last executing test programs: 1m28.566594937s ago: executing program 3 (id=710): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x10080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x7) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x17fd, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000006f80)=ANY=[], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x40) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) r6 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000180)={0x2000200a}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=r2], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x72, 0x6}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK={0x8, 0x5, 0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newtaction={0x70, 0x30, 0xffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x8d, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x4000045) recvmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000038c0)}, 0x40000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"}) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c000180060006008847"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x9c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x6c, 0x2, [@TCA_BASIC_EMATCHES={0x60, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x54, 0x2, 0x0, 0x1, [@TCF_EM_META={0x50, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_RVALUE={0x37, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="6ad9", @TCF_META_TYPE_VAR="867460f1", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="b86a06cfff5ba0d8d26f", @TCF_META_TYPE_VAR="9cb8dd338993208c0442", @TCF_META_TYPE_VAR="d3", @TCF_META_TYPE_VAR="13df3da7b2", @TCF_META_TYPE_VAR="56165bf4b923a7"]}]}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x9, 0xa}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m23.691850166s ago: executing program 0 (id=1763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2000d00, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) 1m11.521812199s ago: executing program 3 (id=710): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x10080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x7) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x17fd, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000006f80)=ANY=[], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x40) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) r6 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000180)={0x2000200a}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=r2], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x72, 0x6}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK={0x8, 0x5, 0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newtaction={0x70, 0x30, 0xffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x8d, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x4000045) recvmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000038c0)}, 0x40000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"}) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c000180060006008847"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x9c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x6c, 0x2, [@TCA_BASIC_EMATCHES={0x60, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x54, 0x2, 0x0, 0x1, [@TCF_EM_META={0x50, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_RVALUE={0x37, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="6ad9", @TCF_META_TYPE_VAR="867460f1", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="b86a06cfff5ba0d8d26f", @TCF_META_TYPE_VAR="9cb8dd338993208c0442", @TCF_META_TYPE_VAR="d3", @TCF_META_TYPE_VAR="13df3da7b2", @TCF_META_TYPE_VAR="56165bf4b923a7"]}]}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x9, 0xa}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m8.940090597s ago: executing program 0 (id=1763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2000d00, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) 52.000893623s ago: executing program 0 (id=1763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="7a0af8ff75256320bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc44bc25fb591cf77b9dfb379a3f611dbc2a364916f098dab10b1a297cf528666d1ddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e9e54687d3c56d7bedb6b2f25ddb8c640ab321a402058c9221b6870814cf4ee23ddb79fff5eb156e0a000000000000f2bd1d4a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8f9f3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0b6dd7356aa79d5fabb5c0d0da6d719d7e0efb2bb713d18242cd5df6ca53307a4cdd9030a46c190e317c8de5e5c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1376eda2b20"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2000d00, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) 51.962203884s ago: executing program 3 (id=710): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x10080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x7) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x17fd, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000006f80)=ANY=[], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x40) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) r6 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000180)={0x2000200a}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=r2], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x72, 0x6}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK={0x8, 0x5, 0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newtaction={0x70, 0x30, 0xffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x8d, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x4000045) recvmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000038c0)}, 0x40000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"}) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c000180060006008847"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x9c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x6c, 0x2, [@TCA_BASIC_EMATCHES={0x60, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x54, 0x2, 0x0, 0x1, [@TCF_EM_META={0x50, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_RVALUE={0x37, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="6ad9", @TCF_META_TYPE_VAR="867460f1", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="b86a06cfff5ba0d8d26f", @TCF_META_TYPE_VAR="9cb8dd338993208c0442", @TCF_META_TYPE_VAR="d3", @TCF_META_TYPE_VAR="13df3da7b2", @TCF_META_TYPE_VAR="56165bf4b923a7"]}]}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x9, 0xa}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 34.15492306s ago: executing program 0 (id=1763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2000d00, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) 32.822271857s ago: executing program 3 (id=710): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x10080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x7) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x17fd, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000006f80)=ANY=[], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x40) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) r6 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000180)={0x2000200a}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=r2], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x72, 0x6}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK={0x8, 0x5, 0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newtaction={0x70, 0x30, 0xffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x8d, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x4000045) recvmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000038c0)}, 0x40000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"}) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c000180060006008847"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x9c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x6c, 0x2, [@TCA_BASIC_EMATCHES={0x60, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x54, 0x2, 0x0, 0x1, [@TCF_EM_META={0x50, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_RVALUE={0x37, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="6ad9", @TCF_META_TYPE_VAR="867460f1", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="b86a06cfff5ba0d8d26f", @TCF_META_TYPE_VAR="9cb8dd338993208c0442", @TCF_META_TYPE_VAR="d3", @TCF_META_TYPE_VAR="13df3da7b2", @TCF_META_TYPE_VAR="56165bf4b923a7"]}]}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x9, 0xa}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 17.298162332s ago: executing program 0 (id=1763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="7a0af8ff75256320bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc44bc25fb591cf77b9dfb379a3f611dbc2a364916f098dab10b1a297cf528666d1ddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e9e54687d3c56d7bedb6b2f25ddb8c640ab321a402058c9221b6870814cf4ee23ddb79fff5eb156e0a000000000000f2bd1d4a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8f9f3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0b6dd7356aa79d5fabb5c0d0da6d719d7e0efb2bb713d18242cd5df6ca53307a4cdd9030a46c190e317c8de5e5c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1376eda2b20"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2000d00, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) 16.101974151s ago: executing program 3 (id=710): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x10080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x7) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x17fd, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000006f80)=ANY=[], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x40) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) r6 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000180)={0x2000200a}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=r2], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x72, 0x6}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK={0x8, 0x5, 0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newtaction={0x70, 0x30, 0xffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x8d, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x4000045) recvmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000038c0)}, 0x40000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"}) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c000180060006008847"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x9c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x6c, 0x2, [@TCA_BASIC_EMATCHES={0x60, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x54, 0x2, 0x0, 0x1, [@TCF_EM_META={0x50, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_RVALUE={0x37, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="6ad9", @TCF_META_TYPE_VAR="867460f1", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="b86a06cfff5ba0d8d26f", @TCF_META_TYPE_VAR="9cb8dd338993208c0442", @TCF_META_TYPE_VAR="d3", @TCF_META_TYPE_VAR="13df3da7b2", @TCF_META_TYPE_VAR="56165bf4b923a7"]}]}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x9, 0xa}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.670704935s ago: executing program 4 (id=2174): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000b"], 0x50) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24040090}, 0x4004840) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x8010, 0xffffffffffffffff, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000180001002bbd700000000000020000040000fd0900110000060015000200000014001680100008800c000380050003"], 0x38}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r8}, 0x10) r9 = bpf$ITER_CREATE(0xb, 0x0, 0x0) write$cgroup_int(r9, 0x0, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r9, 0x0, 0xc000) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_ext={0x1c, 0x13, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x102, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='GPL\x00', 0xc6, 0x0, 0x0, 0x1f00, 0x41, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000800)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x7, 0x1000, 0x101}, 0x10, 0x1fdee, r9, 0x1, &(0x7f0000000880)=[r2, r0, r2, r2, r5, r2, 0xffffffffffffffff], &(0x7f00000008c0)=[{0x2, 0x3, 0x800, 0x6}], 0x10, 0x8}, 0x94) r11 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r10}, 0x8) close(r11) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r11, r10, 0x4, r10}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vxcan1\x00', 0x0}) sendmsg$can_j1939(r11, &(0x7f0000000540)={&(0x7f0000000440)={0x1d, r12, 0x3, {0x0, 0xf0, 0x3}, 0xff}, 0x18, &(0x7f0000000500)={&(0x7f0000000480)="c3af3d9cb0c196d0f4668caac138ac7618c48edd33b4c77a0953e70a35015d6a7172d492e795fca52f44dbfabfd379820e3b36f5f791b9205cbb2c8aee2f1579155c94d2cf95df7d5ebfd760652055c3eacdde3f95517cf1d8", 0x59}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$int_in(r9, 0x5421, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 3.468028021s ago: executing program 1 (id=2175): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = accept4(r0, 0x0, &(0x7f0000000040), 0x800) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x15c, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a7}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x91}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x174fbe91}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff63e6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xda02}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff7}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4}, 0x44) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000040000a20000000000a03000000000000000000070000000900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d04001280080003400080"], 0x90}, 0x1, 0x0, 0x0, 0x4028015}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz0\x00', 0x1ff) 3.300554398s ago: executing program 1 (id=2176): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000380)=@broute={'broute\x00', 0x5e04, 0x3, 0x90, [0x0, 0x0, 0x400000000400], 0x2, 0x0, &(0x7f0000000400)=[{}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x1}]}, 0x108) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f0000000480)=[{&(0x7f0000000240)="998e24c95c402375b5281f895bdebb9304000000af000000000000000000000000bc814c62585c1f72644789ee247d7ef4d1ff7c84d693dc06ce5d1e412ca7ce03e78fc10da258b9dabb1d117e479b7683af88832786a421c12ae2d872d863d22dd7610fe3db2edd3e9dd2ee5864b8a41c9ed4bb88490b3849c5ae6974a24f0ba262221a9614", 0x86}], 0x1, 0x9001, 0x7f) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x18) 3.299828067s ago: executing program 4 (id=2177): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010101}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x401, 0x3d3, 0x3, 0x3ff, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)={0x44, r0, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac08}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44151}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010101}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x401, 0x3d3, 0x3, 0x3ff, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)={0x44, r0, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac08}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44151}, 0x0) (async) 3.098560076s ago: executing program 1 (id=2178): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, 0xffffffffffffffff, 0x0) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0xffffff98) write(r0, 0x0, 0x0) 3.036193623s ago: executing program 4 (id=2179): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x30, r0, 0x0) (async) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = accept$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0xff8, 0xffffffffffffffff, 0x0) (async) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r2) (async) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000004ac0)=0x1e, 0x4) 2.916905353s ago: executing program 4 (id=2180): r0 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) readv(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/214, 0xd6}], 0x1) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001e0001eb25bd70000000000001"], 0x114}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c010000", @ANYRES16=r2, @ANYBLOB="20002bbd7000fcdbdf25020000000c0005800800010065746800b800058024000280080002004000000008000300ff0000000800040003030000080002000800000024000280080002000000008008000300060000000800030003000000080004000000000014000280080004000000000008000200100000003c0002800800020004000000080002000100000008000400090000000800040079ffffff080003000100010008000200e3000000080003000100000014000280080003000000000008000400040000000800010075647000640005801c0002800800030000f8ffff0800030002000000080001002000000008000100756470003c000280080002000efd000008000300360d0000080001000b000000080001001f000000080002000400000008000400000000000800040007000000"], 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close(r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000005c0)='sched_switch\x00', r5, 0x0, 0x2}, 0x18) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000af00)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x4040854}, 0x0) write$cgroup_int(r7, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) write$cgroup_devices(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d"], 0xffdd) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000002d00090526bd70000000000004000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) recvmmsg(r0, &(0x7f000000acc0), 0x0, 0x10000, &(0x7f000000aec0)) 2.667630445s ago: executing program 2 (id=2182): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x6}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x102}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x80}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x8, &(0x7f0000000200), 0x4) 2.45602569s ago: executing program 2 (id=2183): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x11, 0xa, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000069bc69b55698d2280008000000000000000000020000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000bcc9184a44000000000000156d09b579a465f43f91f3ba8ef90f8d67aa31637e8a1c763700000000000000000000000000fd"], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000340)=0x2) close(r5) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000814) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[], 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='rcu_utilization\x00', r0, 0x0, 0x6}, 0x18) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x380000, @empty}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x3, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x2000c050) syz_genetlink_get_family_id$smc(&(0x7f0000000340), r1) 2.151618719s ago: executing program 1 (id=2184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000800000a54000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073921a6ca60000000800054000000400000000000000000808000640ffffff0008000f4000000002140000001000010000000000000000000084000a"], 0x7c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000800000a54000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073921a6ca60000000800054000000400000000000000000808000640ffffff0008000f4000000002140000001000010000000000000000000084000a"], 0x7c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000080)=0x4) (async) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r4, &(0x7f0000000180)=[{&(0x7f0000000800)="00214705c4e7b3591fe6b7c1f36099a9268140fbf39f", 0x16}], 0x1, 0x8, 0x1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000580)={@val={0x0, 0x8809}, @void, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @tcp={0x2, 0x6, "32dae6", 0x1f6, 0x6, 0x1, @remote, @private0, {[@hopopts={0x0, 0xc, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @calipso={0x7, 0x38, {0x3, 0xc, 0x6e, 0x10, [0x84bc, 0x0, 0x5, 0xd, 0x7, 0x3]}}, @ra={0x5, 0x2, 0xb5}, @pad1]}, @srh={0x6c, 0xc, 0x4, 0x6, 0xff, 0x68, 0x9, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x43}, @dev={0xfe, 0x80, '\x00', 0x3f}, @ipv4={'\x00', '\xff\xff', @local}]}], {{0x4e23, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x10, 0x8, 0x200, 0x0, 0x6bf, {[@md5sig={0x13, 0x12, "0112c0ef64f16b4938771d7ea2c36c4a"}, @fastopen={0x22, 0x8, "2328bfe90910"}, @md5sig={0x13, 0x12, "b20bc0a33a4e0c536e5c77305e8d1523"}]}}, {"214a8ba539750190358bac34ed9e529c2afcb03bbf4a5d4ce132b03b05519ef1bf9e03117044778ff80d6ad6bbcea76d04ac274f02be8bc94c379f6c4027f8907dd32502cf5fe38e2e0286f66c290f90dd7d3c8dc434fe6066d5de1d9f9d0d8e732a39a92f5d0534ac3f96101c6b128a3dc708124907cc8a1429090c7c8d5072e6cc696f0677b67ee15144533e4d57fe51ee4e4ab1b3e1357ca35170e568b5d00e6579bd01e03a14f45ce6f3714984de5113da9d550251ba733ff02172408bda3332173f655e07dd5c99859013eaed92074926efa1e9944d81464dafa6fe"}}}}}}}}, 0x230) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180001ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180001ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2.102627345s ago: executing program 2 (id=2185): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca0200000000000000adcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d070490893616810a121ff4feedd1d176b313b9fc7bf31ddff431a4a50760ce18a76c4b7aa73cec3eec984c76d16f798c436410f3f4a41715e736a132c3cb9421be0b3c2bd40b75896c007fa2d47e3d8392d905d582b8eff689b0f493770c91e8c2e8bd0b08ffa4fd0289b04b0ea024768d196ef721314d68d29988b01871c6ea39f95a0b77744caadd24867acab274e8e4bf3fb44df31e15ffdce52f9f60f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x2c, 0x0, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, r1, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="2f0000001000000004"], 0x20) 1.780033518s ago: executing program 2 (id=2186): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2e, &(0x7f0000000040)=0x8002, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="ff00003eda8a4b8f03364430a4ba732499020076184c7c1bbcfd0c9be53ae61e2cbf529540ea95e700c7e5554c0a0e6b67e5729582bc195d1032ef1e37f46ace4a5030a310a774c9bebb99398ecf42eb", @ANYRES16=r2, @ANYBLOB="01000000000000000000230000001800018014000200626f6e645f736c6176655f3000000000"], 0x2c}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x418, 0x3d8, 0x3d8, 0x418, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [0xff, 0xffffffff, 0x0, 0xff000000], [0xffffff00, 0xff000000], 'erspan0\x00', 'wlan0\x00', {}, {0xff}, 0x2b, 0x3, 0x3}, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000420200300012800c0001e66c6163766c616e00200002800a0b000000aaaaa4aaaa0000100005800a0004000000000000000000"], 0x50}, 0x1, 0x4801000000000000}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r6, 0x321) sendmsg$inet_sctp(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x20, 0x6044}, 0xc847) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) 1.779538744s ago: executing program 4 (id=2187): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)={{0x14, 0x3eb}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x305, 0x0, 0x0, {0x5, 0x0, 0xa}}], {0x14, 0x3f5}}, 0x3c}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x0) bind$tipc(r0, 0x0, 0x0) 1.517612435s ago: executing program 2 (id=2188): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1019, &(0x7f0000001200)=""/4121, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r4, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002680)=""/70, 0x46}], 0x1}}], 0x2, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r3], 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x34, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}, [{0x8, 0xb, 0x7f8}, {0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x0) unshare(0x18040400) 1.51279002s ago: executing program 4 (id=2189): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x37, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x2200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x6}, {"4adcda08f6e83e2aa00e133f88a834"}}}}, 0x45) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x9c, 0x30, 0xb, 0x5, 0x0, {}, [{0x88, 0x1, [@m_ct={0x84, 0x1, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x14, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ZONE={0x6, 0x4, 0x4}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_LABELS_MASK={0x14, 0x8, "ea32d9c3eada5bb4feefd4bf8818faba"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8890}, 0x8050) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, &(0x7f0000000080)=0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0x3, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x37, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x2200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x6}, {"4adcda08f6e83e2aa00e133f88a834"}}}}, 0x45) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x9c, 0x30, 0xb, 0x5, 0x0, {}, [{0x88, 0x1, [@m_ct={0x84, 0x1, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x14, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ZONE={0x6, 0x4, 0x4}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_LABELS_MASK={0x14, 0x8, "ea32d9c3eada5bb4feefd4bf8818faba"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8890}, 0x8050) (async) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, &(0x7f0000000080)=0x9) (async) 1.259708208s ago: executing program 0 (id=1763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="7a0af8ff75256320bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc44bc25fb591cf77b9dfb379a3f611dbc2a364916f098dab10b1a297cf528666d1ddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e9e54687d3c56d7bedb6b2f25ddb8c640ab321a402058c9221b6870814cf4ee23ddb79fff5eb156e0a000000000000f2bd1d4a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8f9f3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0b6dd7356aa79d5fabb5c0d0da6d719d7e0efb2bb713d18242cd5df6ca53307a4cdd9030a46c190e317c8de5e5c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1376eda2b20"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2000d00, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) 1.205226384s ago: executing program 1 (id=2190): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180a1100000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="d87822a56f11ab74c878e8861ac0b0d2ff000000a50000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000002e00)=""/4088}, 0x94) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000c80)='ns/ipc\x00') ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000012003b15002900000000000020000600", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677470000c00028008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@deltfilter={0x6c, 0x2d, 0x4, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0xffff, 0xd}, {0x0, 0xfff1}, {0x0, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x29}}, @filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xfff1, 0x10}}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xf}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_MODE={0x8}]}}]}, 0x6c}}, 0x4000004) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x81) close(0x3) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x0, 0x0) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x1d) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x4008, r0}, 0x18) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r13, 0x89f0, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f00000004c0)={'syztnl2\x00', r14, 0x29, 0xe, 0xc5, 0x2, 0x0, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x80, 0x9, 0xb0}}) 5.605442ms ago: executing program 1 (id=2191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0x1, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xffe6, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x3c, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x5}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_TARGET={0x8, 0x1, 0x9}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x78c}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x5}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x4, [@float={0x7, 0x0, 0x0, 0x10, 0x8}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x1a, 0x0, 0x46, 0x6}, @enum64={0x3, 0x8, 0x0, 0x13, 0x0, 0x8, [{0x9, 0x10}, {0xe, 0x5, 0x2}, {0xe, 0x47ca, 0x8}, {0xe, 0x0, 0x9}, {0x1, 0x800, 0x6}, {0xd, 0x6, 0x80000001}, {0x4, 0xfffffff7}, {0xf, 0xa16, 0x4}]}, @enum={0x6, 0x2, 0x0, 0x6, 0x4, [{0x1, 0x9}, {0xe, 0xffffffff}]}]}, {0x0, [0x0, 0x30]}}, &(0x7f0000000400)=""/249, 0xc0, 0xf9, 0x1, 0x3, 0x10000, @value=r4}, 0x28) 4.294279ms ago: executing program 2 (id=2192): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000180)=0xffff7b6e, 0x4) setsockopt$inet6_int(r0, 0x29, 0x2, 0x0, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x60) 0s ago: executing program 3 (id=710): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x10080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x7) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x17fd, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000006f80)=ANY=[], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x40) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) r6 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000180)={0x2000200a}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=r2], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x72, 0x6}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK={0x8, 0x5, 0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newtaction={0x70, 0x30, 0xffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x8d, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x4000045) recvmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000038c0)}, 0x40000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"}) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c000180060006008847"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x9c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x6c, 0x2, [@TCA_BASIC_EMATCHES={0x60, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x54, 0x2, 0x0, 0x1, [@TCF_EM_META={0x50, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_RVALUE={0x37, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="6ad9", @TCF_META_TYPE_VAR="867460f1", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="b86a06cfff5ba0d8d26f", @TCF_META_TYPE_VAR="9cb8dd338993208c0442", @TCF_META_TYPE_VAR="d3", @TCF_META_TYPE_VAR="13df3da7b2", @TCF_META_TYPE_VAR="56165bf4b923a7"]}]}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x9, 0xa}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): _0) entered disabled state [ 363.073378][ T6178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.092348][ T6178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.102828][ T6178] bond0 (unregistering): Released all slaves [ 363.308674][ T6178] hsr_slave_0: left promiscuous mode [ 363.318639][ T6178] hsr_slave_1: left promiscuous mode [ 363.325327][ T6178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.332779][ T6178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.390619][ T6178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.422559][ T6178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.475540][ T6178] veth1_macvtap: left promiscuous mode [ 363.492436][ T6178] veth0_macvtap: left promiscuous mode [ 363.500211][T12664] netlink: 'syz.1.1729': attribute type 6 has an invalid length. [ 363.512297][ T6178] veth1_vlan: left promiscuous mode [ 363.519920][ T6178] veth0_vlan: left promiscuous mode [ 364.028742][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 364.050535][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 364.060506][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 364.071557][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 364.083956][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 364.410194][ T6178] team0 (unregistering): Port device team_slave_1 removed [ 364.454707][ T6178] team0 (unregistering): Port device team_slave_0 removed [ 365.048853][T12663] lo speed is unknown, defaulting to 1000 [ 365.098931][T12682] lo speed is unknown, defaulting to 1000 [ 365.660261][T12708] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1737'. [ 365.689559][T12703] lo speed is unknown, defaulting to 1000 [ 365.770608][T12682] chnl_net:caif_netlink_parms(): no params data found [ 365.823431][T12711] netlink: 'syz.0.1739': attribute type 7 has an invalid length. [ 365.837889][T12711] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1739'. [ 365.887159][T12713] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 365.898562][T12713] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 365.909575][ T25] block nbd1: Possible stuck request ffff8880257be000: control (read@0,1024B). Runtime 210 seconds [ 365.920537][ T25] block nbd1: Possible stuck request ffff8880257be1c0: control (read@1024,1024B). Runtime 210 seconds [ 365.934251][ T25] block nbd1: Possible stuck request ffff8880257be380: control (read@2048,1024B). Runtime 210 seconds [ 365.946346][ T25] block nbd1: Possible stuck request ffff8880257be540: control (read@3072,1024B). Runtime 210 seconds [ 366.014835][T12698] mpoa:mpoad_close: () going down [ 366.065836][T12719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1740'. [ 366.145591][ T5848] Bluetooth: hci4: command tx timeout [ 366.410100][T12682] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.425761][T12682] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.433474][T12682] bridge_slave_0: entered allmulticast mode [ 366.449450][T12682] bridge_slave_0: entered promiscuous mode [ 366.458967][T12735] veth0: entered promiscuous mode [ 366.466214][T12732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1744'. [ 366.576758][T12732] veth0 (unregistering): left promiscuous mode [ 366.655509][T12732] vlan3 (unregistering): left promiscuous mode [ 366.669143][T12732] veth1 (unregistering): left promiscuous mode [ 366.689428][T12732] bridge3: port 3(vlan3) entered disabled state [ 366.739011][T12682] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.751267][T12682] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.761317][T12682] bridge_slave_1: entered allmulticast mode [ 366.780008][T12682] bridge_slave_1: entered promiscuous mode [ 366.891049][T12682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.908707][T12682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.970528][T12752] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1750'. [ 367.010608][T12682] team0: Port device team_slave_0 added [ 367.133132][T12682] team0: Port device team_slave_1 added [ 367.184345][T12757] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 367.362263][T12682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.378676][T12682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.406638][T12682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.428663][T12682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.437233][T12682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.467068][T12682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.578607][T12766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.603402][T12682] hsr_slave_0: entered promiscuous mode [ 367.612951][T12682] hsr_slave_1: entered promiscuous mode [ 367.710325][T12769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1758'. [ 367.880500][T12774] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1760'. [ 367.935964][T12777] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 367.943257][T12777] IPv6: NLM_F_CREATE should be set when creating new route [ 367.950574][T12777] IPv6: NLM_F_CREATE should be set when creating new route [ 368.102191][T12780] netlink: 'syz.4.1761': attribute type 21 has an invalid length. [ 368.123961][T12780] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1761'. [ 368.166702][T12780] netlink: 'syz.4.1761': attribute type 4 has an invalid length. [ 368.182218][T12780] netlink: 'syz.4.1761': attribute type 3 has an invalid length. [ 368.223682][ T5848] Bluetooth: hci4: command tx timeout [ 368.233883][T12780] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1761'. [ 368.609505][T12794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1765'. [ 368.737075][T12795] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 368.918818][T12797] lo speed is unknown, defaulting to 1000 [ 369.102704][T12682] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 369.138459][ T5167] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 369.149796][ T5167] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 369.160420][ T5167] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 369.169637][ T5167] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 369.179060][ T5167] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 369.206187][T12682] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 369.276066][T12682] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 369.365190][T12682] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 369.563258][T12802] lo speed is unknown, defaulting to 1000 [ 369.611014][T12800] lo speed is unknown, defaulting to 1000 [ 370.305079][ T5167] Bluetooth: hci4: command tx timeout [ 370.499896][T12682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.551112][T12800] chnl_net:caif_netlink_parms(): no params data found [ 370.608630][T12682] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.661640][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.668879][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.942374][ T6185] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.949644][ T6185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.081303][T12800] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.090551][T12800] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.099139][T12800] bridge_slave_0: entered allmulticast mode [ 371.109209][T12800] bridge_slave_0: entered promiscuous mode [ 371.118389][T12800] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.127029][T12800] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.134449][T12800] bridge_slave_1: entered allmulticast mode [ 371.141657][T12800] bridge_slave_1: entered promiscuous mode [ 371.156808][T12861] IPVS: set_ctl: invalid protocol: 98 172.20.20.187:20003 [ 371.278710][ T5848] Bluetooth: hci0: command tx timeout [ 372.386325][ T5848] Bluetooth: hci4: command tx timeout [ 372.972941][T12800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.009899][T12800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.158001][T12800] team0: Port device team_slave_0 added [ 373.177737][T12871] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 373.205926][T12800] team0: Port device team_slave_1 added [ 373.346789][ T5848] Bluetooth: hci0: command tx timeout [ 373.461032][T12800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.481659][T12800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.543755][T12800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.572379][T12800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.590098][T12800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.623052][T12800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.678297][T12682] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 373.832894][T12800] hsr_slave_0: entered promiscuous mode [ 373.855675][T12800] hsr_slave_1: entered promiscuous mode [ 373.862176][T12800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 373.888567][T12800] Cannot create hsr debugfs directory [ 373.946178][T12897] netlink: 'syz.4.1793': attribute type 5 has an invalid length. [ 374.368959][T12906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.531270][T12800] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.698468][T12682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.756029][T12800] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.815630][T12918] ip6t_srh: unknown srh invflags 4449 [ 375.033500][T12800] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.177878][T12800] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.269617][T12682] veth0_vlan: entered promiscuous mode [ 375.339298][T12682] veth1_vlan: entered promiscuous mode [ 375.424221][ T5848] Bluetooth: hci0: command tx timeout [ 375.448705][T12682] veth0_macvtap: entered promiscuous mode [ 375.497747][T12682] veth1_macvtap: entered promiscuous mode [ 375.577776][T12920] lo speed is unknown, defaulting to 1000 [ 375.639983][T12800] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 375.678276][T12682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.712251][T12800] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 375.740245][T12800] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 375.830808][T12682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.861630][T12800] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 376.039787][ T5958] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.050000][ T5958] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.072815][T12921] geneve2: entered promiscuous mode [ 376.079226][T12921] geneve2: entered allmulticast mode [ 376.097511][ T5958] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.106674][ T5958] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.134000][ T5958] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 376.255202][ T5958] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 376.275471][ T5958] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 376.419357][ T5958] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 376.665563][ T6180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.692878][ T6180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.799673][T12951] x_tables: duplicate underflow at hook 1 [ 376.816967][ T1010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.830948][T12800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.850069][ T1010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.981510][T12800] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.057489][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.064809][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.155828][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.163203][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.342502][T12965] netlink: 'syz.2.1811': attribute type 1 has an invalid length. [ 377.430753][T12970] __nla_validate_parse: 5 callbacks suppressed [ 377.430773][T12970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1812'. [ 377.431298][T12966] lo speed is unknown, defaulting to 1000 [ 377.505000][ T5848] Bluetooth: hci0: command tx timeout [ 377.665966][ T5958] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.735412][T12967] lo speed is unknown, defaulting to 1000 [ 377.807426][ T5958] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.975385][ T5958] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.137969][ T5958] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.325102][T12800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.516885][ T5958] bridge_slave_1: left allmulticast mode [ 378.522584][ T5958] bridge_slave_1: left promiscuous mode [ 378.529283][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.547545][ T5958] bridge_slave_0: left allmulticast mode [ 378.561154][ T5958] bridge_slave_0: left promiscuous mode [ 378.577659][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.009913][ T5958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.021120][ T5958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.035001][ T5958] bond0 (unregistering): Released all slaves [ 379.062451][T12800] veth0_vlan: entered promiscuous mode [ 379.079720][T12800] veth1_vlan: entered promiscuous mode [ 379.246359][T12981] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 379.260563][T12800] veth0_macvtap: entered promiscuous mode [ 379.299424][T12800] veth1_macvtap: entered promiscuous mode [ 379.307643][T12987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1816'. [ 379.361494][T12987] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1816'. [ 379.567884][T12800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.629574][T12800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.792197][ T5958] hsr_slave_0: left promiscuous mode [ 379.811418][ T5958] hsr_slave_1: left promiscuous mode [ 379.829297][ T5958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.838818][T13000] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1820'. [ 379.844104][ T5958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.880307][ T5958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.908460][ T5958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.911791][T13003] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1821'. [ 379.958554][ T5958] veth1_macvtap: left promiscuous mode [ 379.970016][ T5958] veth0_macvtap: left promiscuous mode [ 379.977178][ T5958] veth1_vlan: left promiscuous mode [ 379.982581][ T5958] veth0_vlan: left promiscuous mode [ 380.002687][T13006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1821'. [ 380.025666][ T5167] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 380.038504][ T5167] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 380.048561][ T5167] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 380.059326][ T5167] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 380.069325][ T5167] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 380.454322][T13012] netlink: 'syz.2.1822': attribute type 1 has an invalid length. [ 380.648339][ T5958] team0 (unregistering): Port device team_slave_1 removed [ 380.695351][ T5958] team0 (unregistering): Port device team_slave_0 removed [ 381.190760][ T6185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.258418][T13012] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 381.264402][ T6185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.334505][ T6185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.446249][ T6185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.551497][ T1010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.564717][T13007] lo speed is unknown, defaulting to 1000 [ 381.591112][ T1010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.715267][T13024] netlink: 'syz.4.1827': attribute type 126 has an invalid length. [ 381.764598][ T6185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.812025][ T6185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.911793][T13026] lo speed is unknown, defaulting to 1000 [ 382.154846][ T5848] Bluetooth: hci4: command tx timeout [ 382.463417][T13039] tipc: New replicast peer: 255.255.255.255 [ 382.481808][T13039] tipc: Enabled bearer , priority 10 [ 382.499545][T13041] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1829'. [ 382.522608][T13041] tipc: Disabling bearer [ 382.790217][T13007] chnl_net:caif_netlink_parms(): no params data found [ 383.013394][ T5958] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.349802][ T5958] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.361984][ T6185] batman_adv: batadv1: IGMP Querier appeared [ 383.368147][ T6185] batman_adv: batadv1: MLD Querier appeared [ 383.549280][T13007] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.572749][T13007] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.592493][T13007] bridge_slave_0: entered allmulticast mode [ 383.629693][T13007] bridge_slave_0: entered promiscuous mode [ 383.715948][ T5958] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.752576][T13007] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.760794][T13007] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.777322][T13007] bridge_slave_1: entered allmulticast mode [ 383.785773][T13007] bridge_slave_1: entered promiscuous mode [ 383.793511][ T5167] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 383.804884][ T5167] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 383.815757][ T5167] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 383.828000][ T5167] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 383.843947][ T5167] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 383.970578][ T5958] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.107527][T13007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.193222][T13007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.227265][ T5848] Bluetooth: hci4: command tx timeout [ 384.272976][T13089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1840'. [ 384.291634][T13007] team0: Port device team_slave_0 added [ 384.314883][T13007] team0: Port device team_slave_1 added [ 384.368599][T13093] x_tables: duplicate underflow at hook 2 [ 384.368876][T13007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.382752][T13007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.409510][T13007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.421187][T13077] lo speed is unknown, defaulting to 1000 [ 384.423395][T13007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.435406][T13007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.462345][T13007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.512287][T13083] lo speed is unknown, defaulting to 1000 [ 384.692838][T13079] delete_channel: no stack [ 384.695684][T13007] hsr_slave_0: entered promiscuous mode [ 384.705198][T13007] hsr_slave_1: entered promiscuous mode [ 384.806021][ T5958] bridge_slave_1: left allmulticast mode [ 384.811768][ T5958] bridge_slave_1: left promiscuous mode [ 384.819610][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.838443][ T5958] bridge_slave_0: left allmulticast mode [ 384.848502][ T5958] bridge_slave_0: left promiscuous mode [ 384.859994][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.135178][ T25] block nbd0: Possible stuck request ffff888025755080: control (read@0,1024B). Runtime 270 seconds [ 385.146400][ T25] block nbd0: Possible stuck request ffff888025755240: control (read@1024,1024B). Runtime 270 seconds [ 385.164143][ T25] block nbd0: Possible stuck request ffff888025755400: control (read@2048,1024B). Runtime 270 seconds [ 385.175925][ T25] block nbd0: Possible stuck request ffff8880257555c0: control (read@3072,1024B). Runtime 270 seconds [ 385.915574][ T5167] Bluetooth: hci0: command tx timeout [ 386.000407][ T5958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.023131][ T5958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.046071][ T5958] bond0 (unregistering): Released all slaves [ 386.304193][ T5167] Bluetooth: hci4: command tx timeout [ 386.331411][T13105] lo speed is unknown, defaulting to 1000 [ 386.786255][T13127] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1852'. [ 386.796451][T13127] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1852'. [ 386.817396][T13125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.830240][T13125] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 386.851183][ T5958] hsr_slave_0: left promiscuous mode [ 386.858540][ T5958] hsr_slave_1: left promiscuous mode [ 386.866184][ T5958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.875112][ T5958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.883265][ T5958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.891134][ T5958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.912857][ T5958] veth1_macvtap: left promiscuous mode [ 386.918816][ T5958] veth0_macvtap: left promiscuous mode [ 386.924943][ T5958] veth1_vlan: left promiscuous mode [ 386.930425][ T5958] veth0_vlan: left promiscuous mode [ 387.008308][ T6178] batman_adv: batadv1: MLD Querier disappeared - multicast optimizations disabled [ 387.459303][ T5958] team0 (unregistering): Port device team_slave_1 removed [ 387.508524][ T5958] team0 (unregistering): Port device team_slave_0 removed [ 387.987769][ T5167] Bluetooth: hci0: command 0x041b tx timeout [ 388.229443][T13129] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1853'. [ 388.384752][ T5848] Bluetooth: hci4: command tx timeout [ 388.410620][T13077] chnl_net:caif_netlink_parms(): no params data found [ 388.547234][T13140] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1854'. [ 388.921284][T13077] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.928822][T13077] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.936640][T13077] bridge_slave_0: entered allmulticast mode [ 388.949216][T13077] bridge_slave_0: entered promiscuous mode [ 388.976889][T13077] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.985716][T13077] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.003954][T13077] bridge_slave_1: entered allmulticast mode [ 389.012298][T13077] bridge_slave_1: entered promiscuous mode [ 389.052977][T13007] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 389.083361][T13159] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 389.118939][T13077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.135015][T13007] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 389.190129][T13077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.222765][T13007] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 389.239027][T13164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1860'. [ 389.373389][T13007] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 389.402612][T13077] team0: Port device team_slave_0 added [ 389.433935][T13077] team0: Port device team_slave_1 added [ 389.442160][T13166] can: request_module (can-proto-0) failed. [ 389.542209][T13077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.551318][T13077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.586260][T13077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.611976][T13077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.635952][T13077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.674448][T13077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.885351][T13077] hsr_slave_0: entered promiscuous mode [ 389.892039][T13077] hsr_slave_1: entered promiscuous mode [ 389.905332][T13077] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 389.915212][T13077] Cannot create hsr debugfs directory [ 389.943001][T13188] lo speed is unknown, defaulting to 1000 [ 390.064776][ T5848] Bluetooth: hci0: command 0x041b tx timeout [ 390.650160][T13007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.786684][T13007] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.809211][ T1010] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.816461][ T1010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.866210][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.873487][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.986431][T13216] netlink: 'syz.4.1871': attribute type 2 has an invalid length. [ 391.520447][T13225] lo speed is unknown, defaulting to 1000 [ 391.531478][T13077] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 391.590753][T13077] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 391.662109][T13077] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 391.701808][T13077] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 391.812117][T13007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.975272][T13242] nbd: must specify at least one socket [ 391.999504][T13245] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1877'. [ 392.094997][T13007] veth0_vlan: entered promiscuous mode [ 392.120366][T13007] veth1_vlan: entered promiscuous mode [ 392.145241][ T5848] Bluetooth: hci0: command 0x041b tx timeout [ 392.153330][T13251] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1878'. [ 392.441821][T13077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.496464][T13007] veth0_macvtap: entered promiscuous mode [ 392.532448][T13255] netlink: 'syz.2.1880': attribute type 21 has an invalid length. [ 392.559338][T13007] veth1_macvtap: entered promiscuous mode [ 392.579743][T13077] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.637140][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.644389][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.691322][T13007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.739946][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.747208][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.849309][T13007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.921054][T13269] netlink: 'syz.2.1883': attribute type 10 has an invalid length. [ 392.955770][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.965763][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.019943][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.029362][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.269081][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.306630][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.462344][ T6185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.488208][ T6185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.642675][T13283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1890'. [ 394.002948][T13294] netlink: 'syz.4.1892': attribute type 13 has an invalid length. [ 394.033183][T13294] netlink: 'syz.4.1892': attribute type 13 has an invalid length. [ 394.235020][ T5848] Bluetooth: hci0: command 0x041b tx timeout [ 394.563438][T13304] SET target dimension over the limit! [ 394.650936][T13306] x_tables: duplicate underflow at hook 2 [ 394.891474][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.963825][T13305] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 395.072934][T13077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.152370][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.225948][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.261500][T13077] veth0_vlan: entered promiscuous mode [ 395.280736][T13077] veth1_vlan: entered promiscuous mode [ 395.315918][T13077] veth0_macvtap: entered promiscuous mode [ 395.328312][T13077] veth1_macvtap: entered promiscuous mode [ 395.347372][T13077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.360078][T13077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.383080][ T6185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.398637][ T6185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.410028][ T6185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.436142][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.452171][ T6185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.565464][ T5958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.573331][ T5958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.655100][ T6178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.669562][ T6178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.696346][ T36] bridge_slave_1: left allmulticast mode [ 395.706122][ T36] bridge_slave_1: left promiscuous mode [ 395.711885][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.734859][ T36] bridge_slave_0: left allmulticast mode [ 395.740522][ T36] bridge_slave_0: left promiscuous mode [ 395.765177][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.995358][ T25] block nbd1: Possible stuck request ffff8880257be000: control (read@0,1024B). Runtime 240 seconds [ 396.020346][ T25] block nbd1: Possible stuck request ffff8880257be1c0: control (read@1024,1024B). Runtime 240 seconds [ 396.031777][ T25] block nbd1: Possible stuck request ffff8880257be380: control (read@2048,1024B). Runtime 240 seconds [ 396.042841][ T25] block nbd1: Possible stuck request ffff8880257be540: control (read@3072,1024B). Runtime 240 seconds [ 396.198614][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.211242][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.221825][ T36] bond0 (unregistering): Released all slaves [ 396.481217][ T36] hsr_slave_0: left promiscuous mode [ 396.487249][ T36] hsr_slave_1: left promiscuous mode [ 396.493112][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.500920][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.509660][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.518794][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.567518][ T36] veth1_macvtap: left promiscuous mode [ 396.573141][ T36] veth0_macvtap: left promiscuous mode [ 396.603869][ T36] veth1_vlan: left promiscuous mode [ 396.616752][ T36] veth0_vlan: left promiscuous mode [ 396.659022][T13314] x_tables: duplicate underflow at hook 1 [ 397.004128][T13320] netlink: 'syz.1.1899': attribute type 1 has an invalid length. [ 397.075847][T13320] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1899'. [ 397.297477][T13324] openvswitch: netlink: Key type 321 is out of range max 32 [ 397.332951][ T5167] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 397.345955][ T5167] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 397.354546][ T5167] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 397.364817][ T5167] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 397.368853][T13324] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1900'. [ 397.386543][ T5167] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 398.107629][ T36] team0 (unregistering): Port device team_slave_1 removed [ 398.136291][ T5167] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 398.153064][ T5167] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 398.166040][ T5167] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 398.189718][ T5167] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 398.199248][ T36] team0 (unregistering): Port device team_slave_0 removed [ 398.199300][ T5167] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 398.877975][T13325] lo speed is unknown, defaulting to 1000 [ 398.909271][T13329] lo speed is unknown, defaulting to 1000 [ 399.227371][T13341] tipc: Enabled bearer , priority 0 [ 399.268684][T13337] lo speed is unknown, defaulting to 1000 [ 399.268902][T13341] syzkaller0: entered promiscuous mode [ 399.298896][T13341] syzkaller0: entered allmulticast mode [ 399.521348][ T5848] Bluetooth: hci0: command tx timeout [ 399.581065][T13349] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.594131][T13349] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 399.745041][T13349] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.763096][T13349] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 399.849959][T13325] chnl_net:caif_netlink_parms(): no params data found [ 399.899065][T13349] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.910375][T13349] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 400.015462][T13336] tipc: Resetting bearer [ 400.040058][T13336] tipc: Disabling bearer [ 400.105541][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.199035][T13370] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 400.229697][T13349] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.241552][T13349] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 400.304316][ T5848] Bluetooth: hci4: command tx timeout [ 400.344829][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.480337][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.497849][T13325] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.505596][T13325] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.514415][T13325] bridge_slave_0: entered allmulticast mode [ 400.521692][T13325] bridge_slave_0: entered promiscuous mode [ 400.569664][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.587405][T13325] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.596314][T13325] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.603523][T13325] bridge_slave_1: entered allmulticast mode [ 400.611061][T13325] bridge_slave_1: entered promiscuous mode [ 400.618930][T13329] chnl_net:caif_netlink_parms(): no params data found [ 400.645138][ T6180] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.653904][ T6180] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 400.707115][ T6180] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.717698][ T6180] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 400.787681][T13325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.807328][T13325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.856169][ T6185] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.864885][ T6185] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 401.022433][T13325] team0: Port device team_slave_0 added [ 401.032490][T13325] team0: Port device team_slave_1 added [ 401.082293][T13329] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.093421][T13329] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.131941][T13329] bridge_slave_0: entered allmulticast mode [ 401.150252][T13329] bridge_slave_0: entered promiscuous mode [ 401.168733][ T59] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.183462][ T59] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 401.248682][T13329] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.256392][T13380] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1911'. [ 401.270186][T13380] netlink: 'syz.1.1911': attribute type 5 has an invalid length. [ 401.275641][T13329] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.285707][T13329] bridge_slave_1: entered allmulticast mode [ 401.294185][T13388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1912'. [ 401.296173][T13329] bridge_slave_1: entered promiscuous mode [ 401.303199][T13388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1912'. [ 401.320583][T13388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1912'. [ 401.448723][T13329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.525614][T13325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.537231][T13325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.564305][T13325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.584178][ T5848] Bluetooth: hci0: command tx timeout [ 401.603473][T13325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.620870][T13325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.738990][T13325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.795093][T13329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.822307][T13401] netlink: 'syz.2.1915': attribute type 30 has an invalid length. [ 402.129590][T13329] team0: Port device team_slave_0 added [ 402.205807][T13329] team0: Port device team_slave_1 added [ 402.211969][ T36] bridge_slave_1: left allmulticast mode [ 402.218614][ T36] bridge_slave_1: left promiscuous mode [ 402.225494][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.240199][ T36] bridge_slave_0: left allmulticast mode [ 402.246242][ T36] bridge_slave_0: left promiscuous mode [ 402.252030][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.384924][ T5848] Bluetooth: hci4: command tx timeout [ 402.638160][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.651451][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.667219][ T36] bond0 (unregistering): Released all slaves [ 402.688176][T13325] hsr_slave_0: entered promiscuous mode [ 402.695694][T13325] hsr_slave_1: entered promiscuous mode [ 402.845724][T13329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.852738][T13329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.879990][T13329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.965775][T13390] lo speed is unknown, defaulting to 1000 [ 402.968458][T13329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.017784][T13329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.049108][T13329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.462827][T13329] hsr_slave_0: entered promiscuous mode [ 403.471244][T13329] hsr_slave_1: entered promiscuous mode [ 403.477793][T13329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 403.488376][T13329] Cannot create hsr debugfs directory [ 403.557701][ T36] hsr_slave_0: left promiscuous mode [ 403.565111][ T36] hsr_slave_1: left promiscuous mode [ 403.571337][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.595325][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.611247][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.633744][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.651846][T13430] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1923'. [ 403.660396][ T36] veth1_macvtap: left promiscuous mode [ 403.666721][ T36] veth0_macvtap: left promiscuous mode [ 403.672529][ T36] veth1_vlan: left promiscuous mode [ 403.674480][ T5167] Bluetooth: hci0: command tx timeout [ 403.690875][ T36] veth0_vlan: left promiscuous mode [ 404.473844][ T5167] Bluetooth: hci4: command tx timeout [ 404.489255][ T36] team0 (unregistering): Port device team_slave_1 removed [ 404.542541][ T36] team0 (unregistering): Port device team_slave_0 removed [ 405.595170][T13449] netlink: 'syz.1.1927': attribute type 5 has an invalid length. [ 405.747544][ T5167] Bluetooth: hci0: command tx timeout [ 405.789988][ T1226] IPVS: starting estimator thread 0... [ 405.802710][T13454] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 405.908222][T13454] netlink: 'syz.1.1928': attribute type 10 has an invalid length. [ 405.944549][T13454] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1928'. [ 405.967149][T13457] IPVS: using max 25 ests per chain, 60000 per kthread [ 406.011741][T13460] netlink: zone id is out of range [ 406.024313][T13460] netlink: zone id is out of range [ 406.031446][T13460] netlink: zone id is out of range [ 406.035941][T13454] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 406.044228][T13460] netlink: zone id is out of range [ 406.065610][T13460] netlink: zone id is out of range [ 406.071039][T13460] netlink: zone id is out of range [ 406.077012][T13460] netlink: zone id is out of range [ 406.089119][T13460] netlink: zone id is out of range [ 406.094444][T13460] netlink: zone id is out of range [ 406.388793][T13471] lo speed is unknown, defaulting to 1000 [ 406.544085][ T5167] Bluetooth: hci4: command tx timeout [ 406.725787][T13477] lo speed is unknown, defaulting to 1000 [ 406.917204][T13487] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1933'. [ 406.941461][T13329] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 406.994127][T13473] SET target dimension over the limit! [ 407.018039][T13473] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1933'. [ 407.049142][T13484] lo speed is unknown, defaulting to 1000 [ 407.093365][T13329] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 407.250489][T13329] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 407.304760][T13329] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 407.512885][T13486] lo speed is unknown, defaulting to 1000 [ 407.628323][T13493] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1937'. [ 407.710909][T13325] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 407.760457][T13325] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 407.891559][T13325] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 407.909394][T13325] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 408.501499][T13329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.558796][T13325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.595498][T13518] FAULT_INJECTION: forcing a failure. [ 408.595498][T13518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.640344][T13329] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.651117][T13518] CPU: 0 UID: 0 PID: 13518 Comm: syz.1.1941 Not tainted 6.16.0-rc4-syzkaller-01191-gc65d34296b22 #0 PREEMPT(full) [ 408.651136][T13518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 408.651144][T13518] Call Trace: [ 408.651149][T13518] [ 408.651154][T13518] dump_stack_lvl+0x189/0x250 [ 408.651173][T13518] ? __pfx____ratelimit+0x10/0x10 [ 408.651190][T13518] ? __pfx_dump_stack_lvl+0x10/0x10 [ 408.651204][T13518] ? __pfx__printk+0x10/0x10 [ 408.651228][T13518] should_fail_ex+0x414/0x560 [ 408.651249][T13518] _copy_to_user+0x31/0xb0 [ 408.651265][T13518] simple_read_from_buffer+0xe1/0x170 [ 408.651285][T13518] proc_fail_nth_read+0x1df/0x250 [ 408.651305][T13518] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 408.651324][T13518] ? rw_verify_area+0x258/0x650 [ 408.651337][T13518] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 408.651355][T13518] vfs_read+0x200/0x980 [ 408.651373][T13518] ? __pfx___mutex_lock+0x10/0x10 [ 408.651390][T13518] ? __pfx_vfs_read+0x10/0x10 [ 408.651405][T13518] ? __fget_files+0x2a/0x420 [ 408.651424][T13518] ? __fget_files+0x3a0/0x420 [ 408.651439][T13518] ? __fget_files+0x2a/0x420 [ 408.651460][T13518] ksys_read+0x145/0x250 [ 408.651473][T13518] ? __fget_files+0x2a/0x420 [ 408.651509][T13518] ? __pfx_ksys_read+0x10/0x10 [ 408.651526][T13518] ? do_syscall_64+0xbe/0x3b0 [ 408.651544][T13518] do_syscall_64+0xfa/0x3b0 [ 408.651561][T13518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.651577][T13518] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 408.651589][T13518] ? clear_bhb_loop+0x60/0xb0 [ 408.651604][T13518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.651615][T13518] RIP: 0033:0x7feca498d33c [ 408.651627][T13518] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 408.651638][T13518] RSP: 002b:00007feca57c2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 408.651658][T13518] RAX: ffffffffffffffda RBX: 00007feca4bb5fa0 RCX: 00007feca498d33c [ 408.651668][T13518] RDX: 000000000000000f RSI: 00007feca57c20a0 RDI: 0000000000000005 [ 408.651675][T13518] RBP: 00007feca57c2090 R08: 0000000000000000 R09: 0000000000000000 [ 408.651683][T13518] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 408.651690][T13518] R13: 0000000000000000 R14: 00007feca4bb5fa0 R15: 00007fff59f1f938 [ 408.651709][T13518] [ 408.912536][T13325] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.930304][ T6185] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.937537][ T6185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.992117][ T6178] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.999356][ T6178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.065480][ T6178] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.072699][ T6178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.128242][ T6178] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.135473][ T6178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.218787][T13520] netlink: 'syz.2.1943': attribute type 4 has an invalid length. [ 409.234806][T13520] netlink: 'syz.2.1943': attribute type 4 has an invalid length. [ 409.242764][T13525] netlink: 'syz.1.1942': attribute type 2 has an invalid length. [ 409.264546][T13525] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1942'. [ 409.459585][T13325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 409.567446][T13536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1945'. [ 409.810044][T13550] netlink: 'syz.1.1948': attribute type 11 has an invalid length. [ 409.811124][T13536] 8021q: adding VLAN 0 to HW filter on device bond1 [ 409.919114][T13542] bond1: (slave ip6gretap0): Enslaving as an active interface with an up link [ 410.024214][T13557] sctp: [Deprecated]: syz.4.1949 (pid 13557) Use of int in max_burst socket option. [ 410.024214][T13557] Use struct sctp_assoc_value instead [ 410.183150][T13565] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1951'. [ 410.218331][T13565] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1951'. [ 410.256496][T13567] netlink: 'syz.2.1951': attribute type 3 has an invalid length. [ 410.343373][T13329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.409189][T13325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.619062][T13577] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1954'. [ 410.691901][T13577] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.735718][T13577] bridge_slave_1: left allmulticast mode [ 410.747212][T13577] bridge_slave_1: left promiscuous mode [ 410.760489][T13577] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.778416][T13577] bond0: (slave bond_slave_0): Releasing backup interface [ 410.789960][T13577] bond_slave_0: left promiscuous mode [ 410.799047][T13577] bond0: (slave bond_slave_1): Releasing backup interface [ 410.815942][T13577] bond_slave_1: left promiscuous mode [ 410.827397][T13577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.835182][T13577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.851458][T13577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.860442][T13577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.938181][T13329] veth0_vlan: entered promiscuous mode [ 410.970198][ T5926] syz1: Port: 1 Link DOWN [ 410.998033][T13325] veth0_vlan: entered promiscuous mode [ 411.042762][T13586] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1957'. [ 411.049441][T13329] veth1_vlan: entered promiscuous mode [ 411.112105][T13325] veth1_vlan: entered promiscuous mode [ 411.262798][T13329] veth0_macvtap: entered promiscuous mode [ 411.288745][T13594] netlink: 'syz.4.1960': attribute type 1 has an invalid length. [ 411.309384][T13325] veth0_macvtap: entered promiscuous mode [ 411.318429][T13594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1960'. [ 411.335035][T13329] veth1_macvtap: entered promiscuous mode [ 411.356357][T13325] veth1_macvtap: entered promiscuous mode [ 411.485750][T13325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.507718][T13329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.517297][T13596] pim6reg1: entered allmulticast mode [ 411.525055][T13598] lo speed is unknown, defaulting to 1000 [ 411.552869][T13325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.568637][T13329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.662978][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.687599][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.779588][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.792353][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.842265][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.882105][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.932505][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.969048][T13609] SET target dimension over the limit! [ 411.973826][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.197831][T13614] vlan0: entered promiscuous mode [ 412.559760][ T1340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.570745][T13626] __nla_validate_parse: 1 callbacks suppressed [ 412.570762][T13626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1968'. [ 412.574171][ T1340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.723105][ T1340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.757620][ T1340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.851523][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.885394][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.956475][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.958735][T13637] FAULT_INJECTION: forcing a failure. [ 412.958735][T13637] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 412.975658][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.042138][T13637] CPU: 1 UID: 0 PID: 13637 Comm: syz.1.1971 Not tainted 6.16.0-rc4-syzkaller-01191-gc65d34296b22 #0 PREEMPT(full) [ 413.042169][T13637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 413.042182][T13637] Call Trace: [ 413.042191][T13637] [ 413.042200][T13637] dump_stack_lvl+0x189/0x250 [ 413.042231][T13637] ? __pfx____ratelimit+0x10/0x10 [ 413.042259][T13637] ? __pfx_dump_stack_lvl+0x10/0x10 [ 413.042284][T13637] ? __pfx__printk+0x10/0x10 [ 413.042315][T13637] ? fs_reclaim_acquire+0x7d/0x100 [ 413.042356][T13637] should_fail_ex+0x414/0x560 [ 413.042393][T13637] prepare_alloc_pages+0x213/0x610 [ 413.042433][T13637] __alloc_frozen_pages_noprof+0x123/0x370 [ 413.042469][T13637] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 413.042511][T13637] ? policy_nodemask+0x27c/0x720 [ 413.042536][T13637] ? __lock_acquire+0xab9/0xd20 [ 413.042563][T13637] alloc_pages_mpol+0x232/0x4a0 [ 413.042597][T13637] alloc_pages_noprof+0xa9/0x190 [ 413.042624][T13637] __pud_alloc+0x3a/0x260 [ 413.042655][T13637] huge_pte_alloc+0x4dc/0x620 [ 413.042679][T13637] ? down_read+0x1ad/0x2e0 [ 413.042710][T13637] hugetlb_fault+0x509/0x29e0 [ 413.042747][T13637] ? mt_find+0x15c/0x5f0 [ 413.042779][T13637] ? __pfx_hugetlb_fault+0x10/0x10 [ 413.042830][T13637] ? find_vma+0xe7/0x160 [ 413.042863][T13637] ? __pfx_find_vma+0x10/0x10 [ 413.042890][T13637] handle_mm_fault+0x740/0x8e0 [ 413.042929][T13637] do_user_addr_fault+0x764/0x1390 [ 413.042973][T13637] exc_page_fault+0x76/0xf0 [ 413.043003][T13637] asm_exc_page_fault+0x26/0x30 [ 413.043021][T13637] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 413.043043][T13637] Code: c4 10 c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 7d 00 04 00 66 2e [ 413.043060][T13637] RSP: 0018:ffffc9000461fa18 EFLAGS: 00050202 [ 413.043078][T13637] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004 [ 413.043092][T13637] RDX: 0000000000000001 RSI: 0000200000000100 RDI: ffffc9000461fac0 [ 413.043106][T13637] RBP: ffffc9000461fd58 R08: 0000000000000003 R09: 0000000000000004 [ 413.043118][T13637] R10: dffffc0000000000 R11: fffff520008c3f58 R12: dffffc0000000001 [ 413.043133][T13637] R13: ffffc9000461fac0 R14: ffffc9000461fac0 R15: 0000200000000100 [ 413.043172][T13637] _copy_from_user+0x7a/0xb0 [ 413.043198][T13637] do_ipv6_setsockopt+0x23e/0x2eb0 [ 413.043234][T13637] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 413.043256][T13637] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 413.043310][T13637] ? __pfx___might_resched+0x10/0x10 [ 413.043337][T13637] ? rcu_read_lock_any_held+0xb3/0x120 [ 413.043363][T13637] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 413.043394][T13637] ? vfs_write+0x8d8/0xa90 [ 413.043424][T13637] ? aa_sk_perm+0x81e/0x950 [ 413.043459][T13637] ? __pfx_aa_sk_perm+0x10/0x10 [ 413.043484][T13637] ? __lock_acquire+0xab9/0xd20 [ 413.043519][T13637] ipv6_setsockopt+0x59/0x170 [ 413.043543][T13637] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 413.043571][T13637] do_sock_setsockopt+0x257/0x3e0 [ 413.043603][T13637] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 413.043638][T13637] ? __fget_files+0x2a/0x420 [ 413.043675][T13637] __x64_sys_setsockopt+0x18b/0x220 [ 413.043714][T13637] do_syscall_64+0xfa/0x3b0 [ 413.043739][T13637] ? lockdep_hardirqs_on+0x9c/0x150 [ 413.043764][T13637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.043783][T13637] ? clear_bhb_loop+0x60/0xb0 [ 413.043808][T13637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.043826][T13637] RIP: 0033:0x7feca498e929 [ 413.043843][T13637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.043868][T13637] RSP: 002b:00007feca57c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 413.043889][T13637] RAX: ffffffffffffffda RBX: 00007feca4bb5fa0 RCX: 00007feca498e929 [ 413.043904][T13637] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000003 [ 413.043915][T13637] RBP: 00007feca57c2090 R08: 0000000000000014 R09: 0000000000000000 [ 413.043928][T13637] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 413.043940][T13637] R13: 0000000000000000 R14: 00007feca4bb5fa0 R15: 00007fff59f1f938 [ 413.043975][T13637] [ 414.124299][T13654] nbd2: detected capacity change from 0 to 63 [ 414.154234][T13656] block nbd2: NBD_DISCONNECT [ 414.156062][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.165552][T13656] block nbd2: Disconnected due to user request. [ 414.201468][T13656] block nbd2: shutting down sockets [ 414.255799][ C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 414.265801][ C1] Buffer I/O error on dev nbd2, logical block 0, async page read [ 414.273741][ C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 414.282803][ C1] Buffer I/O error on dev nbd2, logical block 1, async page read [ 414.290710][ C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 414.299830][ C1] Buffer I/O error on dev nbd2, logical block 2, async page read [ 414.307734][ C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 414.316843][ C1] Buffer I/O error on dev nbd2, logical block 3, async page read [ 414.332949][ T7747] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 414.345137][ T7747] Buffer I/O error on dev nbd2, logical block 0, async page read [ 414.361279][ T7747] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 414.370607][ T7747] Buffer I/O error on dev nbd2, logical block 1, async page read [ 414.379595][ T7747] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 414.423826][ T7747] Buffer I/O error on dev nbd2, logical block 2, async page read [ 414.453240][ T7747] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 414.519336][ T7747] Buffer I/O error on dev nbd2, logical block 3, async page read [ 414.557139][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.569576][ T7747] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 414.609316][ T7747] Buffer I/O error on dev nbd2, logical block 0, async page read [ 414.628935][ T7747] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 414.655561][ T7747] Buffer I/O error on dev nbd2, logical block 1, async page read [ 414.669632][ T7747] ldm_validate_partition_table(): Disk read failed. [ 414.720347][ T7747] Dev nbd2: unable to read RDB block 0 [ 414.760931][ T7747] nbd2: unable to read partition table [ 414.770140][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.800153][ T7747] ldm_validate_partition_table(): Disk read failed. [ 414.836451][ T7747] Dev nbd2: unable to read RDB block 0 [ 414.855582][ T7747] nbd2: unable to read partition table [ 414.932397][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.083898][ T59] bridge_slave_1: left allmulticast mode [ 415.090304][ T59] bridge_slave_1: left promiscuous mode [ 415.099585][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.110239][ T59] bridge_slave_0: left allmulticast mode [ 415.117358][ T59] bridge_slave_0: left promiscuous mode [ 415.123244][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.197406][ T25] block nbd0: Possible stuck request ffff888025755080: control (read@0,1024B). Runtime 300 seconds [ 415.208499][ T25] block nbd0: Possible stuck request ffff888025755240: control (read@1024,1024B). Runtime 300 seconds [ 415.219713][ T25] block nbd0: Possible stuck request ffff888025755400: control (read@2048,1024B). Runtime 300 seconds [ 415.230983][ T25] block nbd0: Possible stuck request ffff8880257555c0: control (read@3072,1024B). Runtime 300 seconds [ 415.691735][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 415.701748][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 415.711030][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 415.722396][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 415.730351][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 415.879686][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.891267][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.901948][ T59] bond0 (unregistering): Released all slaves [ 415.941251][T13667] lo speed is unknown, defaulting to 1000 [ 416.218143][ T59] hsr_slave_0: left promiscuous mode [ 416.230962][ T59] hsr_slave_1: left promiscuous mode [ 416.239341][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.247922][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.255982][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.265741][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.290541][ T59] veth1_macvtap: left promiscuous mode [ 416.296640][ T59] veth0_macvtap: left promiscuous mode [ 416.302302][ T59] veth1_vlan: left promiscuous mode [ 416.308117][ T59] veth0_vlan: left promiscuous mode [ 416.957987][ T59] team0 (unregistering): Port device team_slave_1 removed [ 417.167969][ T59] team0 (unregistering): Port device team_slave_0 removed [ 417.565329][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 417.576255][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 417.585096][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 417.603506][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 417.615539][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 417.823913][ T5848] Bluetooth: hci0: command tx timeout [ 418.508461][T13667] chnl_net:caif_netlink_parms(): no params data found [ 418.693423][T13697] lo speed is unknown, defaulting to 1000 [ 418.998877][T13667] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.011046][T13667] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.018529][T13724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1994'. [ 419.029404][T13667] bridge_slave_0: entered allmulticast mode [ 419.048639][T13667] bridge_slave_0: entered promiscuous mode [ 419.119844][T13667] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.135884][T13667] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.144117][T13667] bridge_slave_1: entered allmulticast mode [ 419.154165][T13667] bridge_slave_1: entered promiscuous mode [ 419.386277][T13667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.437901][T13667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.664945][ T5848] Bluetooth: hci4: command tx timeout [ 419.722757][T13667] team0: Port device team_slave_0 added [ 419.733493][T13746] x_tables: unsorted underflow at hook 4 [ 419.737665][T13667] team0: Port device team_slave_1 added [ 419.859990][T13751] IPVS: length: 167 != 3544 [ 419.904400][ T5848] Bluetooth: hci0: command tx timeout [ 420.012374][T13667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.036820][T13667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.106051][T13667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.147170][T13667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.163742][T13667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.218169][T13667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.265422][T13697] chnl_net:caif_netlink_parms(): no params data found [ 420.548514][ T6185] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.739120][T13667] hsr_slave_0: entered promiscuous mode [ 420.749339][T13667] hsr_slave_1: entered promiscuous mode [ 420.756563][T13667] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 420.764516][T13667] Cannot create hsr debugfs directory [ 420.795996][ T6185] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.956841][ T6185] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.177572][ T6185] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.352601][T13697] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.374381][T13697] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.381685][T13697] bridge_slave_0: entered allmulticast mode [ 421.405811][T13697] bridge_slave_0: entered promiscuous mode [ 421.477507][T13697] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.493947][T13697] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.501335][T13697] bridge_slave_1: entered allmulticast mode [ 421.529039][T13697] bridge_slave_1: entered promiscuous mode [ 421.720675][T13697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.763775][ T5167] Bluetooth: hci4: command tx timeout [ 421.890447][T13697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.984640][ T5167] Bluetooth: hci0: command tx timeout [ 422.356167][T13697] team0: Port device team_slave_0 added [ 422.462551][T13697] team0: Port device team_slave_1 added [ 422.555977][ T6185] bridge_slave_1: left allmulticast mode [ 422.561789][ T6185] bridge_slave_1: left promiscuous mode [ 422.584400][ T6185] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.629046][ T6185] bridge_slave_0: left allmulticast mode [ 422.644831][ T6185] bridge_slave_0: left promiscuous mode [ 422.657012][ T6185] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.132927][T13797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2010'. [ 423.461765][ T6185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.477773][ T6185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.500617][ T6185] bond0 (unregistering): Released all slaves [ 423.661105][T13697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.688980][T13697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.783714][T13697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.799002][T13801] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 423.806312][T13801] IPv6: NLM_F_CREATE should be set when creating new route [ 423.813601][T13801] IPv6: NLM_F_CREATE should be set when creating new route [ 423.825464][T13803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2012'. [ 423.833656][ T5167] Bluetooth: hci4: command 0x040f tx timeout [ 423.840590][T13802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2012'. [ 423.853049][T13697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.862686][T13803] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2012'. [ 423.883671][T13697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.914095][T13802] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2012'. [ 423.936568][T13697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.064216][ T5848] Bluetooth: hci0: command tx timeout [ 424.507567][T13697] hsr_slave_0: entered promiscuous mode [ 424.520156][T13697] hsr_slave_1: entered promiscuous mode [ 424.528486][T13821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2017'. [ 424.528794][T13697] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 424.545475][T13697] Cannot create hsr debugfs directory [ 424.586783][T13827] veth0_to_team: entered promiscuous mode [ 424.592650][T13827] veth0_to_team: entered allmulticast mode [ 424.637832][T13829] vlan0: entered promiscuous mode [ 424.808494][ T6185] hsr_slave_0: left promiscuous mode [ 424.828017][ T6185] hsr_slave_1: left promiscuous mode [ 424.840349][ T6185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.840776][T13836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2021'. [ 424.861492][ T6185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.875539][ T6185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.900491][ T6185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.962688][ T6185] veth1_macvtap: left promiscuous mode [ 424.968427][ T6185] veth0_macvtap: left promiscuous mode [ 424.974662][ T6185] veth1_vlan: left promiscuous mode [ 424.979992][ T6185] veth0_vlan: left promiscuous mode [ 425.532693][ T6185] team0 (unregistering): Port device team_slave_1 removed [ 425.579780][ T6185] team0 (unregistering): Port device team_slave_0 removed [ 425.909176][ T5848] Bluetooth: hci4: command 0x040f tx timeout [ 426.079843][ T25] block nbd1: Possible stuck request ffff8880257be000: control (read@0,1024B). Runtime 270 seconds [ 426.097915][ T25] block nbd1: Possible stuck request ffff8880257be1c0: control (read@1024,1024B). Runtime 270 seconds [ 426.109864][ T25] block nbd1: Possible stuck request ffff8880257be380: control (read@2048,1024B). Runtime 270 seconds [ 426.121240][ T25] block nbd1: Possible stuck request ffff8880257be540: control (read@3072,1024B). Runtime 270 seconds [ 427.012427][T13859] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 427.447010][T13667] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 427.645281][T13875] vlan3: entered promiscuous mode [ 427.673534][T13667] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 427.711616][T13667] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 427.758671][T13667] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 427.984025][ T5848] Bluetooth: hci4: command 0x040f tx timeout [ 428.028847][T13879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2034'. [ 428.107037][T13891] netlink: 'syz.4.2038': attribute type 1 has an invalid length. [ 428.108806][T13879] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2034'. [ 428.114958][T13891] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2038'. [ 428.114983][T13891] netlink: 'syz.4.2038': attribute type 2 has an invalid length. [ 428.114999][T13891] netlink: 'syz.4.2038': attribute type 1 has an invalid length. [ 428.204638][T13667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.282474][T13667] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.325007][T13896] siw: device registration error -23 [ 428.425051][ T1010] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.432263][ T1010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.516701][ T1010] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.523967][ T1010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.611019][T13697] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 428.645567][T13697] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 428.688140][T13697] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 428.700107][T13901] xt_CT: No such helper "snmp" [ 428.722822][T13697] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 428.822336][T13667] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 429.431847][T13697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.479423][T13927] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 429.525908][T13929] vlan0: entered promiscuous mode [ 429.586251][T13697] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.642018][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.649259][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.743098][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.750336][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.789595][T13933] siw: device registration error -23 [ 429.900100][T13667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.255941][T13667] veth0_vlan: entered promiscuous mode [ 430.280433][T13667] veth1_vlan: entered promiscuous mode [ 430.393374][T13667] veth0_macvtap: entered promiscuous mode [ 430.482421][T13667] veth1_macvtap: entered promiscuous mode [ 430.572818][T13667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.652449][T13667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.741965][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.791166][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.847999][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.880956][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.142270][T13961] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2057'. [ 431.175196][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.183072][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.235342][T13963] vlan3: entered promiscuous mode [ 431.333060][T13968] tipc: Enabling of bearer rejected, failed to enable media [ 431.366575][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.393030][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.408961][T13697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.487201][T13966] netlink: 'syz.2.2059': attribute type 10 has an invalid length. [ 431.659619][T13976] netlink: 'syz.4.2061': attribute type 10 has an invalid length. [ 431.720486][T13697] veth0_vlan: entered promiscuous mode [ 431.882953][T13970] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2060'. [ 432.120360][ T6185] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.179417][T13697] veth1_vlan: entered promiscuous mode [ 432.288085][ T6185] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.381201][T13697] veth0_macvtap: entered promiscuous mode [ 432.407556][T13697] veth1_macvtap: entered promiscuous mode [ 432.438842][T13697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.461365][T13697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.485604][ T5958] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.498072][ T5958] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.508629][ T5958] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.520806][ T5958] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.609329][ T6185] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.640116][ T1340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.652086][ T1340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.684933][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.693617][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.886203][ T6185] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.105021][T13998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2064'. [ 433.144718][T13998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2064'. [ 433.161801][T13998] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2064'. [ 433.471896][T14004] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2067'. [ 433.501605][ T6185] bridge_slave_1: left allmulticast mode [ 433.521785][ T6185] bridge_slave_1: left promiscuous mode [ 433.552697][ T6185] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.592224][ T6185] bridge_slave_0: left allmulticast mode [ 433.610899][ T6185] bridge_slave_0: left promiscuous mode [ 433.629615][ T6185] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.916209][ T5167] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 433.929109][ T5167] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 433.939443][ T5167] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 433.949024][ T5167] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 433.964334][ T5167] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 434.293494][ T6185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.312248][ T6185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.324139][ T6185] bond0 (unregistering): Released all slaves [ 434.439882][T14006] lo speed is unknown, defaulting to 1000 [ 434.708690][ T6185] hsr_slave_0: left promiscuous mode [ 434.718829][ T6185] hsr_slave_1: left promiscuous mode [ 434.732410][ T6185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.741873][ T6185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.750786][ T6185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.758627][ T6185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.781407][ T6185] veth1_macvtap: left promiscuous mode [ 434.787990][ T6185] veth0_macvtap: left promiscuous mode [ 434.794059][ T6185] veth1_vlan: left promiscuous mode [ 434.799384][ T6185] veth0_vlan: left promiscuous mode [ 435.319259][ T6185] team0 (unregistering): Port device team_slave_1 removed [ 435.369737][ T6185] team0 (unregistering): Port device team_slave_0 removed [ 436.063800][ T5848] Bluetooth: hci0: command tx timeout [ 436.254578][ T5167] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 436.266879][ T5167] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 436.284336][ T5167] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 436.302941][ T5167] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 436.329057][ T5167] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 436.492552][T14006] chnl_net:caif_netlink_parms(): no params data found [ 436.714525][T14015] lo speed is unknown, defaulting to 1000 [ 436.851440][T14048] netlink: 'syz.1.2076': attribute type 1 has an invalid length. [ 436.859634][T14048] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2076'. [ 436.932663][T14048] xt_CT: No such helper "snmp" [ 437.021372][T14030] lo speed is unknown, defaulting to 1000 [ 437.127600][T14006] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.153099][T14053] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.2077'. [ 437.153103][T14006] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.153315][T14006] bridge_slave_0: entered allmulticast mode [ 437.190303][T14006] bridge_slave_0: entered promiscuous mode [ 437.230058][T14006] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.257558][T14006] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.267688][T14006] bridge_slave_1: entered allmulticast mode [ 437.278880][T14006] bridge_slave_1: entered promiscuous mode [ 437.560727][T14006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.582472][T14006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.643167][T14006] team0: Port device team_slave_0 added [ 437.660390][T14006] team0: Port device team_slave_1 added [ 437.766790][T14006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.784334][T14006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.812469][T14006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.838821][T14006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.852868][T14006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.879769][T14006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.051620][ T6185] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.115283][T14077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2081'. [ 438.144720][ T5167] Bluetooth: hci0: command tx timeout [ 438.260221][T14084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2083'. [ 438.339701][ T6185] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.384210][ T5167] Bluetooth: hci4: command tx timeout [ 438.410049][T14088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2083'. [ 438.480413][ T6185] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.567980][T14093] netlink: 'syz.4.2084': attribute type 1 has an invalid length. [ 438.582014][T14093] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2084'. [ 438.583322][T14030] chnl_net:caif_netlink_parms(): no params data found [ 438.633115][T14006] hsr_slave_0: entered promiscuous mode [ 438.640514][T14006] hsr_slave_1: entered promiscuous mode [ 438.648367][T14078] lo speed is unknown, defaulting to 1000 [ 438.676684][ T6185] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.963102][T14100] netlink: 'syz.4.2086': attribute type 4 has an invalid length. [ 439.016671][T14103] netlink: 'syz.4.2086': attribute type 4 has an invalid length. [ 439.105293][T14106] netlink: 'syz.2.2087': attribute type 4 has an invalid length. [ 439.349414][ T49] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.365135][ T49] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 439.377950][ T49] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.387448][ T49] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 439.486249][T14030] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.502494][T14030] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.511784][T14030] bridge_slave_0: entered allmulticast mode [ 439.530429][T14030] bridge_slave_0: entered promiscuous mode [ 439.571421][ T49] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.590618][ T49] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 439.628737][T14111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2089'. [ 439.634965][ T49] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.662709][ T49] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 439.706767][T14030] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.719049][T14030] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.727085][T14030] bridge_slave_1: entered allmulticast mode [ 439.736104][T14030] bridge_slave_1: entered promiscuous mode [ 439.926032][ T6185] bridge_slave_1: left allmulticast mode [ 439.937471][ T6185] bridge_slave_1: left promiscuous mode [ 439.954369][ T6185] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.974110][ T6185] bridge_slave_0: left allmulticast mode [ 439.987312][ T6185] bridge_slave_0: left promiscuous mode [ 440.000923][ T6185] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.224642][ T5167] Bluetooth: hci0: command tx timeout [ 440.464289][ T5167] Bluetooth: hci4: command tx timeout [ 440.617446][ T6185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.629637][ T6185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 440.641515][ T6185] bond0 (unregistering): Released all slaves [ 440.661958][T14030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.735419][T14114] macsec0: entered allmulticast mode [ 440.741118][T14114] macvlan0: entered allmulticast mode [ 440.752423][T14114] macvlan0: left allmulticast mode [ 440.777836][T14124] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2091'. [ 440.792919][T14030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.206871][T14030] team0: Port device team_slave_0 added [ 441.240572][T14030] team0: Port device team_slave_1 added [ 441.768852][T14030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.789231][T14030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.847745][T14030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.890048][T14136] lo speed is unknown, defaulting to 1000 [ 441.983247][T14030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.990810][T14030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.012135][ T30] audit: type=1800 audit(1752166282.760:3): pid=14133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2093" name="memory.events" dev="tmpfs" ino=2614 res=0 errno=0 [ 442.028425][T14030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.208420][ T6185] hsr_slave_0: left promiscuous mode [ 442.224602][ T6185] hsr_slave_1: left promiscuous mode [ 442.230666][ T6185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.246562][ T6185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.266762][ T6185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.279195][ T6185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.304029][ T5167] Bluetooth: hci0: command tx timeout [ 442.344945][T14160] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2098'. [ 442.357113][ T6185] veth1_macvtap: left promiscuous mode [ 442.362845][ T6185] veth0_macvtap: left promiscuous mode [ 442.369856][ T6185] veth1_vlan: left promiscuous mode [ 442.375675][ T6185] veth0_vlan: left promiscuous mode [ 442.551649][ T5167] Bluetooth: hci4: command tx timeout [ 443.020513][ T6185] team0 (unregistering): Port device team_slave_1 removed [ 443.073229][ T6185] team0 (unregistering): Port device team_slave_0 removed [ 443.620075][T14030] hsr_slave_0: entered promiscuous mode [ 443.647932][T14030] hsr_slave_1: entered promiscuous mode [ 443.658048][T14030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 443.670731][T14030] Cannot create hsr debugfs directory [ 443.989586][T14168] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2100'. [ 444.224453][T14006] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 444.347728][T14006] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 444.387965][T14006] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 444.418432][T14006] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 444.635610][ T5167] Bluetooth: hci4: command tx timeout [ 444.870183][T14006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.955267][T14006] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.022096][ T6185] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.029433][ T6185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.061610][ T6185] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.069009][ T6185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.144528][T14215] xt_hashlimit: size too large, truncated to 1048576 [ 445.304853][ T25] block nbd0: Possible stuck request ffff888025755080: control (read@0,1024B). Runtime 330 seconds [ 445.315993][ T25] block nbd0: Possible stuck request ffff888025755240: control (read@1024,1024B). Runtime 330 seconds [ 445.327353][ T25] block nbd0: Possible stuck request ffff888025755400: control (read@2048,1024B). Runtime 330 seconds [ 445.339080][ T25] block nbd0: Possible stuck request ffff8880257555c0: control (read@3072,1024B). Runtime 330 seconds [ 445.525927][T14030] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 445.560657][T14030] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 445.652720][T14030] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 445.669231][T14030] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 445.976133][T14030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.000580][T14030] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.031294][T14006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.125903][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.133085][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.146812][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.154082][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.340193][T14006] veth0_vlan: entered promiscuous mode [ 446.369420][T14006] veth1_vlan: entered promiscuous mode [ 446.479424][T14241] lo speed is unknown, defaulting to 1000 [ 446.660736][T14006] veth0_macvtap: entered promiscuous mode [ 446.810104][T14006] veth1_macvtap: entered promiscuous mode [ 446.891505][T14006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.921008][T14006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.978424][T14030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.057432][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.141450][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.170472][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.204388][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.547935][T14030] veth0_vlan: entered promiscuous mode [ 447.718578][T14030] veth1_vlan: entered promiscuous mode [ 447.942705][ T5958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.961764][T14030] veth0_macvtap: entered promiscuous mode [ 447.984342][ T5958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.033163][T14030] veth1_macvtap: entered promiscuous mode [ 448.119753][ T1340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.132313][T14266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2117'. [ 448.153351][ T1340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.157686][T14266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2117'. [ 448.192398][T14268] xfrm2: entered promiscuous mode [ 448.201948][T14268] xfrm2: entered allmulticast mode [ 448.226089][T14030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.234782][T14268] xt_hashlimit: size too large, truncated to 1048576 [ 448.264511][T14266] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2117'. [ 448.300499][T14266] net_ratelimit: 6 callbacks suppressed [ 448.300520][T14266] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 448.353271][T14030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.411255][ T5958] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.434351][ T5958] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.457574][ T5958] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.616723][ T5958] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.925930][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.018052][ T1340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.045807][ T1340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.127208][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.170546][ T5958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.187107][ T5958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.253473][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.437387][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.687623][ T59] bridge_slave_1: left allmulticast mode [ 449.693338][ T59] bridge_slave_1: left promiscuous mode [ 449.700787][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.713245][ T59] bridge_slave_0: left allmulticast mode [ 449.724001][ T59] bridge_slave_0: left promiscuous mode [ 449.729836][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.095553][T14280] warn_alloc: 3 callbacks suppressed [ 450.095577][T14280] syz.1.2120: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 450.155078][T14280] CPU: 1 UID: 0 PID: 14280 Comm: syz.1.2120 Not tainted 6.16.0-rc4-syzkaller-01191-gc65d34296b22 #0 PREEMPT(full) [ 450.155111][T14280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 450.155124][T14280] Call Trace: [ 450.155133][T14280] [ 450.155142][T14280] dump_stack_lvl+0x189/0x250 [ 450.155179][T14280] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.155206][T14280] ? __pfx__printk+0x10/0x10 [ 450.155236][T14280] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 450.155265][T14280] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 450.155298][T14280] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 450.155330][T14280] warn_alloc+0x214/0x310 [ 450.155358][T14280] ? stack_depot_save_flags+0x40/0x900 [ 450.155395][T14280] ? __pfx_warn_alloc+0x10/0x10 [ 450.155428][T14280] ? kasan_save_track+0x4f/0x80 [ 450.155453][T14280] ? xskq_create+0x56/0x170 [ 450.155477][T14280] ? xsk_init_queue+0xb0/0x110 [ 450.155500][T14280] ? xsk_setsockopt+0x43f/0x710 [ 450.155521][T14280] ? do_sock_setsockopt+0x257/0x3e0 [ 450.155550][T14280] ? __x64_sys_setsockopt+0x18b/0x220 [ 450.155578][T14280] ? do_syscall_64+0xfa/0x3b0 [ 450.155614][T14280] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.155646][T14280] __vmalloc_node_range_noprof+0x125/0x12f0 [ 450.155713][T14280] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 450.155751][T14280] ? __kasan_kmalloc+0x93/0xb0 [ 450.155780][T14280] vmalloc_user_noprof+0xad/0xf0 [ 450.155809][T14280] ? xskq_create+0xbf/0x170 [ 450.155837][T14280] xskq_create+0xbf/0x170 [ 450.155867][T14280] xsk_init_queue+0xb0/0x110 [ 450.155898][T14280] xsk_setsockopt+0x43f/0x710 [ 450.155926][T14280] ? __pfx_xsk_setsockopt+0x10/0x10 [ 450.155947][T14280] ? __lock_acquire+0xab9/0xd20 [ 450.155982][T14280] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 450.155999][T14280] ? __pfx_xsk_setsockopt+0x10/0x10 [ 450.156023][T14280] do_sock_setsockopt+0x257/0x3e0 [ 450.156059][T14280] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 450.156097][T14280] ? __fget_files+0x2a/0x420 [ 450.156137][T14280] __x64_sys_setsockopt+0x18b/0x220 [ 450.156177][T14280] do_syscall_64+0xfa/0x3b0 [ 450.156204][T14280] ? lockdep_hardirqs_on+0x9c/0x150 [ 450.156232][T14280] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.156253][T14280] ? clear_bhb_loop+0x60/0xb0 [ 450.156281][T14280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.156301][T14280] RIP: 0033:0x7feca498e929 [ 450.156321][T14280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.156341][T14280] RSP: 002b:00007feca57c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 450.156364][T14280] RAX: ffffffffffffffda RBX: 00007feca4bb5fa0 RCX: 00007feca498e929 [ 450.156380][T14280] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 450.156393][T14280] RBP: 00007feca4a10b39 R08: 0000000000000004 R09: 0000000000000000 [ 450.156407][T14280] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.156420][T14280] R13: 0000000000000000 R14: 00007feca4bb5fa0 R15: 00007fff59f1f938 [ 450.156458][T14280] [ 450.156466][T14280] Mem-Info: [ 450.481987][T14280] active_anon:8447 inactive_anon:0 isolated_anon:0 [ 450.481987][T14280] active_file:1889 inactive_file:40047 isolated_file:0 [ 450.481987][T14280] unevictable:768 dirty:187 writeback:0 [ 450.481987][T14280] slab_reclaimable:11763 slab_unreclaimable:128757 [ 450.481987][T14280] mapped:23574 shmem:3171 pagetables:910 [ 450.481987][T14280] sec_pagetables:0 bounce:0 [ 450.481987][T14280] kernel_misc_reclaimable:0 [ 450.481987][T14280] free:1313865 free_pcp:13250 free_cma:0 [ 450.644098][T14280] Node 0 active_anon:37988kB inactive_anon:0kB active_file:7556kB inactive_file:159988kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:94296kB dirty:748kB writeback:0kB shmem:15348kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12188kB pagetables:3616kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 450.685083][T14280] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 450.760079][T14280] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 450.832312][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 450.854431][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 450.856753][T14280] lowmem_reserve[]: [ 450.866342][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 450.878574][T14280] 0 2498 2499 2499 2499 [ 450.891764][T14280] Node 0 DMA32 free:1309136kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42644kB inactive_anon:0kB active_file:7556kB inactive_file:158420kB unevictable:1536kB writepending:744kB present:3129332kB managed:2558304kB mlocked:0kB bounce:0kB free_pcp:32608kB local_pcp:17296kB free_cma:0kB [ 450.893970][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 450.935337][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 450.961738][T14280] lowmem_reserve[]: 0 0 1 1 1 [ 450.966787][T14280] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 451.033747][T14280] lowmem_reserve[]: 0 0 0 0 0 [ 451.038543][T14280] Node 1 Normal free:3900140kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19232kB local_pcp:8256kB free_cma:0kB [ 451.079815][T14280] lowmem_reserve[]: 0 0 0 0 0 [ 451.093788][T14280] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 451.153695][T14280] Node 0 DMA32: 2*4kB (ME) 21*8kB (UE) 989*16kB (U) 1578*32kB (U) 492*64kB (UM) 123*128kB (UME) 43*256kB (UM) 23*512kB (UM) 47*1024kB (UM) 5*2048kB (UM) 272*4096kB (UM) = 1308992kB [ 451.187483][T14280] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 451.200866][T14280] Node 1 Normal: 197*4kB (U) 43*8kB (UME) 44*16kB (UME) 72*32kB (UME) 23*64kB (UME) 4*128kB (UME) 3*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 949*4096kB (M) = 3900140kB [ 451.219994][T14280] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 451.229811][T14280] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 451.239359][T14280] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 451.250642][T14280] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 451.260190][T14280] 43314 total pagecache pages [ 451.265939][T14280] 0 pages in swap cache [ 451.270156][T14280] Free swap = 124996kB [ 451.274961][T14280] Total swap = 124996kB [ 451.279167][T14280] 2097051 pages RAM [ 451.283013][T14280] 0 pages HighMem/MovableOnly [ 451.284729][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.287916][T14280] 425433 pages reserved [ 451.300563][T14280] 0 pages cma reserved [ 451.307972][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.320386][ T59] bond0 (unregistering): Released all slaves [ 451.402753][T14285] lo speed is unknown, defaulting to 1000 [ 451.695014][ T59] hsr_slave_0: left promiscuous mode [ 451.702803][ T59] hsr_slave_1: left promiscuous mode [ 451.720503][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.729101][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.737749][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.746972][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.770345][ T59] veth1_macvtap: left promiscuous mode [ 451.776671][ T59] veth0_macvtap: left promiscuous mode [ 451.782321][ T59] veth1_vlan: left promiscuous mode [ 451.788126][ T59] veth0_vlan: left promiscuous mode [ 452.708854][ T5167] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 452.718967][ T5167] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 452.728695][ T5167] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 452.752258][ T5167] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 452.761446][ T5167] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 452.825362][ T59] team0 (unregistering): Port device team_slave_1 removed [ 452.874601][ T59] team0 (unregistering): Port device team_slave_0 removed [ 453.028849][ T5848] Bluetooth: hci0: command tx timeout [ 453.621681][T14308] 8021q: adding VLAN 0 to HW filter on device bond5 [ 453.699031][T14285] chnl_net:caif_netlink_parms(): no params data found [ 453.849233][T14318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2128'. [ 453.907997][T14304] lo speed is unknown, defaulting to 1000 [ 454.195588][T14285] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.209418][T14285] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.220377][T14285] bridge_slave_0: entered allmulticast mode [ 454.238315][T14285] bridge_slave_0: entered promiscuous mode [ 454.259379][T14285] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.266923][T14285] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.276336][T14285] bridge_slave_1: entered allmulticast mode [ 454.285211][T14285] bridge_slave_1: entered promiscuous mode [ 454.517023][T14285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.663980][ T59] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.694258][T14346] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2132'. [ 454.716685][T14285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.864533][ T5848] Bluetooth: hci4: command tx timeout [ 455.022987][ T59] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.053515][T14354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2136'. [ 455.104020][ T5848] Bluetooth: hci0: command tx timeout [ 455.181395][T14285] team0: Port device team_slave_0 added [ 455.301575][ T59] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.350757][T14285] team0: Port device team_slave_1 added [ 455.439721][T14346] lo speed is unknown, defaulting to 1000 [ 455.474859][ T59] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.647891][T14285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.673677][T14285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.723912][T14285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.763895][T14285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.793654][T14285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.863789][T14285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.992899][T14304] chnl_net:caif_netlink_parms(): no params data found [ 456.155380][ T25] block nbd1: Possible stuck request ffff8880257be000: control (read@0,1024B). Runtime 300 seconds [ 456.166921][ T25] block nbd1: Possible stuck request ffff8880257be1c0: control (read@1024,1024B). Runtime 300 seconds [ 456.173070][T14373] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2139'. [ 456.178526][ T25] block nbd1: Possible stuck request ffff8880257be380: control (read@2048,1024B). Runtime 300 seconds [ 456.199780][ T25] block nbd1: Possible stuck request ffff8880257be540: control (read@3072,1024B). Runtime 300 seconds [ 456.271410][T14382] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2140'. [ 456.284983][T14382] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2140'. [ 456.343007][T14377] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2140'. [ 456.489931][T14285] hsr_slave_0: entered promiscuous mode [ 456.515455][T14285] hsr_slave_1: entered promiscuous mode [ 456.809688][T14379] lo speed is unknown, defaulting to 1000 [ 456.945223][ T5848] Bluetooth: hci4: command tx timeout [ 456.961980][T14304] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.969980][T14304] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.977674][T14304] bridge_slave_0: entered allmulticast mode [ 456.988397][T14304] bridge_slave_0: entered promiscuous mode [ 456.996671][ T59] bridge_slave_1: left allmulticast mode [ 457.002320][ T59] bridge_slave_1: left promiscuous mode [ 457.008149][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a270000: rx timeout, send abort [ 457.016644][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.030278][ T59] bridge_slave_0: left allmulticast mode [ 457.037172][ T59] bridge_slave_0: left promiscuous mode [ 457.042876][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.190173][ T5848] Bluetooth: hci0: command tx timeout [ 457.461480][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.474475][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.488493][ T59] bond0 (unregistering): Released all slaves [ 457.506178][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880306bd400: rx timeout, send abort [ 457.514801][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a270000: abort rx timeout. Force session deactivation [ 457.622134][T14304] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.641125][T14304] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.656806][T14304] bridge_slave_1: entered allmulticast mode [ 457.678940][T14304] bridge_slave_1: entered promiscuous mode [ 457.740040][T14398] x_tables: duplicate underflow at hook 1 [ 457.868489][T14304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.889223][T14304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.014456][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880306bd400: abort rx timeout. Force session deactivation [ 458.225386][T14304] team0: Port device team_slave_0 added [ 458.236855][T14304] team0: Port device team_slave_1 added [ 458.328003][ T59] hsr_slave_0: left promiscuous mode [ 458.339344][ T59] hsr_slave_1: left promiscuous mode [ 458.348135][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.356012][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.364924][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.372721][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.430480][ T59] veth1_macvtap: left promiscuous mode [ 458.443809][ T59] veth0_macvtap: left promiscuous mode [ 458.449574][ T59] veth1_vlan: left promiscuous mode [ 458.460521][ T59] veth0_vlan: left promiscuous mode [ 459.030846][ T5848] Bluetooth: hci4: command tx timeout [ 459.122802][ T59] team0 (unregistering): Port device team_slave_1 removed [ 459.178192][ T59] team0 (unregistering): Port device team_slave_0 removed [ 459.268575][ T5848] Bluetooth: hci0: command tx timeout [ 459.729511][T14304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.737419][T14304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.764925][T14304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.782631][T14304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.798404][T14304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.834253][T14304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.875286][T14411] tipc: Enabled bearer , priority 21 [ 459.897321][T14409] tipc: Disabling bearer [ 460.205818][T14421] veth1: entered promiscuous mode [ 460.228092][T14304] hsr_slave_0: entered promiscuous mode [ 460.252570][T14304] hsr_slave_1: entered promiscuous mode [ 460.259341][T14304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 460.273947][T14304] Cannot create hsr debugfs directory [ 460.391858][T14423] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 460.399511][T14423] IPv6: NLM_F_CREATE should be set when creating new route [ 460.411259][T14425] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2152'. [ 460.433270][T14425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2152'. [ 460.726932][T14429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2154'. [ 460.761961][T14433] netlink: 'syz.4.2153': attribute type 3 has an invalid length. [ 460.894870][T14435] FAULT_INJECTION: forcing a failure. [ 460.894870][T14435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.914681][T14435] CPU: 1 UID: 0 PID: 14435 Comm: syz.1.2156 Not tainted 6.16.0-rc4-syzkaller-01191-gc65d34296b22 #0 PREEMPT(full) [ 460.914711][T14435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 460.914723][T14435] Call Trace: [ 460.914732][T14435] [ 460.914741][T14435] dump_stack_lvl+0x189/0x250 [ 460.914771][T14435] ? __pfx____ratelimit+0x10/0x10 [ 460.914799][T14435] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.914824][T14435] ? __pfx__printk+0x10/0x10 [ 460.914868][T14435] should_fail_ex+0x414/0x560 [ 460.914904][T14435] _copy_to_user+0x31/0xb0 [ 460.914931][T14435] simple_read_from_buffer+0xe1/0x170 [ 460.914964][T14435] proc_fail_nth_read+0x1df/0x250 [ 460.914997][T14435] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 460.915029][T14435] ? rw_verify_area+0x258/0x650 [ 460.915050][T14435] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 460.915081][T14435] vfs_read+0x200/0x980 [ 460.915111][T14435] ? __pfx___mutex_lock+0x10/0x10 [ 460.915140][T14435] ? __pfx_vfs_read+0x10/0x10 [ 460.915165][T14435] ? __fget_files+0x2a/0x420 [ 460.915198][T14435] ? __fget_files+0x3a0/0x420 [ 460.915223][T14435] ? __fget_files+0x2a/0x420 [ 460.915261][T14435] ksys_read+0x145/0x250 [ 460.915296][T14435] ? __pfx_ksys_read+0x10/0x10 [ 460.915317][T14435] ? rcu_is_watching+0x15/0xb0 [ 460.915345][T14435] ? do_syscall_64+0xbe/0x3b0 [ 460.915377][T14435] do_syscall_64+0xfa/0x3b0 [ 460.915402][T14435] ? lockdep_hardirqs_on+0x9c/0x150 [ 460.915428][T14435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.915447][T14435] ? clear_bhb_loop+0x60/0xb0 [ 460.915473][T14435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.915492][T14435] RIP: 0033:0x7feca498d33c [ 460.915512][T14435] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 460.915539][T14435] RSP: 002b:00007feca57c2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 460.915562][T14435] RAX: ffffffffffffffda RBX: 00007feca4bb5fa0 RCX: 00007feca498d33c [ 460.915577][T14435] RDX: 000000000000000f RSI: 00007feca57c20a0 RDI: 0000000000000005 [ 460.915589][T14435] RBP: 00007feca57c2090 R08: 0000000000000000 R09: 0000000000000014 [ 460.915601][T14435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.915613][T14435] R13: 0000000000000000 R14: 00007feca4bb5fa0 R15: 00007fff59f1f938 [ 460.915648][T14435] [ 460.927577][T14285] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 461.120810][ T5848] Bluetooth: hci4: command tx timeout [ 461.259175][T14442] IPv6: NLM_F_REPLACE set, but no existing node found! [ 461.405262][T14285] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 461.455503][T14445] vlan0: entered promiscuous mode [ 461.520632][T14285] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 461.552892][T14285] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 461.750269][T14464] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2165'. [ 461.908808][T14285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.978376][T14285] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.024266][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.031473][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.084505][T14304] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 462.105998][T14304] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 462.127616][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.135041][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.159668][T14304] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 462.198502][T14304] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 462.362323][T14487] netlink: 'syz.2.2171': attribute type 16 has an invalid length. [ 462.370459][T14487] netlink: 'syz.2.2171': attribute type 17 has an invalid length. [ 462.380848][T14487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2171'. [ 462.410043][T14487] IPv6: NLM_F_REPLACE set, but no existing node found! [ 462.616102][T14304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.658559][T14304] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.727179][ T6180] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.734454][ T6180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.762790][ T6180] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.770042][ T6180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.857909][T14501] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 463.051187][T14285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.200904][T14285] veth0_vlan: entered promiscuous mode [ 463.247132][T14285] veth1_vlan: entered promiscuous mode [ 463.319213][T14285] veth0_macvtap: entered promiscuous mode [ 463.357783][T14285] veth1_macvtap: entered promiscuous mode [ 463.452621][T14285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.525340][T14285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.558406][T14304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.594521][ T1010] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.614872][ T1010] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.636902][ T1010] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.665862][ T1010] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.950828][ T5958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.985906][ T5958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.011743][T14532] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2184'. [ 464.067947][T14535] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2184'. [ 464.118480][T14304] veth0_vlan: entered promiscuous mode [ 464.146457][T14535] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2184'. [ 464.161916][ T1010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.199674][ T1010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.273152][T14304] veth1_vlan: entered promiscuous mode [ 464.282184][T14532] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2184'. [ 464.319732][T14541] xt_CT: You must specify a L4 protocol and not use inversions on it [ 464.556762][T14304] veth0_macvtap: entered promiscuous mode [ 464.586857][T14304] veth1_macvtap: entered promiscuous mode [ 464.706237][T14304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.747123][T14544] syzkaller1: entered promiscuous mode [ 464.754893][T14544] syzkaller1: entered allmulticast mode [ 464.778086][T14304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.889508][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.142118][ T1010] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.198874][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.221311][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.293332][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.340065][ T1010] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.441434][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.450100][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.482164][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.491467][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.621184][ T1010] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.755646][ T1010] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.942152][ T1010] bridge_slave_1: left allmulticast mode [ 465.950882][ T1010] bridge_slave_1: left promiscuous mode [ 465.962938][ T1010] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.981063][ T1010] bridge_slave_0: left allmulticast mode [ 465.988629][ T1010] bridge_slave_0: left promiscuous mode [ 466.000461][ T1010] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.480086][ T5167] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 466.494767][ T5167] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 466.503087][ T5167] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 466.513503][ T5167] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 466.524647][ T5167] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 466.668492][ T1010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.679955][ T1010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.691951][ T1010] bond0 (unregistering): Released all slaves [ 466.709949][T14569] tipc: Enabling of bearer rejected, already enabled [ 466.723422][T14572] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN PTI [ 466.735609][T14572] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 466.744043][T14572] CPU: 1 UID: 0 PID: 14572 Comm: syz.1.2191 Not tainted 6.16.0-rc4-syzkaller-01191-gc65d34296b22 #0 PREEMPT(full) [ 466.756195][T14572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 466.766354][T14572] RIP: 0010:qdisc_tree_reduce_backlog+0x223/0x480 [ 466.772868][T14572] Code: 89 ef e8 60 04 ab f8 4d 89 ef 85 db 74 0d e8 e4 83 47 f8 4c 89 f5 e9 88 00 00 00 48 8b 6d 00 48 8d 45 20 48 89 c3 48 c1 eb 03 <42> 80 3c 33 00 48 89 04 24 74 0d 48 8b 3c 24 e8 29 04 ab f8 48 8b [ 466.792562][T14572] RSP: 0018:ffffc9000410f0e8 EFLAGS: 00010202 [ 466.798630][T14572] RAX: 0000000000000020 RBX: 0000000000000004 RCX: 0000000000000002 [ 466.806594][T14572] RDX: ffff88802f675a00 RSI: 0000000000000000 RDI: 0000000000000000 [ 466.814580][T14572] RBP: 0000000000000000 R08: ffff88802f675a00 R09: 0000000000000002 [ 466.822561][T14572] R10: 00000000ffffffff R11: 0000000000000002 R12: 00000000000bffe6 [ 466.830544][T14572] R13: ffff888057900800 R14: dffffc0000000000 R15: ffff888057900800 [ 466.838528][T14572] FS: 00007feca573e6c0(0000) GS:ffff888125d13000(0000) knlGS:0000000000000000 [ 466.847656][T14572] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 466.854241][T14572] CR2: 00007feca17edf98 CR3: 0000000068262000 CR4: 00000000003526f0 [ 466.862218][T14572] Call Trace: [ 466.865584][T14572] [ 466.868518][T14572] ? qdisc_tree_reduce_backlog+0x3c/0x480 [ 466.874282][T14572] codel_change+0x859/0xae0 [ 466.878793][T14572] ? is_dynamic_key+0xd6/0x1c0 [ 466.883601][T14572] ? qdisc_alloc+0x789/0xaa0 [ 466.888213][T14572] ? qdisc_create+0x12c/0xea0 [ 466.892900][T14572] ? rtnetlink_rcv_msg+0x77c/0xb70 [ 466.898102][T14572] ? netlink_rcv_skb+0x205/0x470 [ 466.903054][T14572] ? netlink_unicast+0x758/0x8d0 [ 466.907988][T14572] ? netlink_sendmsg+0x805/0xb30 [ 466.912931][T14572] ? __sock_sendmsg+0x219/0x270 [ 466.917776][T14572] ? ____sys_sendmsg+0x505/0x830 [ 466.922723][T14572] ? ___sys_sendmsg+0x21f/0x2a0 [ 466.927647][T14572] ? __x64_sys_sendmsg+0x19b/0x260 [ 466.932853][T14572] ? __pfx_codel_change+0x10/0x10 [ 466.937966][T14572] codel_init+0x1f7/0x3e0 [ 466.942307][T14572] ? __pfx_codel_init+0x10/0x10 [ 466.947163][T14572] qdisc_create+0x7a9/0xea0 [ 466.951775][T14572] tc_modify_qdisc+0x1426/0x2010 [ 466.956722][T14572] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 466.962102][T14572] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 466.967386][T14572] rtnetlink_rcv_msg+0x77c/0xb70 [ 466.972355][T14572] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 466.977508][T14572] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 466.982971][T14572] ? ref_tracker_free+0x63a/0x7d0 [ 466.988006][T14572] ? __copy_skb_header+0xa7/0x550 [ 466.993021][T14572] ? __pfx_ref_tracker_free+0x10/0x10 [ 466.998387][T14572] netlink_rcv_skb+0x205/0x470 [ 467.003165][T14572] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 467.008624][T14572] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 467.014000][T14572] ? netlink_deliver_tap+0x2e/0x1b0 [ 467.019233][T14572] ? netlink_deliver_tap+0x2e/0x1b0 [ 467.024449][T14572] netlink_unicast+0x758/0x8d0 [ 467.029210][T14572] netlink_sendmsg+0x805/0xb30 [ 467.033967][T14572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.039244][T14572] ? aa_sock_msg_perm+0x94/0x160 [ 467.044437][T14572] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 467.049903][T14572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.055196][T14572] __sock_sendmsg+0x219/0x270 [ 467.059866][T14572] ____sys_sendmsg+0x505/0x830 [ 467.064900][T14572] ? __pfx_____sys_sendmsg+0x10/0x10 [ 467.070247][T14572] ? import_iovec+0x74/0xa0 [ 467.074766][T14572] ___sys_sendmsg+0x21f/0x2a0 [ 467.079472][T14572] ? __pfx____sys_sendmsg+0x10/0x10 [ 467.084689][T14572] ? __fget_files+0x2a/0x420 [ 467.089322][T14572] ? __fget_files+0x3a0/0x420 [ 467.094143][T14572] __x64_sys_sendmsg+0x19b/0x260 [ 467.099165][T14572] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 467.104618][T14572] ? do_user_addr_fault+0xc8a/0x1390 [ 467.109932][T14572] ? do_syscall_64+0xbe/0x3b0 [ 467.114621][T14572] do_syscall_64+0xfa/0x3b0 [ 467.119155][T14572] ? lockdep_hardirqs_on+0x9c/0x150 [ 467.124354][T14572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.130416][T14572] ? clear_bhb_loop+0x60/0xb0 [ 467.135081][T14572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.140963][T14572] RIP: 0033:0x7feca498e929 [ 467.145379][T14572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.164985][T14572] RSP: 002b:00007feca573e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 467.173500][T14572] RAX: ffffffffffffffda RBX: 00007feca4bb6320 RCX: 00007feca498e929 [ 467.181566][T14572] RDX: 0000000004008000 RSI: 0000200000000200 RDI: 0000000000000006 [ 467.189550][T14572] RBP: 00007feca4a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 467.197527][T14572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.205576][T14572] R13: 0000000000000001 R14: 00007feca4bb6320 R15: 00007fff59f1f938 [ 467.213555][T14572] [ 467.216605][T14572] Modules linked in: [ 467.220615][T14572] ---[ end trace 0000000000000000 ]--- [ 467.226162][T14572] RIP: 0010:qdisc_tree_reduce_backlog+0x223/0x480 [ 467.232608][T14572] Code: 89 ef e8 60 04 ab f8 4d 89 ef 85 db 74 0d e8 e4 83 47 f8 4c 89 f5 e9 88 00 00 00 48 8b 6d 00 48 8d 45 20 48 89 c3 48 c1 eb 03 <42> 80 3c 33 00 48 89 04 24 74 0d 48 8b 3c 24 e8 29 04 ab f8 48 8b [ 467.252603][T14572] RSP: 0018:ffffc9000410f0e8 EFLAGS: 00010202 [ 467.258726][T14572] RAX: 0000000000000020 RBX: 0000000000000004 RCX: 0000000000000002 [ 467.266732][T14572] RDX: ffff88802f675a00 RSI: 0000000000000000 RDI: 0000000000000000 [ 467.274870][T14572] RBP: 0000000000000000 R08: ffff88802f675a00 R09: 0000000000000002 [ 467.283063][T14572] R10: 00000000ffffffff R11: 0000000000000002 R12: 00000000000bffe6 [ 467.291638][T14572] R13: ffff888057900800 R14: dffffc0000000000 R15: ffff888057900800 [ 467.299674][T14572] FS: 00007feca573e6c0(0000) GS:ffff888125d13000(0000) knlGS:0000000000000000 [ 467.308664][T14572] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 467.315303][T14572] CR2: 00007feca17edf98 CR3: 0000000068262000 CR4: 00000000003526f0 [ 467.323374][T14572] Kernel panic - not syncing: Fatal exception in interrupt [ 467.330840][T14572] Kernel Offset: disabled [ 467.335257][T14572] Rebooting in 86400 seconds..