x0, 0x0, 0x4804}, 0x80) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000019680)={&(0x7f0000019580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000019640)={&(0x7f0000019600)={0x30, r2, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x6, 0x4b}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40044}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x700, 0x700, 0x600, 0x3ff, {{0x14, 0x4, 0x0, 0x2, 0x50, 0x64, 0x0, 0x6d, 0x4, 0x0, @private=0xa010101, @multicast2, {[@ssrr={0x89, 0x17, 0x32, [@dev={0xac, 0x14, 0x14, 0x3d}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x30}]}, @lsrr={0x83, 0x7, 0x8c, [@broadcast]}, @timestamp_prespec={0x44, 0x1c, 0x73, 0x3, 0xa, [{@dev={0xac, 0x14, 0x14, 0x40}, 0x6}, {@broadcast, 0x5}, {@local, 0x8}]}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000440)={'wg2\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'ip_vti0\x00', 0x0, 0x40, 0x8, 0x2, 0x5, {{0x18, 0x4, 0x1, 0x6, 0x60, 0x65, 0x0, 0xff, 0x29, 0x0, @private=0xa010102, @broadcast, {[@rr={0x7, 0xf, 0x66, [@loopback, @remote, @local]}, @rr={0x7, 0x13, 0xed, [@multicast1, @broadcast, @multicast2, @multicast1]}, @generic={0x86, 0xd, "4361e7d862c1974ac05a59"}, @generic={0x82, 0xf, "e7e6898609d367088606e31a67"}, @noop, @lsrr={0x83, 0xb, 0xb1, [@multicast2, @broadcast]}]}}}}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={r11, 0x5}, 0x8) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32=r9, @ANYBLOB="08000600", @ANYRES32], 0x24}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000540)={@empty}, &(0x7f0000000580)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00'}) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f000001ae00)=ANY=[], 0x1e4}, 0x1, 0x0, 0x0, 0x2400c000}, 0x2000c811) 2.175083381s ago: executing program 1 (id=893): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4) 1.649217064s ago: executing program 2 (id=996): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x2, 0xfffd}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @mss={0x2, 0x7fff}, @mss={0x2, 0xa9bd}, @mss={0x2, 0x1}, @mss={0x2, 0x6}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b90", 0x17b, 0x805, 0x0, 0x0) 1.645994185s ago: executing program 3 (id=997): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @remote, 0x7}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000001c00)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, &(0x7f0000001780)}}], 0x1, 0x24044005) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x0, 0x1}, 0x8) sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa", 0x4, 0xc001, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000014480)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b00200000103010100000000000000000200000ab8000b803400068014000506fe88000000000000000000000000000108000100ac1414aa14000400fe8000000000000000000000000000236c0001802c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac14141a06000340000200000c000280050001002100000006000340000400000c000280050001002100000006000340000400000c000280050001008400000008001a4000000007060012400000000004000e8008000340000000030c000200fffffffd00000006dd000a00cf325893f855b9c6b2205e5c48444600ee8cb3cf06717904742bce38b27aa13c915a919f092eba23c85cb739fc3f41f981b0ed71e5512f2a7f2e7c4768630332537cd98bdf687cafec6fc16ab53c87a1b382067e0847bb54893517e5d1689684644fe52b4769c37ff34bee0e331d683c804d049b9738afca9fb3ab8ff780b0d33febb21c06d475074baf94295fec98bd0d401d3a4ca85dd3d4f0dc91ef6976754ccbde9496be8f5c693aaa6962837b65afef72c7c30a43ef7d32d86c54e9ced8fe377b546d2bd1cd6f1f717c9351ffb16d886e2bac6ea3000000ed000a00cac6129dbc09046adba4fbb0c9b674dc2254d244a7ba6f666da923e44d4b56393be68ae41a3ab0c442e49f79e463a119f309b529c266b7714b80cd43da7eb1e46ada889976307750d2225c5e89b7d1af665c3a0dbfd8c809cf9ebf9cedc2f41938846231fff68cee592d8a8a8ca26323f0c2b6d1af05fc637c3955a940e7228182e8d17a4b30e2a648b7a22449df77373a788638c5ba0f39524f362092487f5bc53e00d4df18bb46916b787242b38119b1be796f3a48e345c4b00e4a0cb37644e2bd94d9dab21823e6b8ca58bb89efc63de79cda007d6868e4cdb35793562498f27852053882d70812000000"], 0x2b0}, 0x1, 0x0, 0x0, 0x40}, 0x800) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) 1.645456319s ago: executing program 4 (id=998): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="04975697413104474cdfb598", 0xc}, {&(0x7f0000000240)="89d3c05e2f60dd8c0682db12", 0xc}, {&(0x7f0000001940)="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", 0xfdd}], 0x3, 0x0, 0x0, 0x805}, 0x0) 1.503908394s ago: executing program 2 (id=999): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xd, &(0x7f0000000080)=@raw=[@map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_fd={0x18, 0x5}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @generic={0x5, 0x2, 0x0, 0x3a51, 0x7}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x4}, @exit], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0xb, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000180)=[{0x2, 0x2, 0x9, 0x9}, {0x5, 0x3, 0x1, 0xa}, {0x5, 0x3, 0x3, 0x1}], 0x10, 0x7f, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@cgroup, 0x1d, 0x0, 0x40, &(0x7f0000000300)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) close(r2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@ifindex, r0, 0x32, 0x2014, 0x0, @value, @void, @void, @void, r1}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newlink={0x78, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1ff}}, @IFLA_VLAN_QOS_MAPPING={0x7, 0x1, {0x7f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1ff}}]}]}}}, @IFLA_LINK={0x8}]}, 0x78}}, 0x0) 1.433777288s ago: executing program 4 (id=1001): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x80, 0x30, 0xb, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x4}}, @TCA_CT_MARK={0x8}, @TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae535af2f0a70ddeb37f"}, @TCA_CT_MARK_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) 1.320190067s ago: executing program 3 (id=1002): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1, 0x0, 0xf00}}], 0x2, 0x24000045) 1.319502471s ago: executing program 2 (id=1003): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @rand_addr=0x64010100}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 1.253018405s ago: executing program 0 (id=1004): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x300f000, 0xe, 0x0, &(0x7f0000000300)="00fda518984624ffb2c59f00d925", 0x0, 0x70a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.140485597s ago: executing program 0 (id=1005): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54010000100001000000000000000000fe880000000000000000000000000001ffffffff00"/64, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000000000000000200000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000020000010000000000000000480002006362632861657329"], 0x154}}, 0x0) 1.075819826s ago: executing program 4 (id=1006): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r4 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_emit_ethernet(0x66, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x30, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}, [{0x1, 0x1, "2025b07f3c58"}]}}}}}}, 0x0) recvmmsg(r4, &(0x7f0000004c80)=[{{&(0x7f00000004c0)=@alg, 0x80, &(0x7f0000000700)=[{&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000580)=""/37, 0x25}, {&(0x7f00000005c0)=""/150, 0x96}, {&(0x7f0000000680)=""/102, 0x66}], 0x4, &(0x7f0000000740)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001740)=""/108, 0x6c}, {&(0x7f00000017c0)=""/58, 0x3a}, {&(0x7f0000001800)=""/199, 0xc7}, {&(0x7f0000001900)=""/173, 0xad}, {&(0x7f00000019c0)=""/44, 0x2c}, {&(0x7f0000001a00)=""/241, 0xf1}], 0x6, &(0x7f0000001b80)=""/135, 0x87}, 0x2}, {{&(0x7f0000001c40)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f0000002cc0)=""/222, 0xde}], 0x2, &(0x7f0000002e00)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000003e00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000004180)=[{&(0x7f0000003e80)=""/79, 0x4f}, {&(0x7f0000003f00)=""/46, 0x2e}, {&(0x7f0000003f40)=""/189, 0xbd}, {&(0x7f0000004000)=""/66, 0x42}, {&(0x7f0000004080)=""/99, 0x63}, {&(0x7f0000004100)=""/104, 0x68}], 0x6, &(0x7f0000004200)=""/201, 0xc9}, 0x2}, {{&(0x7f0000004300)=@can, 0x80, &(0x7f0000004640)=[{&(0x7f0000004380)=""/96, 0x60}, {&(0x7f0000004400)=""/188, 0xbc}, {&(0x7f00000044c0)=""/57, 0x39}, {&(0x7f0000004500)=""/102, 0x66}, {&(0x7f0000004580)=""/191, 0xbf}], 0x5, &(0x7f00000046c0)=""/81, 0x51}, 0x5}, {{&(0x7f0000004740)=@ax25={{0x3, @null}, [@remote, @null, @null, @null, @default, @netrom, @netrom, @netrom]}, 0x80, &(0x7f0000004c00)=[{&(0x7f00000047c0)=""/76, 0x4c}, {&(0x7f0000004840)=""/111, 0x6f}, {&(0x7f00000048c0)=""/148, 0x94}, {&(0x7f0000004980)=""/71, 0x47}, {&(0x7f0000004a00)=""/166, 0xa6}, {&(0x7f0000004ac0)=""/189, 0xbd}, {&(0x7f0000004b80)=""/116, 0x74}], 0x7}, 0x401}], 0x6, 0x40000060, &(0x7f0000004e00)={0x77359400}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x248, r5, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x190, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "5fafb1295d7a281c32ff99ae79cc3b5a68d2f6b429e11999beb8ff"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xcc27}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x64, 0x3, "c0a20606b9f749d529696b9efb785582afd24e800872188b5231882b6277ffd20c30faaf75731ce65f33cbfb28f334c08c9f9dc26c37885d80358fdca2d87d805eff5c85070c841503daebd3d7aa4e723a3dcd302797a60e092885d7835852ba"}, @TIPC_NLA_NODE_ID={0x90, 0x3, "e54932b59c4f1ac02608cabb42b57cc025faf8b00ffbe766fef10f54c4cf20d631e4ef2b6360a950f2848dcc75392532ea233b9edc5af43cc30f18f439dc542ab4e6df0f4c8c8e7972511af67681810ff64551b0870477c2dcee5a5038e284cb0b21cec899f9841956430dbcd61431ebef1a85da6499a4beb47912880312eb97388b1b1f090fc4f6176df4dd"}, @TIPC_NLA_NODE_ID={0x3e, 0x3, "0ef0317399cf78932728390f732eb846d4592eab9d96b40e97402117ddfa2976de488ebe86fd11acc2a5dd41e1a93bd5b21fdf658a383bd5046e"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7562}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb55}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x41}, 0x20044080) 1.070404178s ago: executing program 3 (id=1007): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}], {0x14, 0x10}}, 0x98}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='c *:4\t\nm'], 0xa) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(r6, 0x0, 0x61, 0x0, &(0x7f0000000140)) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) 998.640474ms ago: executing program 2 (id=1008): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@getnexthop={0x20, 0x76, 0xb0d, 0x0, 0x25dfdbfd, {0x3, 0x2}, [@NHA_ID={0x8}]}, 0x20}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0x1, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x6, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, [@exit, @exit, @call={0x85, 0x0, 0x0, 0x1d}]}, &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, &(0x7f0000000140), 0x41100, 0x18, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000300)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x5, 0x5, 0x401}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000640)=[r4, r0, r5, r6, r7, r8, r9, r10], &(0x7f0000000680)=[{0x0, 0x3, 0xe, 0xb}, {0x3, 0x1, 0xf, 0x4}, {0x0, 0x3, 0x10}, {0x0, 0x3, 0xc, 0x8}, {0x4, 0x1, 0x4, 0x1}, {0x2, 0x2, 0x9, 0x4}, {0x4, 0x1, 0x9, 0x7}, {0x4, 0x1, 0x1, 0x8}, {0x1, 0x3, 0xe, 0x5}], 0x10, 0xed, @void, @value}, 0x94) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x41, 0x107, 0x0, 0x25dfdbfe, {0x4, 0x7c}}, 0x14}}, 0x8004) 770.698622ms ago: executing program 4 (id=1009): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x2, 0xfffd}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @mss={0x2, 0x7fff}, @mss={0x2, 0xa9bd}, @mss={0x2, 0x1}, @mss={0x2, 0x6}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x196, 0x805, 0x0, 0x0) 696.393432ms ago: executing program 3 (id=1010): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="500100001000130429bd7000000000000000000081000000000000000000000020010000000000000000000000000000000000004e240000000000203b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a0101020000000000000000000000000000000032000000e00000010000000000000000000009000000000000000000feffffffffffffff0000000000000000000000000000000008000000000000000000ee000000000081000000000000000000000000000000030000000000000005000000000000000400000000000000060000040000000000000000f9ffffff20000800000000000000000002000481680000000000000060001200726663343130362867636d286165732929000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8d6a000000080"], 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) 670.258457ms ago: executing program 2 (id=1011): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x9, 0xae, 0x2, 0xc0000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0) 463.477191ms ago: executing program 4 (id=1012): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) (async) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x20000001, {0x0, 0x0, 0x0, r3, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24011}, 0x6004084) 407.977681ms ago: executing program 3 (id=1013): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="7d1068a421f05f384340d34be65ac0bbe72925ab1a8aa3", 0x17) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x10000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1bf7b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 407.351231ms ago: executing program 0 (id=1014): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@multicast, @random="7f0a00034011", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0xf, 0x1c, 0x66, 0x0, 0x80, 0x2, 0x0, @remote, @local}, "156b3485e766b1df"}}}}, 0x0) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r4, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) poll(&(0x7f0000000340)=[{r4}], 0x1, 0x4) (async) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2}}}, 0x24}}, 0x0) (async, rerun: 32) recvmmsg$unix(r3, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10102, 0x0) (async, rerun: 32) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r7) (async) r8 = socket(0x40000000015, 0x5, 0x0) (async, rerun: 64) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r8, 0x0, 0xf00, 0x0, &(0x7f0000000040)={0xa, 0x1, 0xfffffffc, @local, 0xe79}, 0x1c) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r7) (async) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r6}) (async) syz_emit_ethernet(0x82, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "008000", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) (async) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) (async, rerun: 32) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) (rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) 244.983852ms ago: executing program 0 (id=1015): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x300f000, 0xe, 0x0, &(0x7f0000000300)="00fda518984624ffb2c59f00d925", 0x0, 0x70a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 112.460744ms ago: executing program 0 (id=1016): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, 0x0, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000340)='FREEZING\x00', 0x9) r5 = socket(0x25, 0x1, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000003c000900000001000400"/24], 0x18}}, 0x0) socket$kcm(0x29, 0x5, 0x0) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0xf, &(0x7f0000000080), 0x4) listen(r6, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 0s ago: executing program 0 (id=1017): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) socket$inet6(0xa, 0x1, 0x100) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) accept4(r0, &(0x7f0000000480)=@ieee802154={0x24, @short}, &(0x7f00000003c0)=0x80, 0x80800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2000000000e801157379bd8d00000100140000001100030000000000000000000000000a"], 0x48}}, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x160, 0x178, 0xc, 0x0, 0x178, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, 0x0, {[{{@ipv6={@mcast2, @private0, [], [], 'geneve0\x00', 'vlan0\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x3, 0x976f, 0xfffffff8, '\x00', 'syz0\x00', {0x2}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x7}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) (async) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000014000100000000000000000002000000", @ANYRES32=r2, @ANYBLOB="08000b002000000008000200"], 0x3c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.25' (ED25519) to the list of known hosts. [ 82.982820][ T5823] cgroup: Unknown subsys name 'net' [ 83.156877][ T5823] cgroup: Unknown subsys name 'cpuset' [ 83.166097][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.898576][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.646676][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.654551][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.665440][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.673902][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.682392][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.690405][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.697877][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.706227][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.713878][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.723192][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.723931][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.738503][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.747801][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.755214][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.763443][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.769498][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.778500][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.786725][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.803630][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.815412][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.843126][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.854580][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.871084][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.883229][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.892913][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.504308][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 89.553387][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 89.584270][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 89.834412][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 89.917212][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.925209][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.933418][ T5834] bridge_slave_0: entered allmulticast mode [ 89.940869][ T5834] bridge_slave_0: entered promiscuous mode [ 89.958519][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.965877][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.973403][ T5840] bridge_slave_0: entered allmulticast mode [ 89.980749][ T5840] bridge_slave_0: entered promiscuous mode [ 90.017113][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 90.028451][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.036141][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.043523][ T5834] bridge_slave_1: entered allmulticast mode [ 90.050945][ T5834] bridge_slave_1: entered promiscuous mode [ 90.075823][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.083283][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.090594][ T5840] bridge_slave_1: entered allmulticast mode [ 90.097721][ T5840] bridge_slave_1: entered promiscuous mode [ 90.117746][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.125296][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.132684][ T5844] bridge_slave_0: entered allmulticast mode [ 90.139976][ T5844] bridge_slave_0: entered promiscuous mode [ 90.188273][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.195675][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.203129][ T5844] bridge_slave_1: entered allmulticast mode [ 90.210288][ T5844] bridge_slave_1: entered promiscuous mode [ 90.263012][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.276954][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.317164][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.329379][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.343457][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.384999][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.500368][ T5840] team0: Port device team_slave_0 added [ 90.506746][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.514632][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.522049][ T5851] bridge_slave_0: entered allmulticast mode [ 90.529719][ T5851] bridge_slave_0: entered promiscuous mode [ 90.558537][ T5844] team0: Port device team_slave_0 added [ 90.567967][ T5834] team0: Port device team_slave_0 added [ 90.576481][ T5840] team0: Port device team_slave_1 added [ 90.599011][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.610239][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.618614][ T5851] bridge_slave_1: entered allmulticast mode [ 90.628453][ T5851] bridge_slave_1: entered promiscuous mode [ 90.663878][ T5844] team0: Port device team_slave_1 added [ 90.685273][ T5834] team0: Port device team_slave_1 added [ 90.747849][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.755516][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.762808][ T5835] bridge_slave_0: entered allmulticast mode [ 90.769915][ T5835] bridge_slave_0: entered promiscuous mode [ 90.789986][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.797341][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.801455][ T5843] Bluetooth: hci2: command tx timeout [ 90.829163][ T5847] Bluetooth: hci0: command tx timeout [ 90.832768][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.855009][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.872996][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.882344][ T5843] Bluetooth: hci3: command tx timeout [ 90.882554][ T5843] Bluetooth: hci1: command tx timeout [ 90.894210][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.901739][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.928559][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.939784][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.947850][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.955281][ T5835] bridge_slave_1: entered allmulticast mode [ 90.962943][ T5835] bridge_slave_1: entered promiscuous mode [ 90.971429][ T5847] Bluetooth: hci4: command tx timeout [ 90.986560][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.993734][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.019899][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.050809][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.058185][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.084290][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.108547][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.116521][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.142852][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.156542][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.163904][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.190026][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.239850][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.260775][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.274672][ T5851] team0: Port device team_slave_0 added [ 91.283802][ T5851] team0: Port device team_slave_1 added [ 91.403148][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.410168][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.438907][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.471000][ T5840] hsr_slave_0: entered promiscuous mode [ 91.477440][ T5840] hsr_slave_1: entered promiscuous mode [ 91.487277][ T5835] team0: Port device team_slave_0 added [ 91.496908][ T5835] team0: Port device team_slave_1 added [ 91.526429][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.533762][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.560675][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.606585][ T5844] hsr_slave_0: entered promiscuous mode [ 91.613553][ T5844] hsr_slave_1: entered promiscuous mode [ 91.619600][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.627926][ T5844] Cannot create hsr debugfs directory [ 91.678710][ T5834] hsr_slave_0: entered promiscuous mode [ 91.688121][ T5834] hsr_slave_1: entered promiscuous mode [ 91.694617][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.702627][ T5834] Cannot create hsr debugfs directory [ 91.729250][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.737685][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.764174][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.835517][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.843465][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.869543][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.896052][ T5851] hsr_slave_0: entered promiscuous mode [ 91.904304][ T5851] hsr_slave_1: entered promiscuous mode [ 91.910919][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.918523][ T5851] Cannot create hsr debugfs directory [ 92.179299][ T5835] hsr_slave_0: entered promiscuous mode [ 92.185829][ T5835] hsr_slave_1: entered promiscuous mode [ 92.192405][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.199986][ T5835] Cannot create hsr debugfs directory [ 92.243924][ T43] cfg80211: failed to load regulatory.db [ 92.626243][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.639055][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.658894][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.679173][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.766084][ T5851] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.799596][ T5851] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.812663][ T5851] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.836442][ T5851] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.881012][ T5847] Bluetooth: hci2: command tx timeout [ 92.886556][ T5843] Bluetooth: hci0: command tx timeout [ 92.913280][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.938149][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.965060][ T5843] Bluetooth: hci1: command tx timeout [ 92.965292][ T5847] Bluetooth: hci3: command tx timeout [ 92.971122][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.014591][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.041116][ T5847] Bluetooth: hci4: command tx timeout [ 93.094221][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.111913][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.125618][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.142917][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.265622][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.319122][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.337391][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.352716][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.364183][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.394593][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.435054][ T2976] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.442451][ T2976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.462653][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.491592][ T2976] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.498872][ T2976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.575624][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.608186][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.657359][ T2976] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.664555][ T2976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.676111][ T2976] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.683380][ T2976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.717396][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.765049][ T2976] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.772265][ T2976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.795751][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.816026][ T3547] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.823256][ T3547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.929673][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.019453][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.026746][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.075852][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.094556][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.101786][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.206649][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.274979][ T2976] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.282412][ T2976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.342193][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.349438][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.469238][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.587671][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.723595][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.815767][ T5840] veth0_vlan: entered promiscuous mode [ 94.905311][ T5840] veth1_vlan: entered promiscuous mode [ 94.965551][ T5847] Bluetooth: hci2: command tx timeout [ 94.966251][ T5843] Bluetooth: hci0: command tx timeout [ 94.997182][ T5844] veth0_vlan: entered promiscuous mode [ 95.048810][ T5843] Bluetooth: hci3: command tx timeout [ 95.048870][ T5847] Bluetooth: hci1: command tx timeout [ 95.086163][ T5844] veth1_vlan: entered promiscuous mode [ 95.121159][ T5847] Bluetooth: hci4: command tx timeout [ 95.157525][ T5840] veth0_macvtap: entered promiscuous mode [ 95.199147][ T5840] veth1_macvtap: entered promiscuous mode [ 95.228115][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.254998][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.306229][ T5844] veth0_macvtap: entered promiscuous mode [ 95.326250][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.345694][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.364669][ T5840] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.374416][ T5840] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.384062][ T5840] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.392853][ T5840] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.418593][ T5844] veth1_macvtap: entered promiscuous mode [ 95.509900][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.531499][ T5851] veth0_vlan: entered promiscuous mode [ 95.545404][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.594476][ T5834] veth0_vlan: entered promiscuous mode [ 95.606147][ T5844] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.615821][ T5844] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.624729][ T5844] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.634072][ T5844] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.648684][ T5835] veth0_vlan: entered promiscuous mode [ 95.656567][ T5851] veth1_vlan: entered promiscuous mode [ 95.712853][ T5834] veth1_vlan: entered promiscuous mode [ 95.727620][ T5835] veth1_vlan: entered promiscuous mode [ 95.746473][ T3547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.755275][ T3547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.853479][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.865195][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.892083][ T5834] veth0_macvtap: entered promiscuous mode [ 95.932100][ T5834] veth1_macvtap: entered promiscuous mode [ 95.956029][ T5851] veth0_macvtap: entered promiscuous mode [ 95.988826][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.992781][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.017053][ T5835] veth0_macvtap: entered promiscuous mode [ 96.028605][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.038336][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.048514][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.066289][ T5851] veth1_macvtap: entered promiscuous mode [ 96.098817][ T5835] veth1_macvtap: entered promiscuous mode [ 96.159321][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.177645][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.185026][ T5956] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3'. [ 96.187495][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.205300][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.214301][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.240344][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.249770][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.253898][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.348637][ T5851] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.360648][ T5851] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.369441][ T5851] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.379288][ T5851] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.405855][ T5959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6'. [ 96.420022][ T5959] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 96.431250][ T5959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.432797][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.504680][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.569550][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.603781][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.623244][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.632533][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.727010][ T5966] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.751913][ T5963] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'. [ 96.845492][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.897444][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.018357][ T3501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.037405][ T3501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.045153][ T5847] Bluetooth: hci0: command tx timeout [ 97.046534][ T5971] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 97.059842][ T2976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.064154][ T5847] Bluetooth: hci2: command tx timeout [ 97.083039][ T2976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.109988][ T5973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10'. [ 97.121055][ T5847] Bluetooth: hci3: command tx timeout [ 97.126681][ T5847] Bluetooth: hci1: command tx timeout [ 97.176645][ T5973] dummy0: entered promiscuous mode [ 97.185873][ T5973] dummy0: left promiscuous mode [ 97.201242][ T5847] Bluetooth: hci4: command tx timeout [ 97.240325][ T3547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.273608][ T3547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.292501][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.325355][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.492372][ T2976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.500372][ T2976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.780099][ T5986] netlink: 72 bytes leftover after parsing attributes in process `syz.1.14'. [ 97.976475][ T5993] syzkaller0: create flow: hash 333400619 index 1 [ 98.178180][ T5998] Zero length message leads to an empty skb [ 98.192622][ T5985] syzkaller0: delete flow: hash 333400619 index 1 [ 98.448680][ T6007] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18'. [ 98.490137][ T6011] netlink: 'syz.0.19': attribute type 1 has an invalid length. [ 98.499875][ T6011] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.579842][ T6016] netlink: 24 bytes leftover after parsing attributes in process `syz.4.22'. [ 99.906168][ T6018] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18'. [ 99.919001][ T6027] syz_tun: entered allmulticast mode [ 99.947065][ T6029] syz_tun: left allmulticast mode [ 101.037168][ T6038] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 101.180611][ T6071] netlink: 'syz.4.34': attribute type 4 has an invalid length. [ 101.711983][ T6084] syz_tun: entered allmulticast mode [ 101.790145][ T6083] syz_tun: left allmulticast mode [ 101.935850][ T6089] netlink: 'syz.1.40': attribute type 1 has an invalid length. [ 101.944642][ T6089] netlink: 'syz.1.40': attribute type 1 has an invalid length. [ 102.234430][ T6097] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.42'. [ 102.353815][ T6099] netlink: 28 bytes leftover after parsing attributes in process `syz.3.43'. [ 102.474846][ T6102] syz.2.44 uses obsolete (PF_INET,SOCK_PACKET) [ 103.307226][ T6131] syz_tun: entered allmulticast mode [ 103.323499][ T6130] syz_tun: left allmulticast mode [ 103.491672][ T6108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.495057][ T6139] netlink: 28 bytes leftover after parsing attributes in process `syz.3.55'. [ 103.964004][ T6159] netlink: 28 bytes leftover after parsing attributes in process `syz.3.61'. [ 104.220194][ T6163] netlink: 'syz.1.62': attribute type 4 has an invalid length. [ 104.319576][ T6169] syz_tun: entered allmulticast mode [ 104.342365][ T6168] syz_tun: left allmulticast mode [ 104.371351][ T6171] xt_l2tp: v2 doesn't support IP mode [ 104.529348][ T6174] netlink: 16 bytes leftover after parsing attributes in process `syz.4.66'. [ 104.596026][ T6174] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.66'. [ 104.620238][ T6174] ipt_REJECT: TCP_RESET invalid for non-tcp [ 104.759277][ T6185] netlink: 28 bytes leftover after parsing attributes in process `syz.1.67'. [ 104.799932][ T6185] netlink: 28 bytes leftover after parsing attributes in process `syz.1.67'. [ 104.881404][ T5847] Bluetooth: hci4: command tx timeout [ 104.916732][ T6185] bridge0: entered promiscuous mode [ 104.932733][ T6185] syz_tun: entered promiscuous mode [ 104.989742][ T6193] warning: `syz.2.73' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.299551][ T6205] netlink: 'syz.1.77': attribute type 4 has an invalid length. [ 105.519082][ T6210] syz_tun: entered allmulticast mode [ 105.566019][ T6207] syz_tun: left allmulticast mode [ 105.718382][ T6215] netlink: 28 bytes leftover after parsing attributes in process `syz.2.82'. [ 105.907829][ T6228] netlink: 'syz.3.85': attribute type 13 has an invalid length. [ 106.313153][ T6242] netlink: 108 bytes leftover after parsing attributes in process `syz.0.89'. [ 106.918722][ T6262] syz_tun: entered allmulticast mode [ 106.949413][ T6260] syz_tun: left allmulticast mode [ 107.241469][ T6274] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 107.348014][ T6274] geneve2: entered promiscuous mode [ 107.374102][ T6274] geneve2: entered allmulticast mode [ 107.477616][ T6280] netlink: 'syz.1.104': attribute type 4 has an invalid length. [ 107.838306][ T6291] __nla_validate_parse: 1 callbacks suppressed [ 107.838328][ T6291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.108'. [ 107.918527][ T6287] netlink: 32 bytes leftover after parsing attributes in process `syz.1.105'. [ 107.932619][ T6287] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.972776][ T6287] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.981015][ T6287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.123664][ T6298] syz_tun: entered allmulticast mode [ 108.145449][ T6297] syz_tun: left allmulticast mode [ 108.296473][ T6303] xt_CT: You must specify a L4 protocol and not use inversions on it [ 108.300153][ T6304] netlink: 76 bytes leftover after parsing attributes in process `syz.2.113'. [ 108.513190][ T6308] netlink: 'syz.0.116': attribute type 4 has an invalid length. [ 108.605974][ T6309] netlink: 'syz.3.114': attribute type 1 has an invalid length. [ 108.719205][ T6309] bond1 (unregistering): Released all slaves [ 109.055561][ T6332] netlink: 12 bytes leftover after parsing attributes in process `syz.4.122'. [ 109.274382][ T6323] team0 (unregistering): Port device team_slave_0 removed [ 109.290367][ T6344] netlink: 'syz.1.123': attribute type 18 has an invalid length. [ 109.296481][ T6323] team0 (unregistering): Port device team_slave_1 removed [ 109.340866][ T6341] netlink: 'syz.1.123': attribute type 18 has an invalid length. [ 109.342995][ T6343] syz_tun: entered allmulticast mode [ 109.377331][ T6344] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.387060][ T6344] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.396584][ T6344] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.405376][ T6344] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.481553][ T6339] syz_tun: left allmulticast mode [ 109.714629][ T6355] netlink: 'syz.1.128': attribute type 4 has an invalid length. [ 109.738020][ T6358] xt_bpf: check failed: parse error [ 110.116096][ T6368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.133'. [ 110.754280][ T6390] netlink: 56 bytes leftover after parsing attributes in process `syz.4.140'. [ 110.760768][ T6391] netlink: 'syz.0.141': attribute type 4 has an invalid length. [ 110.789983][ T6390] (unnamed net_device) (uninitialized): (slave gre0): Device is not bonding slave [ 110.822843][ T6390] (unnamed net_device) (uninitialized): option active_slave: invalid value (gre0) [ 111.118451][ T6405] netlink: 16 bytes leftover after parsing attributes in process `syz.4.144'. [ 111.181702][ T6405] team0: entered promiscuous mode [ 111.186828][ T6405] team_slave_0: entered promiscuous mode [ 111.193448][ T6405] team_slave_1: entered promiscuous mode [ 111.220835][ T6398] team0: left promiscuous mode [ 111.240639][ T6398] team_slave_0: left promiscuous mode [ 111.246679][ T6398] team_slave_1: left promiscuous mode [ 111.493455][ T6416] syz_tun: entered allmulticast mode [ 111.523369][ T6414] syz_tun: left allmulticast mode [ 111.540307][ T6415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.148'. [ 111.553569][ T6421] netlink: 56 bytes leftover after parsing attributes in process `syz.4.150'. [ 111.561928][ T6415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.148'. [ 111.603416][ T6415] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.612422][ T6415] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.623245][ T6415] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.632129][ T6415] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.982991][ T6436] netlink: 'syz.2.154': attribute type 1 has an invalid length. [ 112.291153][ T6436] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.408492][ T6441] syz.3.155 (6441) used greatest stack depth: 16184 bytes left [ 113.055727][ T6482] __nla_validate_parse: 3 callbacks suppressed [ 113.055748][ T6482] netlink: 52 bytes leftover after parsing attributes in process `syz.1.166'. [ 113.105765][ T6488] trusted_key: syz.0.168 sent an empty control message without MSG_MORE. [ 113.865009][ T6506] netlink: 80 bytes leftover after parsing attributes in process `syz.1.173'. [ 113.981617][ T6516] netlink: 28 bytes leftover after parsing attributes in process `syz.3.175'. [ 114.174752][ T6528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.178'. [ 114.185810][ T6529] x_tables: duplicate underflow at hook 1 [ 114.265544][ T6512] netlink: 32 bytes leftover after parsing attributes in process `syz.4.176'. [ 114.281256][ T6512] bridge0: port 1(bridge_slave_0) entered listening state [ 114.583557][ T6544] netlink: 16 bytes leftover after parsing attributes in process `syz.1.182'. [ 114.614983][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.182'. [ 114.678593][ T6547] netlink: 60 bytes leftover after parsing attributes in process `syz.1.182'. [ 115.165417][ T6560] netlink: 28 bytes leftover after parsing attributes in process `syz.4.185'. [ 115.200846][ T6560] netlink: 32 bytes leftover after parsing attributes in process `syz.4.185'. [ 115.433715][ T6585] netlink: 'syz.3.191': attribute type 1 has an invalid length. [ 115.452001][ T6583] netlink: 'syz.3.191': attribute type 1 has an invalid length. [ 115.665259][ T6590] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 116.035482][ T6607] syz_tun: entered allmulticast mode [ 116.103972][ T6606] syz_tun: left allmulticast mode [ 116.259049][ T6616] openvswitch: netlink: Tunnel attr 16371 out of range max 16 [ 116.385846][ T6620] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 116.416767][ T6620] bond2: (slave vcan1): Error -95 calling set_mac_address [ 116.468827][ T6632] netlink: 'syz.4.201': attribute type 20 has an invalid length. [ 117.071319][ T6658] syz_tun: entered allmulticast mode [ 117.113478][ T6653] syz_tun: left allmulticast mode [ 117.121221][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 118.941937][ T6701] __nla_validate_parse: 3 callbacks suppressed [ 118.941958][ T6701] netlink: 20 bytes leftover after parsing attributes in process `syz.3.215'. [ 118.974006][ T6701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.215'. [ 119.106063][ T6701] veth3: entered allmulticast mode [ 119.295784][ T6717] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 119.297673][ T2157] IPVS: starting estimator thread 0... [ 119.410648][ T6719] IPVS: using max 22 ests per chain, 52800 per kthread [ 119.664045][ T6736] syz_tun: entered allmulticast mode [ 119.685225][ T6738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.226'. [ 119.704401][ T6734] syz_tun: left allmulticast mode [ 119.737145][ T6738] netlink: 12 bytes leftover after parsing attributes in process `syz.2.226'. [ 120.382656][ T6767] netlink: 32 bytes leftover after parsing attributes in process `syz.0.232'. [ 120.915211][ T6781] netlink: 14 bytes leftover after parsing attributes in process `syz.2.236'. [ 121.213034][ T6781] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.235207][ T6781] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.248619][ T6781] bond0 (unregistering): Released all slaves [ 121.313353][ T6794] syz_tun: entered allmulticast mode [ 121.343262][ T6787] syz_tun: left allmulticast mode [ 121.505319][ T6805] netlink: 20 bytes leftover after parsing attributes in process `syz.3.243'. [ 121.524292][ T6809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.244'. [ 121.564649][ T6809] netlink: 32 bytes leftover after parsing attributes in process `syz.1.244'. [ 121.601314][ T6809] netlink: 32 bytes leftover after parsing attributes in process `syz.1.244'. [ 121.917194][ T6822] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 121.950970][ T6825] pim6reg: entered allmulticast mode [ 121.964114][ T980] IPVS: starting estimator thread 0... [ 122.050751][ T6835] IPVS: using max 28 ests per chain, 67200 per kthread [ 122.120923][ T6837] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 122.158121][ T6837] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 122.198771][ T6837] gretap1: entered promiscuous mode [ 122.204829][ T6837] gretap1: entered allmulticast mode [ 122.297072][ T6849] openvswitch: netlink: Flow actions attr not present in new flow. [ 122.326216][ C0] Illegal XDP return value 16128 on prog (id 99) dev lo, expect packet loss! [ 122.358958][ T6846] sctp: failed to load transform for md5: -2 [ 123.711675][ T6899] netlink: 'syz.1.270': attribute type 4 has an invalid length. [ 124.206124][ T6936] FAULT_INJECTION: forcing a failure. [ 124.206124][ T6936] name failslab, interval 1, probability 0, space 0, times 1 [ 124.236482][ T6936] CPU: 1 UID: 0 PID: 6936 Comm: syz.1.279 Not tainted 6.16.0-rc1-syzkaller-00121-gd0fa59897e04 #0 PREEMPT(full) [ 124.236512][ T6936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 124.236523][ T6936] Call Trace: [ 124.236531][ T6936] [ 124.236539][ T6936] dump_stack_lvl+0x189/0x250 [ 124.236574][ T6936] ? __pfx____ratelimit+0x10/0x10 [ 124.236603][ T6936] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.236631][ T6936] ? __pfx__printk+0x10/0x10 [ 124.236656][ T6936] ? __pfx___might_resched+0x10/0x10 [ 124.236687][ T6936] should_fail_ex+0x414/0x560 [ 124.236714][ T6936] should_failslab+0xa8/0x100 [ 124.236733][ T6936] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 124.236750][ T6936] ? __alloc_skb+0x112/0x2d0 [ 124.236774][ T6936] __alloc_skb+0x112/0x2d0 [ 124.236798][ T6936] netlink_sendmsg+0x5c6/0xb30 [ 124.236830][ T6936] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.236862][ T6936] ? aa_sock_msg_perm+0x94/0x160 [ 124.236883][ T6936] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 124.236908][ T6936] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.236931][ T6936] __sock_sendmsg+0x21c/0x270 [ 124.236963][ T6936] ____sys_sendmsg+0x505/0x830 [ 124.236991][ T6936] ? __pfx_____sys_sendmsg+0x10/0x10 [ 124.237025][ T6936] ? import_iovec+0x74/0xa0 [ 124.237046][ T6936] ___sys_sendmsg+0x21f/0x2a0 [ 124.237070][ T6936] ? __pfx____sys_sendmsg+0x10/0x10 [ 124.237128][ T6936] ? __fget_files+0x2a/0x420 [ 124.237146][ T6936] ? __fget_files+0x3a0/0x420 [ 124.237175][ T6936] __x64_sys_sendmsg+0x19b/0x260 [ 124.237200][ T6936] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 124.237232][ T6936] ? __pfx_ksys_write+0x10/0x10 [ 124.237246][ T6936] ? rcu_is_watching+0x15/0xb0 [ 124.237278][ T6936] ? do_syscall_64+0xbe/0x3b0 [ 124.237299][ T6936] do_syscall_64+0xfa/0x3b0 [ 124.237312][ T6936] ? lockdep_hardirqs_on+0x9c/0x150 [ 124.237346][ T6936] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.237363][ T6936] ? clear_bhb_loop+0x60/0xb0 [ 124.237386][ T6936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.237403][ T6936] RIP: 0033:0x7fcfe6b8e929 [ 124.237420][ T6936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.237435][ T6936] RSP: 002b:00007fcfe7a11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.237456][ T6936] RAX: ffffffffffffffda RBX: 00007fcfe6db5fa0 RCX: 00007fcfe6b8e929 [ 124.237470][ T6936] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 124.237481][ T6936] RBP: 00007fcfe7a11090 R08: 0000000000000000 R09: 0000000000000000 [ 124.237493][ T6936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.237504][ T6936] R13: 0000000000000000 R14: 00007fcfe6db5fa0 R15: 00007ffcd4e4b608 [ 124.237536][ T6936] [ 124.855760][ T6943] vxcan1: entered allmulticast mode [ 124.876256][ T6948] vxcan1: left allmulticast mode [ 125.106471][ T6968] netlink: 'syz.2.285': attribute type 4 has an invalid length. [ 125.293508][ T6971] __nla_validate_parse: 7 callbacks suppressed [ 125.293530][ T6971] netlink: 28 bytes leftover after parsing attributes in process `syz.0.287'. [ 125.320822][ T6976] netlink: 'syz.1.290': attribute type 4 has an invalid length. [ 125.365099][ T6980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.289'. [ 125.369713][ T6979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.427802][ T6979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.477388][ T6979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.494894][ T6979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.673247][ T6994] syz_tun: entered allmulticast mode [ 125.698030][ T6987] syz_tun: left allmulticast mode [ 125.817890][ T7001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.294'. [ 126.376806][ T7021] x_tables: duplicate underflow at hook 1 [ 126.545099][ T7029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.303'. [ 126.672108][ T7035] syz_tun: entered allmulticast mode [ 126.710594][ T7033] syz_tun: left allmulticast mode [ 126.773139][ T7038] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 126.851091][ T7040] xt_bpf: check failed: parse error [ 126.974846][ T7045] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 127.261951][ T7061] netlink: 'syz.1.315': attribute type 1 has an invalid length. [ 127.308832][ T7061] netlink: 224 bytes leftover after parsing attributes in process `syz.1.315'. [ 127.603462][ T7078] netlink: 'syz.4.320': attribute type 3 has an invalid length. [ 127.640565][ T7078] netlink: 'syz.4.320': attribute type 3 has an invalid length. [ 127.771832][ T7084] syz_tun: entered allmulticast mode [ 127.807856][ T7081] syz_tun: left allmulticast mode [ 127.920374][ T7091] ip6t_srh: unknown srh match flags 4001 [ 127.947154][ T7091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.323'. [ 128.111184][ T7100] netlink: 32 bytes leftover after parsing attributes in process `syz.2.327'. [ 128.642447][ T7131] netlink: 168 bytes leftover after parsing attributes in process `syz.2.335'. [ 128.992751][ T7142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.336'. [ 129.323378][ T7157] netlink: 'syz.2.342': attribute type 1 has an invalid length. [ 129.332765][ T7156] netlink: 'syz.3.341': attribute type 1 has an invalid length. [ 129.517462][ T7164] openvswitch: netlink: IP tunnel dst address not specified [ 129.685386][ T7169] sctp: [Deprecated]: syz.1.344 (pid 7169) Use of int in maxseg socket option. [ 129.685386][ T7169] Use struct sctp_assoc_value instead [ 129.727277][ T7172] netlink: 32 bytes leftover after parsing attributes in process `syz.3.345'. [ 131.343991][ T7188] syz_tun: entered allmulticast mode [ 131.370224][ T7187] syz_tun: left allmulticast mode [ 131.985431][ T7208] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 132.363337][ T7233] syz_tun: entered allmulticast mode [ 132.399137][ T7230] syz_tun: left allmulticast mode [ 132.404063][ T7235] netlink: 32 bytes leftover after parsing attributes in process `syz.4.360'. [ 132.637634][ T7248] netlink: 20 bytes leftover after parsing attributes in process `syz.3.363'. [ 132.667910][ T7248] netlink: 20 bytes leftover after parsing attributes in process `syz.3.363'. [ 132.852085][ T7246] tipc: Started in network mode [ 132.883236][ T7246] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 132.909548][ T7246] tipc: Enabled bearer , priority 12 [ 132.954310][ T7255] netlink: 'syz.1.365': attribute type 4 has an invalid length. [ 132.994296][ T7260] netlink: 'syz.0.366': attribute type 4 has an invalid length. [ 133.208256][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.397845][ T7277] netlink: 'syz.4.371': attribute type 5 has an invalid length. [ 133.472706][ T7277] netlink: 100 bytes leftover after parsing attributes in process `syz.4.371'. [ 133.661498][ T7288] syz_tun: entered allmulticast mode [ 133.693611][ T7287] syz_tun: left allmulticast mode [ 134.021736][ T5923] tipc: Node number set to 10070698 [ 134.057895][ T7300] netlink: 'syz.0.378': attribute type 15 has an invalid length. [ 134.079077][ T7300] netlink: 24 bytes leftover after parsing attributes in process `syz.0.378'. [ 134.151716][ T7304] netlink: 'syz.1.380': attribute type 4 has an invalid length. [ 134.159814][ T7305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.381'. [ 134.201106][ T7306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.381'. [ 134.384211][ T7318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.383'. [ 134.623741][ T7327] netlink: 28 bytes leftover after parsing attributes in process `syz.4.387'. [ 134.721051][ T7332] netlink: 20 bytes leftover after parsing attributes in process `syz.0.388'. [ 134.741730][ T7333] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.756401][ T7334] netlink: 'syz.0.388': attribute type 10 has an invalid length. [ 134.859675][ T7344] veth0_to_team: entered promiscuous mode [ 134.903786][ T7333] raw_sendmsg: syz.2.386 forgot to set AF_INET. Fix it! [ 134.974037][ T7329] veth0_to_team: left promiscuous mode [ 135.319086][ T7358] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.676736][ T7368] netlink: 'syz.3.395': attribute type 4 has an invalid length. [ 136.964948][ T7423] netlink: 'syz.2.411': attribute type 4 has an invalid length. [ 138.224113][ T7466] netlink: 'syz.0.425': attribute type 4 has an invalid length. [ 138.729995][ T7493] __nla_validate_parse: 10 callbacks suppressed [ 138.730018][ T7493] netlink: 224 bytes leftover after parsing attributes in process `syz.3.431'. [ 138.838242][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.433'. [ 138.862823][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.433'. [ 139.034544][ T7508] netlink: 10 bytes leftover after parsing attributes in process `syz.4.437'. [ 139.347111][ T7522] netlink: 'syz.0.439': attribute type 4 has an invalid length. [ 139.383819][ T7520] pimreg: entered allmulticast mode [ 139.422142][ T7520] netlink: 'syz.4.440': attribute type 83 has an invalid length. [ 139.743151][ T7540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.447'. [ 139.752299][ T7540] netlink: 40 bytes leftover after parsing attributes in process `syz.3.447'. [ 139.857680][ T7542] netlink: 28 bytes leftover after parsing attributes in process `syz.4.448'. [ 139.929679][ T7546] netlink: 'syz.3.450': attribute type 5 has an invalid length. [ 139.987296][ T7547] sctp: [Deprecated]: syz.0.449 (pid 7547) Use of struct sctp_assoc_value in delayed_ack socket option. [ 139.987296][ T7547] Use struct sctp_sack_info instead [ 140.185362][ T7557] netlink: 'syz.3.452': attribute type 4 has an invalid length. [ 140.599036][ T7572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.456'. [ 140.623683][ T7575] netlink: 'syz.3.457': attribute type 21 has an invalid length. [ 140.639800][ T7576] netlink: 'syz.1.458': attribute type 1 has an invalid length. [ 140.665845][ T7576] netlink: 220 bytes leftover after parsing attributes in process `syz.1.458'. [ 140.689053][ T7575] netlink: 132 bytes leftover after parsing attributes in process `syz.3.457'. [ 140.743927][ T7576] syz_tun: entered allmulticast mode [ 140.759748][ T7574] syz_tun: left allmulticast mode [ 141.008741][ T7593] netlink: 'syz.4.464': attribute type 4 has an invalid length. [ 141.411515][ T7613] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 141.815329][ T7627] set match dimension is over the limit! [ 141.874748][ T7636] netlink: 'syz.3.478': attribute type 4 has an invalid length. [ 141.941811][ T7633] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 142.447228][ T7654] bond0: entered allmulticast mode [ 142.454040][ T7654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.464644][ T7657] lo: entered allmulticast mode [ 142.486238][ T7658] lo: left allmulticast mode [ 142.679303][ T7663] Cannot find add_set index 4 as target [ 143.222502][ T7686] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.305246][ T7688] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.630163][ T7698] netlink: 'syz.2.503': attribute type 4 has an invalid length. [ 143.929774][ T7715] __nla_validate_parse: 4 callbacks suppressed [ 143.929798][ T7715] netlink: 248 bytes leftover after parsing attributes in process `syz.2.508'. [ 143.970088][ T7718] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 144.015048][ T7721] netlink: 'syz.2.508': attribute type 5 has an invalid length. [ 144.029990][ T7718] netlink: 'syz.4.509': attribute type 4 has an invalid length. [ 144.515455][ T7743] netlink: 'syz.3.516': attribute type 21 has an invalid length. [ 144.559698][ T7743] netlink: 128 bytes leftover after parsing attributes in process `syz.3.516'. [ 144.616342][ T7742] pimreg: entered allmulticast mode [ 144.677977][ T7756] netlink: 60 bytes leftover after parsing attributes in process `syz.1.518'. [ 144.712556][ T7743] netlink: 3 bytes leftover after parsing attributes in process `syz.3.516'. [ 144.732131][ T7744] netlink: 60 bytes leftover after parsing attributes in process `syz.1.518'. [ 145.160550][ T7776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.524'. [ 145.181453][ T7781] Bluetooth: MGMT ver 1.23 [ 145.246458][ T7776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.524'. [ 145.256907][ T7779] netlink: 'syz.0.525': attribute type 13 has an invalid length. [ 145.323885][ T7776] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 145.404470][ T7779] lo: entered promiscuous mode [ 145.409353][ T7779] lo: entered allmulticast mode [ 145.446994][ T7779] tunl0: entered promiscuous mode [ 145.464160][ T7779] tunl0: entered allmulticast mode [ 145.506531][ T7779] gre0: entered promiscuous mode [ 145.540207][ T7779] gre0: entered allmulticast mode [ 145.585691][ T7779] gretap0: entered promiscuous mode [ 145.602531][ T7779] gretap0: entered allmulticast mode [ 145.662077][ T7779] gretap0: refused to change device tx_queue_len [ 145.690609][ T7779] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 145.759124][ T7810] netlink: 76 bytes leftover after parsing attributes in process `syz.4.529'. [ 145.827088][ T7784] netlink: 'syz.3.524': attribute type 4 has an invalid length. [ 146.576409][ T7838] ieee802154 phy1 wpan1: encryption failed: -22 [ 146.879926][ T7850] netlink: 32 bytes leftover after parsing attributes in process `syz.1.539'. [ 147.289506][ T7867] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.543'. [ 147.514695][ T7835] Bluetooth: MGMT ver 1.23 [ 147.570774][ T7870] netlink: 'syz.0.541': attribute type 33 has an invalid length. [ 147.793196][ T7880] tipc: Started in network mode [ 147.805187][ T7880] tipc: Node identity ac14140f, cluster identity 4711 [ 147.843964][ T7880] tipc: New replicast peer: 255.255.255.255 [ 147.862599][ T7880] tipc: Enabled bearer , priority 10 [ 148.980614][ T5923] tipc: Node number set to 2886997007 [ 149.094368][ T7928] __nla_validate_parse: 4 callbacks suppressed [ 149.094391][ T7928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.555'. [ 149.173382][ T7932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.556'. [ 149.218412][ T7928] netlink: 'syz.0.555': attribute type 1 has an invalid length. [ 149.224843][ T7935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.556'. [ 149.267237][ T7932] xfrm1: entered promiscuous mode [ 149.272683][ T7932] xfrm1: entered allmulticast mode [ 149.282479][ T7928] erspan0: entered allmulticast mode [ 149.529490][ T7948] netlink: 'syz.0.562': attribute type 4 has an invalid length. [ 150.077299][ T7966] netlink: 6040 bytes leftover after parsing attributes in process `syz.0.568'. [ 150.503027][ T7984] netlink: 'syz.0.576': attribute type 4 has an invalid length. [ 151.234950][ T8011] netlink: 'syz.4.582': attribute type 2 has an invalid length. [ 151.598891][ T8024] bridge0: port 3(batadv1) entered blocking state [ 151.615752][ T8024] bridge0: port 3(batadv1) entered disabled state [ 151.630140][ T8024] batadv1: entered allmulticast mode [ 151.639243][ T8024] batadv1: entered promiscuous mode [ 152.018490][ T8036] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.593'. [ 152.089205][ T36] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 152.098831][ T36] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 152.137698][ T8043] netlink: 28 bytes leftover after parsing attributes in process `syz.0.596'. [ 152.474784][ T8055] netlink: 64 bytes leftover after parsing attributes in process `syz.3.600'. [ 152.537912][ T8055] netlink: 14 bytes leftover after parsing attributes in process `syz.3.600'. [ 152.585317][ T8058] netlink: 16 bytes leftover after parsing attributes in process `syz.2.601'. [ 152.639535][ T8065] netlink: 'syz.2.601': attribute type 10 has an invalid length. [ 152.771084][ T5987] IPVS: starting estimator thread 0... [ 152.771147][ T8070] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 152.832142][ T8055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.849960][ T8055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.863720][ T8055] bond0 (unregistering): Released all slaves [ 152.900723][ T8074] IPVS: using max 26 ests per chain, 62400 per kthread [ 152.955881][ T8066] bridge_slave_0: left allmulticast mode [ 152.972165][ T8066] bridge_slave_0: left promiscuous mode [ 152.988476][ T8066] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.028886][ T8066] bridge_slave_1: left allmulticast mode [ 153.043751][ T8066] bridge_slave_1: left promiscuous mode [ 153.053342][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 153.068936][ T8066] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.107530][ T8066] team0: Port device team_slave_0 removed [ 153.133843][ T8066] team0: Port device team_slave_1 removed [ 154.247011][ T8124] macvtap1: entered allmulticast mode [ 154.269283][ T8124] veth0_macvtap: entered allmulticast mode [ 154.323997][ T5952] IPVS: starting estimator thread 0... [ 154.420905][ T8131] IPVS: using max 25 ests per chain, 60000 per kthread [ 154.656130][ T8140] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 154.855413][ T8140] bond0: entered promiscuous mode [ 154.861804][ T8140] bond0: entered allmulticast mode [ 154.868133][ T8140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.978355][ T8159] netlink: 'syz.1.624': attribute type 20 has an invalid length. [ 155.036949][ T8159] netlink: 'syz.1.624': attribute type 20 has an invalid length. [ 155.386458][ T8182] xt_l2tp: missing protocol rule (udp|l2tpip) [ 155.475946][ T8186] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 156.724937][ T8242] netlink: 64 bytes leftover after parsing attributes in process `syz.4.650'. [ 156.759760][ T8242] netlink: 64 bytes leftover after parsing attributes in process `syz.4.650'. [ 157.656873][ T8282] netlink: 256 bytes leftover after parsing attributes in process `syz.4.663'. [ 157.686129][ T8282] netlink: 48 bytes leftover after parsing attributes in process `syz.4.663'. [ 158.192169][ T8312] sctp: [Deprecated]: syz.3.673 (pid 8312) Use of int in max_burst socket option deprecated. [ 158.192169][ T8312] Use struct sctp_assoc_value instead [ 158.234662][ T8313] netlink: 'syz.0.672': attribute type 21 has an invalid length. [ 158.242909][ T8313] netlink: 156 bytes leftover after parsing attributes in process `syz.0.672'. [ 158.509664][ T8322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.676'. [ 158.545982][ T8322] netlink: 24 bytes leftover after parsing attributes in process `syz.3.676'. [ 158.557036][ T8325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.677'. [ 158.602398][ T8330] netlink: 32 bytes leftover after parsing attributes in process `syz.4.680'. [ 158.812740][ T8336] netlink: 'syz.3.681': attribute type 1 has an invalid length. [ 158.898270][ T8346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.685'. [ 159.300230][ T8363] netlink: 'syz.2.691': attribute type 11 has an invalid length. [ 159.443307][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 159.768262][ T8388] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 160.919057][ T8437] netlink: 'syz.2.708': attribute type 16 has an invalid length. [ 160.944910][ T8437] netlink: 'syz.2.708': attribute type 3 has an invalid length. [ 161.207363][ T8447] netlink: 'syz.4.710': attribute type 29 has an invalid length. [ 161.916860][ T8480] __nla_validate_parse: 8 callbacks suppressed [ 161.916882][ T8480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.719'. [ 161.989798][ T8480] netlink: 2 bytes leftover after parsing attributes in process `syz.0.719'. [ 162.136234][ T8490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.396578][ T8484] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 162.506676][ T8493] tipc: Started in network mode [ 162.514343][ T8493] tipc: Node identity 1, cluster identity 4711 [ 162.530290][ T8493] tipc: Node number set to 1 [ 162.821203][ T8519] openvswitch: netlink: Missing key (keys=40, expected=80) [ 162.879431][ T8518] openvswitch: netlink: Missing key (keys=40, expected=80) [ 162.942587][ T8524] sctp: [Deprecated]: syz.3.726 (pid 8524) Use of int in maxseg socket option. [ 162.942587][ T8524] Use struct sctp_assoc_value instead [ 163.021071][ T8529] sctp: [Deprecated]: syz.3.726 (pid 8529) Use of int in maxseg socket option. [ 163.021071][ T8529] Use struct sctp_assoc_value instead [ 163.481041][ T8545] netlink: 72 bytes leftover after parsing attributes in process `syz.1.735'. [ 163.666562][ T8550] netlink: 40 bytes leftover after parsing attributes in process `syz.4.736'. [ 164.033547][ T8569] FAULT_INJECTION: forcing a failure. [ 164.033547][ T8569] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 164.068900][ T8569] CPU: 0 UID: 0 PID: 8569 Comm: syz.2.740 Not tainted 6.16.0-rc1-syzkaller-00121-gd0fa59897e04 #0 PREEMPT(full) [ 164.068941][ T8569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 164.068953][ T8569] Call Trace: [ 164.068961][ T8569] [ 164.068970][ T8569] dump_stack_lvl+0x189/0x250 [ 164.069007][ T8569] ? __pfx____ratelimit+0x10/0x10 [ 164.069036][ T8569] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.069065][ T8569] ? __pfx__printk+0x10/0x10 [ 164.069086][ T8569] ? __might_fault+0xb0/0x130 [ 164.069117][ T8569] should_fail_ex+0x414/0x560 [ 164.069147][ T8569] _copy_from_iter+0x1db/0x16f0 [ 164.069187][ T8569] ? policy_nodemask+0x27c/0x720 [ 164.069207][ T8569] ? __pfx__copy_from_iter+0x10/0x10 [ 164.069240][ T8569] ? set_page_refcounted+0xa0/0x1e0 [ 164.069260][ T8569] ? page_copy_sane+0x4e/0x280 [ 164.069288][ T8569] copy_page_from_iter+0xdd/0x170 [ 164.069322][ T8569] tun_get_user+0x1c4d/0x3ce0 [ 164.069352][ T8569] ? tun_get_user+0x693/0x3ce0 [ 164.069395][ T8569] ? aa_file_perm+0x11f/0xed0 [ 164.069422][ T8569] ? __pfx_tun_get_user+0x10/0x10 [ 164.069447][ T8569] ? aa_file_perm+0x11f/0xed0 [ 164.069471][ T8569] ? aa_file_perm+0x3e7/0xed0 [ 164.069508][ T8569] ? ref_tracker_alloc+0x318/0x460 [ 164.069531][ T8569] ? __lock_acquire+0xab9/0xd20 [ 164.069560][ T8569] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 164.069591][ T8569] ? tun_get+0x1c/0x2f0 [ 164.069624][ T8569] ? tun_get+0x1c/0x2f0 [ 164.069650][ T8569] ? tun_get+0x1c/0x2f0 [ 164.069681][ T8569] tun_chr_write_iter+0x113/0x200 [ 164.069710][ T8569] vfs_write+0x548/0xa90 [ 164.069745][ T8569] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 164.069772][ T8569] ? __pfx_vfs_write+0x10/0x10 [ 164.069810][ T8569] ? __fget_files+0x2a/0x420 [ 164.069844][ T8569] ksys_write+0x145/0x250 [ 164.069865][ T8569] ? __pfx_ksys_write+0x10/0x10 [ 164.069889][ T8569] ? do_syscall_64+0xbe/0x3b0 [ 164.069911][ T8569] do_syscall_64+0xfa/0x3b0 [ 164.069927][ T8569] ? lockdep_hardirqs_on+0x9c/0x150 [ 164.069961][ T8569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.069980][ T8569] ? clear_bhb_loop+0x60/0xb0 [ 164.070004][ T8569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.070023][ T8569] RIP: 0033:0x7f74c698d3df [ 164.070041][ T8569] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 164.070056][ T8569] RSP: 002b:00007f74c782d000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 164.070078][ T8569] RAX: ffffffffffffffda RBX: 00007f74c6bb5fa0 RCX: 00007f74c698d3df [ 164.070091][ T8569] RDX: 0000000000000036 RSI: 0000200000001800 RDI: 00000000000000c8 [ 164.070103][ T8569] RBP: 00007f74c782d090 R08: 0000000000000000 R09: 0000000000000000 [ 164.070114][ T8569] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 164.070125][ T8569] R13: 0000000000000001 R14: 00007f74c6bb5fa0 R15: 00007fffcd73bca8 [ 164.070157][ T8569] [ 164.422808][ T8576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.742'. [ 165.031772][ T8590] openvswitch: netlink: Missing key (keys=40, expected=100) [ 165.093244][ T8595] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.313463][ T8643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.762'. [ 166.451965][ T8647] netlink: 'syz.2.763': attribute type 1 has an invalid length. [ 166.548032][ T8647] 8021q: adding VLAN 0 to HW filter on device bond3 [ 169.779330][ T8553] Set syz1 is full, maxelem 65536 reached [ 169.894233][ T8653] 8021q: adding VLAN 0 to HW filter on device bond3 [ 169.904191][ T8653] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 169.933919][ T8653] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 170.013640][ T8647] veth3: entered promiscuous mode [ 170.026347][ T8647] bond3: (slave veth3): Enslaving as an active interface with a down link [ 170.039254][ T8655] gretap0: entered allmulticast mode [ 170.059491][ T8655] bond3: (slave gretap0): making interface the new active one [ 170.068550][ T8655] bond3: (slave gretap0): Enslaving as an active interface with an up link [ 170.179705][ T8682] netlink: 116 bytes leftover after parsing attributes in process `syz.0.772'. [ 170.923303][ T8712] netlink: 16 bytes leftover after parsing attributes in process `syz.0.783'. [ 171.308628][ T8724] netlink: 'syz.0.789': attribute type 4 has an invalid length. [ 171.499661][ T8730] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 171.506756][ T8732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.791'. [ 171.521177][ T8730] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 171.593730][ T8732] netlink: 'syz.2.791': attribute type 1 has an invalid length. [ 171.627565][ T8732] tipc: Enabled bearer , priority 10 [ 172.036592][ T8750] netlink: 'syz.3.800': attribute type 4 has an invalid length. [ 172.080585][ T8746] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 172.148656][ T8746] x_tables: unsorted underflow at hook 3 [ 172.597337][ T8763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.804'. [ 172.674764][ T8772] tipc: Started in network mode [ 172.694039][ T8772] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711 [ 172.722808][ T8772] tipc: Enabled bearer , priority 10 [ 172.831420][ T8778] netlink: 16 bytes leftover after parsing attributes in process `syz.3.809'. [ 172.938105][ T8785] netlink: 'syz.1.812': attribute type 1 has an invalid length. [ 172.948582][ T8785] netlink: 'syz.1.812': attribute type 1 has an invalid length. [ 173.136415][ T8777] syzkaller0: entered promiscuous mode [ 173.164423][ T8777] syzkaller0: entered allmulticast mode [ 173.192743][ T8791] netlink: 'syz.1.813': attribute type 4 has an invalid length. [ 173.742543][ T980] tipc: Node number set to 4269801514 [ 176.649628][ T8745] Set syz1 is full, maxelem 65536 reached [ 176.790048][ T8799] xt_l2tp: invalid flags combination: 4 [ 176.807781][ T8799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.053267][ T8793] geneve2: entered promiscuous mode [ 177.058693][ T8793] geneve2: entered allmulticast mode [ 177.123831][ T8805] bridge0: port 1(vlan2) entered blocking state [ 177.136147][ T8805] bridge0: port 1(vlan2) entered disabled state [ 177.160871][ T8805] vlan2: entered allmulticast mode [ 177.166283][ T8805] bridge0: entered allmulticast mode [ 177.217294][ T8805] vlan2: left allmulticast mode [ 177.223766][ T8805] bridge0: left allmulticast mode [ 177.335569][ T8814] netlink: 32 bytes leftover after parsing attributes in process `syz.3.821'. [ 178.108143][ T8852] netlink: 'syz.2.832': attribute type 1 has an invalid length. [ 178.277572][ T8852] 8021q: adding VLAN 0 to HW filter on device bond4 [ 178.393369][ T8865] 8021q: adding VLAN 0 to HW filter on device bond4 [ 178.411809][ T8865] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 178.469163][ T8865] bond4: (slave vti0): Error -95 calling set_mac_address [ 178.484047][ T8874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.836'. [ 179.780172][ T8932] netlink: 16 bytes leftover after parsing attributes in process `syz.1.858'. [ 179.799908][ T8932] netlink: 6 bytes leftover after parsing attributes in process `syz.1.858'. [ 180.093911][ T8946] netlink: 48 bytes leftover after parsing attributes in process `syz.1.864'. [ 180.201481][ T8948] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3261 [ 180.487933][ T8955] netlink: 'syz.1.869': attribute type 1 has an invalid length. [ 180.503569][ T8955] netlink: 236 bytes leftover after parsing attributes in process `syz.1.869'. [ 180.549361][ T8958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.868'. [ 180.703901][ T8962] netlink: 'syz.1.870': attribute type 4 has an invalid length. [ 180.793253][ T8965] netlink: 'syz.1.870': attribute type 4 has an invalid length. [ 181.477673][ T8995] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 181.518752][ T8993] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20003 [ 181.635974][ T8993] pim6reg1: entered promiscuous mode [ 181.649410][ T8993] pim6reg1: entered allmulticast mode [ 181.661669][ T9004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.882'. [ 181.905439][ T9015] netlink: 'syz.2.887': attribute type 4 has an invalid length. [ 181.930845][ T9012] netlink: 'syz.1.885': attribute type 4 has an invalid length. [ 181.965525][ T9017] netlink: 108 bytes leftover after parsing attributes in process `syz.4.888'. [ 181.978114][ T9017] netlink: 108 bytes leftover after parsing attributes in process `syz.4.888'. [ 182.154202][ T5844] syz_tun (unregistering): left promiscuous mode [ 182.464100][ T9036] __nla_validate_parse: 1 callbacks suppressed [ 182.464123][ T9036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.894'. [ 182.544533][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.546479][ T9036] netlink: 20 bytes leftover after parsing attributes in process `syz.2.894'. [ 182.576292][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.827588][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.882235][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.065733][ T9054] ip6t_REJECT: ECHOREPLY is not supported [ 183.072938][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.115577][ T9054] ip6t_REJECT: ECHOREPLY is not supported [ 183.128623][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.164278][ T9054] ip6t_REJECT: ECHOREPLY is not supported [ 183.187996][ T9054] ip6t_REJECT: ECHOREPLY is not supported [ 183.197736][ T9054] ip6t_REJECT: ECHOREPLY is not supported [ 183.229400][ T9054] ip6t_REJECT: ECHOREPLY is not supported [ 183.250954][ T9054] ip6t_REJECT: ECHOREPLY is not supported [ 183.259277][ T9059] netlink: 'syz.4.899': attribute type 10 has an invalid length. [ 183.296523][ T9054] ip6t_REJECT: ECHOREPLY is not supported [ 183.304721][ T9054] ip6t_REJECT: ECHOREPLY is not supported [ 183.322384][ T9054] ip6t_REJECT: ECHOREPLY is not supported [ 183.333686][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.360454][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.383157][ T9064] netlink: 'syz.0.901': attribute type 2 has an invalid length. [ 183.413938][ T9059] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 183.431676][ T9064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.901'. [ 183.461302][ T9061] netlink: 'syz.2.900': attribute type 4 has an invalid length. [ 183.892949][ T13] batadv1: left allmulticast mode [ 183.920311][ T13] batadv1: left promiscuous mode [ 183.938455][ T13] bridge0: port 3(batadv1) entered disabled state [ 183.970219][ T13] bridge_slave_1: left allmulticast mode [ 183.999478][ T13] bridge_slave_1: left promiscuous mode [ 184.020077][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.051127][ T13] bridge_slave_0: left allmulticast mode [ 184.056853][ T13] bridge_slave_0: left promiscuous mode [ 184.070773][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.101914][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 184.114946][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 184.125254][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 184.140267][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 184.151297][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 184.259610][ T9094] netlink: 4556 bytes leftover after parsing attributes in process `syz.4.907'. [ 184.410283][ T9098] netlink: 20 bytes leftover after parsing attributes in process `syz.4.909'. [ 184.527918][ T13] bridge0 (unregistering): left promiscuous mode [ 184.747478][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.759784][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.771315][ T13] bond0 (unregistering): Released all slaves [ 184.898802][ T13] tipc: Disabling bearer [ 184.924239][ T13] tipc: Left network mode [ 184.965269][ T9104] netlink: 40 bytes leftover after parsing attributes in process `syz.4.911'. [ 185.002488][ T9105] netlink: 'syz.2.912': attribute type 1 has an invalid length. [ 185.012104][ T9105] netlink: 144 bytes leftover after parsing attributes in process `syz.2.912'. [ 185.024201][ T9105] netlink: 'syz.2.912': attribute type 1 has an invalid length. [ 185.039293][ T9105] netlink: 'syz.2.912': attribute type 2 has an invalid length. [ 185.048932][ T9105] netlink: 64 bytes leftover after parsing attributes in process `syz.2.912'. [ 185.204699][ T9111] x_tables: duplicate underflow at hook 1 [ 185.207654][ T9113] Cannot find add_set index 0 as target [ 185.222837][ T9111] netlink: 68 bytes leftover after parsing attributes in process `syz.4.913'. [ 185.239234][ T9113] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.914'. [ 185.634372][ T13] hsr_slave_0: left promiscuous mode [ 185.647864][ T13] hsr_slave_1: left promiscuous mode [ 185.663820][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.686671][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.707024][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.714844][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.736618][ T13] veth1_macvtap: left promiscuous mode [ 185.745231][ T13] veth0_macvtap: left promiscuous mode [ 185.751366][ T13] veth1_vlan: left promiscuous mode [ 185.758025][ T13] veth0_vlan: left promiscuous mode [ 186.235254][ T13] team0 (unregistering): Port device team_slave_1 removed [ 186.250857][ T5843] Bluetooth: hci2: command tx timeout [ 186.287800][ T13] team0 (unregistering): Port device team_slave_0 removed [ 186.737256][ T9126] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 186.893922][ T9089] chnl_net:caif_netlink_parms(): no params data found [ 186.940283][ T9151] netlink: 'syz.4.921': attribute type 20 has an invalid length. [ 187.467421][ T9089] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.476372][ T9089] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.484868][ T9089] bridge_slave_0: entered allmulticast mode [ 187.493713][ T9089] bridge_slave_0: entered promiscuous mode [ 187.505843][ T9089] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.523142][ T9089] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.535426][ T9089] bridge_slave_1: entered allmulticast mode [ 187.545476][ T9089] bridge_slave_1: entered promiscuous mode [ 187.647745][ T13] IPVS: stop unused estimator thread 0... [ 187.691684][ T9185] __nla_validate_parse: 67 callbacks suppressed [ 187.691706][ T9185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.930'. [ 187.761245][ T9089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.892108][ T9197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.930'. [ 187.952525][ T9199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.932'. [ 188.136197][ T9185] team1: entered promiscuous mode [ 188.137178][ T9172] infiniband syz1: set active [ 188.143544][ T9185] team1: entered allmulticast mode [ 188.146319][ T9172] infiniband syz1: added bridge_slave_0 [ 188.154986][ T9187] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 188.176896][ T9187] netlink: 'syz.2.932': attribute type 10 has an invalid length. [ 188.190364][ T9187] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 188.215457][ T9172] RDS/IB: syz1: added [ 188.220197][ T9172] smc: adding ib device syz1 with port count 1 [ 188.226840][ T9172] smc: ib device syz1 port 1 has pnetid [ 188.258009][ T9089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.304225][ T9187] bond3: (slave gretap0): Releasing active interface [ 188.325121][ T9187] tipc: Resetting bearer [ 188.326353][ T5843] Bluetooth: hci2: command tx timeout [ 188.346694][ T9187] tipc: Resetting bearer [ 188.365305][ T9187] tipc: Resetting bearer [ 188.398919][ T9187] bond3: (slave veth3): Releasing active interface [ 188.578074][ T9089] team0: Port device team_slave_0 added [ 188.605910][ T9089] team0: Port device team_slave_1 added [ 188.681331][ T9209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.935'. [ 188.840224][ T9089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.857847][ T9089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.978619][ T9089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.994013][ T9089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.006540][ T9089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.067407][ T9089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.091812][ T9226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.939'. [ 189.259804][ T9089] hsr_slave_0: entered promiscuous mode [ 189.294583][ T9089] hsr_slave_1: entered promiscuous mode [ 189.323009][ T9089] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.331077][ T9089] Cannot create hsr debugfs directory [ 190.174455][ T9265] netlink: 28 bytes leftover after parsing attributes in process `syz.2.951'. [ 190.407950][ T5843] Bluetooth: hci2: command tx timeout [ 190.761857][ T9089] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 190.797118][ T9089] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 190.828943][ T9089] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 190.859226][ T9089] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 191.099937][ T9089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.104529][ T9302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.958'. [ 191.139633][ T9302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.958'. [ 191.144245][ T9089] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.199968][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.207252][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.238931][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.246186][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.706858][ T9321] netlink: 'syz.3.963': attribute type 1 has an invalid length. [ 191.746963][ T9321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.963'. [ 191.790569][ T9321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.963'. [ 191.997154][ T9089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.166946][ T9089] veth0_vlan: entered promiscuous mode [ 192.205246][ T9089] veth1_vlan: entered promiscuous mode [ 192.246817][ T9340] netem: change failed [ 192.336221][ T9089] veth0_macvtap: entered promiscuous mode [ 192.360738][ T9347] syzkaller0: entered promiscuous mode [ 192.375454][ T9347] syzkaller0: entered allmulticast mode [ 192.406719][ T9089] veth1_macvtap: entered promiscuous mode [ 192.480722][ T5843] Bluetooth: hci2: command tx timeout [ 192.566406][ T9089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.608920][ T9089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.698873][ T9089] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.722197][ T9089] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.735889][ T9089] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.746540][ T9089] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.964224][ T9368] netlink: 'syz.2.976': attribute type 1 has an invalid length. [ 193.007360][ T2976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.030759][ T2976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.059308][ T9373] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 193.111378][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.136549][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.151927][ T9376] __nla_validate_parse: 2 callbacks suppressed [ 193.151951][ T9376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.979'. [ 193.178243][ T9376] tc_dump_action: action bad kind [ 193.546208][ T9388] xt_cgroup: xt_cgroup: no path or classid specified [ 193.817745][ T9399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.989'. [ 194.111680][ T9413] netlink: 'syz.3.994': attribute type 29 has an invalid length. [ 194.328486][ T2976] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.645333][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.846107][ T2976] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.089720][ T2976] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.271612][ T9445] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1005'. [ 195.302104][ T2976] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.435603][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 195.453724][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 195.474035][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 195.487080][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 195.498904][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 195.758848][ T2976] bridge_slave_1: left allmulticast mode [ 195.776452][ T2976] bridge_slave_1: left promiscuous mode [ 195.789550][ T2976] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.817128][ T2976] bridge_slave_0: left allmulticast mode [ 195.824202][ T2976] bridge_slave_0: left promiscuous mode [ 195.831136][ T2976] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.332699][ T9489] Oops: general protection fault, probably for non-canonical address 0xdffffc00000a2403: 0000 [#1] SMP KASAN PTI [ 196.344674][ T9489] KASAN: probably user-memory-access in range [0x0000000000512018-0x000000000051201f] [ 196.354304][ T9489] CPU: 1 UID: 0 PID: 9489 Comm: syz.0.1017 Not tainted 6.16.0-rc1-syzkaller-00121-gd0fa59897e04 #0 PREEMPT(full) [ 196.366371][ T9489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 196.376437][ T9489] RIP: 0010:smc_diag_dump_proto+0x4d0/0x1f80 [ 196.382435][ T9489] Code: 80 3c 2f 00 74 08 48 89 df e8 bc 94 0e f7 4c 8b 23 4d 85 e4 0f 84 22 02 00 00 48 89 5c 24 38 49 83 c4 18 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 91 94 0e f7 4d 8b 2c 24 49 83 c5 [ 196.402154][ T9489] RSP: 0018:ffffc9000aea6fc0 EFLAGS: 00010206 [ 196.408237][ T9489] RAX: 00000000000a2403 RBX: ffff888053bb0560 RCX: ffff888033205a00 [ 196.416230][ T9489] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 196.424236][ T9489] RBP: ffffc9000aea7330 R08: ffff888053bb005f R09: 1ffff1100a77600b [ 196.432328][ T9489] R10: dffffc0000000000 R11: ffffed100a77600c R12: 0000000000512018 [ 196.440347][ T9489] R13: dffffc0000000000 R14: ffff888053bb0000 R15: 1ffff1100a7760ac [ 196.448344][ T9489] FS: 00007f74a400e6c0(0000) GS:ffff888125d52000(0000) knlGS:0000000000000000 [ 196.457291][ T9489] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 196.463944][ T9489] CR2: 000020000000e000 CR3: 0000000020baa000 CR4: 00000000003526f0 [ 196.472036][ T9489] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 196.480125][ T9489] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 196.488206][ T9489] Call Trace: [ 196.491506][ T9489] [ 196.494456][ T9489] ? __pfx_smc_diag_dump_proto+0x10/0x10 [ 196.500118][ T9489] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 196.505773][ T9489] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 196.511328][ T9489] ? __phys_addr+0xd3/0x180 [ 196.515846][ T9489] ? __kasan_kmalloc_large+0x85/0xa0 [ 196.521317][ T9489] ? rcu_is_watching+0x15/0xb0 [ 196.526214][ T9489] ? rcu_is_watching+0x15/0xb0 [ 196.531042][ T9489] ? trace_kmalloc+0x1f/0xd0 [ 196.535645][ T9489] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 196.542245][ T9489] ? __build_skb_around+0x257/0x3e0 [ 196.547469][ T9489] smc_diag_dump+0x59/0xa0 [ 196.551899][ T9489] netlink_dump+0x62a/0xe20 [ 196.556414][ T9489] ? __pfx_netlink_dump+0x10/0x10 [ 196.561452][ T9489] ? netlink_lookup+0x30/0x200 [ 196.566225][ T9489] ? netlink_lookup+0x30/0x200 [ 196.570999][ T9489] ? netlink_lookup+0x30/0x200 [ 196.575772][ T9489] __netlink_dump_start+0x5cb/0x7e0 [ 196.581008][ T9489] smc_diag_handler_dump+0x178/0x210 [ 196.586356][ T9489] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 196.592215][ T9489] ? __pfx_smc_diag_dump+0x10/0x10 [ 196.597409][ T9489] ? sock_diag_lock_handler+0x19/0x290 [ 196.602952][ T9489] ? sock_diag_lock_handler+0x19/0x290 [ 196.608438][ T9489] sock_diag_rcv_msg+0x4cc/0x600 [ 196.613390][ T9489] netlink_rcv_skb+0x208/0x470 [ 196.618178][ T9489] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 196.623681][ T9489] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 196.629362][ T9489] ? netlink_deliver_tap+0x2e/0x1b0 [ 196.634591][ T9489] ? netlink_deliver_tap+0x2e/0x1b0 [ 196.639806][ T9489] netlink_unicast+0x75b/0x8d0 [ 196.644670][ T9489] netlink_sendmsg+0x805/0xb30 [ 196.649446][ T9489] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.654746][ T9489] ? aa_sock_msg_perm+0x94/0x160 [ 196.659695][ T9489] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 196.665176][ T9489] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.670471][ T9489] __sock_sendmsg+0x21c/0x270 [ 196.675162][ T9489] ____sys_sendmsg+0x505/0x830 [ 196.679935][ T9489] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.685234][ T9489] ? import_iovec+0x74/0xa0 [ 196.689749][ T9489] ___sys_sendmsg+0x21f/0x2a0 [ 196.694437][ T9489] ? __pfx____sys_sendmsg+0x10/0x10 [ 196.699656][ T9489] ? __fget_files+0x2a/0x420 [ 196.704257][ T9489] ? __fget_files+0x3a0/0x420 [ 196.708948][ T9489] __x64_sys_sendmsg+0x19b/0x260 [ 196.713901][ T9489] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 196.719404][ T9489] ? rcu_is_watching+0x15/0xb0 [ 196.724215][ T9489] ? do_syscall_64+0xbe/0x3b0 [ 196.728924][ T9489] do_syscall_64+0xfa/0x3b0 [ 196.733444][ T9489] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.738749][ T9489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.744822][ T9489] ? clear_bhb_loop+0x60/0xb0 [ 196.749523][ T9489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.755505][ T9489] RIP: 0033:0x7f74a318e929 [ 196.759938][ T9489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.779670][ T9489] RSP: 002b:00007f74a400e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.788202][ T9489] RAX: ffffffffffffffda RBX: 00007f74a33b6160 RCX: 00007f74a318e929 [ 196.796222][ T9489] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 0000000000000005 [ 196.804220][ T9489] RBP: 00007f74a3210b39 R08: 0000000000000000 R09: 0000000000000000 [ 196.812203][ T9489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.820270][ T9489] R13: 0000000000000000 R14: 00007f74a33b6160 R15: 00007ffdec3fbee8 [ 196.828373][ T9489] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 196.831415][ T9489] Modules linked in: [ 196.838161][ T9489] ---[ end trace 0000000000000000 ]--- [ 196.843719][ T9489] RIP: 0010:smc_diag_dump_proto+0x4d0/0x1f80 [ 196.849811][ T9489] Code: 80 3c 2f 00 74 08 48 89 df e8 bc 94 0e f7 4c 8b 23 4d 85 e4 0f 84 22 02 00 00 48 89 5c 24 38 49 83 c4 18 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 91 94 0e f7 4d 8b 2c 24 49 83 c5 [ 196.869581][ T9489] RSP: 0018:ffffc9000aea6fc0 EFLAGS: 00010206 [ 196.875924][ T9489] RAX: 00000000000a2403 RBX: ffff888053bb0560 RCX: ffff888033205a00 [ 196.876666][ T9488] netlink: 'syz.0.1017': attribute type 11 has an invalid length. [ 196.885805][ T9489] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 196.895554][ T9488] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1017'. [ 196.901157][ T9489] RBP: ffffc9000aea7330 R08: ffff888053bb005f R09: 1ffff1100a77600b [ 196.918240][ T9489] R10: dffffc0000000000 R11: ffffed100a77600c R12: 0000000000512018 [ 196.926840][ T9489] R13: dffffc0000000000 R14: ffff888053bb0000 R15: 1ffff1100a7760ac [ 196.935586][ T9489] FS: 00007f74a400e6c0(0000) GS:ffff888125d52000(0000) knlGS:0000000000000000 [ 196.945035][ T9489] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 196.951713][ T9489] CR2: 000020000000e000 CR3: 0000000020baa000 CR4: 00000000003526f0 [ 196.959841][ T9489] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 196.968295][ T9489] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 196.976434][ T9489] Kernel panic - not syncing: Fatal exception [ 196.982961][ T9489] Kernel Offset: disabled [ 196.987285][ T9489] Rebooting in 86400 seconds..