last executing test programs: 2m2.942410546s ago: executing program 0 (id=62): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa000800450000700000000000019078ac1e0001ac1414aa030490780100000045f00000000004de00010000ac141400ac1414aa440c0003e000000200000000890f0000000000ffffffffffffffff44240001ac1e000100000000000000000000000000000000000000007f0000010000000000"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x1c}}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000100)={r1, 0x1, 0x6, @remote}, 0x10) 1m47.10489834s ago: executing program 0 (id=62): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa000800450000700000000000019078ac1e0001ac1414aa030490780100000045f00000000004de00010000ac141400ac1414aa440c0003e000000200000000890f0000000000ffffffffffffffff44240001ac1e000100000000000000000000000000000000000000007f0000010000000000"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x1c}}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000100)={r1, 0x1, 0x6, @remote}, 0x10) 1m30.438763812s ago: executing program 0 (id=62): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa000800450000700000000000019078ac1e0001ac1414aa030490780100000045f00000000004de00010000ac141400ac1414aa440c0003e000000200000000890f0000000000ffffffffffffffff44240001ac1e000100000000000000000000000000000000000000007f0000010000000000"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x1c}}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000100)={r1, 0x1, 0x6, @remote}, 0x10) 1m7.101575536s ago: executing program 0 (id=62): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa000800450000700000000000019078ac1e0001ac1414aa030490780100000045f00000000004de00010000ac141400ac1414aa440c0003e000000200000000890f0000000000ffffffffffffffff44240001ac1e000100000000000000000000000000000000000000007f0000010000000000"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x1c}}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000100)={r1, 0x1, 0x6, @remote}, 0x10) 46.240944963s ago: executing program 0 (id=62): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa000800450000700000000000019078ac1e0001ac1414aa030490780100000045f00000000004de00010000ac141400ac1414aa440c0003e000000200000000890f0000000000ffffffffffffffff44240001ac1e000100000000000000000000000000000000000000007f0000010000000000"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x1c}}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000100)={r1, 0x1, 0x6, @remote}, 0x10) 44.631463125s ago: executing program 1 (id=1051): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e00010069703665727370616e00000018000280140018000000"], 0x4c}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES8, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}, 0x1, 0x0, 0x0, 0x811}, 0x4000804) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x3a1}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000010026bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="44d5050000000000140003006e657464657673696d3000000000000014001680100001800c0003"], 0x50}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) 43.991816664s ago: executing program 1 (id=1059): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket(0x2b, 0x80801, 0x1) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000e00)="d7055ed4551ac3824ff75b47f213344b", 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r6, 0x2, 0x2, 0x0, @void, @value}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r4, 0x2, 0x0, 0x5, &(0x7f0000000180)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x98, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2205}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}]}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_IKEY={0x8, 0x4, 0x9}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x5}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x7ff}]}}}]}, 0x98}, 0x1, 0xba01}, 0x0) 43.396000295s ago: executing program 1 (id=1064): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="200028bd7000ffdbdf25880000000a000600ffffffffffff000014003300f4000900ffffffffffffffffffffffff0a0006000802110000010000"], 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x4814) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x4, '\x00', 0x0, r1, 0x3, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r3}, 0x8) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="03000000040000080400000008"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000380)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r5}, 0x18) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 43.047846503s ago: executing program 1 (id=1066): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003280), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000001340)='T', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) sendto$inet6(r2, &(0x7f0000001340)='T', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r2, 0x1) (async) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x6e, &(0x7f0000000540), 0x10) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x6e, &(0x7f0000000540), 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000200)={0x64, r1, 0x1, 0x70ad2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4c, 0x2, 0x0, 0x1, [{0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8) (async) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000180)={r5}, 0x8) close(r7) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r5, r4, 0x4, r6}, 0x10) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r5, r4, 0x4, r6}, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x0, 0x9, 0x401}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000002000000e015fd90000000001e500000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 23.101111402s ago: executing program 1 (id=1066): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003280), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000001340)='T', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) sendto$inet6(r2, &(0x7f0000001340)='T', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r2, 0x1) (async) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x6e, &(0x7f0000000540), 0x10) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x6e, &(0x7f0000000540), 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000200)={0x64, r1, 0x1, 0x70ad2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4c, 0x2, 0x0, 0x1, [{0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8) (async) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000180)={r5}, 0x8) close(r7) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r5, r4, 0x4, r6}, 0x10) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r5, r4, 0x4, r6}, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x0, 0x9, 0x401}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000002000000e015fd90000000001e500000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 22.268939147s ago: executing program 0 (id=62): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa000800450000700000000000019078ac1e0001ac1414aa030490780100000045f00000000004de00010000ac141400ac1414aa440c0003e000000200000000890f0000000000ffffffffffffffff44240001ac1e000100000000000000000000000000000000000000007f0000010000000000"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x1c}}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000100)={r1, 0x1, 0x6, @remote}, 0x10) 4.268753837s ago: executing program 2 (id=1265): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) close(r0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x40, 0x25dfdbfb, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) 4.036591387s ago: executing program 2 (id=1266): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x1b}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000000)={0xc, 0x1e}) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x8930, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x68, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x8ee, @link='syz0\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x40a0}, 0x8000) 2.628261411s ago: executing program 2 (id=1273): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x490, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0xc, 0x7}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x464, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x1, 0x1001, 0x3e5, 0x8, 0x9}, {0x0, 0x2, 0x81, 0x7ff, 0x8001, 0x7}, 0x7, 0x5, 0x462}}, @TCA_TBF_RTAB={0x404, 0x2, [0x5, 0x9, 0x3, 0x38, 0x8d, 0xffffffe0, 0x8, 0x4, 0x0, 0x1, 0x4, 0xfffff4bf, 0xa, 0x6, 0x6, 0x6, 0x6e5, 0x5, 0x9, 0x4, 0x401, 0x7ff, 0x8, 0x0, 0x3, 0x8, 0x3ff, 0x3, 0x5, 0xf8, 0x3, 0x4, 0x2, 0x9e21, 0x7ecf, 0x2, 0xc, 0x8977, 0x4312, 0x5, 0x80000000, 0xa, 0x1, 0x4, 0xd9, 0x4, 0x3, 0x3, 0x2d, 0x7a8, 0x7, 0x0, 0x1000, 0x0, 0x1, 0xe, 0xfffffffb, 0x8000, 0x27, 0xffffffff, 0xffff, 0x5, 0x9, 0xfffffffe, 0x5, 0xe, 0x101, 0x9677, 0xffffffa2, 0x8000, 0xeeec, 0x60, 0xe35, 0x9, 0xfee, 0x81, 0x400, 0x81, 0x3, 0x3362, 0x8, 0x9b6, 0x400, 0x5, 0x9, 0x7fffffff, 0x1000, 0xe6d, 0x7fffffff, 0x4, 0x1, 0x7, 0xff, 0x6, 0x5, 0x1, 0x7, 0x2, 0x10000, 0x3ff, 0xe2, 0x1, 0x3, 0x6, 0x0, 0x7fffffff, 0xfffffff9, 0x140, 0x2, 0x7, 0x81, 0x7, 0x5, 0x6, 0x69b, 0x9, 0x7fffffff, 0x7, 0xf, 0xd3bd, 0x453, 0x7, 0x8, 0x4, 0xf, 0x6, 0x400, 0x7, 0x7ff, 0x4, 0x0, 0x9, 0xdf60, 0x7, 0x10000000, 0xd, 0xfffffffc, 0x80000001, 0xfffffff8, 0xf, 0x7ff, 0x6, 0x2c8, 0x40, 0x9, 0xfffffffe, 0x0, 0x3, 0x9603, 0x719b, 0x5, 0x7, 0x10000, 0xfff, 0x5, 0x6, 0x6, 0x20000, 0xfffffff7, 0x49d, 0xf, 0x7fffffff, 0x200, 0x6, 0x0, 0x7, 0x6, 0xa, 0x2f28, 0x10000, 0x400, 0x8001, 0x6, 0x5, 0x5a2, 0x7, 0x800, 0x2, 0xaa, 0x7348fb54, 0x93a8, 0x5, 0x8000, 0x80000001, 0xfff, 0x5, 0x5, 0x3, 0xc, 0xc5, 0x4, 0x4, 0x7, 0x8001, 0x3, 0xfffffff8, 0x3ff, 0xff, 0x400, 0x8, 0x9, 0x3, 0x8, 0x8, 0x1be, 0xffffa9ab, 0x5868b5c9, 0x401, 0x1, 0x0, 0x3, 0x9, 0x7f, 0x200, 0x4b4975b4, 0xf39, 0x1, 0x101, 0x800, 0x4, 0x1000, 0xc, 0x80, 0x1dff, 0xc, 0x7, 0x8, 0xb390, 0x7f, 0xff, 0x8, 0x0, 0x8001, 0x1, 0x2, 0xddf5, 0x2, 0x5, 0xfffc0000, 0x6541, 0x5, 0x9, 0x69c, 0x2, 0x2, 0x7, 0x8001, 0x0, 0x8, 0x400, 0xfff, 0x474861a7, 0x8, 0x3, 0xd, 0x5]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x2, 0x9, 0x2, 0x1, 0x8d}, {0x7, 0x0, 0x64, 0x40, 0x424, 0xe}, 0x0, 0x1, 0xdd8}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x97bdea2cc2d43cda}]}}]}, 0x490}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0x1, 0x4) 2.427884202s ago: executing program 2 (id=1274): syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x6}, @device_b}, 0xa) nanosleep(&(0x7f0000000080)={0x77359400}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x1, 0x7, 0x8, 0xe49a, {{0x6, 0x4, 0x2, 0x3f, 0x18, 0x68, 0x0, 0x2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @multicast1, {[@end]}}}}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x3, [@enum={0x3, 0x3, 0x0, 0x6, 0x4, [{0xb, 0x1}, {0x6, 0xa24}, {0x7, 0x2}]}, @enum64={0x9, 0x6, 0x0, 0x13, 0x0, 0x4, [{0x2, 0x0, 0x6}, {0x9, 0xe1d6, 0xfffffffb}, {0xd, 0x67, 0x8}, {0x9, 0x3, 0x8}, {0x3, 0xffff, 0x8001}, {0xb, 0x200, 0xffffef0b}]}, @typedef={0xe, 0x0, 0x0, 0x8, 0x2}, @enum64={0x9, 0x1, 0x0, 0x13, 0x0, 0x3, [{0xd, 0x7, 0xe}]}]}, {0x0, [0x71]}}, &(0x7f0000000300)=""/72, 0xb7, 0x48, 0x1, 0x3, 0x10000, @value}, 0x28) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x7, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffef, 0x10}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffffff01, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x5, 0x6, 0x9, 0x1000, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xe9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x3, '\x00', r2, 0x0, r3, 0x8, &(0x7f00000003c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x4, 0x10, 0x3}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000680)=[0x1, r4, 0xffffffffffffffff, r5, r6, r7, 0xffffffffffffffff, r8], &(0x7f00000006c0)=[{0x0, 0x2, 0x0, 0x9}, {0x5, 0x3, 0x6, 0x6}, {0x2, 0x2, 0x2}], 0x10, 0x5, @void, @value}, 0x94) ioctl$FS_IOC_GETFSLABEL(r7, 0x81009431, &(0x7f00000007c0)) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f00000008c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0xa, 0xc, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0xffffffc0, 0x5, 0xee0, 0x100, r8, 0x0, '\x00', r2, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x9, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x3, '\x00', r2, r3, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_80211_inject_frame(&(0x7f0000000a40)=@broadcast, &(0x7f0000000a80)=@mgmt_frame=@disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="9b80cfe3e2e4", {0x3, 0x10}, @value=@ver_80211n={0x0, 0x7f, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0x13, @val={0x8c, 0x18, {0xfd8, "eadd11726549", @long="788511c4594ef9022763691dc846cf71"}}}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r0, 0xffffffffffffffff}, &(0x7f0000000ac0), &(0x7f0000000b00)=r0}, 0x20) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b80)='pids.current\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000cc0)={'team0\x00', 0x0}) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0xf, 0x11, &(0x7f0000000bc0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x3, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000000c80)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', r12, @cgroup_device, r0, 0x8, &(0x7f0000000d00)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000d40)={0x2, 0xa, 0x9, 0x2}, 0x10, 0xffffffffffffffff, r0, 0xa, &(0x7f0000000d80)=[r9], &(0x7f0000000dc0)=[{0x0, 0x5, 0x6, 0x9}, {0x4, 0x3, 0xd, 0x9}, {0x4, 0x2, 0x9, 0xb}, {0x4, 0x1, 0x4, 0x8}, {0x5, 0x5, 0x8, 0x4}, {0x0, 0x3, 0x7}, {0x5, 0x2, 0xe, 0xe}, {0x1, 0x5, 0x4, 0xa}, {0x3, 0x5, 0x4, 0x3}, {0x0, 0x4, 0x10000, 0xc}], 0x10, 0x1000, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000f40)={'batadv_slave_0\x00'}) syz_80211_inject_frame(&(0x7f0000000f80)=@broadcast, &(0x7f0000000fc0)=@mgmt_frame=@reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x40}, @broadcast, @device_a, @from_mac=@device_b, {0x4, 0xffe}}, 0x100, 0x8001, @device_a, {0x0, 0x14, @random="2231ed9a88627ae21023514f163bbfba2ffb5ed7"}, @void, @val={0x2d, 0x1a, {0xc, 0x2, 0x3, 0x0, {0xffffffff80000000, 0xc, 0x0, 0x8, 0x0, 0x1, 0x1, 0x2}, 0x1, 0x4, 0x9}}, [{0xdd, 0x11, "8fc7df5e2f894687def0d6a911a7ab4d69"}, {0xdd, 0x5a, "937ce1d3c26f98e030ce87daac7d320c51328edd28ee2e2c43ae539f9c5f61df036b83160004349f3e93ca7f6e48ad8b070e054cb3c94536190fe97a6f8dfd77a33cb240f2ceeedcc612d0f559692823e81d8c52fa2528cd54b9"}]}, 0xc3) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r13, 0x6628) syz_80211_inject_frame(&(0x7f00000010c0), &(0x7f0000001100)=@ctrl_frame=@bar={{}, {0xc99}, @broadcast, @device_a, @compressed={{}, {0x8, 0x5}}}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000001140)=@base={0xa, 0x207cee12, 0x8000, 0x5, 0x40108, 0xffffffffffffffff, 0x8, '\x00', r2, r1, 0x4, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) poll(&(0x7f00000011c0), 0x0, 0xbe) nanosleep(&(0x7f0000001200), &(0x7f0000001240)) syz_80211_inject_frame(&(0x7f0000001280)=@device_b, &(0x7f00000012c0)=@data_frame={@a_msdu=@type10={{0x0, 0x2, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1}, @initial, @broadcast, @from_mac=@broadcast, {0x8, 0xf}, "", @value={0xc, 0x1, 0x3, 0x1, 0x7}, @value=@ver_80211n={0x0, 0x80, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_a, @device_b, 0xb5, "c64aed648f744943b93cbf13aac357771cfe8764e4b2b820b2b3b029736267c9a40983d1a36358fba85784697c266aa821a9c9895a880ab958e6e1c80506dab264f8ed70828af8f95ace5b68946c8608099e937a0fa6b7a99e1ab4d3560ee771b7ca93a10950be07ee4a0f78b7402c6ad8e2ebed49e4a873961a5265109b70a500fc5aa9ad84dfb394a03e227b9bae28061264bcd1dec7f15533fe10bf88cd66b5a4031a3dc21c2ca224cec4273c92009e101ba28d"}, {@device_a, @device_b, 0xc0, "5ae2c7c6afe3f281510116db98858bafb8121fba98872e9cbb5fda47ffaae74ed7161ec4ca2c11e3f7932dd59b467e10ef62df0e0588a3b03ee73cde08c5239ede54f9299b6f1fdd62fe4451cd246c7a6b0defa4b21bd948432bc127ff0d2a7488c39ac028f563c84e8d658cd3e0e463610750c6d2c446cc0f8c99d1a797f7393c2203d8c4d4f6af30af153c24ce40d268d05c3793045256a0aa2e635178d4bf6c9e51c1fe94a9f0262be67435cf85fd5827ed5d9700ea9e8459ff92ef748105"}, {@device_a, @broadcast, 0xeb, "590e7fe36e84df53b966cfd95021cdcde0eaa3ca6dd3f5f48843ea519a1b4e5909392e783aa4b91504bf3979ebe27ab4321b7f642ca44dcd866208d44d2d41efd3a5f9d6c90f19a922478d4ce8f620a66ae8ccbf6859e16a258dfc2ef21f16ee077669a59d7b5d1723f04bd634240a1a5d7fc5e6f99690d2420b74baf84507a5b952f3c6371576967d3fa3d4577fdfada2a127be3a129f78a0cd473f584dc9598d1b31f2fec6bf9cecc2a789c83ee526d4c85826a673d63d89016ce949c0e75dfd9b0df465b7bc8e24c5e511d6f6939972adae6ca28b63ff8c92a274a3660c4e48cb9c430539a3ad953110"}, {@broadcast, @device_b, 0x18, "75b1a8788a10982c558239ae829a4fc461a5f32155fc63ea"}, {@device_a, @device_a, 0x89, "2df83807947bb8496cc90cea0d114db1a15528a88044e2913af05deeede21145b92f88d56113d8c2f24a4b71bea3daee4c42f06126e9e5130636f40cd575ad184c046d6d59ab87e5c413f4c21db862e0b2f992904c6be4266815dec01dba2e3a506dbbc5160e89cd626e59250978234ae7f4acd7811223c9013658acffe430427e20819aa557630e68"}, {@device_a, @device_a, 0x4c, "3e9a859c1d2ec29f23f329d416ab24044f855a5e12e5518829d691cd45c569833b9abea88d091237b8c0eb547b0f1dbb9af0cec958c66f01addaf53143c082b1c3a4390aff9202b84f10acb1"}, {@device_a, @broadcast, 0x7, "fdaf6447182728"}]}, 0x3e2) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), r1) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000001800)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x2c, r14, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xef5e, 0x2b}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x2c}}, 0x4420) 2.036614106s ago: executing program 3 (id=1278): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000140)=0x3876) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="8bdfd8ec37aa8d0a00c9c0e4185c", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 1.78817764s ago: executing program 4 (id=1279): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x40000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008", @ANYRES32=r2], &(0x7f00000003c0)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff, @void, @value}, 0xf8) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00f9f800028008000500a680", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[], 0xb8}}, 0x4004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x11}, 0x80) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES32=0xffffffffffffffff], 0x4c}}, 0x4000804) sendmmsg$alg(r7, &(0x7f0000000440)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x5}], 0x18, 0x44001}], 0x1, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0xfffffffffffffd6b, &(0x7f0000000740)=[{&(0x7f00000000c0)=""/67, 0x51}, {&(0x7f0000000200)=""/83, 0x53}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/4086, 0x776}], 0x5}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYRES64=r2], 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="f4060000", @ANYRESOCT, @ANYBLOB="010000af000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506000080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRES16=r11, @ANYRES16=r10], 0x7c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x1) socket$inet6(0xa, 0x3, 0x8000000003c) 1.525942605s ago: executing program 3 (id=1280): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x1) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f00000000c0)) 1.513180138s ago: executing program 4 (id=1281): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1000}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x325) 1.295310164s ago: executing program 1 (id=1066): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003280), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000001340)='T', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) sendto$inet6(r2, &(0x7f0000001340)='T', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r2, 0x1) (async) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x6e, &(0x7f0000000540), 0x10) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x6e, &(0x7f0000000540), 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000200)={0x64, r1, 0x1, 0x70ad2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4c, 0x2, 0x0, 0x1, [{0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8) (async) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000180)={r5}, 0x8) close(r7) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r5, r4, 0x4, r6}, 0x10) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r5, r4, 0x4, r6}, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x0, 0x9, 0x401}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000002000000e015fd90000000001e500000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.252224076s ago: executing program 4 (id=1282): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000e83000/0x3000)=nil, 0x3000, 0x300000a, 0x100010, r0, 0xbad08000) (async, rerun: 32) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=@flushpolicy={0x40, 0x12, 0x105, 0x0, 0x0, "", [@proto={0x5, 0x19, 0xff}, @address_filter={0x28, 0x1a, {@in=@private=0xa010102, @in=@private=0xa010100, 0xa, 0x6, 0x9}}]}, 0x40}}, 0x20040810) (async, rerun: 32) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000000)=""/172, &(0x7f00000000c0)=0xac) mmap(&(0x7f0000724000/0x1000)=nil, 0x1000, 0x0, 0x4000932, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 1.252004395s ago: executing program 3 (id=1283): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) (async) r1 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async, rerun: 32) r2 = socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x2f00, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="e3ff0000000000002400128009000100626f6e64000000001400028005001b00000000000500010006"], 0x44}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bond0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a0000000000000000070d0000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000034000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002600000000ff000e61145b00000000001d430000000000007a0a00fe00581c1f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fdb6153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff46248843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae543d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80aba439772bf60a1db18c472dafc5569adc2c406f39f82928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08a1a4b94cb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f1d2156befec432e8e993c79027b7ef285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdc0500000000000000b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb87d9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e28488b0522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b669615f2710eb8df39fc8c04d2c9c196fa6facfea613569a35cde6451f2edf55ce25c7d72ec7ea85a92458c0559ca3a94727d495bd4671a55a70bc544d71d8e0257707a31936f1adf224077310a86bf447ec92c650acca8c6b0721020894b06178c32f4472d17174d6eb2b067030c5d2c12583f46d2da7fba42d4083259c7cdc8bf1f4299c248865d3c809356c3ed"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 754.148333ms ago: executing program 2 (id=1284): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)={0x1c, 0x33, 0x1, 0x70bd2a, 0x25dbdbff, {0x2}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001}, 0x4000000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x800, 0x0, 0x2, 0x1, 0xfff9, 0x7}, 0x20) 753.598483ms ago: executing program 3 (id=1285): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x9, @empty, 0xffffffff}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x9, @empty, 0xffffffff}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000400)=@ethtool_cmd={0x1e, 0x80000001, 0x2, 0x4e, 0x3, 0x0, 0x9, 0x8, 0x6, 0x4, 0x9, 0x0, 0x5, 0xb, 0x6, 0xc988, [0xd4, 0x6]}}) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000400)=@ethtool_cmd={0x1e, 0x80000001, 0x2, 0x4e, 0x3, 0x0, 0x9, 0x8, 0x6, 0x4, 0x9, 0x0, 0x5, 0xb, 0x6, 0xc988, [0xd4, 0x6]}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32, @ANYBLOB="20000100", @ANYRES32], 0x38}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32, @ANYBLOB="20000100", @ANYRES32], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) (async) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) (async) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) (async) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 752.079566ms ago: executing program 4 (id=1286): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4a800, 0x0) ioctl$TUNGETVNETLE(r3, 0x800454dd, &(0x7f0000000040)) (async) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 598.57164ms ago: executing program 3 (id=1287): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r2, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB="18000000122f01"], 0x18}}, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="09110c8d0c00"}) 472.101094ms ago: executing program 2 (id=1288): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x100, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8}]}}]}, 0x40}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001300)={0x1c, 0x16, 0xa01, 0x80000000, 0x25dfdbfe, {0x2}, [@typed={0x4, 0xec}, @generic='!']}, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) bind$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @host}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000850000009d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0xa1}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000080)={'syztnl1\x00', r8, 0x4, 0x9, 0x7, 0x5, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x80, 0x80, 0x4, 0xa9bd}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x4, 0x0, r9, 0x2, '\x00', r10, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) 400.971505ms ago: executing program 4 (id=1289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x3, 0x7, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3d}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x81}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000001a00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x905, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x7c, 0x2, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x88, 0x8, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_USERDATA={0x26, 0x7, 0x1, 0x0, "7bba027a5f28bd2002fe7c5e1073e04b9d75b420d5592f3ae91d87bf9a767b5b5751"}]}, @NFT_MSG_DELSETELEM={0x144c, 0xe, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x400}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @synproxy={{0xd}, @void}}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x13c0, 0x3, 0x0, 0x1, [{0x12e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY_END={0x1c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPR={0x44, 0x7, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xea}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2f}, @NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x6f}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3}]}}}, @NFTA_SET_ELEM_KEY_END={0xe0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x13, 0x1, "2d6f030de083542ca2c8a23a089a5f"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xa6, 0x1, "89349e943e3c7a8676683fae7dbcca98ffcacacf7b916be33322587d7d7aff3f66236a9a782c0ff17814bb844412396d3edcc8b50eedd6a4c6972c8131c3470f87bf1d4bbc9a78e91d9bbe6c988de6130179106c56cab6a804210b5f68d25532a8762a4fb90ab497b3bd0820b3f9566cbbd56d6d89c347cef2223f7c5784699f600695d5f5068d85267e221e0e638e51d9cab6f5ce926b924aafba5ee6764e6d2828"}]}, @NFTA_SET_ELEM_KEY={0x138, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x96, 0x1, "a3d2869e47ed76f1a9253f8bc3c90289af781d828935ef73162a896cc0cc6add9a2c28a74f8e632339bf548e63dabfcf187339d1d913163812457b60a2b875c58af6e4eddfc446798bdd8edd78135c4a4f5b90ed9ed87ec5d58d8bbebc77378eafda1df13e45036bda3619f8a57779d5b1f898260220fa9f218033c143a58a92ad307636a462dd334aa8c9f4f273e3426514"}, @NFTA_DATA_VALUE={0x99, 0x1, "5a8a4c59e66d85b06cac6597475993c617f2c9fc14efded1c459a468af554fa3b1a936459e38b979de19863fa84cd2c6876e434152b0069c46a46f07a88dfd2d0d30e9c190dc7d7e5a7d7823a0a92b6c8d661b60dae9b91a915d712608fd95ad347bbd73d0a64405de3b06fb5de47d88da9fcd15357d0fffb992a48f0882747f162c0b3551186206da2c67db91f2f0486cbf639ca4"}]}, @NFTA_SET_ELEM_KEY_END={0x104c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}, {0xdc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0xc8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc2, 0x1, "0e0c740fa3193aa5bab336ce47f49695f2a1cd253e7ee09d53e46dcc2cf5d3c1a9de47244303273570e19d4c920b321f1060edcc6726b4ea4a51e08fd27a885d11969cbf9930cab00e4eb273640a872827167be97141cf84a4a4d584d33ff5126e0d9c3cc83830d84fd48a251e12e4a3cd375e7191b7c985ace35e2a564594852f9cf727adcb19d4e2540cf13f7f2465be24cba8f585fb19d97ec1ba67c1da4ba05321460e1f7982885e43fcd3550d84ad5ae505dab910e3fd524043189f"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x1d8, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1b0, 0x3, 0x0, 0x1, [{0x1ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1a8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x31, 0x1, "23dde087443d749bda77c8329ddb326203dde8f8059c5564d3e9a0810a7d02e36e881cd4dae8af20de5606764a"}, @NFTA_DATA_VALUE={0xd9, 0x1, "969bc7366814e7ddfd544219bb07573e925fc033e95c7123340fe9ddbd279c7aa7364255a188f2811e06df28750dc9020d078ab3e82e8e75df2b4b5a1c53f49ae5b1fdbabb0bc56d256d5bcf763d8287aea3c7ce652fb378667b4395aecbe85542c59ebf520da8a48912e2190833cb72e3d458a772c9057a9123d9e924d96a2af2fbf642c6fe633cc6ad33c0395234a6f42542acd3c00b0d6fc39c3d4da6e120829599d5511feae8b73f44d625f2a9662c46e8d4f92d372e676bdb940603acfaed69250c33cbbf377aaade30e79ced505757e59db2"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x1840}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) 175.630726ms ago: executing program 4 (id=1290): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="b702000024000000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006502040001001f000404000001007d60b7030000000000006a0a00fefdff00008500000026000000b7000000000000009500000000000000c743a0c8e3ebbadc20e5a7efcc9ac1467fb2ea80dbcf8df265e1b40e4c8afd5c0c000000008da68076774bbcdb2c769937000090af27db5b56024db96bcbbbd2cb2000ce03000000000000007e357754508535766c80114604a86fe569b05614eab9297eb290a248a120c9c6e39f403ff065fd3052aae80675eeba68562eaeaea5fecf298ca20f274233106eab63ecf772de7b265040b6c50b7420b48a93fe94c756108afcd0b2eb78040000005f02a5a6474ae549070004000000001294fba0ed5020e6474ac921fee1f6d8ad6a80c0947cd6d4a561ced21a0b4a902be6af7ec2d1ba002e57f301000000000000000000000000100000aaf25343063e6581f9e6de14ad72e5ad84309f47f96a576cd20cef7ed951a73ea73d7c7f14e306f1f1d1377e57abb19700f0077e9d0000b93eb0f2c6f8141e350dc68147e5958128d22d58625cf9dba211bfff9c3709c9b134625d3d2369f516a49eeeb1a662c8dfb875bdf5c6ba73cccdfacb202994c40d322717faff03323dce8a34ee0ca2cf61efb4b30000642735d6d482ba98d252f36c54333aab1aa736369392b9067665339820f5f1557b0bf7cc06a5a13c714e0b1a1f000000ff3283076cda3d0b1a2905cfc3d04f1db264b530abcbe44bc405f600807970727fb819afa1907228fa9e83433eedb4ac88d0285594ffb0d14c09d5c77f33702822b02488ea570204c8441ced81cacf945dcb2486d65ceec8bcaffbe800a041a378b40dc9e3600e916ae6307bd8325a442095bc9a8b0c95905979f34adddbb26f0d24425c8ab9d937d84b521914f92eed3d3e9de82942a952e86b567aff5bc2e3c1fcc00f618363df5d0d181ee8f4b8fd356c9eb365adc037e443820c05c5db16ff07a9cf471e2ebf91ab00a05f88c1cd55f8c81f5eb1f8d615ca27efb2193bb61665a1ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50225563cd37343d09da72472efc2b2877fbab12a891513e5f0763ae06c0610a2869747c143d75007606000000b2310e19ac58bf29d7f178d09a9f634a3ae492f54649589e3692768a0f3a082c5242c8fa7f01e0873c9c5c604108ad85950d8e08465fa1067ea8f383b3e7a7ddf5977d46f4bc38f914b4a496426d8468f9ba618b6b2218b50c8fc9efbce3ba799cf70de7e13be871aa7eb402e2b11f440361e18d4e334bfc6ae54e62e67a0338c756c544189e4519a029674e2a2bbbc7f6600000000000800000e5e30b70b198246d3a62660600000030a0af132e680510811d3ab71af5d98e2d3d928a749e8b9402d14655612bd58fb40b4625cb69bf6cea97b447f2d970d99100000000086000001b881afb2cc500003a73562af4878f75b4c98274eeb666aa1f5fcf91990cf0dcfef9540057b8a3fff2bc02c5941626d2015f414546e87835ba18e9101734a9e9c6955fc6b9a25fe2a3dd8bab7f21beccba5493a164c663eceed401737c12c65804712236a9a29a43b1e27e9b6816f2328ea8423121f12b7b35aa721fef26934ccafde573bee5c33ef15309f43cbd5d61aa679a9c402d337ebf57a5eacb569401c1df7b9c45b09743c61d1db37f0000000000020000000000de00d23dd63b7761d7d6818db785d8ba13dc577fe61a68eb365de5661f43d4c789bb117a3d208ae44a38e7868dc32e132124ecf52327631b718b3157e218959156ff8e92b7e92bc275d2c9114547351a0d0f2a70d13be0194b6cb68b03000000000000004f153bbc7f52861e4e5df0d19e4e40ac44cfda6f87807e5b5ed7072c04da88afd3d4b79f060e004a0e2f00b9e726ac75d2ac0691314c627e9a8a07bdd607919fd48f01ad6d2f7621d9a75b134f1bc25ed7c33d411a5baa4daa3add16afc502b2b7629541d722e91d631e5ffb9d4beb5aa5a2c4e490a5bd038c1817f0d4652a29353b05b16b3c5cf4538ba310b8cbc221af38ea842d4cb908bcd574f794459fd54b58c6a791e6df625a47bade4ba41ee014184395a479544619f749ff70088b0fd115077f7eff7c5a3315ca604d110df1c54407f191a78d8362e4dc6e1138391c2a65246779bb76c9f1daea4f085f38810edef6dd047937c231cba791a4e7713c5b3b0a0b6ba37db5016e02d114d714459d065a79609fea4efebad04edac11aac0e53dd094827453144fa419ee81823d00a90a9058ba740d2f41253a8d01a8c1a7265a084e30ad10d412aee8170a7111d62473e7bd8f3d64fb7ebdd32aada331900000000000000000000000084ef49dd020000000000000000000000d9dcb285038ec38d5f4969ed0e98a71ac7bf8159a234833a5241722b2d24aa2fa4965d4eb7966fb27d118b6ef3308627e67d42f1041d5e92da28e0a7724ce715854775cbe06c5166f1dac0745f1373156a536cb6394c2c4473e2050cacf693fdf8e305080000001a901ecd90a5f53b8327a485557bc2a147b036477915e600000000034258ebbb6099b597d17ee2fc97ca850b8580b1337016a40566814594c13052b9d2b0741326825f19a244609ac04a0c29691a7c8f7a78c1a7590a293c561f304533c638ae635f5ce026f7fa034d8cfe0e11831d4829692beab26891ef583cfcb713a4d3a2d8b958c0875d7e4bdcf98802db086ebcbb9d82fa569a18f06facc2ffe1ea9ae4231e1e7a5dd7503faa2de7f898c97788c4b9c61c70ff92abdf7476cc351156d11c0ada7614f315f4c6cca119d16827d4e864f5a7a9b690272a510c451dc07f391309d02e31e53b2bf0b5f86e776b1bcfe6c85ccd7ddf8a9559d58bb5603895f265685fdd11263c946f8ef3ccec1b0d45a47a89b8237cbbdab14e4ca6dc76b2c41e071b93a065c0f5aa718e1cfab29beea78a6bd9a3114f0fb92be9a5862627b4bd99db2c08e4636e43f05f33535d5d1f9bb40e1fd8e5125a3d29b31dd94a6744bbc21722222b976089f073a4d3fcafc6d06518cf0c4fc6c8e3da0000000000000000000000007d3b60775243f2143d9f54804b11102cf0e4c641db1ba8bf75e46ab3a8fdece6562e7ebb3e407f3c7504dfa3da3aecbd49af3d1edeea11cc970416fadeedc8423bfdc85041ac4d8243a1130e6f4cb5bbfed9d095e18c98c7d690e4c491a7ddcd5635bc61dbed719ca28e8ca3f1fbbe588913ed057f1d6e34a79f4dc10df54d1993a5bc5f9ef6dbd339ee4b0b5764169f305e284ef82cc23e9366d4bc7eb45c7230b13433e5240657cb8eba33260147be8620b6d98cc48b000000000000000000000000c1ce872b18984f080100000000000000bd3fded92547d41809b398f36749083a147eb09ff1ed601bd36b873d3947fb223da647052528e0466cb917db7800f7c7000b593fca1903991cca1343882e3a1f60044f11c081dae4fc5bcf20efacdd2c577f4bcda2eea6f75a31dc90eebb6135b6fb824052181b0ad8a49ebf03ccf61d7e39bf6b0762d24d19796016301d1415b5110ba9df7f204aedb2a2e4e621c0553d312b309db67192f98ef7800000d629c04e216afc8fc66616bbf304e452373aa927c2ad6f5417f1b9bc322b802c1c42112a92a331cdc113b9ace3ff52ede7a853f9a89002ba070bac2f635a03db3375e5564f1a798bf9c0f8c72725d2eca9b0ec7e453d78ea20eca61530fe574299b393ca144adcb06108dfbb934065a87972739150a8752ac111c4d9062ccb95c54034fbdee131d94dfbaab1854d55665746fb7b47d25e54070b0d14c0a29c57bc4930075e1761913b036d43852c6df9f10e15105b2a18668298a3577943514db0dce953dcec62139ff3f16066efec5d8cbc0600000000007289be5883aab951ea67cf2ff691d05c1ea91dd569ed9897fe8d88a0a6977dc8955be17e8026aff11c61fa5cc76196c1423cd597345253baa1537eb6962a3ce1fe5d5ab46938e8fb23fa7047bc59c4345e912585a9adb5fe2ff51b64a326321b594e3f2d339f4090bdae6b30b62064bacbc155d3c930576f506b093ca7c60957bdfdd6536baaa871cf6a603c736b78761e6463b8ac503e219cc3d98f649602ad24d5667368290ee926fba76ee482a201a03efece3b236f4ee2ffcd5d90d92a2f0c5cfa48c87f27c2f1e92988a6508c12f6b7755cc48eb10edafca92cb0260c72295a27a24846d3a2334bd60e94c0fd07e5db0a4964a7fc4e89f11a300510776934e87bb3c21394f46954a012b2a3b0760f1bad1dbd6b466ed7153bd18ee2c0b2353c38df9e0782eb"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x18000000000002a0, 0x33, 0x0, &(0x7f00000000c0)="b907ef19edfff007049e0ff0888e72e9eb17e12ce4f2ffc3d4b8743c2873208a9eca5493c9b6f0ac22c61df8ad86c7577c702f", 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r2, 0x12, 0x7, 0x0, &(0x7f00000000c0)) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}, 0x0, 0x33}, @in=@multicast2, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef, 0x3}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x4}, 0x4}, 0x2, 0x1a0b1}}, 0xf8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3) recvmmsg(r3, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000000840)=""/4097, 0x1001}, {&(0x7f0000002c40)=""/196, 0xc4}], 0x3}, 0x6}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000001880)=""/238, 0xee}, {&(0x7f0000000040)=""/48, 0x30}, {&(0x7f0000000440)=""/59, 0x3b}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x7}, 0x7ffffffe}, {{0x0, 0x0, 0x0}, 0x27}], 0x5, 0x40000000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000940)='westwood\x00', 0x9) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c27ba0000000000000000000000000033", 0x58}, {&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b6", 0xd0}, {&(0x7f0000000a40)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dae6775475fa65e9df52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d20269982ab6feb22d8e77afb7b861622ab963b07f0026fd6424088568c3453903dacad72bcd0864a854e542aacc3201fff776fe1c000000000000000000000000000000002da46e8a95bcead77a244256266fe952d151a841aaa0c9c727bf08c37869c70d6aed073d6bb9ff037a079b697f3ba963ba49b6aecdc3e839ae25d497b0e60408b8e0a9931aeb1be35eea2a22fa50d66a634804121bde6a4a2d7a23c08d8237aac90c577c24f4ec2949d9202659fe62010000004eed651fe91d276cefcaebb18ef2d81f", 0x167}], 0x3}}], 0x1, 0x2000c000) r6 = socket(0x1e, 0x4, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x40, r8, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x2c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0xfffffffffffffd7a}]}]}, 0x40}}, 0x0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000340)={'macvlan0\x00', 0x400}) sendmsg$rds(r6, &(0x7f0000002000)={&(0x7f00000002c0)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000001dc0)=[{&(0x7f0000000540)=""/71, 0x47}, {&(0x7f0000001cc0)=""/252, 0xfc}, {&(0x7f0000003fc0)=""/4096, 0x1000}, {&(0x7f0000000480)=""/20, 0x14}, {&(0x7f00000005c0)=""/114, 0x72}], 0x5, &(0x7f0000001f40)=[@mask_cswp={0x58, 0x114, 0x9, {{0x40, 0x10}, &(0x7f0000001e40)=0x6, &(0x7f0000001e80)=0x8, 0x32, 0xffffffffffffffff, 0x3, 0xeb90, 0x3, 0x9}}, @mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x6}, &(0x7f0000001ec0)=0xfffffffffffffffd, &(0x7f0000001f00)=0x7, 0xfffffffffffffffa, 0x6, 0xfffffffffffffffc, 0x7, 0x3, 0xf0}}], 0xb0, 0x60081}, 0x4000050) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b40a000040000900000000000000000003000000040060809c0a01"], 0xab4}, 0x1, 0x0, 0x0, 0x80}, 0x0) 0s ago: executing program 3 (id=1291): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xfffffffffffffffe, 0x0, 0x5}, {0xffffffffffffffff, 0x2, 0x0, 0x400000000000}, 0x0, 0x6e6bbd, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x2}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f00000015c0)=ANY=[@ANYBLOB="2c010000350000022dbd7000ffdbdf250600000008001c007261770008002500", @ANYRES32=0x0, @ANYBLOB="0701fd8004003a801259c657b4cfc16978a3bcf4c815b51f4ad3a84c85458d2f457209b55737d12a3e52d00b14c3a1ec512b9f9f90b1702f612b7f8f3cad0d40aaa5b4fc4992d126d867c50b5cfdddc1dc9d03cc45cc5b150a1f67443ea72c8a98a6b91382dea93dfd631f18cec7a2518b8fd54eb3f845786634711f145f93d1e9181555821239d5efc7bac4e4c798a5d224689175ca3e3d9121a1f28d2b72ab528ae0b9b9b32cdda62c8651bb00811fabe26688b3ff6f030d4ff4ad0127d3475832abc575543c083e69d1e04e56e023e187b578f8ce72e2329fb6a95aa485fd93c128300f1587abbc520e0265947a4e42218899a9a571d6cd9aa60c00990000ffffffffffffff00d44fe5baf7"], 0x12c}, 0x1, 0x0, 0x0, 0x8080}, 0x8080) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) read(r3, &(0x7f00000000c0)=""/4096, 0x1000) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000100005002fbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a821000001000500140003006d6163766c616e300000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x50050) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYRES32=r2], &(0x7f0000000440)=""/103, 0x8d, 0x67, 0x0, 0x7fffffff, 0x0, @void, @value}, 0x28) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000000)={0x1000, 0xaf43, 0x7, 0x40, 0x1}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x100, 0x4, 0x0, r7, 0x3, '\x00', r6, 0xffffffffffffffff, 0x1, 0x2, 0x2, 0x5, @void, @value, @void, @value}, 0x50) write(r2, &(0x7f0000001440)="34f0091c3700c639eb66b972a5d9391271ba53207eff24322d56dbe81e3d53108aaaf331d1fd21ec995a6e2ee2bb9568e067efc5a599431178850bb3955fe50335ef63e36c6e7c98c67a6facbe11fd06bec3277a129ebd0c4cc36e7eb3f1d714d42776643bdb6d930b3e6830da4197b1d44e7429ec7c2209edd38e1a4d7a0b876d33806b46059213cc89f7890bf41daea1ded504af7304533f9a1f7285a5351ffa3d8d1028c2756e48904ede44c1a5c2c40c62cb87", 0xb5) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r8, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r8}, &(0x7f0000000540), &(0x7f0000001240)}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0300000004000000000000000000030000000000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000000000000300"/28], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="220000000400000008007455d7723aee68d6ec00000900000080000000", @ANYRES32=0x1, @ANYBLOB='\\\b\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="020000000300"/28], 0x50) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001500)=@bpf_ext={0x1c, 0x9, &(0x7f0000001640)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x7ff, 0xb5, &(0x7f0000000c00)=""/181, 0x40f00, 0x5c, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000cc0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000d00)={0x4, 0x8, 0x6, 0x7}, 0x10, 0x80a3, r9, 0x0, &(0x7f0000000d40), 0x0, 0x10, 0x3421, @void, @value}, 0x94) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001400)={r10, 0xe0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001280), &(0x7f00000011c0)=[0x0], 0x0, 0xc8, &(0x7f0000000f00), 0x0, 0x10, &(0x7f0000001280), &(0x7f0000000f80), 0x8, 0xa1, 0x8, 0x8, &(0x7f0000001200)}}, 0x10) kernel console output (not intermixed with test programs): etdevsim2 netdevsim0: left allmulticast mode [ 158.462133][ T7950] xfrm1: left promiscuous mode [ 158.477324][ T7950] mac80211_hwsim hwsim4 pim6reg1: left promiscuous mode [ 158.488272][ T7950] mac80211_hwsim hwsim4 pim6reg1: left allmulticast mode [ 158.690205][ T1135] hsr_slave_0: left promiscuous mode [ 158.721760][ T1135] hsr_slave_1: left promiscuous mode [ 158.727922][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.772472][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.798390][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.809469][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.840543][ T1135] veth1_macvtap: left promiscuous mode [ 158.846147][ T1135] veth0_macvtap: left promiscuous mode [ 158.852027][ T7986] netlink: 84 bytes leftover after parsing attributes in process `syz.2.471'. [ 158.862194][ T1135] veth1_vlan: left promiscuous mode [ 158.867571][ T1135] veth0_vlan: left promiscuous mode [ 158.888036][ T7986] netlink: 'syz.2.471': attribute type 1 has an invalid length. [ 158.897358][ T7986] Driver unsupported XDP return value 0 on prog (id 91) dev N/A, expect packet loss! [ 158.909515][ T51] Bluetooth: hci2: command 0x041b tx timeout [ 159.657104][ T1135] team0 (unregistering): Port device team_slave_1 removed [ 159.718961][ T1135] team0 (unregistering): Port device team_slave_0 removed [ 160.330314][ T8003] netlink: 'syz.4.477': attribute type 2 has an invalid length. [ 160.338216][ T8003] netlink: 'syz.4.477': attribute type 1 has an invalid length. [ 160.935515][ T8027] netlink: 16 bytes leftover after parsing attributes in process `syz.4.482'. [ 160.956133][ T8024] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 160.964768][ T8027] netlink: 80 bytes leftover after parsing attributes in process `syz.4.482'. [ 160.996551][ T5151] Bluetooth: hci2: command 0x041b tx timeout [ 161.405761][ T7885] chnl_net:caif_netlink_parms(): no params data found [ 161.599635][ T8054] delete_channel: no stack [ 161.612943][ T8054] delete_channel: no stack [ 161.639663][ T8054] delete_channel: no stack [ 161.644344][ T8054] delete_channel: no stack [ 161.648972][ T8054] delete_channel: no stack [ 161.673375][ T8054] delete_channel: no stack [ 161.679119][ T8054] delete_channel: no stack [ 161.686241][ T8054] delete_channel: no stack [ 161.691430][ T8054] delete_channel: no stack [ 161.696170][ T8054] delete_channel: no stack [ 161.701285][ T8054] delete_channel: no stack [ 161.705925][ T8054] delete_channel: no stack [ 161.711264][ T8054] delete_channel: no stack [ 161.715903][ T8054] delete_channel: no stack [ 161.721006][ T8054] delete_channel: no stack [ 161.725729][ T8054] delete_channel: no stack [ 161.730804][ T8054] delete_channel: no stack [ 161.743265][ T8054] delete_channel: no stack [ 161.749707][ T8054] delete_channel: no stack [ 161.754932][ T8054] delete_channel: no stack [ 161.760100][ T8054] delete_channel: no stack [ 161.764885][ T8054] delete_channel: no stack [ 161.773439][ T8054] delete_channel: no stack [ 161.778162][ T8054] delete_channel: no stack [ 161.784353][ T8054] delete_channel: no stack [ 161.829550][ T8048] syz.3.485 (8048) used greatest stack depth: 17992 bytes left [ 161.837491][ T8054] delete_channel: no stack [ 161.890772][ T8054] delete_channel: no stack [ 161.895447][ T8054] delete_channel: no stack [ 161.920340][ T8054] delete_channel: no stack [ 161.927732][ T8054] delete_channel: no stack [ 161.958669][ T7885] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.982461][ T7885] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.012025][ T7885] bridge_slave_0: entered allmulticast mode [ 162.041542][ T7885] bridge_slave_0: entered promiscuous mode [ 162.057409][ T8064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.491'. [ 162.153470][ T8080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.494'. [ 162.274030][ T7885] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.291989][ T7885] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.322287][ T7885] bridge_slave_1: entered allmulticast mode [ 162.410463][ T7885] bridge_slave_1: entered promiscuous mode [ 162.857650][ T7885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.893329][ T7885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.071720][ T5151] Bluetooth: hci2: command 0x041b tx timeout [ 163.364697][ T7885] team0: Port device team_slave_0 added [ 163.395236][ T7885] team0: Port device team_slave_1 added [ 163.630090][ T8158] netlink: 'syz.4.507': attribute type 1 has an invalid length. [ 163.704798][ T7885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.829400][ T7885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.868872][ T8169] netlink: 108 bytes leftover after parsing attributes in process `syz.3.509'. [ 163.888631][ T8156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.506'. [ 163.898816][ T8169] netlink: 108 bytes leftover after parsing attributes in process `syz.3.509'. [ 163.909103][ T8169] netlink: 108 bytes leftover after parsing attributes in process `syz.3.509'. [ 163.919455][ T8156] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 163.922811][ T7885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.926793][ T8156] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.963432][ T8173] netlink: 'syz.4.507': attribute type 6 has an invalid length. [ 164.106441][ T8169] netlink: 108 bytes leftover after parsing attributes in process `syz.3.509'. [ 164.108814][ T7885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.156508][ T8169] netlink: 108 bytes leftover after parsing attributes in process `syz.3.509'. [ 164.177900][ T7885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.267771][ T7885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.546470][ T7885] hsr_slave_0: entered promiscuous mode [ 164.575750][ T7885] hsr_slave_1: entered promiscuous mode [ 164.588274][ T7885] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.603160][ T7885] Cannot create hsr debugfs directory [ 165.036836][ T8223] sctp: [Deprecated]: syz.4.519 (pid 8223) Use of struct sctp_assoc_value in delayed_ack socket option. [ 165.036836][ T8223] Use struct sctp_sack_info instead [ 165.123598][ T8225] netlink: 'syz.3.520': attribute type 2 has an invalid length. [ 165.153217][ T5151] Bluetooth: hci2: command 0x041b tx timeout [ 165.478880][ T8243] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 166.174624][ T5915] IPVS: starting estimator thread 0... [ 166.291348][ T8275] IPVS: using max 24 ests per chain, 57600 per kthread [ 166.457573][ T8284] __nla_validate_parse: 6 callbacks suppressed [ 166.457592][ T8284] netlink: 24 bytes leftover after parsing attributes in process `syz.3.533'. [ 167.014792][ T7885] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 167.056058][ T8313] netlink: 'syz.1.540': attribute type 3 has an invalid length. [ 167.060345][ T7885] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 167.117761][ T7885] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 167.183542][ T7885] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 167.516072][ T7885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.590894][ T7885] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.608814][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.616058][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.666896][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.674171][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.800264][ T8344] netlink: 60 bytes leftover after parsing attributes in process `syz.2.548'. [ 168.105585][ T8355] openvswitch: netlink: IP tunnel dst address not specified [ 168.500366][ T8373] netlink: 'syz.4.555': attribute type 1 has an invalid length. [ 168.677349][ T8373] 8021q: adding VLAN 0 to HW filter on device bond3 [ 168.773396][ T7885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.816777][ T8389] netlink: 'syz.3.558': attribute type 1 has an invalid length. [ 168.816844][ T8385] ip6erspan0: entered promiscuous mode [ 168.857839][ T8385] bond3: (slave ip6erspan0): making interface the new active one [ 168.870892][ T8385] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 168.965434][ T8389] 8021q: adding VLAN 0 to HW filter on device bond7 [ 169.203321][ T8381] syzkaller1: entered promiscuous mode [ 169.208871][ T8381] syzkaller1: entered allmulticast mode [ 169.242197][ T8405] xt_l2tp: v2 doesn't support IP mode [ 169.251057][ T8405] netlink: 'syz.1.560': attribute type 3 has an invalid length. [ 169.375157][ T7885] veth0_vlan: entered promiscuous mode [ 169.449279][ T7885] veth1_vlan: entered promiscuous mode [ 169.595086][ T7885] veth0_macvtap: entered promiscuous mode [ 169.624980][ T7885] veth1_macvtap: entered promiscuous mode [ 169.718496][ T7885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.803512][ T7885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.868194][ T7885] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.899193][ T7885] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.909634][ T7885] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.918568][ T7885] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.086268][ T8435] netlink: 28 bytes leftover after parsing attributes in process `syz.1.569'. [ 170.252797][ T8440] netlink: 'syz.4.571': attribute type 1 has an invalid length. [ 170.418659][ T8440] 8021q: adding VLAN 0 to HW filter on device bond4 [ 170.434893][ T8435] netlink: 196 bytes leftover after parsing attributes in process `syz.1.569'. [ 170.460053][ T8435] netlink: 196 bytes leftover after parsing attributes in process `syz.1.569'. [ 170.477906][ T8435] netlink: 19 bytes leftover after parsing attributes in process `syz.1.569'. [ 170.493040][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.547710][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.608602][ T8457] xt_limit: Overflow, try lower: 0/0 [ 170.697842][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.727607][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.899009][ T8466] netlink: 'syz.3.576': attribute type 1 has an invalid length. [ 170.909463][ T8466] netlink: 244 bytes leftover after parsing attributes in process `syz.3.576'. [ 171.247829][ T8480] netlink: 40 bytes leftover after parsing attributes in process `syz.1.579'. [ 171.251118][ T8483] netlink: 28 bytes leftover after parsing attributes in process `syz.4.580'. [ 171.584998][ T8498] netlink: 60 bytes leftover after parsing attributes in process `syz.2.585'. [ 171.640522][ T8503] IPv6: addrconf: prefix option has invalid lifetime [ 171.753855][ T6599] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.070614][ T6599] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.142538][ T6599] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.214057][ T6599] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.389623][ T6599] bridge_slave_1: left allmulticast mode [ 172.395339][ T6599] bridge_slave_1: left promiscuous mode [ 172.401685][ T6599] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.413918][ T6599] bridge_slave_0: left allmulticast mode [ 172.419871][ T6599] bridge_slave_0: left promiscuous mode [ 172.425664][ T6599] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.906072][ T8540] xt_hashlimit: size too large, truncated to 1048576 [ 173.176681][ T6599] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.205853][ T6599] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.222594][ T6599] bond0 (unregistering): Released all slaves [ 173.284361][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.588'. [ 173.362471][ T8526] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.372124][ T8526] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.382428][ T8526] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.391667][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 173.393097][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 173.399641][ T8526] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.408801][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 173.432255][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 173.440127][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 173.463042][ T8526] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.473237][ T8526] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.482658][ T8526] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.491897][ T8526] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.916867][ T8564] netlink: 28 bytes leftover after parsing attributes in process `syz.2.597'. [ 173.990403][ T8565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.598'. [ 174.053710][ T8565] x_tables: unsorted underflow at hook 3 [ 175.309629][ T8624] netlink: 28 bytes leftover after parsing attributes in process `syz.3.610'. [ 175.470547][ T51] Bluetooth: hci2: command tx timeout [ 175.603786][ T6599] hsr_slave_0: left promiscuous mode [ 175.622877][ T6599] hsr_slave_1: left promiscuous mode [ 175.629030][ T6599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.649351][ T6599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.670980][ T6599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.718642][ T6599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.776781][ T6599] veth1_macvtap: left promiscuous mode [ 175.783464][ T6599] veth0_macvtap: left promiscuous mode [ 175.789169][ T6599] veth1_vlan: left promiscuous mode [ 175.795259][ T6599] veth0_vlan: left promiscuous mode [ 176.137341][ T8646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.617'. [ 176.399892][ T6599] team0 (unregistering): Port device team_slave_1 removed [ 176.437853][ T6599] team0 (unregistering): Port device team_slave_0 removed [ 177.052989][ T8656] netlink: 68 bytes leftover after parsing attributes in process `syz.4.620'. [ 177.066012][ T8655] tun0: tun_chr_ioctl cmd 1074025675 [ 177.116113][ T8655] tun0: persist disabled [ 177.127942][ T8656] netlink: 16 bytes leftover after parsing attributes in process `syz.4.620'. [ 177.262489][ T8551] chnl_net:caif_netlink_parms(): no params data found [ 177.365053][ T8669] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 177.549370][ T51] Bluetooth: hci2: command tx timeout [ 177.693425][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.625'. [ 177.696358][ T8686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.624'. [ 177.744823][ T8686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.624'. [ 177.768584][ T8688] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 177.797341][ T8551] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.826254][ T8551] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.853496][ T8551] bridge_slave_0: entered allmulticast mode [ 177.885468][ T8551] bridge_slave_0: entered promiscuous mode [ 177.918985][ T8551] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.947153][ T8551] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.971586][ T8551] bridge_slave_1: entered allmulticast mode [ 177.988342][ T8551] bridge_slave_1: entered promiscuous mode [ 178.105942][ T8701] netlink: 36 bytes leftover after parsing attributes in process `syz.3.630'. [ 178.201821][ T8551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.244344][ T8551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.457632][ T8551] team0: Port device team_slave_0 added [ 178.487011][ T8551] team0: Port device team_slave_1 added [ 178.672488][ T8713] xt_CT: No such helper "snmp" [ 178.683578][ T8724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.634'. [ 178.788457][ T8724] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 178.840859][ T8551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.848120][ T8551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.879139][ T8551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.894154][ T8551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.903141][ T8551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.934928][ T8551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.946782][ T8713] netlink: 20 bytes leftover after parsing attributes in process `syz.2.633'. [ 178.968769][ T8719] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢R3âëp(@Ož> [ 179.262604][ T8741] netlink: 'syz.4.639': attribute type 1 has an invalid length. [ 179.308006][ T8551] hsr_slave_0: entered promiscuous mode [ 179.322490][ T8551] hsr_slave_1: entered promiscuous mode [ 179.341251][ T8551] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.372287][ T8551] Cannot create hsr debugfs directory [ 179.433493][ T8741] 8021q: adding VLAN 0 to HW filter on device bond5 [ 179.574940][ T8745] bond5: (slave gretap1): making interface the new active one [ 179.625224][ T8745] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 179.640320][ T51] Bluetooth: hci2: command tx timeout [ 179.783367][ T8760] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 179.968351][ T8765] netlink: 28 bytes leftover after parsing attributes in process `syz.4.643'. [ 180.012177][ T8765] netlink: 28 bytes leftover after parsing attributes in process `syz.4.643'. [ 180.027311][ T8769] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 180.303949][ T8777] netlink: 'syz.2.647': attribute type 1 has an invalid length. [ 180.504235][ T8777] 8021q: adding VLAN 0 to HW filter on device bond4 [ 180.521004][ T8780] FAULT_INJECTION: forcing a failure. [ 180.521004][ T8780] name failslab, interval 1, probability 0, space 0, times 1 [ 180.610323][ T8780] CPU: 1 UID: 0 PID: 8780 Comm: syz.2.647 Not tainted 6.15.0-syzkaller-07803-g3382a1ed7f77 #0 PREEMPT(full) [ 180.610354][ T8780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 180.610366][ T8780] Call Trace: [ 180.610375][ T8780] [ 180.610388][ T8780] dump_stack_lvl+0x189/0x250 [ 180.610427][ T8780] ? __pfx____ratelimit+0x10/0x10 [ 180.610453][ T8780] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.610487][ T8780] ? __pfx__printk+0x10/0x10 [ 180.610517][ T8780] ? __pfx___might_resched+0x10/0x10 [ 180.610546][ T8780] ? fs_reclaim_acquire+0x7d/0x100 [ 180.610573][ T8780] should_fail_ex+0x414/0x560 [ 180.610606][ T8780] ? alloc_netdev_mqs+0xa8b/0x11e0 [ 180.610628][ T8780] should_failslab+0xa8/0x100 [ 180.610662][ T8780] __kvmalloc_node_noprof+0x168/0x600 [ 180.610694][ T8780] ? alloc_netdev_mqs+0xa8b/0x11e0 [ 180.610724][ T8780] alloc_netdev_mqs+0xa8b/0x11e0 [ 180.610756][ T8780] rtnl_create_link+0x31f/0xd10 [ 180.610795][ T8780] rtnl_newlink_create+0x25c/0xb00 [ 180.610834][ T8780] ? __mutex_lock+0x51b/0xe80 [ 180.610868][ T8780] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 180.610899][ T8780] ? rtnl_newlink+0x8db/0x1c70 [ 180.610932][ T8780] ? __pfx___mutex_lock+0x10/0x10 [ 180.610970][ T8780] ? ns_capable+0x8a/0xf0 [ 180.611006][ T8780] rtnl_newlink+0x16d6/0x1c70 [ 180.611055][ T8780] ? __pfx_rtnl_newlink+0x10/0x10 [ 180.611087][ T8780] ? finish_task_switch+0x18b/0x950 [ 180.611116][ T8780] ? __lock_acquire+0xab9/0xd20 [ 180.611157][ T8780] ? __lock_acquire+0xab9/0xd20 [ 180.611209][ T8780] ? is_bpf_text_address+0x26/0x2b0 [ 180.611246][ T8780] ? is_bpf_text_address+0x292/0x2b0 [ 180.611273][ T8780] ? is_bpf_text_address+0x26/0x2b0 [ 180.611306][ T8780] ? kernel_text_address+0xa5/0xe0 [ 180.611346][ T8780] ? __lock_acquire+0xab9/0xd20 [ 180.611402][ T8780] ? __pfx_rtnl_newlink+0x10/0x10 [ 180.611431][ T8780] rtnetlink_rcv_msg+0x7cf/0xb70 [ 180.611465][ T8780] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 180.611493][ T8780] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 180.611543][ T8780] netlink_rcv_skb+0x205/0x470 [ 180.611577][ T8780] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 180.611608][ T8780] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 180.611656][ T8780] ? netlink_deliver_tap+0x2e/0x1b0 [ 180.611688][ T8780] ? netlink_deliver_tap+0x2e/0x1b0 [ 180.611727][ T8780] netlink_unicast+0x758/0x8d0 [ 180.611769][ T8780] netlink_sendmsg+0x805/0xb30 [ 180.611805][ T8780] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.611829][ T8780] ? aa_sock_msg_perm+0x94/0x160 [ 180.611858][ T8780] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 180.611883][ T8780] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.611903][ T8780] __sock_sendmsg+0x21c/0x270 [ 180.611934][ T8780] ____sys_sendmsg+0x505/0x830 [ 180.611962][ T8780] ? __pfx_____sys_sendmsg+0x10/0x10 [ 180.611994][ T8780] ? import_iovec+0x74/0xa0 [ 180.612020][ T8780] ___sys_sendmsg+0x21f/0x2a0 [ 180.612044][ T8780] ? __pfx____sys_sendmsg+0x10/0x10 [ 180.612109][ T8780] ? __fget_files+0x2a/0x420 [ 180.612139][ T8780] ? __fget_files+0x3a0/0x420 [ 180.612183][ T8780] __x64_sys_sendmsg+0x19b/0x260 [ 180.612207][ T8780] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 180.612240][ T8780] ? __pfx_ksys_write+0x10/0x10 [ 180.612274][ T8780] ? do_syscall_64+0xbe/0x3b0 [ 180.612306][ T8780] do_syscall_64+0xfa/0x3b0 [ 180.612330][ T8780] ? lockdep_hardirqs_on+0x9c/0x150 [ 180.612355][ T8780] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.612375][ T8780] ? clear_bhb_loop+0x60/0xb0 [ 180.612401][ T8780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.612421][ T8780] RIP: 0033:0x7f84bdd8e969 [ 180.612439][ T8780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.612456][ T8780] RSP: 002b:00007f84beb3d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.612478][ T8780] RAX: ffffffffffffffda RBX: 00007f84bdfb6080 RCX: 00007f84bdd8e969 [ 180.612493][ T8780] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 180.612506][ T8780] RBP: 00007f84beb3d090 R08: 0000000000000000 R09: 0000000000000000 [ 180.612518][ T8780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.612530][ T8780] R13: 0000000000000001 R14: 00007f84bdfb6080 R15: 00007ffe4d5e7ed8 [ 180.612564][ T8780] [ 181.355830][ T8798] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 181.653245][ T8817] xt_l2tp: missing protocol rule (udp|l2tpip) [ 181.710818][ T51] Bluetooth: hci2: command tx timeout [ 182.028093][ T8551] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 182.060879][ T8551] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 182.100121][ T8551] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 182.126929][ T8551] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 182.477251][ T8551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.632501][ T8551] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.663454][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.671083][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.688873][ T8843] netlink: 'syz.3.660': attribute type 1 has an invalid length. [ 182.741877][ T8849] FAULT_INJECTION: forcing a failure. [ 182.741877][ T8849] name failslab, interval 1, probability 0, space 0, times 0 [ 182.788831][ T8849] CPU: 1 UID: 0 PID: 8849 Comm: syz.3.660 Not tainted 6.15.0-syzkaller-07803-g3382a1ed7f77 #0 PREEMPT(full) [ 182.788862][ T8849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 182.788881][ T8849] Call Trace: [ 182.788890][ T8849] [ 182.788899][ T8849] dump_stack_lvl+0x189/0x250 [ 182.788937][ T8849] ? __pfx____ratelimit+0x10/0x10 [ 182.788964][ T8849] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.788996][ T8849] ? __pfx__printk+0x10/0x10 [ 182.789026][ T8849] ? __pfx___might_resched+0x10/0x10 [ 182.789055][ T8849] ? fs_reclaim_acquire+0x7d/0x100 [ 182.789082][ T8849] should_fail_ex+0x414/0x560 [ 182.789114][ T8849] ? alloc_netdev_mqs+0xa8b/0x11e0 [ 182.789136][ T8849] should_failslab+0xa8/0x100 [ 182.789170][ T8849] __kvmalloc_node_noprof+0x168/0x600 [ 182.789202][ T8849] ? alloc_netdev_mqs+0xa8b/0x11e0 [ 182.789236][ T8849] alloc_netdev_mqs+0xa8b/0x11e0 [ 182.789276][ T8849] rtnl_create_link+0x31f/0xd10 [ 182.789307][ T8849] rtnl_newlink_create+0x25c/0xb00 [ 182.789348][ T8849] ? __pfx_aa_get_newest_label+0x10/0x10 [ 182.789379][ T8849] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 182.789409][ T8849] ? rtnl_newlink+0x8db/0x1c70 [ 182.789442][ T8849] ? __pfx___mutex_lock+0x10/0x10 [ 182.789481][ T8849] ? ns_capable+0x8a/0xf0 [ 182.789538][ T8849] rtnl_newlink+0x16d6/0x1c70 [ 182.789570][ T8849] ? netlink_sendmsg+0x805/0xb30 [ 182.789605][ T8849] ? __pfx_rtnl_newlink+0x10/0x10 [ 182.789663][ T8849] ? kasan_quarantine_put+0xdd/0x220 [ 182.789689][ T8849] ? lockdep_hardirqs_on+0x9c/0x150 [ 182.789721][ T8849] ? nlmon_xmit+0xb0/0x100 [ 182.789751][ T8849] ? kmem_cache_free+0x18f/0x400 [ 182.789790][ T8849] ? __local_bh_enable_ip+0x12d/0x1c0 [ 182.789821][ T8849] ? lockdep_hardirqs_on+0x9c/0x150 [ 182.789854][ T8849] ? __local_bh_enable_ip+0x12d/0x1c0 [ 182.789885][ T8849] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 182.789920][ T8849] ? __dev_queue_xmit+0x27e/0x3a70 [ 182.789959][ T8849] ? __lock_acquire+0xab9/0xd20 [ 182.790017][ T8849] ? __pfx_rtnl_newlink+0x10/0x10 [ 182.790045][ T8849] rtnetlink_rcv_msg+0x7cf/0xb70 [ 182.790079][ T8849] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 182.790107][ T8849] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 182.790134][ T8849] ? ref_tracker_free+0x63a/0x7d0 [ 182.790160][ T8849] ? __copy_skb_header+0xa7/0x550 [ 182.790184][ T8849] ? __pfx_ref_tracker_free+0x10/0x10 [ 182.790225][ T8849] netlink_rcv_skb+0x205/0x470 [ 182.790258][ T8849] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 182.790290][ T8849] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 182.790338][ T8849] ? netlink_deliver_tap+0x2e/0x1b0 [ 182.790367][ T8849] ? netlink_deliver_tap+0x2e/0x1b0 [ 182.790406][ T8849] netlink_unicast+0x758/0x8d0 [ 182.790445][ T8849] netlink_sendmsg+0x805/0xb30 [ 182.790476][ T8849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.790498][ T8849] ? aa_sock_msg_perm+0x94/0x160 [ 182.790526][ T8849] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 182.790550][ T8849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.790571][ T8849] __sock_sendmsg+0x21c/0x270 [ 182.790602][ T8849] ____sys_sendmsg+0x505/0x830 [ 182.790629][ T8849] ? __pfx_____sys_sendmsg+0x10/0x10 [ 182.790663][ T8849] ? import_iovec+0x74/0xa0 [ 182.790688][ T8849] ___sys_sendmsg+0x21f/0x2a0 [ 182.790712][ T8849] ? __pfx____sys_sendmsg+0x10/0x10 [ 182.790775][ T8849] ? __fget_files+0x2a/0x420 [ 182.790805][ T8849] ? __fget_files+0x3a0/0x420 [ 182.790858][ T8849] __x64_sys_sendmsg+0x19b/0x260 [ 182.790882][ T8849] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 182.790916][ T8849] ? __pfx_ksys_write+0x10/0x10 [ 182.790950][ T8849] ? do_syscall_64+0xbe/0x3b0 [ 182.790982][ T8849] do_syscall_64+0xfa/0x3b0 [ 182.791007][ T8849] ? lockdep_hardirqs_on+0x9c/0x150 [ 182.791032][ T8849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.791052][ T8849] ? clear_bhb_loop+0x60/0xb0 [ 182.791077][ T8849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.791096][ T8849] RIP: 0033:0x7fde9618e969 [ 182.791112][ T8849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.791127][ T8849] RSP: 002b:00007fde97087038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.791147][ T8849] RAX: ffffffffffffffda RBX: 00007fde963b6080 RCX: 00007fde9618e969 [ 182.791160][ T8849] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 182.791171][ T8849] RBP: 00007fde97087090 R08: 0000000000000000 R09: 0000000000000000 [ 182.791183][ T8849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 182.791193][ T8849] R13: 0000000000000001 R14: 00007fde963b6080 R15: 00007ffd18731378 [ 182.791222][ T8849] [ 183.315146][ T51] Bluetooth: hci0: command 0x0c20 tx timeout [ 183.345157][ T8551] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 183.355958][ T8551] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 183.510585][ T8843] 8021q: adding VLAN 0 to HW filter on device bond8 [ 183.551425][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.558677][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.795645][ T8846] x_tables: unsorted underflow at hook 2 [ 184.038296][ T8881] __nla_validate_parse: 1 callbacks suppressed [ 184.038314][ T8881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.666'. [ 184.148286][ T8887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.666'. [ 184.270145][ T8890] netlink: 168 bytes leftover after parsing attributes in process `syz.1.667'. [ 184.379830][ T8890] netlink: 20 bytes leftover after parsing attributes in process `syz.1.667'. [ 184.495115][ T8897] x_tables: duplicate underflow at hook 3 [ 184.576734][ T8551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.813948][ T8551] veth0_vlan: entered promiscuous mode [ 184.871953][ T8551] veth1_vlan: entered promiscuous mode [ 185.016862][ T8551] veth0_macvtap: entered promiscuous mode [ 185.108996][ T8551] veth1_macvtap: entered promiscuous mode [ 185.161175][ T8921] netlink: 'syz.1.673': attribute type 1 has an invalid length. [ 185.331201][ T8930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.676'. [ 185.358130][ T8921] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.378136][ T8551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.391936][ T8551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.404047][ T8551] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.417446][ T8551] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.419902][ T8932] netlink: 16 bytes leftover after parsing attributes in process `syz.2.675'. [ 185.427104][ T8551] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.446305][ T8551] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.470892][ T8923] FAULT_INJECTION: forcing a failure. [ 185.470892][ T8923] name failslab, interval 1, probability 0, space 0, times 0 [ 185.486178][ T8923] CPU: 1 UID: 0 PID: 8923 Comm: syz.1.673 Not tainted 6.15.0-syzkaller-07803-g3382a1ed7f77 #0 PREEMPT(full) [ 185.486208][ T8923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 185.486221][ T8923] Call Trace: [ 185.486229][ T8923] [ 185.486238][ T8923] dump_stack_lvl+0x189/0x250 [ 185.486277][ T8923] ? __pfx____ratelimit+0x10/0x10 [ 185.486303][ T8923] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.486336][ T8923] ? __pfx__printk+0x10/0x10 [ 185.486362][ T8923] ? __pfx___might_resched+0x10/0x10 [ 185.486402][ T8923] ? fs_reclaim_acquire+0x7d/0x100 [ 185.486429][ T8923] should_fail_ex+0x414/0x560 [ 185.486462][ T8923] should_failslab+0xa8/0x100 [ 185.486496][ T8923] __kmalloc_cache_noprof+0x70/0x3d0 [ 185.486527][ T8923] ? alloc_netdev_mqs+0xbd5/0x11e0 [ 185.486550][ T8923] ? __xdp_rxq_info_reg+0x189/0x2a0 [ 185.486588][ T8923] alloc_netdev_mqs+0xbd5/0x11e0 [ 185.486622][ T8923] rtnl_create_link+0x31f/0xd10 [ 185.486655][ T8923] rtnl_newlink_create+0x25c/0xb00 [ 185.486695][ T8923] ? __mutex_lock+0x51b/0xe80 [ 185.486728][ T8923] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 185.486760][ T8923] ? rtnl_newlink+0x8db/0x1c70 [ 185.486793][ T8923] ? __pfx___mutex_lock+0x10/0x10 [ 185.486832][ T8923] ? ns_capable+0x8a/0xf0 [ 185.486867][ T8923] rtnl_newlink+0x16d6/0x1c70 [ 185.486899][ T8923] ? netlink_sendmsg+0x805/0xb30 [ 185.486934][ T8923] ? __pfx_rtnl_newlink+0x10/0x10 [ 185.486993][ T8923] ? kasan_quarantine_put+0xdd/0x220 [ 185.487019][ T8923] ? lockdep_hardirqs_on+0x9c/0x150 [ 185.487052][ T8923] ? nlmon_xmit+0xb0/0x100 [ 185.487082][ T8923] ? kmem_cache_free+0x18f/0x400 [ 185.487121][ T8923] ? __local_bh_enable_ip+0x12d/0x1c0 [ 185.487153][ T8923] ? lockdep_hardirqs_on+0x9c/0x150 [ 185.487184][ T8923] ? __local_bh_enable_ip+0x12d/0x1c0 [ 185.487214][ T8923] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 185.487250][ T8923] ? __dev_queue_xmit+0x27e/0x3a70 [ 185.487288][ T8923] ? __lock_acquire+0xab9/0xd20 [ 185.487346][ T8923] ? __pfx_rtnl_newlink+0x10/0x10 [ 185.487382][ T8923] rtnetlink_rcv_msg+0x7cf/0xb70 [ 185.487415][ T8923] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 185.487443][ T8923] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 185.487469][ T8923] ? ref_tracker_free+0x63a/0x7d0 [ 185.487496][ T8923] ? __copy_skb_header+0xa7/0x550 [ 185.487520][ T8923] ? __pfx_ref_tracker_free+0x10/0x10 [ 185.487561][ T8923] netlink_rcv_skb+0x205/0x470 [ 185.487596][ T8923] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 185.487628][ T8923] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 185.487675][ T8923] ? netlink_deliver_tap+0x2e/0x1b0 [ 185.487707][ T8923] ? netlink_deliver_tap+0x2e/0x1b0 [ 185.487746][ T8923] netlink_unicast+0x758/0x8d0 [ 185.487789][ T8923] netlink_sendmsg+0x805/0xb30 [ 185.487820][ T8923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.487844][ T8923] ? aa_sock_msg_perm+0x94/0x160 [ 185.487873][ T8923] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 185.487897][ T8923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.487916][ T8923] __sock_sendmsg+0x21c/0x270 [ 185.487946][ T8923] ____sys_sendmsg+0x505/0x830 [ 185.487974][ T8923] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.488002][ T8923] ? import_iovec+0x74/0xa0 [ 185.488028][ T8923] ___sys_sendmsg+0x21f/0x2a0 [ 185.488052][ T8923] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.488116][ T8923] ? __fget_files+0x2a/0x420 [ 185.488147][ T8923] ? __fget_files+0x3a0/0x420 [ 185.488191][ T8923] __x64_sys_sendmsg+0x19b/0x260 [ 185.488216][ T8923] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 185.488249][ T8923] ? __pfx_ksys_write+0x10/0x10 [ 185.488283][ T8923] ? do_syscall_64+0xbe/0x3b0 [ 185.488314][ T8923] do_syscall_64+0xfa/0x3b0 [ 185.488339][ T8923] ? lockdep_hardirqs_on+0x9c/0x150 [ 185.488363][ T8923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.488391][ T8923] ? clear_bhb_loop+0x60/0xb0 [ 185.488417][ T8923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.488439][ T8923] RIP: 0033:0x7f7b6cb8e969 [ 185.488457][ T8923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.488474][ T8923] RSP: 002b:00007f7b6da94038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.488496][ T8923] RAX: ffffffffffffffda RBX: 00007f7b6cdb6080 RCX: 00007f7b6cb8e969 [ 185.488511][ T8923] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 185.488524][ T8923] RBP: 00007f7b6da94090 R08: 0000000000000000 R09: 0000000000000000 [ 185.488537][ T8923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 185.488548][ T8923] R13: 0000000000000001 R14: 00007f7b6cdb6080 R15: 00007ffd1a45b858 [ 185.488583][ T8923] [ 185.949928][ T8928] netlink: 'syz.2.675': attribute type 12 has an invalid length. [ 186.435865][ T5885] IPVS: starting estimator thread 0... [ 186.532861][ T8945] IPVS: using max 23 ests per chain, 55200 per kthread [ 186.658223][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.684172][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.922527][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.932218][ T8960] netlink: 248 bytes leftover after parsing attributes in process `syz.3.683'. [ 186.951477][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.003378][ T8958] tipc: Started in network mode [ 187.023364][ T8958] tipc: Node identity 16e34277e14b, cluster identity 4711 [ 187.040966][ T8958] tipc: Enabled bearer , priority 0 [ 187.178021][ T8960] syzkaller0: entered promiscuous mode [ 187.185132][ T8960] syzkaller0: entered allmulticast mode [ 187.192598][ T8960] tipc: Resetting bearer [ 187.284092][ T8957] tipc: Resetting bearer [ 188.173910][ T5984] tipc: Node number set to 4154999415 [ 188.649934][ T8986] netlink: 'syz.2.687': attribute type 1 has an invalid length. [ 189.067796][ T5151] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 189.085437][ T5151] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 189.102584][ T5151] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 189.125029][ T5151] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 189.135423][ T5151] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 189.295055][ T8957] tipc: Disabling bearer [ 189.337840][ T64] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.472310][ T8986] 8021q: adding VLAN 0 to HW filter on device bond5 [ 189.481125][ T8987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.688'. [ 189.481855][ T8995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.689'. [ 189.536479][ T8997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.689'. [ 189.546756][ T8988] FAULT_INJECTION: forcing a failure. [ 189.546756][ T8988] name failslab, interval 1, probability 0, space 0, times 0 [ 189.572025][ T8988] CPU: 1 UID: 0 PID: 8988 Comm: syz.2.687 Not tainted 6.15.0-syzkaller-07803-g3382a1ed7f77 #0 PREEMPT(full) [ 189.572054][ T8988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 189.572066][ T8988] Call Trace: [ 189.572075][ T8988] [ 189.572084][ T8988] dump_stack_lvl+0x189/0x250 [ 189.572122][ T8988] ? __pfx____ratelimit+0x10/0x10 [ 189.572148][ T8988] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.572197][ T8988] ? __pfx__printk+0x10/0x10 [ 189.572227][ T8988] ? __pfx___might_resched+0x10/0x10 [ 189.572256][ T8988] ? fs_reclaim_acquire+0x7d/0x100 [ 189.572283][ T8988] should_fail_ex+0x414/0x560 [ 189.572315][ T8988] ? alloc_netdev_mqs+0xc9e/0x11e0 [ 189.572338][ T8988] should_failslab+0xa8/0x100 [ 189.572372][ T8988] __kvmalloc_node_noprof+0x168/0x600 [ 189.572404][ T8988] ? alloc_netdev_mqs+0xc9e/0x11e0 [ 189.572426][ T8988] ? alloc_netdev_mqs+0xc36/0x11e0 [ 189.572455][ T8988] alloc_netdev_mqs+0xc9e/0x11e0 [ 189.572489][ T8988] rtnl_create_link+0x31f/0xd10 [ 189.572521][ T8988] rtnl_newlink_create+0x25c/0xb00 [ 189.572560][ T8988] ? __mutex_lock+0x51b/0xe80 [ 189.572593][ T8988] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 189.572623][ T8988] ? rtnl_newlink+0x8db/0x1c70 [ 189.572655][ T8988] ? __pfx___mutex_lock+0x10/0x10 [ 189.572694][ T8988] ? ns_capable+0x8a/0xf0 [ 189.572729][ T8988] rtnl_newlink+0x16d6/0x1c70 [ 189.572779][ T8988] ? __pfx_rtnl_newlink+0x10/0x10 [ 189.572806][ T8988] ? is_bpf_text_address+0x26/0x2b0 [ 189.572845][ T8988] ? __lock_acquire+0xab9/0xd20 [ 189.572892][ T8988] ? __lock_acquire+0xab9/0xd20 [ 189.572943][ T8988] ? is_bpf_text_address+0x26/0x2b0 [ 189.572978][ T8988] ? is_bpf_text_address+0x292/0x2b0 [ 189.573006][ T8988] ? is_bpf_text_address+0x26/0x2b0 [ 189.573039][ T8988] ? kernel_text_address+0xa5/0xe0 [ 189.573080][ T8988] ? __lock_acquire+0xab9/0xd20 [ 189.573136][ T8988] ? __pfx_rtnl_newlink+0x10/0x10 [ 189.573172][ T8988] rtnetlink_rcv_msg+0x7cf/0xb70 [ 189.573206][ T8988] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 189.573235][ T8988] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 189.573285][ T8988] netlink_rcv_skb+0x205/0x470 [ 189.573318][ T8988] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 189.573350][ T8988] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 189.573398][ T8988] ? netlink_deliver_tap+0x2e/0x1b0 [ 189.573429][ T8988] ? netlink_deliver_tap+0x2e/0x1b0 [ 189.573469][ T8988] netlink_unicast+0x758/0x8d0 [ 189.573511][ T8988] netlink_sendmsg+0x805/0xb30 [ 189.573542][ T8988] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.573566][ T8988] ? aa_sock_msg_perm+0x94/0x160 [ 189.573595][ T8988] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 189.573620][ T8988] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.573640][ T8988] __sock_sendmsg+0x21c/0x270 [ 189.573672][ T8988] ____sys_sendmsg+0x505/0x830 [ 189.573699][ T8988] ? __pfx_____sys_sendmsg+0x10/0x10 [ 189.573730][ T8988] ? import_iovec+0x74/0xa0 [ 189.573755][ T8988] ___sys_sendmsg+0x21f/0x2a0 [ 189.573779][ T8988] ? __pfx____sys_sendmsg+0x10/0x10 [ 189.573840][ T8988] ? __fget_files+0x2a/0x420 [ 189.573870][ T8988] ? __fget_files+0x3a0/0x420 [ 189.573914][ T8988] __x64_sys_sendmsg+0x19b/0x260 [ 189.573940][ T8988] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 189.573972][ T8988] ? __pfx_ksys_write+0x10/0x10 [ 189.574006][ T8988] ? do_syscall_64+0xbe/0x3b0 [ 189.574037][ T8988] do_syscall_64+0xfa/0x3b0 [ 189.574062][ T8988] ? lockdep_hardirqs_on+0x9c/0x150 [ 189.574086][ T8988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.574107][ T8988] ? clear_bhb_loop+0x60/0xb0 [ 189.574133][ T8988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.574153][ T8988] RIP: 0033:0x7f84bdd8e969 [ 189.574179][ T8988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.574196][ T8988] RSP: 002b:00007f84beb3d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.574217][ T8988] RAX: ffffffffffffffda RBX: 00007f84bdfb6080 RCX: 00007f84bdd8e969 [ 189.574233][ T8988] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 189.574246][ T8988] RBP: 00007f84beb3d090 R08: 0000000000000000 R09: 0000000000000000 [ 189.574259][ T8988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 189.574271][ T8988] R13: 0000000000000001 R14: 00007f84bdfb6080 R15: 00007ffe4d5e7ed8 [ 189.574304][ T8988] [ 190.059199][ T9001] netlink: set zone limit has 8 unknown bytes [ 190.111329][ T64] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.235623][ T9003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.692'. [ 190.599818][ T64] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.720493][ T9024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.697'. [ 190.756300][ T9024] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 190.903523][ T64] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.202667][ T9038] netlink: 'syz.3.702': attribute type 10 has an invalid length. [ 191.215251][ T9038] netlink: 40 bytes leftover after parsing attributes in process `syz.3.702'. [ 191.230273][ T51] Bluetooth: hci2: command tx timeout [ 191.243143][ T9038] dummy0: entered promiscuous mode [ 191.287805][ T9038] bridge0: port 3(dummy0) entered blocking state [ 191.317063][ T9038] bridge0: port 3(dummy0) entered disabled state [ 191.367134][ T9038] dummy0: entered allmulticast mode [ 191.402136][ T9038] bridge0: port 3(dummy0) entered blocking state [ 191.409049][ T9038] bridge0: port 3(dummy0) entered forwarding state [ 191.514631][ T9050] netlink: 72 bytes leftover after parsing attributes in process `syz.2.704'. [ 191.552540][ T9053] netlink: 24 bytes leftover after parsing attributes in process `syz.1.705'. [ 191.743251][ T64] bridge_slave_1: left allmulticast mode [ 191.748971][ T64] bridge_slave_1: left promiscuous mode [ 191.776572][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.817191][ T64] bridge_slave_0: left allmulticast mode [ 191.839503][ T64] bridge_slave_0: left promiscuous mode [ 191.845336][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.169459][ T9078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.711'. [ 192.326339][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.338565][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.351241][ T64] bond0 (unregistering): Released all slaves [ 192.375721][ T9063] tipc: Enabled bearer , priority 10 [ 192.587777][ T9085] netlink: 24 bytes leftover after parsing attributes in process `syz.4.713'. [ 192.991796][ T8990] chnl_net:caif_netlink_parms(): no params data found [ 193.064447][ T9105] bridge0: port 3(netdevsim3) entered blocking state [ 193.096404][ T9105] bridge0: port 3(netdevsim3) entered disabled state [ 193.110246][ T9105] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 193.143003][ T9105] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 193.310314][ T51] Bluetooth: hci2: command tx timeout [ 193.489529][ T9125] netlink: 'syz.2.721': attribute type 8 has an invalid length. [ 194.232440][ T9146] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 194.275919][ T8990] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.331270][ T8990] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.338595][ T8990] bridge_slave_0: entered allmulticast mode [ 194.404908][ T8990] bridge_slave_0: entered promiscuous mode [ 194.438308][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.470835][ T8990] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.525981][ T8990] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.560167][ T8990] bridge_slave_1: entered allmulticast mode [ 194.581735][ T8990] bridge_slave_1: entered promiscuous mode [ 194.766477][ T9170] IPVS: persistence engine module ip_vs_pe_À not found [ 194.839526][ T64] hsr_slave_0: left promiscuous mode [ 194.859375][ T64] hsr_slave_1: left promiscuous mode [ 194.865421][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.879391][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.900519][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.908126][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.971438][ T64] veth1_macvtap: left promiscuous mode [ 194.977056][ T64] veth0_macvtap: left promiscuous mode [ 194.990159][ T64] veth1_vlan: left promiscuous mode [ 194.995540][ T64] veth0_vlan: left promiscuous mode [ 195.389887][ T51] Bluetooth: hci2: command tx timeout [ 195.606642][ T64] team0 (unregistering): Port device team_slave_1 removed [ 195.645185][ T64] team0 (unregistering): Port device team_slave_0 removed [ 196.126676][ T8990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.143546][ T9180] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.194703][ T9180] netlink: 'syz.1.732': attribute type 1 has an invalid length. [ 196.213677][ T9180] __nla_validate_parse: 2 callbacks suppressed [ 196.213696][ T9180] netlink: 224 bytes leftover after parsing attributes in process `syz.1.732'. [ 196.231886][ T8990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.264872][ T9185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.733'. [ 196.402966][ T8990] team0: Port device team_slave_0 added [ 196.488421][ T8990] team0: Port device team_slave_1 added [ 196.584932][ T9193] netlink: 52 bytes leftover after parsing attributes in process `syz.4.735'. [ 196.664273][ T9196] netlink: 52 bytes leftover after parsing attributes in process `syz.4.735'. [ 196.678033][ T9195] tun0: tun_chr_ioctl cmd 1074025675 [ 196.683565][ T9195] tun0: persist disabled [ 196.759123][ T9199] netlink: 388 bytes leftover after parsing attributes in process `syz.4.735'. [ 196.800114][ T8990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.817370][ T8990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.881443][ T8990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.952105][ T8990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.966945][ T8990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.000665][ T8990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.325253][ T8990] hsr_slave_0: entered promiscuous mode [ 197.343685][ T8990] hsr_slave_1: entered promiscuous mode [ 197.364150][ T8990] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.381147][ T8990] Cannot create hsr debugfs directory [ 197.470114][ T51] Bluetooth: hci2: command tx timeout [ 198.360643][ T9248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.746'. [ 198.571322][ T9256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.747'. [ 198.672009][ T9260] netlink: 'syz.4.748': attribute type 1 has an invalid length. [ 198.724457][ T9265] netlink: 52 bytes leftover after parsing attributes in process `syz.4.748'. [ 198.742083][ T9257] tipc: Enabling of bearer rejected, failed to enable media [ 198.784033][ T9256] macsec0: entered promiscuous mode [ 198.884797][ T9260] 8021q: adding VLAN 0 to HW filter on device bond6 [ 199.446288][ T9301] netlink: 328 bytes leftover after parsing attributes in process `syz.3.755'. [ 199.469927][ T9302] netlink: 328 bytes leftover after parsing attributes in process `syz.3.755'. [ 199.478230][ T9296] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 199.734083][ T8990] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 199.754022][ T8990] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 199.778676][ T8990] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 199.820456][ T8990] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 199.875317][ T9315] IPVS: length: 157 != 24 [ 200.085734][ T9319] netlink: 'syz.2.762': attribute type 16 has an invalid length. [ 200.107384][ T9319] netlink: 'syz.2.762': attribute type 17 has an invalid length. [ 200.162622][ T8990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.271529][ T8990] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.301949][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.309166][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.362305][ T8094] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.369527][ T8094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.968332][ T9342] C: renamed from lo (while UP) [ 201.034767][ T9352] NCSI netlink: No device for ifindex 0 [ 201.330749][ T9362] netem: change failed [ 201.360344][ T9364] __nla_validate_parse: 7 callbacks suppressed [ 201.360364][ T9364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.767'. [ 201.855707][ T8990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.875219][ T9386] netlink: 60 bytes leftover after parsing attributes in process `syz.2.776'. [ 202.034148][ T8990] veth0_vlan: entered promiscuous mode [ 202.103003][ T8990] veth1_vlan: entered promiscuous mode [ 202.118760][ T9394] x_tables: duplicate underflow at hook 2 [ 202.159553][ T8990] veth0_macvtap: entered promiscuous mode [ 202.190246][ T9398] netlink: 'syz.2.779': attribute type 1 has an invalid length. [ 202.200070][ T8990] veth1_macvtap: entered promiscuous mode [ 202.227758][ T9402] x_tables: duplicate underflow at hook 1 [ 202.379987][ T8990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.457754][ T8990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.508781][ T8990] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.544614][ T8990] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.578274][ T8990] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.621731][ T8990] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.662285][ T9413] x_tables: duplicate underflow at hook 2 [ 202.833538][ T9418] netlink: 'syz.4.782': attribute type 1 has an invalid length. [ 202.961609][ T9417] veth3: entered promiscuous mode [ 203.024912][ T9418] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 203.068083][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.101209][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.222252][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.269381][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.616376][ T9452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.789'. [ 203.630108][ T9452] netlink: 12 bytes leftover after parsing attributes in process `syz.3.789'. [ 203.639147][ T9452] netlink: 'syz.3.789': attribute type 7 has an invalid length. [ 204.179093][ T9470] netlink: 28 bytes leftover after parsing attributes in process `syz.4.793'. [ 204.202230][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.591891][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.738795][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.990525][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.292121][ T36] bridge_slave_1: left allmulticast mode [ 205.297842][ T36] bridge_slave_1: left promiscuous mode [ 205.310413][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.330922][ T36] bridge_slave_0: left allmulticast mode [ 205.336624][ T36] bridge_slave_0: left promiscuous mode [ 205.343059][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.199501][ T9512] xt_ecn: cannot match TCP bits for non-tcp packets [ 206.722264][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.739650][ T5151] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 206.750266][ T5151] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 206.758087][ T5151] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 206.767545][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.778175][ T5151] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 206.790052][ T5151] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 206.798858][ T36] bond0 (unregistering): Released all slaves [ 207.144607][ T9533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.803'. [ 207.581442][ T9545] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 207.589087][ T9545] team0: Device ipvlan2 is already an upper device of the team interface [ 208.558357][ T9577] netlink: 248 bytes leftover after parsing attributes in process `syz.3.813'. [ 208.667763][ T9572] tipc: Enabled bearer , priority 0 [ 208.829571][ T5151] Bluetooth: hci2: command tx timeout [ 208.878039][ T9575] syzkaller0: entered promiscuous mode [ 208.883747][ T9575] syzkaller0: entered allmulticast mode [ 208.890678][ T9575] tipc: Resetting bearer [ 208.969486][ T36] hsr_slave_0: left promiscuous mode [ 208.977624][ T36] hsr_slave_1: left promiscuous mode [ 208.988910][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.036963][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.057595][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.079306][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.131030][ T36] veth1_macvtap: left promiscuous mode [ 209.136812][ T36] veth0_macvtap: left promiscuous mode [ 209.170604][ T36] veth1_vlan: left promiscuous mode [ 209.184757][ T36] veth0_vlan: left promiscuous mode [ 209.900661][ T36] team0 (unregistering): Port device team_slave_1 removed [ 210.004191][ T36] team0 (unregistering): Port device team_slave_0 removed [ 210.794629][ T64] tipc: Resetting bearer [ 210.803215][ T9570] tipc: Resetting bearer [ 210.894444][ T9599] netlink: 'syz.4.820': attribute type 75 has an invalid length. [ 210.909617][ T51] Bluetooth: hci2: command tx timeout [ 211.872181][ T51] Bluetooth: hci0: command 0x0c20 tx timeout [ 212.122757][ T9570] tipc: Disabling bearer [ 212.334406][ T9605] vlan2: entered promiscuous mode [ 212.384958][ T9605] syz_tun: entered promiscuous mode [ 212.849432][ T9627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.826'. [ 212.902475][ T9629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.827'. [ 212.904887][ T9627] openvswitch: netlink: Flow actions attr not present in new flow. [ 212.934138][ T9629] netlink: 24 bytes leftover after parsing attributes in process `syz.2.827'. [ 212.993408][ T5151] Bluetooth: hci2: command tx timeout [ 213.083181][ T9530] chnl_net:caif_netlink_parms(): no params data found [ 213.731015][ T9658] netlink: 248 bytes leftover after parsing attributes in process `syz.4.832'. [ 213.742478][ T9658] tipc: Started in network mode [ 213.747409][ T9658] tipc: Node identity 6e701b0d57fb, cluster identity 4711 [ 213.755818][ T9658] tipc: Enabled bearer , priority 0 [ 213.897731][ T9530] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.932406][ T9530] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.954116][ T9530] bridge_slave_0: entered allmulticast mode [ 213.973623][ T9530] bridge_slave_0: entered promiscuous mode [ 214.006526][ T9656] tipc: Disabling bearer [ 214.093681][ T9530] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.104041][ T9530] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.113906][ T9530] bridge_slave_1: entered allmulticast mode [ 214.122467][ T9530] bridge_slave_1: entered promiscuous mode [ 214.187157][ T9530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.204211][ T9670] lo speed is unknown, defaulting to 1000 [ 214.242719][ T9670] lo speed is unknown, defaulting to 1000 [ 214.262057][ T9530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.299658][ T9670] lo speed is unknown, defaulting to 1000 [ 214.537948][ T9530] team0: Port device team_slave_0 added [ 214.562781][ T9530] team0: Port device team_slave_1 added [ 214.653371][ T9694] netlink: 'syz.1.842': attribute type 1 has an invalid length. [ 215.012490][ T9670] infiniband syz0: set active [ 215.027086][ T9670] infiniband syz0: added lo [ 215.071186][ T5836] Bluetooth: hci2: command tx timeout [ 215.162070][ T9530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.169102][ T9530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.185506][ T9670] RDS/IB: syz0: added [ 215.201825][ T9670] smc: adding ib device syz0 with port count 1 [ 215.208128][ T9670] smc: ib device syz0 port 1 has pnetid [ 215.226617][ T9530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.241398][ T5984] lo speed is unknown, defaulting to 1000 [ 215.247440][ T9] lo speed is unknown, defaulting to 1000 [ 215.254196][ T9670] lo speed is unknown, defaulting to 1000 [ 215.281143][ T9530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.288144][ T9530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.359407][ T9530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.396502][ T9714] tipc: Enabling of bearer rejected, failed to enable media [ 215.546960][ T9722] netlink: 24 bytes leftover after parsing attributes in process `syz.2.844'. [ 215.929612][ T9720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.845'. [ 216.113072][ T9530] hsr_slave_0: entered promiscuous mode [ 216.137491][ T9530] hsr_slave_1: entered promiscuous mode [ 216.155459][ T9530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.165826][ T9530] Cannot create hsr debugfs directory [ 216.350136][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.846'. [ 216.560307][ T9670] lo speed is unknown, defaulting to 1000 [ 216.570130][ T9746] netlink: 248 bytes leftover after parsing attributes in process `syz.2.849'. [ 216.633567][ T9746] tipc: Started in network mode [ 216.645774][ T9751] netlink: 'syz.4.850': attribute type 4 has an invalid length. [ 216.665744][ T9746] tipc: Node identity 3a33de726fc9, cluster identity 4711 [ 216.679412][ T9751] netlink: 17 bytes leftover after parsing attributes in process `syz.4.850'. [ 216.708525][ T9752] xt_hashlimit: invalid rate [ 216.709865][ T9746] tipc: Enabled bearer , priority 0 [ 216.847316][ T9744] tipc: Disabling bearer [ 217.007485][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 217.014279][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 217.020582][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 217.182224][ T9760] netlink: 'syz.1.853': attribute type 29 has an invalid length. [ 217.481657][ T9670] lo speed is unknown, defaulting to 1000 [ 217.740775][ T9794] netlink: 28 bytes leftover after parsing attributes in process `syz.4.859'. [ 217.820678][ T9794] erspan0: entered promiscuous mode [ 217.856651][ T9794] gretap0: entered promiscuous mode [ 217.867902][ T9794] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 217.895574][ T9794] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 218.171601][ T9808] __nla_validate_parse: 1 callbacks suppressed [ 218.171640][ T9808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.862'. [ 218.477378][ T9670] lo speed is unknown, defaulting to 1000 [ 218.497854][ T9811] netlink: 248 bytes leftover after parsing attributes in process `syz.2.864'. [ 218.561836][ T9811] tipc: Enabled bearer , priority 0 [ 218.571690][ T9530] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 218.592419][ T9530] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 218.628390][ T9810] tipc: Disabling bearer [ 218.659169][ T9530] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 218.741011][ T9530] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 219.058130][ T9828] tap0: tun_chr_ioctl cmd 1074025677 [ 219.083732][ T9828] tap0: linktype set to 65534 [ 219.098634][ T9828] tap0: tun_chr_ioctl cmd 1074025675 [ 219.106739][ T9828] tap0: persist enabled [ 219.229139][ T9530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.377598][ T9530] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.454301][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.461540][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.523379][ T9670] lo speed is unknown, defaulting to 1000 [ 219.536078][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.543372][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.548939][ T9853] xt_hashlimit: invalid interval [ 219.585931][ T9854] xt_hashlimit: invalid interval [ 219.875906][ T9862] netlink: 'syz.4.876': attribute type 11 has an invalid length. [ 219.907513][ T9862] netlink: 224 bytes leftover after parsing attributes in process `syz.4.876'. [ 220.212390][ T9872] netlink: 248 bytes leftover after parsing attributes in process `syz.2.878'. [ 220.417386][ T9872] syzkaller0: entered promiscuous mode [ 220.448706][ T9872] syzkaller0: entered allmulticast mode [ 222.764048][ T9530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.888571][ T9932] netlink: 24 bytes leftover after parsing attributes in process `syz.4.890'. [ 223.028590][ T9530] veth0_vlan: entered promiscuous mode [ 223.060108][ T9939] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 223.076540][ T9939] team0: Device ipvlan2 is already an upper device of the team interface [ 223.090539][ T9940] netlink: 164 bytes leftover after parsing attributes in process `syz.4.890'. [ 223.192869][ T9932] netlink: 16 bytes leftover after parsing attributes in process `syz.4.890'. [ 223.257039][ T9948] netlink: 'syz.3.894': attribute type 1 has an invalid length. [ 223.282673][ T9948] netlink: 'syz.3.894': attribute type 1 has an invalid length. [ 223.293441][ T9530] veth1_vlan: entered promiscuous mode [ 223.306064][ T9948] netlink: 'syz.3.894': attribute type 1 has an invalid length. [ 223.325784][ T9948] netlink: 'syz.3.894': attribute type 2 has an invalid length. [ 223.355006][ T9948] netlink: 76 bytes leftover after parsing attributes in process `syz.3.894'. [ 223.457138][ T9530] veth0_macvtap: entered promiscuous mode [ 223.476607][ T9530] veth1_macvtap: entered promiscuous mode [ 223.557909][ T9530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.607711][ T9530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.637697][ T9530] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.640973][ T9963] netlink: 24 bytes leftover after parsing attributes in process `syz.2.896'. [ 223.658658][ T9530] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.668551][ T9530] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.721864][ T9965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.897'. [ 223.729185][ T9530] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.007915][ T9980] netlink: 'syz.1.899': attribute type 1 has an invalid length. [ 224.030303][ T9980] netlink: 220 bytes leftover after parsing attributes in process `syz.1.899'. [ 224.053126][ T9980] netlink: 'syz.1.899': attribute type 1 has an invalid length. [ 224.116411][ T9986] netlink: 'syz.4.900': attribute type 1 has an invalid length. [ 224.241187][ T9989] netlink: 'syz.1.901': attribute type 11 has an invalid length. [ 224.259521][ T9989] netlink: 64 bytes leftover after parsing attributes in process `syz.1.901'. [ 224.515181][ T9994] netlink: 248 bytes leftover after parsing attributes in process `syz.1.903'. [ 224.724447][T10005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.904'. [ 224.756556][T10005] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.807562][ T9994] syzkaller0: entered promiscuous mode [ 224.823473][ T9994] syzkaller0: entered allmulticast mode [ 224.950276][T10009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.907'. [ 226.644270][ T8100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.685958][ T8100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.794823][ T8100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.817318][T10039] netlink: 240 bytes leftover after parsing attributes in process `syz.2.910'. [ 226.828849][ T8100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.271194][T10050] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 227.342387][T10059] netlink: 'syz.2.919': attribute type 5 has an invalid length. [ 227.504503][ T8100] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.608852][ T8100] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.741541][ T8100] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.798725][ T8100] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.977569][ T8100] bridge_slave_1: left allmulticast mode [ 227.984377][ T8100] bridge_slave_1: left promiscuous mode [ 227.990721][ T8100] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.004209][ T8100] bridge_slave_0: left allmulticast mode [ 228.010059][ T8100] bridge_slave_0: left promiscuous mode [ 228.016889][ T8100] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.400208][ T8100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.411576][ T8100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.425540][ T8100] bond0 (unregistering): Released all slaves [ 228.760937][T10087] __nla_validate_parse: 4 callbacks suppressed [ 228.760957][T10087] netlink: 248 bytes leftover after parsing attributes in process `syz.3.923'. [ 228.850272][T10089] No such timeout policy "syz0" [ 228.872871][T10081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.924'. [ 229.195381][T10104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.926'. [ 229.250843][T10087] syzkaller0: entered promiscuous mode [ 229.266026][T10087] syzkaller0: entered allmulticast mode [ 229.481664][T10108] netlink: 256 bytes leftover after parsing attributes in process `syz.4.928'. [ 229.578192][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 229.590162][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 229.602563][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 229.624264][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 229.634384][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 229.716304][T10115] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 229.723880][T10115] IPv6: NLM_F_CREATE should be set when creating new route [ 229.731310][T10115] IPv6: NLM_F_CREATE should be set when creating new route [ 229.738563][T10115] IPv6: NLM_F_CREATE should be set when creating new route [ 229.828497][T10115] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 229.912983][ T5984] IPVS: starting estimator thread 0... [ 230.010553][T10119] IPVS: using max 28 ests per chain, 67200 per kthread [ 230.663827][T10139] netlink: 'syz.4.934': attribute type 58 has an invalid length. [ 230.677456][T10139] netlink: 20 bytes leftover after parsing attributes in process `syz.4.934'. [ 231.715031][ T5151] Bluetooth: hci2: command tx timeout [ 231.807870][T10150] netlink: 'syz.2.937': attribute type 10 has an invalid length. [ 231.836253][T10136] tipc: Enabling of bearer rejected, failed to enable media [ 231.942486][T10159] netlink: 36 bytes leftover after parsing attributes in process `syz.2.937'. [ 232.152007][T10150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.171494][T10165] netlink: 'syz.1.939': attribute type 28 has an invalid length. [ 232.198720][T10165] netlink: 'syz.1.939': attribute type 3 has an invalid length. [ 232.240060][T10165] netlink: 132 bytes leftover after parsing attributes in process `syz.1.939'. [ 232.265375][T10150] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 232.274730][T10168] netlink: 'syz.1.939': attribute type 1 has an invalid length. [ 232.295566][T10168] netlink: 224 bytes leftover after parsing attributes in process `syz.1.939'. [ 232.309768][T10168] netlink: 'syz.1.939': attribute type 1 has an invalid length. [ 232.892939][ T8100] hsr_slave_0: left promiscuous mode [ 232.954867][ T8100] hsr_slave_1: left promiscuous mode [ 232.983488][ T8100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.999466][ T8100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.024463][ T8100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.025965][T10197] netlink: 248 bytes leftover after parsing attributes in process `syz.2.946'. [ 233.052586][ T8100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.165655][ T8100] veth1_macvtap: left promiscuous mode [ 233.182454][ T8100] veth0_macvtap: left promiscuous mode [ 233.196468][ T8100] veth1_vlan: left promiscuous mode [ 233.207577][ T8100] veth0_vlan: left promiscuous mode [ 233.667549][ T8100] team0 (unregistering): Port device team_slave_1 removed [ 233.706733][ T8100] team0 (unregistering): Port device team_slave_0 removed [ 233.793702][ T5151] Bluetooth: hci2: command tx timeout [ 234.140108][T10111] lo speed is unknown, defaulting to 1000 [ 234.445514][T10211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.950'. [ 234.466372][T10214] FAULT_INJECTION: forcing a failure. [ 234.466372][T10214] name failslab, interval 1, probability 0, space 0, times 0 [ 234.505208][T10214] CPU: 1 UID: 0 PID: 10214 Comm: syz.2.951 Not tainted 6.15.0-syzkaller-07803-g3382a1ed7f77 #0 PREEMPT(full) [ 234.505239][T10214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 234.505253][T10214] Call Trace: [ 234.505261][T10214] [ 234.505271][T10214] dump_stack_lvl+0x189/0x250 [ 234.505310][T10214] ? __pfx____ratelimit+0x10/0x10 [ 234.505336][T10214] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.505370][T10214] ? __pfx__printk+0x10/0x10 [ 234.505399][T10214] ? __pfx___might_resched+0x10/0x10 [ 234.505435][T10214] should_fail_ex+0x414/0x560 [ 234.505469][T10214] should_failslab+0xa8/0x100 [ 234.505503][T10214] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 234.505535][T10214] ? __alloc_skb+0x112/0x2d0 [ 234.505572][T10214] __alloc_skb+0x112/0x2d0 [ 234.505608][T10214] netlink_sendmsg+0x5c6/0xb30 [ 234.505640][T10214] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.505664][T10214] ? aa_sock_msg_perm+0x94/0x160 [ 234.505709][T10214] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 234.505734][T10214] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.505755][T10214] __sock_sendmsg+0x21c/0x270 [ 234.505786][T10214] ____sys_sendmsg+0x505/0x830 [ 234.505815][T10214] ? __pfx_____sys_sendmsg+0x10/0x10 [ 234.505847][T10214] ? import_iovec+0x74/0xa0 [ 234.505873][T10214] ___sys_sendmsg+0x21f/0x2a0 [ 234.505898][T10214] ? __pfx____sys_sendmsg+0x10/0x10 [ 234.505960][T10214] ? __fget_files+0x2a/0x420 [ 234.505992][T10214] ? __fget_files+0x3a0/0x420 [ 234.506036][T10214] __x64_sys_sendmsg+0x19b/0x260 [ 234.506062][T10214] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 234.506095][T10214] ? __pfx_ksys_write+0x10/0x10 [ 234.506120][T10214] ? rcu_is_watching+0x15/0xb0 [ 234.506157][T10214] ? do_syscall_64+0xbe/0x3b0 [ 234.506188][T10214] do_syscall_64+0xfa/0x3b0 [ 234.506214][T10214] ? lockdep_hardirqs_on+0x9c/0x150 [ 234.506239][T10214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.506260][T10214] ? clear_bhb_loop+0x60/0xb0 [ 234.506287][T10214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.506308][T10214] RIP: 0033:0x7f84bdd8e969 [ 234.506332][T10214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.506351][T10214] RSP: 002b:00007f84beb5e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.506374][T10214] RAX: ffffffffffffffda RBX: 00007f84bdfb5fa0 RCX: 00007f84bdd8e969 [ 234.506390][T10214] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 234.506403][T10214] RBP: 00007f84beb5e090 R08: 0000000000000000 R09: 0000000000000000 [ 234.506417][T10214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.506430][T10214] R13: 0000000000000000 R14: 00007f84bdfb5fa0 R15: 00007ffe4d5e7ed8 [ 234.506464][T10214] [ 235.036656][T10223] netlink: 236 bytes leftover after parsing attributes in process `syz.3.953'. [ 235.324621][T10237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.956'. [ 235.412644][T10233] xt_CT: No such helper "syz1" [ 235.875920][ T5151] Bluetooth: hci2: command tx timeout [ 236.228028][T10111] chnl_net:caif_netlink_parms(): no params data found [ 236.237344][T10263] netlink: 224 bytes leftover after parsing attributes in process `syz.2.961'. [ 236.281820][T10264] netlink: 224 bytes leftover after parsing attributes in process `syz.2.961'. [ 236.464544][T10270] netlink: 48 bytes leftover after parsing attributes in process `syz.1.962'. [ 236.897173][T10111] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.948629][T10111] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.984684][T10111] bridge_slave_0: entered allmulticast mode [ 237.013472][T10111] bridge_slave_0: entered promiscuous mode [ 237.061141][T10111] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.112943][T10111] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.133263][T10111] bridge_slave_1: entered allmulticast mode [ 237.161501][T10111] bridge_slave_1: entered promiscuous mode [ 237.431707][T10111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.483874][T10111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.541144][T10316] netlink: 'syz.1.972': attribute type 1 has an invalid length. [ 237.615616][T10322] netlink: 'syz.4.974': attribute type 1 has an invalid length. [ 237.856953][T10333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.975'. [ 237.882325][T10325] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 237.901811][T10333] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 237.949638][ T5151] Bluetooth: hci2: command tx timeout [ 237.964107][T10111] team0: Port device team_slave_0 added [ 238.102495][T10111] team0: Port device team_slave_1 added [ 238.300151][T10351] netlink: 60 bytes leftover after parsing attributes in process `syz.1.982'. [ 238.897749][T10355] tipc: New replicast peer: 10.1.1.2 [ 238.907076][T10355] tipc: Enabled bearer , priority 10 [ 238.933013][T10111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.955176][T10111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.003660][T10111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.023073][T10111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.034644][T10111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.070730][T10111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.127202][T10383] ieee802154 phy0 wpan0: encryption failed: -22 [ 239.225397][T10391] netlink: 36 bytes leftover after parsing attributes in process `syz.4.986'. [ 239.442301][T10111] hsr_slave_0: entered promiscuous mode [ 239.472891][T10111] hsr_slave_1: entered promiscuous mode [ 239.538702][T10111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.578532][T10111] Cannot create hsr debugfs directory [ 239.734893][T10411] netlink: 'syz.4.992': attribute type 16 has an invalid length. [ 239.749376][T10411] netlink: 'syz.4.992': attribute type 3 has an invalid length. [ 239.759386][T10411] netlink: 132 bytes leftover after parsing attributes in process `syz.4.992'. [ 239.902297][T10414] netlink: 'syz.3.993': attribute type 1 has an invalid length. [ 239.912666][T10414] netlink: 224 bytes leftover after parsing attributes in process `syz.3.993'. [ 239.939113][ T5916] tipc: Node number set to 965417741 [ 240.052177][T10411] syzkaller0: entered promiscuous mode [ 240.068102][T10411] syzkaller0: entered allmulticast mode [ 240.115749][T10427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.995'. [ 240.317477][T10433] netlink: 32 bytes leftover after parsing attributes in process `syz.1.996'. [ 240.393977][T10440] netlink: 72 bytes leftover after parsing attributes in process `syz.2.997'. [ 241.808214][T10440] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 242.665956][T10480] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 243.016816][T10494] x_tables: duplicate underflow at hook 3 [ 243.326111][T10503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1010'. [ 243.363050][T10503] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1010'. [ 243.727325][T10456] lo speed is unknown, defaulting to 1000 [ 243.736282][T10111] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 243.794860][T10111] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 243.845935][T10111] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 243.901652][T10111] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 243.969885][T10519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.297122][T10528] netlink: 576 bytes leftover after parsing attributes in process `syz.2.1018'. [ 244.301221][T10111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.335380][T10530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1019'. [ 244.412601][T10111] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.443466][T10532] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1019'. [ 244.467796][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.475061][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.532575][T10539] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 244.563569][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.570884][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.622144][T10535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.819803][T10551] netlink: 'syz.3.1023': attribute type 11 has an invalid length. [ 244.859316][T10551] __nla_validate_parse: 1 callbacks suppressed [ 244.859341][T10551] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1023'. [ 244.909582][T10551] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 245.489168][T10577] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1029'. [ 245.613492][T10111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.946978][T10111] veth0_vlan: entered promiscuous mode [ 246.131048][T10111] veth1_vlan: entered promiscuous mode [ 246.294877][T10111] veth0_macvtap: entered promiscuous mode [ 246.351575][T10111] veth1_macvtap: entered promiscuous mode [ 246.368456][T10600] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1035'. [ 246.483685][T10111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.556556][T10111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.618162][T10613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1037'. [ 246.618972][T10111] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.630574][T10613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1037'. [ 246.665832][T10111] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.685584][T10111] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.708924][T10111] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.792666][T10618] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 246.802044][T10618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1036'. [ 246.826408][T10618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1036'. [ 246.852558][T10618] netlink: 'syz.3.1036': attribute type 5 has an invalid length. [ 246.909831][ T5151] Bluetooth: hci0: command tx timeout [ 247.226064][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.259076][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.568752][T10639] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1042'. [ 247.642103][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.660412][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.898700][T10650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1045'. [ 247.920473][T10646] tipc: Cannot configure node identity twice [ 247.946178][T10650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1045'. [ 248.554545][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.818396][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.978094][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.091027][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.331770][ T36] bridge_slave_1: left allmulticast mode [ 249.337491][ T36] bridge_slave_1: left promiscuous mode [ 249.344521][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.355721][ T36] bridge_slave_0: left allmulticast mode [ 249.365674][ T36] bridge_slave_0: left promiscuous mode [ 249.377101][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.816477][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.904468][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.945949][ T36] bond0 (unregistering): Released all slaves [ 250.017313][T10703] __nla_validate_parse: 6 callbacks suppressed [ 250.017334][T10703] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1051'. [ 250.051987][T10701] netlink: 'syz.3.1053': attribute type 4 has an invalid length. [ 250.061526][T10703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1051'. [ 250.440448][T10710] openvswitch: netlink: Flow actions attr not present in new flow. [ 250.460948][T10721] netlink: 'syz.2.1058': attribute type 5 has an invalid length. [ 250.526024][T10721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1058'. [ 250.649805][T10724] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1060'. [ 250.752684][T10730] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1060'. [ 250.790453][T10726] ip6gre1: entered allmulticast mode [ 250.803802][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 250.812948][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 250.823635][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 250.832054][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 250.845231][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 250.967124][T10736] netlink: 'syz.2.1061': attribute type 8 has an invalid length. [ 251.006551][T10736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1061'. [ 251.067265][T10743] lo: entered promiscuous mode [ 251.078555][T10742] x_tables: duplicate underflow at hook 2 [ 251.091444][T10743] netlink: 'syz.3.1062': attribute type 2 has an invalid length. [ 251.122065][T10743] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.151418][ T5916] lo speed is unknown, defaulting to 1000 [ 251.175725][ T5916] syz0: Port: 1 Link DOWN [ 251.345666][ T5916] lo speed is unknown, defaulting to 1000 [ 252.215030][T10766] Cannot find del_set index 3 as target [ 252.240969][ T36] hsr_slave_0: left promiscuous mode [ 252.280021][T10764] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.293550][ T36] hsr_slave_1: left promiscuous mode [ 252.337790][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.360403][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.418963][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.443781][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.542552][T10780] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1071'. [ 252.638396][ T36] veth1_macvtap: left promiscuous mode [ 252.666318][ T36] veth0_macvtap: left promiscuous mode [ 252.699974][ T36] veth1_vlan: left promiscuous mode [ 252.705389][ T36] veth0_vlan: left promiscuous mode [ 252.775046][T10790] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1072'. [ 252.909708][ T5843] Bluetooth: hci2: command tx timeout [ 252.965637][T10799] delete_channel: no stack [ 253.151828][T10796] xt_CT: No such helper "pptp" [ 253.282636][ T5151] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 253.293113][ T5151] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 253.314187][ T5151] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 253.371243][ T5151] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 253.379568][ T5151] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 253.954286][ T36] team0 (unregistering): Port device team_slave_1 removed [ 254.013769][ T36] team0 (unregistering): Port device team_slave_0 removed [ 254.598509][T10734] lo speed is unknown, defaulting to 1000 [ 255.003992][ T5843] Bluetooth: hci2: command tx timeout [ 255.469554][ T5843] Bluetooth: hci0: command tx timeout [ 255.764283][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): left allmulticast mode [ 255.813960][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): left promiscuous mode [ 255.851987][ T36] bridge0: port 3(netdevsim3) entered disabled state [ 255.875416][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.897919][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.979803][T10805] lo speed is unknown, defaulting to 1000 [ 256.119879][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.205587][T10880] netlink: 'syz.4.1087': attribute type 1 has an invalid length. [ 256.245638][T10883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1086'. [ 256.303163][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.374265][T10882] ªªªªªª†³?ÂHº: renamed from lo [ 256.438123][T10887] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1088'. [ 256.528889][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.652237][T10890] netlink: 'syz.4.1089': attribute type 3 has an invalid length. [ 256.693123][T10890] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1089'. [ 257.069836][ T5843] Bluetooth: hci2: command tx timeout [ 257.203046][T10916] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 257.411028][T10734] chnl_net:caif_netlink_parms(): no params data found [ 257.497672][T10922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1095'. [ 257.514139][T10892] ªªªªªª†³?ÂHº speed is unknown, defaulting to 1000 [ 257.550141][ T5843] Bluetooth: hci0: command tx timeout [ 257.586092][ T36] bridge_slave_1: left allmulticast mode [ 257.594896][ T36] bridge_slave_1: left promiscuous mode [ 257.614995][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.691119][ T36] bridge_slave_0: left allmulticast mode [ 257.710521][ T36] bridge_slave_0: left promiscuous mode [ 257.716337][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.043513][ T36] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 258.257242][ T36] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 258.429180][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.440756][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.455370][ T36] bond0 (unregistering): Released all slaves [ 258.549098][ T36] bond1 (unregistering): Released all slaves [ 258.642125][ T36] bond2 (unregistering): Released all slaves [ 258.657634][ T36] bond3 (unregistering): Released all slaves [ 258.948844][T10945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1100'. [ 259.008883][T10805] chnl_net:caif_netlink_parms(): no params data found [ 259.042265][T10734] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.055750][T10734] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.064430][T10734] bridge_slave_0: entered allmulticast mode [ 259.073474][T10734] bridge_slave_0: entered promiscuous mode [ 259.087836][T10734] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.095466][T10734] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.111627][T10734] bridge_slave_1: entered allmulticast mode [ 259.124326][T10734] bridge_slave_1: entered promiscuous mode [ 259.149319][ T5843] Bluetooth: hci2: command tx timeout [ 259.629565][ T5843] Bluetooth: hci0: command tx timeout [ 259.941250][T10734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.296055][T10989] netlink: 'syz.2.1109': attribute type 1 has an invalid length. [ 260.307430][T10989] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1109'. [ 260.337705][T10734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.359730][T10985] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1109'. [ 260.368733][T10985] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1109'. [ 260.500800][T10805] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.508004][T10805] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.515580][T10805] bridge_slave_0: entered allmulticast mode [ 260.523974][T10805] bridge_slave_0: entered promiscuous mode [ 260.627495][T10990] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 260.691108][T10805] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.718279][T10805] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.738041][T10805] bridge_slave_1: entered allmulticast mode [ 260.785238][T10805] bridge_slave_1: entered promiscuous mode [ 260.846509][T10734] team0: Port device team_slave_0 added [ 260.880810][T10734] team0: Port device team_slave_1 added [ 261.106378][T10805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.128678][ T36] hsr_slave_0: left promiscuous mode [ 261.135440][ T36] hsr_slave_1: left promiscuous mode [ 261.142005][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.150088][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.158521][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.166019][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.191943][ T36] veth1_macvtap: left promiscuous mode [ 261.197508][ T36] veth0_macvtap: left promiscuous mode [ 261.203237][ T36] veth1_vlan: left promiscuous mode [ 261.208565][ T36] veth0_vlan: left promiscuous mode [ 261.712920][ T5151] Bluetooth: hci0: command tx timeout [ 261.926051][ T36] team0 (unregistering): Port device team_slave_1 removed [ 261.964166][ T36] team0 (unregistering): Port device team_slave_0 removed [ 262.274219][T10734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.285263][T10734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.312660][T10734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.325694][T10734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.332793][T10734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.358974][T10734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.374300][T10805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.514241][T10805] team0: Port device team_slave_0 added [ 262.534192][T10805] team0: Port device team_slave_1 added [ 262.636309][T10734] hsr_slave_0: entered promiscuous mode [ 262.650840][T10734] hsr_slave_1: entered promiscuous mode [ 262.656656][T11011] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1117'. [ 262.664928][T10734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.679250][T10734] Cannot create hsr debugfs directory [ 262.758700][T11018] xt_TPROXY: Can be used only with -p tcp or -p udp [ 262.769184][T11011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1117'. [ 262.781881][T11018] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1119'. [ 262.798270][T11011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1117'. [ 262.894239][T10805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.911200][T10805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.951615][T10805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.964011][T11025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1120'. [ 263.019399][T11029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1120'. [ 263.091127][T10805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.113212][T10805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.152963][T10805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.447234][ T36] IPVS: stop unused estimator thread 0... [ 263.733515][T10805] hsr_slave_0: entered promiscuous mode [ 263.760871][T10805] hsr_slave_1: entered promiscuous mode [ 263.771181][T10805] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.789566][ T5151] Bluetooth: hci0: command 0x0405 tx timeout [ 263.797617][T10805] Cannot create hsr debugfs directory [ 264.050951][T11068] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1127'. [ 264.179355][T11065] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1126'. [ 264.568595][T11079] veth0: entered promiscuous mode [ 264.610633][T11053] ªªªªªª†³?ÂHº speed is unknown, defaulting to 1000 [ 264.637854][T11080] netlink: 'syz.3.1130': attribute type 1 has an invalid length. [ 264.650741][T11080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1130'. [ 264.699006][T11080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1130'. [ 265.899102][T10734] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 265.981568][T10734] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 266.065143][T10734] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 266.090223][T10734] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 266.132507][T11124] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 266.405911][T10805] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 266.508725][T10805] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 266.618185][T10805] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 266.656057][T10805] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 266.972422][T10734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.024454][T10734] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.108906][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.116120][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.192880][T11155] sctp: [Deprecated]: syz.2.1147 (pid 11155) Use of struct sctp_assoc_value in delayed_ack socket option. [ 267.192880][T11155] Use struct sctp_sack_info instead [ 267.196370][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.216424][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.245166][T10805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.253181][T11155] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 267.434221][T10805] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.493702][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.500962][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.544824][T11163] netem: change failed [ 267.593233][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.600487][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.696030][T10734] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 267.941406][T11177] netlink: 'syz.3.1152': attribute type 2 has an invalid length. [ 267.980490][T11177] __nla_validate_parse: 5 callbacks suppressed [ 267.980509][T11177] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1152'. [ 268.030491][ T64] wlan1: Trigger new scan to find an IBSS to join [ 268.162910][T11185] ipvlan0: mtu less than device minimum [ 268.196160][T11185] netlink: 'syz.4.1153': attribute type 1 has an invalid length. [ 268.425303][T11191] 8021q: adding VLAN 0 to HW filter on device bond8 [ 268.451796][T11191] bond7: (slave bond8): making interface the new active one [ 268.459878][T11191] bond7: (slave bond8): Enslaving as an active interface with an up link [ 268.562063][T11201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1155'. [ 268.581064][T10734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.599475][T10805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.853722][T10805] veth0_vlan: entered promiscuous mode [ 268.888281][T10734] veth0_vlan: entered promiscuous mode [ 268.933618][T10805] veth1_vlan: entered promiscuous mode [ 268.947677][T11216] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 268.987173][T10734] veth1_vlan: entered promiscuous mode [ 269.156841][T10805] veth0_macvtap: entered promiscuous mode [ 269.226571][T10805] veth1_macvtap: entered promiscuous mode [ 269.264616][T10734] veth0_macvtap: entered promiscuous mode [ 269.307821][T10734] veth1_macvtap: entered promiscuous mode [ 269.348092][T10805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.364695][T10805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.376803][T10805] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.429622][T10805] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.438389][T10805] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.457689][T10805] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.488615][T11234] netlink: 'syz.4.1162': attribute type 21 has an invalid length. [ 269.533574][T10734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.564721][T11238] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1162'. [ 269.569824][T11234] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1162'. [ 269.625510][T11240] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1162'. [ 269.664011][T10734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.745505][T10734] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.799301][T10734] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.826228][T10734] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.858983][T10734] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.211483][ T2943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.246527][ T2943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.560333][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.579714][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.634118][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.674701][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.772777][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.823800][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.944062][T11271] can: request_module (can-proto-4) failed. [ 271.003144][ T8100] wlan1: Trigger new scan to find an IBSS to join [ 272.033192][ T1151] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.086895][T11253] ªªªªªª†³?ÂHº speed is unknown, defaulting to 1000 [ 272.253026][ T1151] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.647552][ T1151] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.803666][ T1151] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.036745][ T5151] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 273.045998][ T5151] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 273.054434][ T5151] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 273.064370][ T5151] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 273.074392][ T5151] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 273.165914][ T1151] bridge_slave_1: left allmulticast mode [ 273.177350][ T1151] bridge_slave_1: left promiscuous mode [ 273.183473][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.193871][ T1151] bridge_slave_0: left allmulticast mode [ 273.200649][ T1151] bridge_slave_0: left promiscuous mode [ 273.206580][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.643973][T11324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1175'. [ 273.705007][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.727810][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.765957][ T1151] bond0 (unregistering): Released all slaves [ 273.852962][T11327] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1176'. [ 274.031027][ T36] wlan1: Trigger new scan to find an IBSS to join [ 274.643902][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 274.653129][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 274.661841][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 274.681110][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 274.700037][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 275.007100][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.149707][ T5843] Bluetooth: hci0: command tx timeout [ 275.187312][T11351] Bluetooth: MGMT ver 1.23 [ 275.482482][T11313] ªªªªªª†³?ÂHº speed is unknown, defaulting to 1000 [ 276.140172][T11369] netlink: 'syz.3.1185': attribute type 64 has an invalid length. [ 276.157360][T11369] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1185'. [ 276.352889][T11375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1186'. [ 276.750500][ T5843] Bluetooth: hci2: command tx timeout [ 276.942961][T11402] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1190'. [ 277.078392][T11402] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1190'. [ 277.094096][T11402] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1190'. [ 277.169969][T11402] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1190'. [ 277.228584][T11402] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1190'. [ 277.234376][ T5843] Bluetooth: hci0: command tx timeout [ 277.242333][T11402] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1190'. [ 277.348850][ T1151] hsr_slave_0: left promiscuous mode [ 277.366574][ T1151] hsr_slave_1: left promiscuous mode [ 277.383350][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.406621][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.417477][T11417] sctp: [Deprecated]: syz.3.1194 (pid 11417) Use of int in maxseg socket option. [ 277.417477][T11417] Use struct sctp_assoc_value instead [ 277.445310][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.454235][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.547125][ T1151] veth1_macvtap: left promiscuous mode [ 277.564414][ T1151] veth0_macvtap: left promiscuous mode [ 277.574653][ T1151] veth1_vlan: left promiscuous mode [ 277.620369][ T1151] veth0_vlan: left promiscuous mode [ 278.523108][ T1151] team0 (unregistering): Port device team_slave_1 removed [ 278.600698][ T1151] team0 (unregistering): Port device team_slave_0 removed [ 278.830557][ T5843] Bluetooth: hci2: command tx timeout [ 279.177002][T11339] ªªªªªª†³?ÂHº speed is unknown, defaulting to 1000 [ 279.220330][T11313] chnl_net:caif_netlink_parms(): no params data found [ 279.311844][ T5843] Bluetooth: hci0: command tx timeout [ 279.725515][T11479] __nla_validate_parse: 28 callbacks suppressed [ 279.725535][T11479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1204'. [ 279.929163][T11313] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.943305][T11313] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.983505][T11313] bridge_slave_0: entered allmulticast mode [ 280.012611][T11313] bridge_slave_0: entered promiscuous mode [ 280.028140][T11313] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.044820][T11313] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.060250][T11313] bridge_slave_1: entered allmulticast mode [ 280.076625][T11313] bridge_slave_1: entered promiscuous mode [ 280.338746][T11313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.358742][T11313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.690464][ T1151] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.746766][T11502] bridge0: port 3(batadv2) entered blocking state [ 280.757827][T11502] bridge0: port 3(batadv2) entered disabled state [ 280.775892][T11502] batadv2: entered allmulticast mode [ 280.787955][T11502] batadv2: entered promiscuous mode [ 280.802806][T11313] team0: Port device team_slave_0 added [ 280.831641][T11313] team0: Port device team_slave_1 added [ 280.909467][ T5843] Bluetooth: hci2: command tx timeout [ 280.917358][ T1151] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.018261][T11516] netlink: 'syz.2.1215': attribute type 11 has an invalid length. [ 281.026737][T11516] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1215'. [ 281.038876][T11516] netlink: 'syz.2.1215': attribute type 1 has an invalid length. [ 281.113646][T11313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.122516][T11313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.148932][T11514] netlink: 'syz.4.1214': attribute type 41 has an invalid length. [ 281.156866][T11313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.240106][ T6599] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 281.246744][T11524] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1215'. [ 281.250105][ T6599] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 281.285976][T11518] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 281.295891][T11518] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 281.318196][T11518] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 281.334937][T11518] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 281.345349][T11526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1217'. [ 281.355979][T11518] bond7: (slave geneve3): making interface the new active one [ 281.364386][T11518] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 281.388467][ T1151] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.390149][ T5843] Bluetooth: hci0: command tx timeout [ 281.401015][T11527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1217'. [ 281.420991][T11313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.427968][T11313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.456789][T11313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.525857][T11524] 8021q: adding VLAN 0 to HW filter on device bond7 [ 281.710139][T11535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1219'. [ 281.730042][ T1151] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.738739][T11535] netlink: 71 bytes leftover after parsing attributes in process `syz.2.1219'. [ 281.837934][T11339] chnl_net:caif_netlink_parms(): no params data found [ 281.879930][T11540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1220'. [ 281.996976][T11313] hsr_slave_0: entered promiscuous mode [ 282.020574][T11313] hsr_slave_1: entered promiscuous mode [ 282.026950][T11313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.046925][T11545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1221'. [ 282.062460][T11313] Cannot create hsr debugfs directory [ 282.066217][T11545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1221'. [ 282.781849][T11339] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.789072][T11339] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.803980][T11339] bridge_slave_0: entered allmulticast mode [ 282.812691][T11339] bridge_slave_0: entered promiscuous mode [ 282.824055][T11571] tipc: Enabled bearer , priority 0 [ 282.977230][T11568] syzkaller0: entered promiscuous mode [ 282.984087][T11568] syzkaller0: entered allmulticast mode [ 282.990784][T11568] tipc: Resetting bearer [ 283.004591][ T1151] bridge_slave_1: left allmulticast mode [ 283.012978][ T5843] Bluetooth: hci2: command tx timeout [ 283.020177][ T1151] bridge_slave_1: left promiscuous mode [ 283.026003][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.041904][ T1151] bridge_slave_0: left allmulticast mode [ 283.047742][ T1151] bridge_slave_0: left promiscuous mode [ 283.054687][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.445700][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.457896][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.468819][ T1151] bond0 (unregistering): Released all slaves [ 283.488958][T11339] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.496450][T11339] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.503774][T11339] bridge_slave_1: entered allmulticast mode [ 283.511929][T11339] bridge_slave_1: entered promiscuous mode [ 283.575195][T11567] tipc: Resetting bearer [ 284.861518][T11567] tipc: Disabling bearer [ 285.083128][T11339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.211053][T11339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.774353][T11339] team0: Port device team_slave_0 added [ 285.787071][T11619] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1237'. [ 285.811799][T11339] team0: Port device team_slave_1 added [ 285.926076][T11626] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1238'. [ 286.086386][T11339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.103471][T11636] netlink: 'syz.3.1240': attribute type 1 has an invalid length. [ 286.106801][T11339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.155694][T11339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.187718][T11339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.196733][T11339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.224518][T11339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.574046][T11339] hsr_slave_0: entered promiscuous mode [ 286.606872][T11339] hsr_slave_1: entered promiscuous mode [ 286.628920][T11339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.658110][T11339] Cannot create hsr debugfs directory [ 287.047503][ T1151] hsr_slave_0: left promiscuous mode [ 287.061824][ T1151] hsr_slave_1: left promiscuous mode [ 287.075939][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.094271][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.115474][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.131281][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.175461][ T1151] veth1_macvtap: left promiscuous mode [ 287.181232][ T1151] veth0_macvtap: left promiscuous mode [ 287.187089][ T1151] veth1_vlan: left promiscuous mode [ 287.193505][ T1151] veth0_vlan: left promiscuous mode [ 287.895872][ T1151] team0 (unregistering): Port device team_slave_1 removed [ 287.935061][ T1151] team0 (unregistering): Port device team_slave_0 removed [ 288.337855][T11655] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 288.428313][T11313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 288.468315][T11313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 288.623438][T11313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 288.666708][T11313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 289.085578][T11687] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 289.132029][T11687] bond9: entered promiscuous mode [ 289.137287][T11687] bond9: entered allmulticast mode [ 289.143455][T11687] 8021q: adding VLAN 0 to HW filter on device bond9 [ 289.573661][T11313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.631357][T11313] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.756654][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.763939][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.838873][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.846142][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.900534][T11708] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.103205][T11339] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 290.174326][T11339] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 290.302054][T11339] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 290.355913][T11339] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 290.786379][T11339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.904779][T11339] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.914386][T11750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1267'. [ 290.968514][ T6599] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.975760][ T6599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.090909][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.098231][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.295642][T11313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.605396][T11313] veth0_vlan: entered promiscuous mode [ 291.707305][T11313] veth1_vlan: entered promiscuous mode [ 291.770878][T11313] veth0_macvtap: entered promiscuous mode [ 291.821897][T11313] veth1_macvtap: entered promiscuous mode [ 291.909858][T11766] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 291.934331][T11313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.943304][T11768] netlink: 516 bytes leftover after parsing attributes in process `syz.3.1271'. [ 292.004536][T11313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.077050][T11313] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.114863][T11313] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.126401][T11780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.150112][T11313] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.158881][T11313] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.229126][T11783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.279804][T11783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.350768][T11339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.439944][T11783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.473099][T11783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.492419][ T8100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.511189][ T8100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.563256][T11339] veth0_vlan: entered promiscuous mode [ 292.646403][ T8100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.652209][T11339] veth1_vlan: entered promiscuous mode [ 292.689410][ T8100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.787167][T11800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1279'. [ 292.817844][T11339] veth0_macvtap: entered promiscuous mode [ 292.830843][T11800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1279'. [ 292.876911][T11339] veth1_macvtap: entered promiscuous mode [ 293.072018][T11339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.086232][T11339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.126114][T11339] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.165611][T11339] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.174994][T11339] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.210455][T11339] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.433831][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.621572][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.909081][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.921847][T11832] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 294.000726][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.042378][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.085598][T11836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1288'. [ 294.139016][T11838] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1288'. [ 294.270367][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.318739][T11836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1288'. [ 294.355647][ T8094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.402107][ T8094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.490822][T11847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1290'. [ 294.651118][T11853] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1290'. [ 294.730000][T11339] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN PTI [ 294.741961][T11339] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 294.750407][T11339] CPU: 0 UID: 0 PID: 11339 Comm: syz-executor Not tainted 6.15.0-syzkaller-07803-g3382a1ed7f77 #0 PREEMPT(full) [ 294.762330][T11339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 294.772414][T11339] RIP: 0010:kernfs_rename_ns+0x3a/0x810 [ 294.778002][T11339] Code: ec 40 49 89 cf 48 89 54 24 08 49 89 f4 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 b1 c4 62 ff 49 8d 6e 30 49 89 ed 49 c1 ed 03 <41> 80 7c 1d 00 00 74 08 48 89 ef e8 36 e2 c5 ff 48 83 7d 00 00 0f [ 294.797638][T11339] RSP: 0018:ffffc900052477c8 EFLAGS: 00010206 [ 294.803722][T11339] RAX: ffffffff825d363f RBX: dffffc0000000000 RCX: ffff88805fb01e00 [ 294.811706][T11339] RDX: 0000000000000000 RSI: ffff888021efd870 RDI: 0000000000000000 [ 294.819687][T11339] RBP: 0000000000000030 R08: ffff88805fb01e00 R09: 0000000000000008 [ 294.827670][T11339] R10: 0000000000000007 R11: 0000000000000000 R12: ffff888021efd870 [ 294.835650][T11339] R13: 0000000000000006 R14: 0000000000000000 R15: 0000000000000000 [ 294.843630][T11339] FS: 0000000000000000(0000) GS:ffff888125c66000(0000) knlGS:0000000000000000 [ 294.852583][T11339] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 294.859181][T11339] CR2: 00007fc75ffb5f40 CR3: 00000000562bc000 CR4: 00000000003526f0 [ 294.867169][T11339] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 294.875149][T11339] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 294.883130][T11339] Call Trace: [ 294.886421][T11339] [ 294.889363][T11339] ? trace_kmalloc+0x1f/0xd0 [ 294.893994][T11339] ? kobject_move+0x20a/0x4f0 [ 294.898705][T11339] kobject_move+0x3a5/0x4f0 [ 294.903273][T11339] ? __pfx_kobject_move+0x10/0x10 [ 294.908335][T11339] ? get_device_parent+0x366/0x3a0 [ 294.913490][T11339] device_move+0xe0/0x700 [ 294.917845][T11339] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 294.923853][T11339] hci_conn_del_sysfs+0xb8/0x170 [ 294.928817][T11339] hci_conn_del+0x8ff/0xcb0 [ 294.933358][T11339] hci_conn_hash_flush+0x191/0x230 [ 294.938489][T11339] hci_dev_close_sync+0xaef/0x1330 [ 294.943717][T11339] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 294.949293][T11339] ? up_write+0x1c4/0x420 [ 294.953642][T11339] hci_unregister_dev+0x206/0x500 [ 294.958687][T11339] vhci_release+0x80/0xd0 [ 294.963046][T11339] ? __pfx_vhci_release+0x10/0x10 [ 294.968176][T11339] __fput+0x44c/0xa70 [ 294.972197][T11339] task_work_run+0x1d1/0x260 [ 294.976826][T11339] ? __pfx_task_work_run+0x10/0x10 [ 294.981975][T11339] ? kmem_cache_free+0x18f/0x400 [ 294.986953][T11339] do_exit+0x8d1/0x2550 [ 294.991139][T11339] ? do_raw_spin_lock+0x121/0x290 [ 294.996180][T11339] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 295.001570][T11339] ? __pfx_do_exit+0x10/0x10 [ 295.006198][T11339] ? _raw_spin_unlock_irq+0x23/0x50 [ 295.011429][T11339] ? lockdep_hardirqs_on+0x9c/0x150 [ 295.016662][T11339] do_group_exit+0x21c/0x2d0 [ 295.021279][T11339] __x64_sys_exit_group+0x3f/0x40 [ 295.026328][T11339] x64_sys_call+0x21ba/0x21c0 [ 295.031028][T11339] do_syscall_64+0xfa/0x3b0 [ 295.035570][T11339] ? lockdep_hardirqs_on+0x9c/0x150 [ 295.040796][T11339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.046884][T11339] ? clear_bhb_loop+0x60/0xb0 [ 295.051594][T11339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.057505][T11339] RIP: 0033:0x7f84ac98e969 [ 295.061945][T11339] Code: Unable to access opcode bytes at 0x7f84ac98e93f. [ 295.068980][T11339] RSP: 002b:00007fff3bee5f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 295.077417][T11339] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f84ac98e969 [ 295.085404][T11339] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 295.093385][T11339] RBP: 00007f84ac9ee8f0 R08: 00007fff3bee3cf7 R09: 0000000000000003 [ 295.101373][T11339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.109360][T11339] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007fff3bee6110 [ 295.117354][T11339] [ 295.120386][T11339] Modules linked in: [ 295.127065][T11339] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 295.178175][T11847] netlink: 'syz.4.1290': attribute type 1 has an invalid length. [ 295.192915][ T36] bridge_slave_1: left allmulticast mode [ 295.198614][ T36] bridge_slave_1: left promiscuous mode [ 295.236259][T11339] RIP: 0010:kernfs_rename_ns+0x3a/0x810 [ 295.255678][T11339] Code: ec 40 49 89 cf 48 89 54 24 08 49 89 f4 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 b1 c4 62 ff 49 8d 6e 30 49 89 ed 49 c1 ed 03 <41> 80 7c 1d 00 00 74 08 48 89 ef e8 36 e2 c5 ff 48 83 7d 00 00 0f [ 295.379390][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.416163][T11339] RSP: 0018:ffffc900052477c8 EFLAGS: 00010206 [ 295.429398][T11339] RAX: ffffffff825d363f RBX: dffffc0000000000 RCX: ffff88805fb01e00 [ 295.452839][ T36] bridge_slave_0: left allmulticast mode [ 295.459759][T11339] RDX: 0000000000000000 RSI: ffff888021efd870 RDI: 0000000000000000 [ 295.467788][T11339] RBP: 0000000000000030 R08: ffff88805fb01e00 R09: 0000000000000008 [ 295.484373][T11339] R10: 0000000000000007 R11: 0000000000000000 R12: ffff888021efd870 [ 295.490085][ T36] bridge_slave_0: left promiscuous mode [ 295.498125][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.505209][T11339] R13: 0000000000000006 R14: 0000000000000000 R15: 0000000000000000 [ 295.505229][T11339] FS: 0000000000000000(0000) GS:ffff888125d66000(0000) knlGS:0000000000000000 [ 295.550251][T11339] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 295.556903][T11339] CR2: 00007f28932ade9c CR3: 000000000df36000 CR4: 00000000003526f0 [ 295.585384][T11339] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 295.599252][T11339] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 295.607299][T11339] Kernel panic - not syncing: Fatal exception [ 295.613534][T11339] Kernel Offset: disabled [ 295.617869][T11339] Rebooting in 86400 seconds..