last executing test programs: 41.166994809s ago: executing program 0 (id=3336): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, r0}, 0x41) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0x9, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty, 0x2080}, 0x1c) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x110}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r4, &(0x7f00000014c0)={&(0x7f0000000200)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001380)=[@ip_tos_u8={{0x11, 0x97ff, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010100}}}], 0x38}, 0x20000000) 40.689584531s ago: executing program 0 (id=3338): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2, 0x1, 0x0, 0x9, 0xa, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @broadcast}}, @sadb_address={0x3, 0x5, 0x2b, 0x0, 0x0, @in={0x2, 0x4e21, @empty}}, @sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd28, 0x3503}]}, 0x50}, 0x1, 0x7}, 0x0) (async) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2, 0x1, 0x0, 0x9, 0xa, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @broadcast}}, @sadb_address={0x3, 0x5, 0x2b, 0x0, 0x0, @in={0x2, 0x4e21, @empty}}, @sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd28, 0x3503}]}, 0x50}, 0x1, 0x7}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @loopback, 0x1}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @loopback, 0x1}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="180a0000d0ff00000000000000000004851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000066080000feffffff180000000000000000000000000000019500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x3, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) 40.263513368s ago: executing program 0 (id=3339): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xa0}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)='uBG7', 0x4}], 0x1}}], 0x1, 0x2090) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x800005, 0x32, 0xffffffffffffffff, 0x852ac000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x4, 0xea, &(0x7f0000000fc0)=""/234}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="00626c6b696f202b706572665f6576656e74202b726c696d6974202b696f202b64657669636573202d6e65745f636c7304000000756163637420"], 0x3a) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaabb08004500001400002000002f9078ac1e0001e00000000000655800189078040000000000000086ddffff"], 0xfdef) (async) ioctl$XFS_IOC_FSGEOMETRY(r1, 0x8100587e, &(0x7f0000000f80)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0xf6, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) (async) r5 = epoll_create1(0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)={0xc}) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000300)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x2, 0x2000000000000048, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES64=r4, @ANYRESOCT=r3], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x22}, 0x94) 36.974076696s ago: executing program 0 (id=3349): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x12, 0x6, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2032}, 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000cc0), &(0x7f0000000340)=@tcp=r1, 0x1}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1b, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005d090100000000007b0000000000000018010000646c6c2500000000002020207b1af8fb00000000bfa100000000000007010000f8ffffffb702000008000000b703000068030000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x5, 0x400, 0x7fff}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140), 0x0, 0x4003c, &(0x7f0000000440), 0x0, 0x10, &(0x7f0000000140), &(0x7f0000000500), 0x8, 0x64, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="b702000024000000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006502040001001f000404000001007d60b7030000000000006a0a00fefdff00008500000026000000b7000000000000009500000000000000c743a0c8e3ebbadc20e5a7efcc9ac1467fb2ea80dbcf8df265e1b40e4c8afd5c0c000000008da68076774bbcdb2c769937000090af27db5b56024db96bcbbbd2cb2000ce03000000000000007e357754508535766c80114604a86fe569b05614eab9297eb290a248a120c9c6e39f403ff065fd3052aae80675eeba68562eaeaea5fecf298ca20f274233106eab63ecf772de7b265040b6c50b7420b48a93fe94c756108afcd0b2eb78040000005f02a5a6474ae549070004000000001294fba0ed5020e6474ac921fee1f6d8ad6a80c0947cd6d4a561ced21a0b4a902be6af7ec2d1ba002e57f301000000000000000000000000100000aaf25343063e6581f9e6de14ad72e5ad84309f47f96a576cd20cef7ed951a73ea73d7c7f14e306f1f1d1377e57abb19700f0077e9d0000b93eb0f2c6f8141e350dc68147e5958128d22d58625cf9dba211bfff9c3709c9b134625d3d2369f516a49eeeb1a662c8dfb875bdf5c6ba73cccdfacb202994c40d322717faff03323dce8a34ee0ca2cf61efb4b30000642735d6d482ba98d252f36c54333aab1aa736369392b9067665339820f5f1557b0bf7cc06a5a13c714e0b1a1f000000ff3283076cda3d0b1a2905cfc3d04f1db264b530abcbe44bc405f600807970727fb819afa1907228fa9e83433eedb4ac88d0285594ffb0d14c09d5c77f33702822b02488ea570204c8441ced81cacf945dcb2486d65ceec8bcaffbe800a041a378b40dc9e3600e916ae6307bd8325a442095bc9a8b0c95905979f34adddbb26f0d24425c8ab9d937d84b521914f92eed3d3e9de82942a952e86b567aff5bc2e3c1fcc00f618363df5d0d181ee8f4b8fd356c9eb365adc037e443820c05c5db16ff07a9cf471e2ebf91ab00a05f88c1cd55f8c81f5eb1f8d615ca27efb2193bb61665a1ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50225563cd37343d09da72472efc2b2877fbab12a891513e5f0763ae06c0610a2869747c143d75007606000000b2310e19ac58bf29d7f178d09a9f634a3ae492f54649589e3692768a0f3a082c5242c8fa7f01e0873c9c5c604108ad85950d8e08465fa1067ea8f383b3e7a7ddf5977d46f4bc38f914b4a496426d8468f9ba618b6b2218b50c8fc9efbce3ba799cf70de7e13be871aa7eb402e2b11f440361e18d4e334bfc6ae54e62e67a0338c756c544189e4519a029674e2a2bbbc7f6600000000000800000e5e30b70b198246d3a62660600000030a0af132e680510811d3ab71af5d98e2d3d928a749e8b9402d14655612bd58fb40b4625cb69bf6cea97b447f2d970d99100000000086000001b881afb2cc500003a73562af4878f75b4c98274eeb666aa1f5fcf91990cf0dcfef9540057b8a3fff2bc02c5941626d2015f414546e87835ba18e9101734a9e9c6955fc6b9a25fe2a3dd8bab7f21beccba5493a164c663eceed401737c12c65804712236a9a29a43b1e27e9b6816f2328ea8423121f12b7b35aa721fef26934ccafde573bee5c33ef15309f43cbd5d61aa679a9c402d337ebf57a5eacb569401c1df7b9c45b09743c61d1db37f0000000000020000000000de00d23dd63b7761d7d6818db785d8ba13dc577fe61a68eb365de5661f43d4c789bb117a3d208ae44a38e7868dc32e132124ecf52327631b718b3157e218959156ff8e92b7e92bc275d2c9114547351a0d0f2a70d13be0194b6cb68b03000000000000004f153bbc7f52861e4e5df0d19e4e40ac44cfda6f87807e5b5ed7072c04da88afd3d4b79f060e004a0e2f00b9e726ac75d2ac0691314c627e9a8a07bdd607919fd48f01ad6d2f7621d9a75b134f1bc25ed7c33d411a5baa4daa3add16afc502b2b7629541d722e91d631e5ffb9d4beb5aa5a2c4e490a5bd038c1817f0d4652a29353b05b16b3c5cf4538ba310b8cbc221af38ea842d4cb908bcd574f794459fd54b58c6a791e6df625a47bade4ba41ee014184395a479544619f749ff70088b0fd115077f7eff7c5a3315ca604d110df1c54407f191a78d8362e4dc6e1138391c2a65246779bb76c9f1daea4f085f38810edef6dd047937c231cba791a4e7713c5b3b0a0b6ba37db5016e02d114d714459d065a79609fea4efebad04edac11aac0e53dd094827453144fa419ee81823d00a90a9058ba740d2f41253a8d01a8c1a7265a084e30ad10d412aee8170a7111d62473e7bd8f3d64fb7ebdd32aada331900000000000000000000000084ef49dd020000000000000000000000d9dcb285038ec38d5f4969ed0e98a71ac7bf8159a234833a5241722b2d24aa2fa4965d4eb7966fb27d118b6ef3308627e67d42f1041d5e92da28e0a7724ce715854775cbe06c5166f1dac0745f1373156a536cb6394c2c4473e2050cacf693fdf8e305080000001a901ecd90a5f53b8327a485557bc2a147b036477915e600000000034258ebbb6099b597d17ee2fc97ca850b8580b1337016a40566814594c13052b9d2b0741326825f19a244609ac04a0c29691a7c8f7a78c1a7590a293c561f304533c638ae635f5ce026f7fa034d8cfe0e11831d4829692beab26891ef583cfcb713a4d3a2d8b958c0875d7e4bdcf98802db086ebcbb9d82fa569a18f06facc2ffe1ea9ae4231e1e7a5dd7503faa2de7f898c97788c4b9c61c70ff92abdf7476cc351156d11c0ada7614f315f4c6cca119d16827d4e864f5a7a9b690272a510c451dc07f391309d02e31e53b2bf0b5f86e776b1bcfe6c85ccd7ddf8a9559d58bb5603895f265685fdd11263c946f8ef3ccec1b0d45a47a89b8237cbbdab14e4ca6dc76b2c41e071b93a065c0f5aa718e1cfab29beea78a6bd9a3114f0fb92be9a5862627b4bd99db2c08e4636e43f05f33535d5d1f9bb40e1fd8e5125a3d29b31dd94a6744bbc21722222b976089f073a4d3fcafc6d06518cf0c4fc6c8e3da0000000000000000000000007d3b60775243f2143d9f54804b11102cf0e4c641db1ba8bf75e46ab3a8fdece6562e7ebb3e407f3c7504dfa3da3aecbd49af3d1edeea11cc970416fadeedc8423bfdc85041ac4d8243a1130e6f4cb5bbfed9d095e18c98c7d690e4c491a7ddcd5635bc61dbed719ca28e8ca3f1fbbe588913ed057f1d6e34a79f4dc10df54d1993a5bc5f9ef6dbd339ee4b0b5764169f305e284ef82cc23e9366d4bc7eb45c7230b13433e5240657cb8eba33260147be8620b6d98cc48b000000000000000000000000c1ce872b18984f080100000000000000bd3fded92547d41809b398f36749083a147eb09ff1ed601bd36b873d3947fb223da647052528e0466cb917db7800f7c7000b593fca1903991cca1343882e3a1f60044f11c081dae4fc5bcf20efacdd2c577f4bcda2eea6f75a31dc90eebb6135b6fb824052181b0ad8a49ebf03ccf61d7e39bf6b0762d24d19796016301d1415b5110ba9df7f204aedb2a2e4e621c0553d312b309db67192f98ef7800000d629c04e216afc8fc66616bbf304e452373aa927c2ad6f5417f1b9bc322b802c1c42112a92a331cdc113b9ace3ff52ede7a853f9a89002ba070bac2f635a03db3375e5564f1a798bf9c0f8c72725d2eca9b0ec7e453d78ea20eca61530fe574299b393ca144adcb06108dfbb934065a87972739150a8752ac111c4d9062ccb95c54034fbdee131d94dfbaab1854d55665746fb7b47d25e54070b0d14c0a29c57bc4930075e1761913b036d43852c6df9f10e15105b2a18668298a3577943514db0dce953dcec62139ff3f16066efec5d8cbc0600000000007289be5883aab951ea67cf2ff691d05c1ea91dd569ed9897fe8d88a0a6977dc8955be17e8026aff11c61fa5cc76196c1423cd597345253baa1537eb6962a3ce1fe5d5ab46938e8fb23fa7047bc59c4345e912585a9adb5fe2ff51b64a326321b594e3f2d339f4090bdae6b30b62064bacbc155d3c930576f506b093ca7c60957bdfdd6536baaa871cf6a603c736b78761e6463b8ac503e219cc3d98f649602ad24d5667368290ee926fba76ee482a201a03efece3b236f4ee2ffcd5d90d92a2f0c5cfa48c87f27c2f1e92988a6508c12f6b7755cc48eb10edafca92cb0260c72295a27a24846d3a2334bd60e94c0fd07e5db0a4964a7fc4e89f11a300510776934e87bb3c21394f46954a012b2a3b0760f1bad1dbd6b466ed7153bd18ee2c0b2353c38df9e0782eb"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x80000}, 0x10, r6}, 0x94) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r9, 0x0, &(0x7f0000001780)=""/4096}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x9, 0x7}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r10, 0x0, 0x0, 0xffffffff00000000}, 0x20) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x16, 0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fcff1f00000000002000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600000003e70400000006000000181a0000", @ANYRES32=r11, @ANYBLOB="00000000000000005d93000000000000b503020000000000850000000c000000ce00fdff0000000095"], &(0x7f0000000140)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00', 0x0, 0x20}, 0x18) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x13, 0x6, 0x7, 0x3, 0x100, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x674, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x20, 0x20, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @generic={0x5e, 0x1, 0xb, 0x23c3, 0x3}, @map_fd={0x18, 0x2, 0x1, 0x0, r4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x9d77a2bff65303f7}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x30, &(0x7f0000000280)=""/48, 0x40f00, 0x0, '\x00', r5, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x7, 0x1, 0x8}, 0x10, r6, r7, 0x2, &(0x7f00000004c0)=[r9, r10, r11, r12, r13], &(0x7f0000000500)=[{0x5, 0x1, 0xe, 0xa}, {0x0, 0x2, 0xf, 0x4}], 0x10, 0x8}, 0x94) r14 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005002100000000080500010004"], 0x4c}}, 0x0) sendmmsg(r14, &(0x7f0000000000), 0x400000000000235, 0x0) socket$inet6(0xa, 0x2, 0x9) 35.442180239s ago: executing program 0 (id=3352): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x9, 0x7d, 0x6, 0x0, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x40, 0x5200, 0x8}}) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a4904000000000000000002000001300004802c0001800b0001006e756d67656e00001c000280080003400000000008000240fffff80108000140000000060900010073797a30000000080900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$XFS_IOC_GETBMAP(r3, 0xc0205826, &(0x7f0000000000)={0xea1d, 0x9, 0x5, 0x200, 0x7ff}) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) (async) sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0x0) (async) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000140), 0x10) r8 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) (async) recvmmsg$unix(r8, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000016c0)=""/172, 0xac}, {&(0x7f0000002480)=""/4100, 0x1004}, {&(0x7f0000000300)=""/92, 0x5c}, {&(0x7f0000001980)=""/222, 0xde}, {&(0x7f0000000680)=""/193, 0xc1}], 0x5}}], 0x1, 0x40010122, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) (async) write(r8, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) sendmsg$can_bcm(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) read(r7, &(0x7f0000001480)=""/4096, 0x38) (async) ioctl$int_out(r0, 0x5462, &(0x7f0000000040)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000400000000002010000b7080000000000007b8af8ff00000000b7080000020000407b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYRES16=r3], &(0x7f0000000180)='syzkaller\x00', 0x7, 0x1012, &(0x7f00000008c0)=""/4114, 0x0, 0x68}, 0x94) 34.87937716s ago: executing program 0 (id=3356): r0 = socket$inet6(0xa, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028008000500012000", @ANYRES16=r2], 0x104}}, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000540)) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0xf0ff) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90850000007100000018110000", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x3, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000001340)=ANY=[@ANYBLOB="aaaa8aaaaaaaaaaaaaaaaabb08004500002c0067000000119078002000000000000000007f00000090780400000007740000fdffffffffffffff62997514767307aff268f4102834b11ef0bac4edc82d4405938d06ae1661a0470ae33a8d339a1b78dbbaf8f28d9cd61c6bd8fc51a4b218e0ba4fafd7"], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000340)=0x48000, 0x4) recvmmsg(r3, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000600)=""/82, 0x52}, {&(0x7f0000000b40)=""/242, 0xf2}, {&(0x7f0000000c40)=""/242, 0xf2}], 0x3}, 0x200}, {{&(0x7f0000000d80)=@phonet, 0x80, &(0x7f0000001140)=[{&(0x7f0000000e00)=""/3, 0x3}, {&(0x7f0000000e40)=""/118, 0x76}, {&(0x7f0000000ec0)=""/82, 0x52}, {&(0x7f0000000f40)=""/96, 0x60}, {&(0x7f0000000fc0)=""/116, 0x74}, {&(0x7f0000001040)=""/202, 0xca}], 0x6, &(0x7f00000011c0)=""/135, 0x87}, 0x3}], 0x2, 0x10000, &(0x7f0000001300)) 31.064054751s ago: executing program 3 (id=3361): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 29.954178469s ago: executing program 3 (id=3364): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x2, 0x1000, 0x4}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x30, 0x68, 0x309, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NHA_BLACKHOLE={0x4}, @NHA_GATEWAY={0x14, 0x6, @ip4=@multicast2}]}, 0x30}}, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r3, 0x0, 0x0}, 0x10) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) listen(r5, 0xffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000001, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0xa, [{0x8}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1000001, 0x5000}]}, @struct={0xe, 0x3, 0x0, 0x4, 0x0, 0x10, [{0xf, 0x1, 0x5}, {0x8005, 0x0, 0x1}, {0x0, 0x2, 0x41}]}, @union={0xd, 0x0, 0x0, 0x5, 0x0, 0x9}]}}, &(0x7f0000000f40)=""/4089, 0x7e, 0xff9, 0xb, 0x1}, 0x28) r6 = accept4(r0, 0x0, 0x0, 0x80000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000180), &(0x7f0000000080)=0x8) 28.795361365s ago: executing program 3 (id=3366): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) (async) sendmsg$inet(r0, &(0x7f00000013c0)={&(0x7f00000000c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001280)=[{&(0x7f00000001c0)="28def042754fa7052ae4d5e22bc1fa7eea5c4a840c1eea2fb768efff2be529f117a686a4674298bf5579870f", 0x2c}, {&(0x7f0000000240)}, {&(0x7f0000000280)="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", 0xfa0}], 0x3, &(0x7f0000001300)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @empty}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x3b, 0x1, 0x2, [{@remote, 0x3}, {@multicast1, 0x4c74}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x8}]}]}}}], 0x68}, 0x4080) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100001, 0x5, 0x5, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000240), 0x20000402, r1}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, &(0x7f0000000340), &(0x7f0000000f00)=""/20}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000015c0)=0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001540)={'sit0\x00', &(0x7f0000001400)={'ip_vti0\x00', 0x0, 0x8, 0x10, 0x3, 0x8001, {{0x30, 0x4, 0x0, 0x3e, 0xc0, 0x68, 0x0, 0x45, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @remote, {[@cipso={0x86, 0x27, 0x3, [{0x0, 0x10, "7fc0b09b01963624e8d0d08898a9"}, {0x7, 0x11, "9aeecaf2c0b273e841f51fc5441192"}]}, @cipso={0x86, 0x1d, 0xffffffffffffffff, [{0x1, 0x6, "8cc00595"}, {0x6, 0xe, "101642c86e4574e58e480cc1"}, {0x0, 0x3, 'S'}]}, @lsrr={0x83, 0x1b, 0x6a, [@broadcast, @multicast2, @private=0xa010101, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @end, @rr={0x7, 0xf, 0x27, [@loopback, @multicast1, @private=0xa010100]}, @timestamp_prespec={0x44, 0x4, 0x8d, 0x3, 0x8}, @cipso={0x86, 0x39, 0x2, [{0x2, 0x12, "4ec6cefcc8b7fc9aaf11f59d5c273f15"}, {0x5, 0xf, "31c03086b35164a5e09bcc6dcd"}, {0x5, 0x12, "f02333a5ebaa42ee7d634dae2a694d65"}]}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000001580)={@local, 0x7b, r3}) (async) recvmmsg(r2, 0x0, 0x0, 0x2000, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @private=0xa010101}, 0xfffffffffffffdda) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x20}, 0xc) (async) sendto$inet(r4, &(0x7f00000000c0)='}', 0x1, 0xc0, &(0x7f00000001c0)={0x2, 0x4e62, @local}, 0x10) 28.329859682s ago: executing program 3 (id=3368): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@ptr, @struct={0x0, 0x2, 0x0, 0x4, 0x1, 0x8, [{0x6, 0x1, 0x3}, {0xd, 0x1, 0x7}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0]}}, &(0x7f0000000380)=""/3, 0x52, 0x3, 0x1}, 0x28) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) socket$nl_rdma(0x10, 0x3, 0x14) r2 = accept(r1, 0x0, &(0x7f0000000080)) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 28.112291833s ago: executing program 3 (id=3369): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='\n', 0x1}], 0x1, 0x2, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f00000046c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {}], 0x2}}], 0x1, 0x20004840) r1 = socket(0x15, 0x5, 0x0) connect$unix(r1, &(0x7f00000003c0)=@abs={0xa}, 0x6e) getsockname$llc(r1, 0x0, &(0x7f0000000040)) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) pread64(r2, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18010000000000000000000004000000850000005e0000009500000000000000a30b406b5a2bc8900d74868f5f4d1098c19588a23d7ae496951cac6cba4fd5c344499902356fe555b769ad074a9c8526831ea54da16a35cf6ba9"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'ip6gre0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000080), &(0x7f0000000240)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@gettclass={0x24, 0x2a, 0x101, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x3, 0xe}, {0x7, 0xa}, {0x6, 0x1ffe6}}}, 0x24}, 0x1, 0x0, 0x0, 0x845}, 0x24008084) 27.429939214s ago: executing program 3 (id=3371): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, 0x15, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x101}, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a00800000000004000000cb2004001001000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x56}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x1, 0xffffffff, 0x2000003, 0x1, 0x1, 0x800, 0xb0}, 0x1c) socketpair(0x1, 0x3, 0x0, 0x0) sendto$packet(r3, 0x0, 0x0, 0x4004800, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x7f, 0x6, @local}, 0x14) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r1, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r6, 0x0, 0x40000) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$tipc(r7, &(0x7f0000002c80)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x2, 0x3}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRES64=r2], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvfrom(r4, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) 19.760467393s ago: executing program 32 (id=3356): r0 = socket$inet6(0xa, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028008000500012000", @ANYRES16=r2], 0x104}}, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000540)) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0xf0ff) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90850000007100000018110000", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x3, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000001340)=ANY=[@ANYBLOB="aaaa8aaaaaaaaaaaaaaaaabb08004500002c0067000000119078002000000000000000007f00000090780400000007740000fdffffffffffffff62997514767307aff268f4102834b11ef0bac4edc82d4405938d06ae1661a0470ae33a8d339a1b78dbbaf8f28d9cd61c6bd8fc51a4b218e0ba4fafd7"], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000340)=0x48000, 0x4) recvmmsg(r3, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000600)=""/82, 0x52}, {&(0x7f0000000b40)=""/242, 0xf2}, {&(0x7f0000000c40)=""/242, 0xf2}], 0x3}, 0x200}, {{&(0x7f0000000d80)=@phonet, 0x80, &(0x7f0000001140)=[{&(0x7f0000000e00)=""/3, 0x3}, {&(0x7f0000000e40)=""/118, 0x76}, {&(0x7f0000000ec0)=""/82, 0x52}, {&(0x7f0000000f40)=""/96, 0x60}, {&(0x7f0000000fc0)=""/116, 0x74}, {&(0x7f0000001040)=""/202, 0xca}], 0x6, &(0x7f00000011c0)=""/135, 0x87}, 0x3}], 0x2, 0x10000, &(0x7f0000001300)) 15.321755315s ago: executing program 4 (id=3405): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000900140000060015000200000014001680100008800c000380"], 0x38}, 0x1, 0x0, 0x0, 0x20004840}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000180)={r2, &(0x7f0000000080)='rose0\x00', 0x3b1002, &(0x7f00000000c0)={@align=0xfffffffffffffffc, {0x1, 0x4, 0xfff, 0x2980000000000000}}, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x80}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r4, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9a, 0x79}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x8011) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2ccf3766}, 0x48) close(r0) 13.884587715s ago: executing program 1 (id=3407): socket$nl_netfilter(0x10, 0x3, 0xc) 13.547666038s ago: executing program 1 (id=3409): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)='\x00\x00', 0x2}], 0x1, 0x28001, 0x80) unshare(0x22020600) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) sendfile(r0, r0, 0x0, 0x2) 13.315779087s ago: executing program 1 (id=3410): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x1fffffff, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000380)='GPL\x00', 0x5, 0x2a, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x40054}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000002000aac14140ce000006a49e832f0", 0x0, 0x28b, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 11.972614278s ago: executing program 33 (id=3371): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, 0x15, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x101}, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a00800000000004000000cb2004001001000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x56}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x1, 0xffffffff, 0x2000003, 0x1, 0x1, 0x800, 0xb0}, 0x1c) socketpair(0x1, 0x3, 0x0, 0x0) sendto$packet(r3, 0x0, 0x0, 0x4004800, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x7f, 0x6, @local}, 0x14) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r1, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r6, 0x0, 0x40000) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$tipc(r7, &(0x7f0000002c80)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x2, 0x3}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRES64=r2], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvfrom(r4, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) 11.967807888s ago: executing program 4 (id=3413): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x2c0800, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x0, 0x1, {0x8, 0xa10, 0xfffffffa}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000140)="bad3", 0x2, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r8, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a2c001280110001006272696467655f736c617665000e000014000100000005001e0000000000bd140003006272696467655f736c6176655f300000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4050) socket$packet(0x11, 0x3, 0x300) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="4800000010000104040000003f00000000030000", @ANYRES32=0x0, @ANYBLOB="80000400000100001400128009000100766574680000000004000280140003006272696467655f736c6176655f310000"], 0x48}}, 0x48) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r11, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r11, &(0x7f0000000240)={0x24, @short={0x2, 0xfffd}}, 0x14) sendmmsg(r11, &(0x7f0000007f00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000340)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x40080}, 0x80, 0x0}}], 0x2, 0x404c010) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'macvlan1\x00'}) 11.865324182s ago: executing program 1 (id=3414): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x118, r0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x365d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb62}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x26a}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2461ff19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x118}}, 0x20004c05) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r3, @ANYBLOB="08000500", @ANYRES32=r3, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xcd, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x82, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x10, 0xfff3}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0xc, 0xe}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x24041080) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000680)={'batadv_slave_0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000006c0)={@multicast2, @remote, 0x0}, &(0x7f0000000700)=0xc) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000b80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000740)={0x400, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0xd8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xd3, 0x5, "4f0e7d0c9a3e84507503fb1a505441a54e469f82cfd8e3acece4985703cc3118385765ca74fe29204367d6657ff56b504cfdb5ec0b5fca249675615042e38f382c66badcfdc44c81db5af737350e9869f73a9c1efdc88915f580ff62f8af3bafb7f6e68d829e6da4bec54e96c0eee39505ca490ffc4370cacb89331410e323139b4f091c77cd26a6270e07e191501d37aca56807db9b20bb1af74ba5b011a659d0d08645a512eb80cded2ac70a7da6fea5578aa774a042f02a75c4ce2cc7d273eae7588b0c66577ef93ef215f9fdb5"}]}, @ETHTOOL_A_FEATURES_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_FEATURES_WANTED={0x1dc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3942}, @ETHTOOL_A_BITSET_VALUE={0x7e, 0x4, "3d10b707e891e298f617f604ffac0ebdaf833fdb5615a43316ab96e8a4456435dbcf20cba22013fcb57cc842eb343bc35a7f7f135cdcd2409d1b77473307d1abcc8af3664bb29bd76659c89c08460657aabf317fbff9d6c6d34fbf85e4a6d8c595831f359de06e677aea39434bce0bd1c0aa34bf1da773ffdc12"}, @ETHTOOL_A_BITSET_BITS={0x58, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'udp\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '*[[][@#:&-#:.:,\x85\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_VALUE={0xb9, 0x4, "c06224f7f46dd1dd9cacbb3e114c87562b9e7446c85b38dd326534ff0a0d9d951326ec625d3f19a50ee2c87717d2daa9075e46ba842b6f76ca1ad00d2501f09966eeba6e0f70443ad94572212bd6b5a812e8d8938474525b5fe303f54e0b6c1d44e8c3db589534d17c06b42c3a90a60f643f60f9ab67c0bc5c6e3577171bde142db2d0f8ddee7552be1f4f7945731355356328df7678576876ad0f94016ee53882407a01f3727e106728b19f1fbc5985e61452f0e0"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1000}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xd1}]}]}, 0x400}, 0x1, 0x0, 0x0, 0x800}, 0x841) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r0, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}}, 0x840) 9.131495309s ago: executing program 2 (id=3419): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x80000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x420, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xe}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x14) sendto$inet(r2, &(0x7f0000000000)='\x00', 0x1, 0x24008800, 0x0, 0x0) accept4$tipc(r2, 0x0, 0x0, 0x800) 5.672126645s ago: executing program 2 (id=3420): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r0, 0x1, 0x9, 0xa1f}) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="110200000000000000000100000030000180060005004e21000014000400000000000000000000000000000000010800060001000000060001000a"], 0x44}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, 0x0, 0x20004840) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x4c, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 4.637435365s ago: executing program 2 (id=3421): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000000700)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x43}}, 0x1c, 0x0}}, {{&(0x7f0000000200)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x46}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x30}}], 0x2, 0x40001) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x6c}}, 0x0) 4.208539659s ago: executing program 2 (id=3422): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000780)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x0, 0x240, 0xffffffff, 0x240, 0x240, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3a}, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x168, 0x1a0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x7e, 0x2, {0x3}}}, @common=@unspec=@time={{0x38}, {0xa, 0xa, 0x800a18f, 0xfd25, 0x81, 0x1, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @dev={0xac, 0x14, 0x14, 0xe}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0xc7995fa2be0944df}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {0xff}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0xc, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private=0xa010100, @icmp_id=0x68, @icmp_id=0x65}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'veth0_vlan\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "a334", 0xfd}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000c40)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x63, 0x0, 0x0, 0x2f}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000700)={r1, 0xffffffffffffffff, 0x13, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x12e9dd81}}, 0x30) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto(r2, &(0x7f0000000000)="a8addc8a6a0c8fa28dcc3049704d5e62c73b076b79135cd99444cac8bb19e7475842e058828c79698396021e7e7ef20823a13d4d02a3c148e16a21c7", 0x3c, 0x840, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="9500000000000000dd43020001000000fb5d0100080000008520000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7033eff46a3bc0457118ff6dc17460000010000008500000006000000186a000003000000000000"], &(0x7f0000000400)='GPL\x00', 0x7fff, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x4, 0xc, 0x81, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x1], 0x0, 0x10, 0x5}, 0x94) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff010}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="500100001a0001000000000000000000020000000000000b002f000005001b001100000006001d004e21000008000200e0"], 0x150}}, 0x4) sendmmsg$inet(r6, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) bind$can_raw(r4, &(0x7f0000000480)={0x1d, r5}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, r5, 0x25, 0xd, @void}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001a00100029bd7000000000000a0000000000ff0000000000080006000400000008000400", @ANYRES32=0x0, @ANYBLOB="08001000040008"], 0x34}}, 0x20000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000c40)={0x0, @in={{0x2, 0x4e20, @empty}}}, 0x84) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001740)=ANY=[@ANYBLOB="4c0000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000200003"], 0x4c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0003"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r12 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="240000002200010a000000000000000080ab7c0000000000007f288036ea1225d1000000f99248cb559878b04ab29f3f23dc6b8d597732c2c200213b72abb705d8d5936b3af3b54b15b197a0cd8b6953f0cd8fd3f5c4e37bbf5c1035a4ea2b93973c0299f5860877b29c9333bd01213a603fcbaf"], 0x24}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000001c0)={@loopback, @loopback}, &(0x7f0000000200)=0xc) 3.588435781s ago: executing program 5 (id=3395): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b", 0x15}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x23, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a80000000060a010400000000000000000a0004060900010073797a310000000054000480500001800a000100696e6e65720000004000028008000440000000171c0005800c0001007061786c6f6164000c00028008000240000000010800034000000002080002400000008408000140000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 3.527876801s ago: executing program 2 (id=3423): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x43, 0xffffffffffffff11, &(0x7f0000000000), &(0x7f0000000540)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d572950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x3b) 3.219541698s ago: executing program 2 (id=3424): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r2, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb25026a747e0114370595e4bb0b0489b1dc7322", 0x2f}], 0x1}, 0x2404c020) 2.514878748s ago: executing program 5 (id=3425): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="3400000040000701feffffff00000000017c0000040042800c00018006000600800a0000100002800900068004"], 0x34}, 0x1, 0x0, 0x0, 0x80000}, 0xc000) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) 2.426269703s ago: executing program 4 (id=3426): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x8c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}]}, 0x8c}}, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) writev(r1, &(0x7f0000000040)=[{&(0x7f0000001040)="ba", 0x1}, {0x0, 0xea}], 0x2) ioctl$NILFS_IOCTL_GET_CPINFO(0xffffffffffffffff, 0x80186e82, &(0x7f0000000280)={&(0x7f00000000c0)=[{0x0, 0x0, 0x8001, 0x80, 0x509, 0x8, 0x731, 0x9}, {0x1, 0x0, 0x6, 0xfffffffffffffff7, 0x7f289d2a, 0xfffffffffffffffd, 0x6, 0x6}, {0x2, 0x0, 0x9, 0xd1db, 0x8, 0x7, 0x5, 0x6}, {0x2, 0x0, 0x2, 0x3, 0x1, 0x7fffffff, 0x8b, 0xfffffffffffffff8}, {0x1, 0x0, 0x4f3f, 0xfffffffffffffffa, 0x3, 0x200000000000006, 0x1, 0x8}, {0x0, 0x0, 0x100, 0x2, 0x5, 0x100000000, 0x7, 0x8}, {0x2, 0x0, 0x7ffffffffffffffc, 0x0, 0x1, 0x1, 0x5, 0x745}], 0x7, 0x38, 0x1, 0x2}) 2.191579308s ago: executing program 1 (id=3427): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000100)='wg2\x00', 0x4) connect$unix(r0, &(0x7f0000000940)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r4) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="f0000000a74664ee63b022210fa3b70582d4ec98abe53ea056a9738ecf96ef59d838001b00000000000000003355feb6ba80a18f517e387d76483de5523dfddfe7876d8efe49", @ANYRES16=r5, @ANYBLOB="10002bbd7000fedbdf25100000000a000900bbbbbbbbbbbb0000050037000100000005002f0001000000050030000100000005002e000100000008002c000500000008002b004102000008003a00000000000800320003000000"], 0x60}}, 0x4008010) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x6, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xacb83a412efdbb9f}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x1, 0x3, 0x73d6, 0x481, 0xfff}, {0x1, 0x0, 0x4, 0x5, 0xb}, 0x3, 0x3, 0xbf3}}, @TCA_TBF_RATE64={0xc, 0x4, 0x9d19ad734573514e}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x14000050) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r11) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES16=r12, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000000008"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "bad8ce8b3a9bfee2", "83c0dd5a4283501b42565f08273939dd", "786262fa", "b54af18dd4ad9997"}, 0x28) socketpair$unix(0x1, 0x1, 0x0, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x568f70f1176ee2a9, 0x32, 0xffffffffffffffff, 0x852a9000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020080ffffff18000000fffffffe00000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) 2.101375576s ago: executing program 5 (id=3428): sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="640100001900010000000000040000001d0100001500040001000080fe02000031171e44b2b50e8f040000001e0106000000fd0000ec058cdecf0fa4f69652b23bf9968d372a0ddfe196faa30f83514813d0527685407bc8366e2838397d6abc25357799ac708b65efffdb10e1376a4f6d4ab9949102000036dbf30bf928c37695658578feb8f3cce47f43a42919c288f7d5430ffc0226139916866a978312dd970e64629d7cd799c5e08b64de41458eb8951a54a7cf29a810823e869f5c087d15d9d3bae1c089701f970f8e7ce853654222f07959e7cdcfcf27332cb82016ccd91be54e588f6ea7b5c35a62c0ceaa4e90b29c3edc16f20db3d7fb4d6236232de07ccd7d7301f46a287dd296abe9baba499721311e1597853a2d0c7e1e64f827d31e6917175792398e0edaa900000000000000000002c900c08ac1d7b606000000000000000000000000000008000900", @ANYRES32, @ANYBLOB="080005"], 0x164}}, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xffffffc5}, 0x94) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r2 = accept4(r0, 0x0, 0x0, 0x800) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000600)={0x0, 0xfe, "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"}, &(0x7f0000000540)=0x106) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000500)={r3, 0x2}, 0x8) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) r11 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x41, &(0x7f0000000000)=0x6170, 0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x1f, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x17) 1.996178952s ago: executing program 4 (id=3429): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000589cb8b1e66b52c24d70417e08132dc4b6391d6519002346d2cda424ee51713214727988e047d32b9be3229edc55e8940708b37fa80fd8520f5941fd6b26efd6f1a88e377536d566d26977a733943ba7baa0c4bbe1663991b500c5f1d69752d52e88c9cd91c2f61f59c300e74748450d"], 0x50) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b5090000c0ff0000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005e080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) 1.793676332s ago: executing program 4 (id=3430): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={0xffffffffffffffff, 0x6, 0x2, 0x6f}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1802000000000000000000000f000000850000002800000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007f000000850000007b00000095d4acde479ad8d4a0f3dd5a44225e16cba3946f6b575dd872a1db2c43f355a64338629fcebdf8ed75211ea76b08bcdd50ffb73d80ab34b91a530c3dbb2f44b050d05c301bc7e7cf27fbe4e188538f0600efc461d44b133cf97406ca2a3ed7cef226ba4b5d36f9251f0fbe5cf64ae10284dd84221ea89ac6682f298108adc6a5bf1c85f3a18326eafdf8a10e39ed3066"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000005}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000680)="0000000000000000000051229dc9", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=r1, @ANYBLOB="000226bd7000fedbdf2d55000007642efb00590200007e000000"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0xc000044) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(twofish-asm)\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) select(0x0, 0x0, &(0x7f0000000400)={0x8, 0x3, 0xd, 0x6, 0xffff, 0x101, 0x2f0a0ca4, 0x6}, 0x0, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r7, &(0x7f0000000140)={0x2, 0x6e24, @private=0xa010101}, 0x10) writev(r7, &(0x7f0000000200), 0x0) unshare(0x2c020400) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f00000004c0)={0x4}) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r8, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000200)=0x4) pipe(&(0x7f0000000000)) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8c0}, 0x40048904) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000014}, 0x20048050) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140500000000000000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010000000000140000001100010000000000000000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x24004904}, 0x40) 842.813317ms ago: executing program 4 (id=3431): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) (async) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x6, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48011}, 0x20040014) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000003640)=r0, 0x4) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r5, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x170c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]]}, 0x40}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xe, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 1 (id=3432): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="01435d1fca718952927b46eab90e3b01dfe578f5e06a6fbe023ba5fe63bc4b626bd84f988887513519a5db59a131d45b", 0x30) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d00), r1) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000380)={0x2c, r2, 0x601, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0xe, 0x14, 'immediate\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x240000c0) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4000801}, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000000201050000000000000000000000000314001980080600"], 0x28}, 0x1, 0x0, 0x0, 0x404c0}, 0x44) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x6020400) close(r7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) splice(r6, 0x0, r7, 0x0, 0x200000000005, 0x6) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0xf0ff) kernel console output (not intermixed with test programs): 9.165653][T15256] ? __pfx_ksys_write+0x10/0x10 [ 409.165701][T15256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.165728][T15256] do_syscall_64+0x174/0x580 [ 409.165753][T15256] ? clear_bhb_loop+0x40/0x90 [ 409.165778][T15256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.165798][T15256] RIP: 0033:0x7f912db9ce59 [ 409.165818][T15256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.165836][T15256] RSP: 002b:00007f912ea72028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 409.165859][T15256] RAX: ffffffffffffffda RBX: 00007f912de15fa0 RCX: 00007f912db9ce59 [ 409.165874][T15256] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000003 [ 409.165887][T15256] RBP: 00007f912ea72090 R08: 0000000000000000 R09: 0000000000000000 [ 409.165899][T15256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.165911][T15256] R13: 00007f912de16038 R14: 00007f912de15fa0 R15: 00007ffe8d7e0958 [ 409.165945][T15256] [ 410.459337][T15302] syzkaller1: entered promiscuous mode [ 410.480569][T15302] syzkaller1: entered allmulticast mode [ 410.502015][T15302] FAULT_INJECTION: forcing a failure. [ 410.502015][T15302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.531991][T15302] CPU: 1 UID: 0 PID: 15302 Comm: syz.4.2719 Not tainted syzkaller #0 PREEMPT(full) [ 410.532021][T15302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 410.532034][T15302] Call Trace: [ 410.532043][T15302] [ 410.532052][T15302] dump_stack_lvl+0xe8/0x150 [ 410.532084][T15302] should_fail_ex+0x412/0x560 [ 410.532112][T15302] _copy_from_iter+0x1d3/0x1670 [ 410.532139][T15302] ? sock_alloc_send_pskb+0x896/0x990 [ 410.532173][T15302] ? __pfx__copy_from_iter+0x10/0x10 [ 410.532215][T15302] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 410.532245][T15302] skb_copy_datagram_from_iter+0xf5/0x710 [ 410.532277][T15302] ? skb_put+0x11b/0x210 [ 410.532304][T15302] tun_get_user+0xc5e/0x43e0 [ 410.532343][T15302] ? aa_file_perm+0x192/0x15e0 [ 410.532370][T15302] ? aa_file_perm+0x50e/0x15e0 [ 410.532389][T15302] ? __pfx_tun_get_user+0x10/0x10 [ 410.532414][T15302] ? __lock_acquire+0x6b5/0x2cf0 [ 410.532439][T15302] ? kstrtoull+0x12f/0x1d0 [ 410.532478][T15302] ? ref_tracker_alloc+0x35c/0x4c0 [ 410.532504][T15302] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 410.532530][T15302] ? tun_get+0x1c/0x2f0 [ 410.532551][T15302] ? tun_get+0x1c/0x2f0 [ 410.532578][T15302] ? tun_get+0x1c/0x2f0 [ 410.532598][T15302] ? tun_get+0x1c/0x2f0 [ 410.532623][T15302] tun_chr_write_iter+0x113/0x200 [ 410.532648][T15302] vfs_write+0x61d/0xb90 [ 410.532688][T15302] ? __pfx_vfs_write+0x10/0x10 [ 410.532728][T15302] ? __fget_files+0x2a/0x420 [ 410.532764][T15302] ksys_write+0x150/0x270 [ 410.532796][T15302] ? __pfx_ksys_write+0x10/0x10 [ 410.532834][T15302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.532858][T15302] do_syscall_64+0x174/0x580 [ 410.532881][T15302] ? trace_irq_disable+0x3b/0x140 [ 410.532912][T15302] ? clear_bhb_loop+0x40/0x90 [ 410.532938][T15302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.532958][T15302] RIP: 0033:0x7f519499ce59 [ 410.532979][T15302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.532997][T15302] RSP: 002b:00007f51958cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 410.533021][T15302] RAX: ffffffffffffffda RBX: 00007f5194c15fa0 RCX: 00007f519499ce59 [ 410.533036][T15302] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000003 [ 410.533049][T15302] RBP: 00007f51958cb090 R08: 0000000000000000 R09: 0000000000000000 [ 410.533062][T15302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.533074][T15302] R13: 00007f5194c16038 R14: 00007f5194c15fa0 R15: 00007fff6b6470b8 [ 410.533107][T15302] [ 411.197073][T15319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2725'. [ 411.378766][T15328] syzkaller1: entered promiscuous mode [ 411.394683][T15328] syzkaller1: entered allmulticast mode [ 411.558864][T15344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2733'. [ 412.289775][T15379] syzkaller1: entered promiscuous mode [ 412.295714][T15379] syzkaller1: entered allmulticast mode [ 412.303499][T15379] FAULT_INJECTION: forcing a failure. [ 412.303499][T15379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.322487][T15379] CPU: 0 UID: 0 PID: 15379 Comm: syz.1.2741 Not tainted syzkaller #0 PREEMPT(full) [ 412.322514][T15379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 412.322526][T15379] Call Trace: [ 412.322535][T15379] [ 412.322548][T15379] dump_stack_lvl+0xe8/0x150 [ 412.322578][T15379] should_fail_ex+0x412/0x560 [ 412.322605][T15379] _copy_from_iter+0x1d3/0x1670 [ 412.322631][T15379] ? rep_movs_alternative+0x4a/0x90 [ 412.322735][T15379] ? __pfx__copy_from_iter+0x10/0x10 [ 412.322753][T15379] ? sock_alloc_send_pskb+0x896/0x990 [ 412.322785][T15379] ? __pfx__copy_from_iter+0x10/0x10 [ 412.322815][T15379] copy_page_from_iter+0x220/0x2d0 [ 412.322839][T15379] skb_copy_datagram_from_iter+0x306/0x710 [ 412.322878][T15379] tun_get_user+0xc5e/0x43e0 [ 412.322919][T15379] ? aa_file_perm+0x192/0x15e0 [ 412.322944][T15379] ? aa_file_perm+0x50e/0x15e0 [ 412.322964][T15379] ? __pfx_tun_get_user+0x10/0x10 [ 412.322989][T15379] ? __lock_acquire+0x6b5/0x2cf0 [ 412.323014][T15379] ? kstrtoull+0x12f/0x1d0 [ 412.323054][T15379] ? ref_tracker_alloc+0x35c/0x4c0 [ 412.323079][T15379] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 412.323104][T15379] ? tun_get+0x1c/0x2f0 [ 412.323125][T15379] ? tun_get+0x1c/0x2f0 [ 412.323153][T15379] ? tun_get+0x1c/0x2f0 [ 412.323172][T15379] ? tun_get+0x1c/0x2f0 [ 412.323207][T15379] tun_chr_write_iter+0x113/0x200 [ 412.323232][T15379] vfs_write+0x61d/0xb90 [ 412.323272][T15379] ? __pfx_vfs_write+0x10/0x10 [ 412.323311][T15379] ? __fget_files+0x2a/0x420 [ 412.323347][T15379] ksys_write+0x150/0x270 [ 412.323379][T15379] ? __pfx_ksys_write+0x10/0x10 [ 412.323418][T15379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.323441][T15379] do_syscall_64+0x174/0x580 [ 412.323462][T15379] ? trace_irq_disable+0x3b/0x140 [ 412.323493][T15379] ? clear_bhb_loop+0x40/0x90 [ 412.323518][T15379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.323539][T15379] RIP: 0033:0x7f8791b9ce59 [ 412.323558][T15379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.323576][T15379] RSP: 002b:00007f87929c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 412.323599][T15379] RAX: ffffffffffffffda RBX: 00007f8791e15fa0 RCX: 00007f8791b9ce59 [ 412.323614][T15379] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000003 [ 412.323627][T15379] RBP: 00007f87929c6090 R08: 0000000000000000 R09: 0000000000000000 [ 412.323640][T15379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 412.323652][T15379] R13: 00007f8791e16038 R14: 00007f8791e15fa0 R15: 00007ffd06c04628 [ 412.323687][T15379] [ 412.601827][T15382] netlink: 'syz.4.2742': attribute type 1 has an invalid length. [ 412.648839][T15382] 8021q: adding VLAN 0 to HW filter on device bond10 [ 412.892416][T15391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2745'. [ 412.920327][T15395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2746'. [ 412.929603][T15395] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2746'. [ 412.965944][ T5646] block nbd2: Receive control failed (result -1) [ 413.193773][T15404] syzkaller1: entered promiscuous mode [ 413.209097][T15404] syzkaller1: entered allmulticast mode [ 413.287611][T15409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2750'. [ 413.599771][T15415] bond0: left promiscuous mode [ 413.611963][T15415] bond_slave_0: left promiscuous mode [ 413.618286][T15415] bond_slave_1: left promiscuous mode [ 413.628015][T15415] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 413.637578][T15415] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 413.646842][T15415] ip6gre4: left promiscuous mode [ 413.652011][T15415] ip6gre4: left allmulticast mode [ 413.722539][ T10] lo speed is unknown, defaulting to 1000 [ 413.722561][T15419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2753'. [ 413.735482][ T10] syz2: Port: 1 Link DOWN [ 413.986433][T15424] syzkaller1: entered promiscuous mode [ 413.998934][T15424] syzkaller1: entered allmulticast mode [ 414.015258][T15424] FAULT_INJECTION: forcing a failure. [ 414.015258][T15424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.043356][T15424] CPU: 0 UID: 0 PID: 15424 Comm: syz.2.2756 Not tainted syzkaller #0 PREEMPT(full) [ 414.043386][T15424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 414.043398][T15424] Call Trace: [ 414.043407][T15424] [ 414.043416][T15424] dump_stack_lvl+0xe8/0x150 [ 414.043448][T15424] should_fail_ex+0x412/0x560 [ 414.043477][T15424] _copy_from_iter+0x1d3/0x1670 [ 414.043502][T15424] ? rep_movs_alternative+0x4a/0x90 [ 414.043539][T15424] ? __pfx__copy_from_iter+0x10/0x10 [ 414.043559][T15424] ? sock_alloc_send_pskb+0x896/0x990 [ 414.043591][T15424] ? __pfx__copy_from_iter+0x10/0x10 [ 414.043622][T15424] copy_page_from_iter+0x220/0x2d0 [ 414.043650][T15424] skb_copy_datagram_from_iter+0x306/0x710 [ 414.043690][T15424] tun_get_user+0xc5e/0x43e0 [ 414.043739][T15424] ? aa_file_perm+0x192/0x15e0 [ 414.043765][T15424] ? aa_file_perm+0x50e/0x15e0 [ 414.043785][T15424] ? __pfx_tun_get_user+0x10/0x10 [ 414.043809][T15424] ? __lock_acquire+0x6b5/0x2cf0 [ 414.043835][T15424] ? kstrtoull+0x12f/0x1d0 [ 414.043874][T15424] ? ref_tracker_alloc+0x35c/0x4c0 [ 414.043899][T15424] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 414.043924][T15424] ? tun_get+0x1c/0x2f0 [ 414.043945][T15424] ? tun_get+0x1c/0x2f0 [ 414.043972][T15424] ? tun_get+0x1c/0x2f0 [ 414.043991][T15424] ? tun_get+0x1c/0x2f0 [ 414.044018][T15424] tun_chr_write_iter+0x113/0x200 [ 414.044043][T15424] vfs_write+0x61d/0xb90 [ 414.044082][T15424] ? __pfx_vfs_write+0x10/0x10 [ 414.044122][T15424] ? __fget_files+0x2a/0x420 [ 414.044162][T15424] ksys_write+0x150/0x270 [ 414.044193][T15424] ? __pfx_ksys_write+0x10/0x10 [ 414.044231][T15424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.044254][T15424] do_syscall_64+0x174/0x580 [ 414.044274][T15424] ? trace_irq_disable+0x3b/0x140 [ 414.044304][T15424] ? clear_bhb_loop+0x40/0x90 [ 414.044329][T15424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.044350][T15424] RIP: 0033:0x7f22c319ce59 [ 414.044369][T15424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.044387][T15424] RSP: 002b:00007f22c40f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 414.044410][T15424] RAX: ffffffffffffffda RBX: 00007f22c3415fa0 RCX: 00007f22c319ce59 [ 414.044425][T15424] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000003 [ 414.044438][T15424] RBP: 00007f22c40f7090 R08: 0000000000000000 R09: 0000000000000000 [ 414.044451][T15424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 414.044463][T15424] R13: 00007f22c3416038 R14: 00007f22c3415fa0 R15: 00007ffd14950888 [ 414.044497][T15424] [ 414.547637][T15437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2760'. [ 414.865959][T15460] netlink: 'syz.0.2766': attribute type 1 has an invalid length. [ 414.984799][T15460] bond5: entered promiscuous mode [ 414.990552][T15460] 8021q: adding VLAN 0 to HW filter on device bond5 [ 415.071999][T15461] bond5: (slave veth7): making interface the new active one [ 415.092770][T15461] veth7: entered promiscuous mode [ 415.116572][T15461] bond5: (slave veth7): Enslaving as an active interface with an up link [ 415.464300][ T5638] Bluetooth: hci4: command 0x0405 tx timeout [ 415.582983][T15477] syzkaller1: entered promiscuous mode [ 415.588768][T15477] syzkaller1: entered allmulticast mode [ 415.598734][T15477] FAULT_INJECTION: forcing a failure. [ 415.598734][T15477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.612056][T15477] CPU: 0 UID: 0 PID: 15477 Comm: syz.2.2771 Not tainted syzkaller #0 PREEMPT(full) [ 415.612076][T15477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 415.612083][T15477] Call Trace: [ 415.612088][T15477] [ 415.612094][T15477] dump_stack_lvl+0xe8/0x150 [ 415.612114][T15477] should_fail_ex+0x412/0x560 [ 415.612131][T15477] _copy_from_iter+0x1d3/0x1670 [ 415.612147][T15477] ? rep_movs_alternative+0x4a/0x90 [ 415.612171][T15477] ? __pfx__copy_from_iter+0x10/0x10 [ 415.612184][T15477] ? sock_alloc_send_pskb+0x896/0x990 [ 415.612204][T15477] ? __pfx__copy_from_iter+0x10/0x10 [ 415.612221][T15477] copy_page_from_iter+0x220/0x2d0 [ 415.612240][T15477] skb_copy_datagram_from_iter+0x306/0x710 [ 415.612263][T15477] tun_get_user+0xc5e/0x43e0 [ 415.612286][T15477] ? aa_file_perm+0x192/0x15e0 [ 415.612301][T15477] ? aa_file_perm+0x50e/0x15e0 [ 415.612313][T15477] ? __pfx_tun_get_user+0x10/0x10 [ 415.612327][T15477] ? __lock_acquire+0x6b5/0x2cf0 [ 415.612342][T15477] ? kstrtoull+0x12f/0x1d0 [ 415.612364][T15477] ? ref_tracker_alloc+0x35c/0x4c0 [ 415.612380][T15477] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 415.612394][T15477] ? tun_get+0x1c/0x2f0 [ 415.612407][T15477] ? tun_get+0x1c/0x2f0 [ 415.612421][T15477] ? tun_get+0x1c/0x2f0 [ 415.612433][T15477] ? tun_get+0x1c/0x2f0 [ 415.612448][T15477] tun_chr_write_iter+0x113/0x200 [ 415.612462][T15477] vfs_write+0x61d/0xb90 [ 415.612484][T15477] ? __pfx_vfs_write+0x10/0x10 [ 415.612507][T15477] ? __fget_files+0x2a/0x420 [ 415.612528][T15477] ksys_write+0x150/0x270 [ 415.612547][T15477] ? __pfx_ksys_write+0x10/0x10 [ 415.612569][T15477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.612583][T15477] do_syscall_64+0x174/0x580 [ 415.612596][T15477] ? trace_irq_disable+0x3b/0x140 [ 415.612614][T15477] ? clear_bhb_loop+0x40/0x90 [ 415.612629][T15477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.612641][T15477] RIP: 0033:0x7f22c319ce59 [ 415.612654][T15477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.612665][T15477] RSP: 002b:00007f22c40f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 415.612688][T15477] RAX: ffffffffffffffda RBX: 00007f22c3415fa0 RCX: 00007f22c319ce59 [ 415.612697][T15477] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000003 [ 415.612705][T15477] RBP: 00007f22c40f7090 R08: 0000000000000000 R09: 0000000000000000 [ 415.612713][T15477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 415.612720][T15477] R13: 00007f22c3416038 R14: 00007f22c3415fa0 R15: 00007ffd14950888 [ 415.612739][T15477] [ 415.979447][T15479] geneve4: entered promiscuous mode [ 416.048741][T15482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2773'. [ 416.073084][T15482] geneve5: entered promiscuous mode [ 417.145544][T15491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2776'. [ 417.161520][T15491] ipvlan0: entered allmulticast mode [ 417.167149][T15491] syz_tun: entered allmulticast mode [ 417.198337][T15492] bridge0: port 1(veth0_virt_wifi) entered blocking state [ 417.205877][T15492] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 417.213188][T15492] veth0_virt_wifi: entered allmulticast mode [ 417.221091][T15492] veth0_virt_wifi: entered promiscuous mode [ 417.477249][T15437] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 417.674838][T15504] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2780'. [ 418.005893][T15510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2781'. [ 418.126726][T15519] netlink: 'syz.3.2783': attribute type 2 has an invalid length. [ 418.280777][T15522] Cannot find add_set index 0 as target [ 418.424783][T15530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2787'. [ 418.752639][T15550] netlink: 'syz.1.2793': attribute type 1 has an invalid length. [ 418.885402][T15550] bond10: entered promiscuous mode [ 418.891152][T15550] 8021q: adding VLAN 0 to HW filter on device bond10 [ 419.070490][ T5638] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 419.087634][ T5638] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 419.099190][ T5638] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 419.112394][ T5638] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 419.123947][ T5638] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 419.299682][T15561] sctp: [Deprecated]: syz.3.2795 (pid 15561) Use of int in maxseg socket option. [ 419.299682][T15561] Use struct sctp_assoc_value instead [ 419.332517][T15559] nftables ruleset with unbound set [ 419.375746][T15550] vlan3: entered allmulticast mode [ 419.390471][T15550] bond10: entered allmulticast mode [ 419.472928][T15581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2796'. [ 419.487690][T15554] bond10: (slave bridge6): making interface the new active one [ 419.513172][T15554] bridge6: entered promiscuous mode [ 419.539561][T15554] bridge6: entered allmulticast mode [ 419.556573][T15554] bond10: (slave bridge6): Enslaving as an active interface with an up link [ 419.703188][ T5642] bond3: (slave syz_tun): Removing an active aggregator [ 419.723945][ T5642] bond3: (slave syz_tun): Releasing backup interface [ 420.027472][T15602] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2800'. [ 421.239055][ T5646] Bluetooth: hci5: command tx timeout [ 422.129570][T15604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2800'. [ 422.326398][T15611] tc action pedit 'at' offset 6 out of bounds [ 422.453922][T15615] tipc: Enabled bearer , priority 0 [ 422.467421][T15615] syzkaller0: entered promiscuous mode [ 422.479837][T15615] syzkaller0: entered allmulticast mode [ 422.551728][T15621] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 422.601213][T15563] lo speed is unknown, defaulting to 1000 [ 422.622833][T15621] tipc: Resetting bearer [ 422.630450][T15621] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2803'. [ 422.640209][T15628] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2807'. [ 422.760522][T15636] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2810'. [ 422.770190][T15636] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2810'. [ 422.780705][T15636] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2810'. [ 422.792689][T15636] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2810'. [ 422.808703][T15636] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2810'. [ 422.829737][T15636] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2810'. [ 422.920870][T15643] netlink: 'syz.2.2813': attribute type 1 has an invalid length. [ 422.930105][T15643] netlink: 'syz.2.2813': attribute type 2 has an invalid length. [ 422.938039][T15643] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2813'. [ 422.959079][T15640] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 422.975382][T15640] bond6 (unregistering): Released all slaves [ 423.124675][T15643] syzkaller1: entered promiscuous mode [ 423.150840][T15643] syzkaller1: entered allmulticast mode [ 423.164043][T15563] lo speed is unknown, defaulting to 1000 [ 423.242093][T15614] tipc: Resetting bearer [ 423.297323][T15614] tipc: Disabling bearer [ 423.314254][ T5646] Bluetooth: hci5: command tx timeout [ 423.365479][T15653] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 423.385225][T15653] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 423.442262][T15662] lo speed is unknown, defaulting to 1000 [ 424.178356][T15697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2830'. [ 424.190776][T15697] netlink: 'syz.3.2830': attribute type 11 has an invalid length. [ 424.220947][T15697] netlink: 'syz.3.2830': attribute type 11 has an invalid length. [ 424.256033][T14051] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.281202][T14051] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.311237][T14051] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.339445][T14051] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.466683][T15662] lo speed is unknown, defaulting to 1000 [ 424.690413][T15563] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.712323][T15563] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.727832][T15563] bridge_slave_0: entered allmulticast mode [ 424.740029][T15563] bridge_slave_0: entered promiscuous mode [ 424.762951][T15563] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.780609][T15563] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.794745][T15563] bridge_slave_1: entered allmulticast mode [ 424.812914][T15563] bridge_slave_1: entered promiscuous mode [ 424.911247][T15563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.947442][T15563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.028609][T15731] FAULT_INJECTION: forcing a failure. [ 425.028609][T15731] name failslab, interval 1, probability 0, space 0, times 0 [ 425.045542][T15731] CPU: 1 UID: 0 PID: 15731 Comm: syz.3.2839 Not tainted syzkaller #0 PREEMPT(full) [ 425.045580][T15731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 425.045592][T15731] Call Trace: [ 425.045600][T15731] [ 425.045609][T15731] dump_stack_lvl+0xe8/0x150 [ 425.045639][T15731] should_fail_ex+0x412/0x560 [ 425.045668][T15731] should_failslab+0xa8/0x100 [ 425.045691][T15731] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 425.045720][T15731] ? __alloc_skb+0x186/0x7d0 [ 425.045742][T15731] ? __alloc_skb+0x1d0/0x7d0 [ 425.045759][T15731] ? __local_bh_enable_ip+0xd0/0x130 [ 425.045816][T15731] __alloc_skb+0x1d0/0x7d0 [ 425.045836][T15731] ? netlink_ack_tlv_len+0x6c/0x210 [ 425.045934][T15731] netlink_ack+0x146/0xa50 [ 425.045955][T15731] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 425.046013][T15731] ? __lock_acquire+0x6b5/0x2cf0 [ 425.046051][T15731] netlink_rcv_skb+0x2b6/0x4b0 [ 425.046075][T15731] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 425.046097][T15731] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 425.046136][T15731] ? netlink_deliver_tap+0x2e/0x1b0 [ 425.046160][T15731] ? netlink_deliver_tap+0x2e/0x1b0 [ 425.046189][T15731] netlink_unicast+0x75c/0x8e0 [ 425.046223][T15731] netlink_sendmsg+0x813/0xb40 [ 425.046258][T15731] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.046286][T15731] ? aa_sock_msg_perm+0xf1/0x1b0 [ 425.046343][T15731] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 425.046388][T15731] ____sys_sendmsg+0x972/0x9f0 [ 425.046434][T15731] ? __might_fault+0xaf/0x130 [ 425.046468][T15731] ? __pfx_____sys_sendmsg+0x10/0x10 [ 425.046500][T15731] ? import_iovec+0x73/0xa0 [ 425.046529][T15731] ___sys_sendmsg+0x2a5/0x360 [ 425.046552][T15731] ? __lock_acquire+0x6b5/0x2cf0 [ 425.046587][T15731] ? __pfx____sys_sendmsg+0x10/0x10 [ 425.046647][T15731] ? __fget_files+0x2a/0x420 [ 425.046672][T15731] ? __fget_files+0x3a0/0x420 [ 425.046708][T15731] __x64_sys_sendmsg+0x1bd/0x2a0 [ 425.046736][T15731] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 425.046771][T15731] ? __pfx_ksys_write+0x10/0x10 [ 425.046810][T15731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.046834][T15731] do_syscall_64+0x174/0x580 [ 425.046855][T15731] ? trace_irq_disable+0x3b/0x140 [ 425.046885][T15731] ? clear_bhb_loop+0x40/0x90 [ 425.046911][T15731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.046931][T15731] RIP: 0033:0x7f912db9ce59 [ 425.046951][T15731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.046969][T15731] RSP: 002b:00007f912ea72028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 425.046992][T15731] RAX: ffffffffffffffda RBX: 00007f912de15fa0 RCX: 00007f912db9ce59 [ 425.047007][T15731] RDX: 0000000020044000 RSI: 0000200000000080 RDI: 0000000000000004 [ 425.047020][T15731] RBP: 00007f912ea72090 R08: 0000000000000000 R09: 0000000000000000 [ 425.047032][T15731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.047043][T15731] R13: 00007f912de16038 R14: 00007f912de15fa0 R15: 00007ffe8d7e0958 [ 425.047095][T15731] [ 425.052624][T15563] team0: Port device team_slave_0 added [ 425.360366][T15563] team0: Port device team_slave_1 added [ 425.384620][ T5646] Bluetooth: hci5: command tx timeout [ 425.453158][T15742] Cannot find add_set index 0 as target [ 425.501002][T15563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.512496][T15563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.541652][T15563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.555361][T15563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.562422][T15563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.589243][T15563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.687407][T15744] syzkaller1: entered promiscuous mode [ 425.699925][T15744] syzkaller1: entered allmulticast mode [ 425.742668][T15563] hsr_slave_0: entered promiscuous mode [ 425.787025][T15563] hsr_slave_1: entered promiscuous mode [ 425.815514][T15563] debugfs: 'hsr0' already exists in 'hsr' [ 425.854692][T15563] Cannot create hsr debugfs directory [ 426.085378][T15764] IPVS: set_ctl: invalid protocol: 108 10.1.1.1:20002 [ 426.250550][T15770] FAULT_INJECTION: forcing a failure. [ 426.250550][T15770] name failslab, interval 1, probability 0, space 0, times 0 [ 426.284476][T15770] CPU: 0 UID: 0 PID: 15770 Comm: syz.0.2850 Not tainted syzkaller #0 PREEMPT(full) [ 426.284508][T15770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 426.284520][T15770] Call Trace: [ 426.284528][T15770] [ 426.284538][T15770] dump_stack_lvl+0xe8/0x150 [ 426.284570][T15770] should_fail_ex+0x412/0x560 [ 426.284599][T15770] should_failslab+0xa8/0x100 [ 426.284622][T15770] __kmalloc_cache_noprof+0x88/0x660 [ 426.284654][T15770] ? rtm_new_nexthop+0x28b4/0x84d0 [ 426.284806][T15770] rtm_new_nexthop+0x28b4/0x84d0 [ 426.284832][T15770] ? kasan_save_track+0x3e/0x80 [ 426.284857][T15770] ? kasan_save_free_info+0x46/0x50 [ 426.284880][T15770] ? __kasan_slab_free+0x5c/0x80 [ 426.284911][T15770] ? netlink_deliver_tap+0x19c/0x1b0 [ 426.284934][T15770] ? netlink_unicast+0x730/0x8e0 [ 426.284953][T15770] ? netlink_sendmsg+0x813/0xb40 [ 426.284976][T15770] ? ___sys_sendmsg+0x2a5/0x360 [ 426.284999][T15770] ? do_syscall_64+0x174/0x580 [ 426.285021][T15770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.285054][T15770] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 426.285116][T15770] ? kasan_quarantine_put+0xbb/0x1f0 [ 426.285144][T15770] ? lockdep_hardirqs_on+0x7a/0x110 [ 426.285194][T15770] ? nlmon_xmit+0xb0/0x100 [ 426.285237][T15770] ? kmem_cache_free+0x182/0x650 [ 426.285280][T15770] ? __lock_acquire+0x6b5/0x2cf0 [ 426.285322][T15770] ? lockdep_hardirqs_on+0x7a/0x110 [ 426.285343][T15770] ? __dev_queue_xmit+0x2b6/0x3950 [ 426.285408][T15770] ? __local_bh_enable_ip+0xd0/0x130 [ 426.285428][T15770] ? __dev_queue_xmit+0x2b6/0x3950 [ 426.285482][T15770] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 426.285508][T15770] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 426.285534][T15770] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 426.285555][T15770] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 426.285574][T15770] ? ref_tracker_free+0x693/0x840 [ 426.285601][T15770] ? __pfx_ref_tracker_free+0x10/0x10 [ 426.285637][T15770] netlink_rcv_skb+0x232/0x4b0 [ 426.285662][T15770] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 426.285686][T15770] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 426.285725][T15770] ? netlink_deliver_tap+0x2e/0x1b0 [ 426.285749][T15770] ? netlink_deliver_tap+0x2e/0x1b0 [ 426.285780][T15770] netlink_unicast+0x75c/0x8e0 [ 426.285815][T15770] netlink_sendmsg+0x813/0xb40 [ 426.285851][T15770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.285879][T15770] ? aa_sock_msg_perm+0xf1/0x1b0 [ 426.285912][T15770] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 426.285944][T15770] ____sys_sendmsg+0x972/0x9f0 [ 426.285968][T15770] ? __might_fault+0xaf/0x130 [ 426.286005][T15770] ? __pfx_____sys_sendmsg+0x10/0x10 [ 426.286042][T15770] ? import_iovec+0x73/0xa0 [ 426.286074][T15770] ___sys_sendmsg+0x2a5/0x360 [ 426.286106][T15770] ? __lock_acquire+0x6b5/0x2cf0 [ 426.286135][T15770] ? __pfx____sys_sendmsg+0x10/0x10 [ 426.286203][T15770] ? __fget_files+0x2a/0x420 [ 426.286229][T15770] ? __fget_files+0x3a0/0x420 [ 426.286268][T15770] __x64_sys_sendmsg+0x1bd/0x2a0 [ 426.286297][T15770] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 426.286335][T15770] ? __pfx_ksys_write+0x10/0x10 [ 426.286376][T15770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.286400][T15770] do_syscall_64+0x174/0x580 [ 426.286422][T15770] ? trace_irq_disable+0x3b/0x140 [ 426.286453][T15770] ? clear_bhb_loop+0x40/0x90 [ 426.286481][T15770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.286502][T15770] RIP: 0033:0x7f067379ce59 [ 426.286524][T15770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.286543][T15770] RSP: 002b:00007f06746e9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 426.286567][T15770] RAX: ffffffffffffffda RBX: 00007f0673a15fa0 RCX: 00007f067379ce59 [ 426.286583][T15770] RDX: 0000000020044000 RSI: 0000200000000080 RDI: 0000000000000004 [ 426.286597][T15770] RBP: 00007f06746e9090 R08: 0000000000000000 R09: 0000000000000000 [ 426.286611][T15770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.286625][T15770] R13: 00007f0673a16038 R14: 00007f0673a15fa0 R15: 00007ffc71b12908 [ 426.286662][T15770] [ 427.017130][T15783] tipc: Disabling bearer [ 427.024529][T15783] team0 (unregistering): Port device team_slave_0 removed [ 427.045746][T15783] team0 (unregistering): Port device team_slave_1 removed [ 427.230466][T15786] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 427.390412][T15790] syz.3.2855: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 427.407490][T15790] CPU: 0 UID: 0 PID: 15790 Comm: syz.3.2855 Not tainted syzkaller #0 PREEMPT(full) [ 427.407518][T15790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 427.407530][T15790] Call Trace: [ 427.407539][T15790] [ 427.407548][T15790] dump_stack_lvl+0xe8/0x150 [ 427.407579][T15790] warn_alloc+0x249/0x340 [ 427.407610][T15790] ? stack_trace_save+0xa9/0x100 [ 427.407684][T15790] ? __pfx_warn_alloc+0x10/0x10 [ 427.407721][T15790] ? kasan_save_track+0x4f/0x80 [ 427.407747][T15790] ? kasan_save_track+0x3e/0x80 [ 427.407772][T15790] ? __kasan_kmalloc+0x93/0xb0 [ 427.407799][T15790] ? __kmalloc_cache_noprof+0x31c/0x660 [ 427.407825][T15790] ? xskq_create+0x56/0x170 [ 427.407917][T15790] ? xsk_setsockopt+0x54c/0x990 [ 427.407940][T15790] ? do_sock_setsockopt+0x17c/0x1b0 [ 427.407961][T15790] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 427.407981][T15790] ? do_syscall_64+0x174/0x580 [ 427.408007][T15790] __vmalloc_node_range_noprof+0x132/0x1750 [ 427.408072][T15790] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 427.408109][T15790] ? __kasan_kmalloc+0x93/0xb0 [ 427.408143][T15790] vmalloc_user_noprof+0xad/0xe0 [ 427.408171][T15790] ? xskq_create+0xbf/0x170 [ 427.408202][T15790] xskq_create+0xbf/0x170 [ 427.408234][T15790] xsk_init_queue+0x8a/0xe0 [ 427.408267][T15790] xsk_setsockopt+0x54c/0x990 [ 427.408296][T15790] ? __pfx_xsk_setsockopt+0x10/0x10 [ 427.408324][T15790] ? __pfx_aa_sk_perm+0x10/0x10 [ 427.408390][T15790] ? aa_sock_opt_perm+0xff/0x1a0 [ 427.408424][T15790] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 427.408451][T15790] ? __pfx_xsk_setsockopt+0x10/0x10 [ 427.408479][T15790] do_sock_setsockopt+0x17c/0x1b0 [ 427.408508][T15790] __x64_sys_setsockopt+0x13d/0x1b0 [ 427.408534][T15790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.408556][T15790] do_syscall_64+0x174/0x580 [ 427.408576][T15790] ? trace_irq_disable+0x3b/0x140 [ 427.408606][T15790] ? clear_bhb_loop+0x40/0x90 [ 427.408631][T15790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.408651][T15790] RIP: 0033:0x7f912db9ce59 [ 427.408682][T15790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.408700][T15790] RSP: 002b:00007f912ea72028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 427.408722][T15790] RAX: ffffffffffffffda RBX: 00007f912de15fa0 RCX: 00007f912db9ce59 [ 427.408737][T15790] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 427.408749][T15790] RBP: 00007f912dc32d6f R08: 0000000000000004 R09: 0000000000000000 [ 427.408761][T15790] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.408773][T15790] R13: 00007f912de16038 R14: 00007f912de15fa0 R15: 00007ffe8d7e0958 [ 427.408807][T15790] [ 427.408829][T15790] Mem-Info: [ 427.476477][ T5646] Bluetooth: hci5: command tx timeout [ 427.609759][T15796] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 427.627334][T15790] active_anon:7461 inactive_anon:0 isolated_anon:0 [ 427.627334][T15790] active_file:3694 inactive_file:40087 isolated_file:0 [ 427.627334][T15790] unevictable:768 dirty:136 writeback:0 [ 427.627334][T15790] slab_reclaimable:12683 slab_unreclaimable:148355 [ 427.627334][T15790] mapped:30008 shmem:1588 pagetables:1282 [ 427.627334][T15790] sec_pagetables:0 bounce:0 [ 427.627334][T15790] kernel_misc_reclaimable:0 [ 427.627334][T15790] free:1268543 free_pcp:10625 free_cma:0 [ 427.751545][T15790] Node 0 active_anon:32144kB inactive_anon:0kB active_file:14776kB inactive_file:160148kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122132kB dirty:540kB writeback:0kB shmem:6916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15188kB pagetables:5164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 427.786299][T15790] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 427.879180][T15790] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 427.943156][T15790] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 427.960694][T15790] Node 0 DMA32 free:1117056kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35460kB inactive_anon:0kB active_file:14776kB inactive_file:160148kB unevictable:1536kB writepending:544kB zspages:0kB present:3129332kB managed:2552532kB mlocked:0kB bounce:0kB free_pcp:34652kB local_pcp:17384kB free_cma:0kB [ 428.046678][T15790] lowmem_reserve[]: 0 0 0 0 0 [ 428.061727][T15790] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 428.111642][T15790] lowmem_reserve[]: 0 0 0 0 0 [ 428.126776][T15790] Node 1 Normal free:3941100kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1508kB local_pcp:1508kB free_cma:0kB [ 428.168646][T15790] lowmem_reserve[]: 0 0 0 0 0 [ 428.173610][T15790] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 428.194843][T15790] Node 0 DMA32: 4739*4kB (UE) 3516*8kB (UME) 2010*16kB (UM) 460*32kB (UME) 713*64kB (UM) 485*128kB (UME) 300*256kB (UM) 186*512kB (UM) 133*1024kB (UE) 76*2048kB (UM) 109*4096kB (UM) = 1112012kB [ 428.245452][T15790] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 428.266276][T15790] Node 1 Normal: 1*4kB (U) 1*8kB (M) 2*16kB (UM) 2*32kB (UM) 2*64kB (UM) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 960*4096kB (M) = 3941100kB [ 428.288883][T15816] __nla_validate_parse: 3 callbacks suppressed [ 428.288904][T15816] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2861'. [ 428.301345][T15563] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 428.304983][T15790] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 428.326616][T15790] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 428.331659][T15563] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 428.336538][T15790] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 428.353233][T15790] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 428.356882][T15563] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 428.370142][T15790] 47932 total pagecache pages [ 428.376144][T15790] 0 pages in swap cache [ 428.401690][T15790] Free swap = 124996kB [ 428.402459][T15563] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 428.406436][T15790] Total swap = 124996kB [ 428.417793][T15790] 2097051 pages RAM [ 428.421725][T15790] 0 pages HighMem/MovableOnly [ 428.434256][T15790] 427136 pages reserved [ 428.440357][T15817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2861'. [ 428.450349][T15790] 0 pages cma reserved [ 428.460681][T15563] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 428.472774][T15563] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 428.498857][T15563] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 428.538136][T15563] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 428.778325][T15563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.867034][T15563] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.912315][T14052] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.919563][T14052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.977766][ T1043] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.985035][ T1043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.075954][T15850] netlink: 'syz.1.2869': attribute type 1 has an invalid length. [ 429.091646][T15850] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2869'. [ 429.105425][T15850] netlink: 658 bytes leftover after parsing attributes in process `syz.1.2869'. [ 429.146250][T15850] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2869'. [ 429.205118][T15853] netlink: 'syz.2.2870': attribute type 1 has an invalid length. [ 429.309445][T15853] bond8: entered promiscuous mode [ 429.328252][T15853] 8021q: adding VLAN 0 to HW filter on device bond8 [ 429.351819][T15853] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2870'. [ 429.361927][T15857] bond8: (slave bridge6): making interface the new active one [ 429.372765][T15857] bridge6: entered promiscuous mode [ 429.382768][T15857] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 429.817036][T15872] netlink: 1212 bytes leftover after parsing attributes in process `syz.1.2873'. [ 429.854507][T15872] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2873'. [ 429.880180][T15872] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 430.095030][T15563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.528759][T15563] veth0_vlan: entered promiscuous mode [ 430.549055][T15563] veth1_vlan: entered promiscuous mode [ 430.610568][T15563] veth0_macvtap: entered promiscuous mode [ 430.633734][T15563] veth1_macvtap: entered promiscuous mode [ 430.696625][T15563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.738821][T15563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.770687][T14051] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.789830][T14051] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.803058][T14051] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.822727][T14051] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.987716][T15893] ip6t_REJECT: ECHOREPLY is not supported [ 431.060823][T14049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.078466][T14049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.107374][T15897] dvmrp0: entered allmulticast mode [ 431.233424][T14051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.246569][T14051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.332212][T15904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2880'. [ 431.882747][T14052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.907349][T14052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.019435][T15913] lo speed is unknown, defaulting to 1000 [ 432.823216][T15913] lo speed is unknown, defaulting to 1000 [ 432.899831][T15953] netlink: 'syz.3.2891': attribute type 1 has an invalid length. [ 433.699323][T15968] Cannot find add_set index 0 as target [ 433.957522][T14052] wlan1: Trigger new scan to find an IBSS to join [ 433.997064][ T5638] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 434.008784][ T5638] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 434.018564][ T5638] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 434.038561][ T5638] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 434.046809][ T5638] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 434.119612][T15977] xt_hashlimit: size too large, truncated to 1048576 [ 434.230143][ T29] audit: type=1107 audit(1781072653.606:5): pid=15979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 434.234981][T15980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2899'. [ 434.649991][T15993] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2902'. [ 434.678697][T15993] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2902'. [ 434.831020][ T5639] syz_tun (unregistering): left allmulticast mode [ 435.411666][T15973] lo speed is unknown, defaulting to 1000 [ 435.518692][T16011] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2907'. [ 435.632454][T16013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2907'. [ 435.692172][T16017] netlink: 'syz.3.2907': attribute type 1 has an invalid length. [ 435.811175][T16016] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2908'. [ 435.921441][T16020] lo speed is unknown, defaulting to 1000 [ 435.988698][T15973] lo speed is unknown, defaulting to 1000 [ 436.105148][ T5638] Bluetooth: hci4: command tx timeout [ 436.113825][T16029] netlink: 'syz.3.2909': attribute type 5 has an invalid length. [ 436.133865][T16029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2909'. [ 436.212531][T16034] nbd: must specify a device to reconfigure [ 436.445038][T16039] netlink: 'syz.2.2912': attribute type 11 has an invalid length. [ 436.583890][T16040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.632758][T16040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.756251][T16040] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 436.769127][T16040] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 436.787798][T16040] veth1_macvtap: left promiscuous mode [ 436.795188][T16040] veth0_macvtap: left promiscuous mode [ 436.801684][T16040] veth0_macvtap: entered promiscuous mode [ 436.809459][T16040] veth1_macvtap: entered promiscuous mode [ 436.824983][T16040] 8021q: adding VLAN 0 to HW filter on device bond1 [ 436.842872][T16040] 8021q: adding VLAN 0 to HW filter on device bond2 [ 436.856013][T16040] 8021q: adding VLAN 0 to HW filter on device bond3 [ 436.868315][T16040] 8021q: adding VLAN 0 to HW filter on device bond6 [ 436.879845][T16040] 8021q: adding VLAN 0 to HW filter on device eth0 [ 436.888755][T16040] 8021q: adding VLAN 0 to HW filter on device eth1 [ 436.900621][T16040] 8021q: adding VLAN 0 to HW filter on device eth2 [ 436.907839][ T13] wlan1: Trigger new scan to find an IBSS to join [ 436.910647][T16040] 8021q: adding VLAN 0 to HW filter on device eth3 [ 436.936742][T16039] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 436.943745][T16039] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 436.993523][ T1043] bridge0: port 1(veth0_virt_wifi) entered blocking state [ 437.000846][ T1043] bridge0: port 1(veth0_virt_wifi) entered listening state [ 437.074129][T16020] lo speed is unknown, defaulting to 1000 [ 437.318709][T16062] netlink: 'syz.3.2918': attribute type 10 has an invalid length. [ 437.357462][T16060] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 437.365857][T16060] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 437.380817][T16062] geneve1: entered promiscuous mode [ 437.394618][T16062] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 437.406084][T16069] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2919'. [ 437.473362][T14052] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.532483][T14052] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.572958][T14052] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.619836][ T13] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 437.637775][T16076] netlink: 'syz.3.2922': attribute type 1 has an invalid length. [ 437.666322][T14052] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.693588][T16076] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2922'. [ 437.752916][T16076] gretap1: entered allmulticast mode [ 437.905426][T16079] sctp: [Deprecated]: syz.2.2923 (pid 16079) Use of int in max_burst socket option deprecated. [ 437.905426][T16079] Use struct sctp_assoc_value instead [ 438.018146][T16079] syzkaller1: entered promiscuous mode [ 438.023924][T16079] syzkaller1: entered allmulticast mode [ 438.200350][ T5638] Bluetooth: hci4: command tx timeout [ 438.899009][T16104] syzkaller1: entered promiscuous mode [ 438.914469][T16104] syzkaller1: entered allmulticast mode [ 438.979907][ T29] audit: type=1800 audit(1781072658.356:6): pid=16106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2931" name="memory.events" dev="tmpfs" ino=2878 res=0 errno=0 [ 439.295278][T15973] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.302839][T15973] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.310968][T15973] bridge_slave_0: entered allmulticast mode [ 439.319712][T15973] bridge_slave_0: entered promiscuous mode [ 439.336950][T15973] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.346104][T15973] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.358605][T15973] bridge_slave_1: entered allmulticast mode [ 439.369622][T15973] bridge_slave_1: entered promiscuous mode [ 439.420300][T15973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.445041][T15973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.511946][T15973] team0: Port device team_slave_0 added [ 439.522217][T15973] team0: Port device team_slave_1 added [ 439.644954][T15973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.656461][T15973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.704390][T15973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.729314][T15973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.744475][T15973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.785968][T15973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.944986][T14057] wlan1: Trigger new scan to find an IBSS to join [ 440.031209][T15973] hsr_slave_0: entered promiscuous mode [ 440.044017][T15973] hsr_slave_1: entered promiscuous mode [ 440.058111][T15973] debugfs: 'hsr0' already exists in 'hsr' [ 440.069438][T15973] Cannot create hsr debugfs directory [ 440.110249][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.264642][ T5638] Bluetooth: hci4: command tx timeout [ 440.473383][T16132] netlink: zone id is out of range [ 440.487825][T16132] netlink: get zone limit has 4 unknown bytes [ 440.558916][T15973] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.699944][T15973] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.758814][T16137] Cannot find add_set index 0 as target [ 440.836337][T15973] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.860073][T14051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.975016][T16142] netlink: 'syz.2.2941': attribute type 21 has an invalid length. [ 441.001711][T15973] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.037429][T16142] netlink: 'syz.2.2941': attribute type 21 has an invalid length. [ 441.209185][T16156] xt_TCPMSS: Only works on TCP SYN packets [ 441.256878][T16156] 8021q: adding VLAN 0 to HW filter on device bond6 [ 441.304537][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 442.158977][T16170] macsec1: entered promiscuous mode [ 442.338119][T15973] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 442.356682][ T5638] Bluetooth: hci4: command tx timeout [ 442.363968][T15973] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 442.386118][T16182] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2950'. [ 442.397393][T16182] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2950'. [ 442.408633][T15973] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 442.458353][T15973] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 442.480065][T15973] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 442.509644][T15973] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 442.526382][T15973] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 442.549008][T15973] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 443.053058][T16214] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2956'. [ 443.062428][T15973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.135971][T15973] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.174216][T14051] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.181487][T14051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.242312][T14051] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.249555][T14051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.655908][T16234] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2962'. [ 443.685052][T16234] netlink: 'syz.2.2962': attribute type 2 has an invalid length. [ 443.720484][T16234] netlink: 'syz.2.2962': attribute type 1 has an invalid length. [ 443.747084][T16234] netlink: 'syz.2.2962': attribute type 1 has an invalid length. [ 444.279116][T16259] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2965'. [ 444.446964][T16265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2967'. [ 444.516751][T16265] vlan1: entered promiscuous mode [ 444.535875][T16265] geneve1: entered promiscuous mode [ 444.551647][T16265] vlan1: entered allmulticast mode [ 444.560106][T16265] geneve1: entered allmulticast mode [ 444.664309][ T5646] Bluetooth: hci4: command 0x0405 tx timeout [ 444.798562][T15973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.802979][T16280] netlink: 'syz.2.2971': attribute type 49 has an invalid length. [ 445.016655][T16285] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2974'. [ 445.043465][T16285] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2974'. [ 445.117984][T16285] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2974'. [ 445.142419][T16285] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2974'. [ 445.229829][T16297] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 445.507202][T15973] veth0_vlan: entered promiscuous mode [ 445.558079][T15973] veth1_vlan: entered promiscuous mode [ 445.673848][T15973] veth0_macvtap: entered promiscuous mode [ 445.723336][T15973] veth1_macvtap: entered promiscuous mode [ 445.792851][T15973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.816529][T15973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.848222][T14052] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.882458][T14052] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.939448][T16313] tipc: MTU too low for tipc bearer [ 445.956579][T14052] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.974532][T14052] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.189185][T14052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.222699][T14052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.357374][T14057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.357753][T16331] lo speed is unknown, defaulting to 1000 [ 446.376524][T14057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.732527][T16346] netlink: 'syz.2.2990': attribute type 21 has an invalid length. [ 446.915596][T16357] netlink: 'syz.4.2992': attribute type 10 has an invalid length. [ 446.998456][T16357] team0: Port device geneve1 added [ 447.542523][T16331] lo speed is unknown, defaulting to 1000 [ 447.580158][T16385] __nla_validate_parse: 9 callbacks suppressed [ 447.580179][T16385] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3000'. [ 448.572619][T16422] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3010'. [ 448.735198][T16422] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 449.064705][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 449.105583][ T5638] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 449.122607][ T5638] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 449.149708][ T5638] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 449.173512][ T5638] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 449.194496][ T5638] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 449.661722][T16453] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3018'. [ 449.742201][ T5633] .`: (slave syz_tun): Releasing backup interface [ 449.782423][T16455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3019'. [ 449.802092][T16456] netlink: 'syz.2.3018': attribute type 1 has an invalid length. [ 449.826891][T16456] netlink: 280 bytes leftover after parsing attributes in process `syz.2.3018'. [ 449.867157][T16453] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3018'. [ 450.609374][T16480] netlink: 216 bytes leftover after parsing attributes in process `syz.4.3024'. [ 450.631675][T16480] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3024'. [ 450.652866][T16480] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3024'. [ 450.806354][T16487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3026'. [ 450.883452][T16432] lo speed is unknown, defaulting to 1000 [ 451.304940][ T5646] Bluetooth: hci3: command tx timeout [ 451.610109][T16432] lo speed is unknown, defaulting to 1000 [ 452.011014][T16536] xt_hashlimit: overflow, try lower: 9/9223372036854775808 [ 452.118424][T16534] syzkaller0: entered promiscuous mode [ 452.124915][T16534] syzkaller0: entered allmulticast mode [ 452.342158][T16550] netlink: 'syz.2.3048': attribute type 1 has an invalid length. [ 453.394478][ T5646] Bluetooth: hci3: command tx timeout [ 455.167438][T16583] xt_policy: output policy not valid in PREROUTING and INPUT [ 455.475147][ T5646] Bluetooth: hci3: command tx timeout [ 455.501122][T16595] syzkaller1: entered promiscuous mode [ 455.507656][T16595] syzkaller1: entered allmulticast mode [ 455.645132][T16432] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.661147][T16432] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.670027][T16432] bridge_slave_0: entered allmulticast mode [ 455.681447][T16432] bridge_slave_0: entered promiscuous mode [ 455.732347][T16432] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.743598][T16432] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.753173][T16432] bridge_slave_1: entered allmulticast mode [ 455.763501][T16432] bridge_slave_1: entered promiscuous mode [ 455.911863][T16611] netlink: 'syz.0.3062': attribute type 1 has an invalid length. [ 456.008701][T16616] __nla_validate_parse: 2 callbacks suppressed [ 456.008721][T16616] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3063'. [ 456.088774][T16432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.108533][T16432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.172022][T16618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3064'. [ 456.193033][T16432] team0: Port device team_slave_0 added [ 456.205749][T16432] team0: Port device team_slave_1 added [ 456.402232][T16625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3066'. [ 456.419876][T16625] netlink: 'syz.3.3066': attribute type 9 has an invalid length. [ 456.464279][T16432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.474487][T16432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.502072][T16432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.522825][T16622] netlink: 'syz.2.3065': attribute type 3 has an invalid length. [ 456.546582][T16432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.570474][T16432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.597143][T16432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.741444][T16627] lo speed is unknown, defaulting to 1000 [ 456.777469][T16432] hsr_slave_0: entered promiscuous mode [ 456.806769][T16432] hsr_slave_1: entered promiscuous mode [ 456.813948][T16432] debugfs: 'hsr0' already exists in 'hsr' [ 456.823788][T16432] Cannot create hsr debugfs directory [ 457.061245][T16640] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3071'. [ 457.501006][T16432] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.526239][T16432] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.545111][ T5646] Bluetooth: hci3: command tx timeout [ 457.692492][T16627] lo speed is unknown, defaulting to 1000 [ 457.807235][T16432] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.833972][T16432] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.889512][T16674] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3080'. [ 457.987577][T16432] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.011258][T16432] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.031935][T16688] netlink: 'syz.4.3085': attribute type 1 has an invalid length. [ 458.173573][T16697] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3085'. [ 458.196450][T16698] xt_bpf: check failed: parse error [ 458.226998][T16688] 8021q: adding VLAN 0 to HW filter on device bond1 [ 458.257687][T16432] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.275993][T16432] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.280206][T16688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3085'. [ 458.324353][T16697] bond1: entered allmulticast mode [ 458.400569][T16688] bond1: (slave dummy0): making interface the new active one [ 458.408474][T16688] dummy0: entered allmulticast mode [ 458.417275][T16688] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 458.626027][T16710] sit0: entered promiscuous mode [ 458.643406][T16710] netlink: 'syz.2.3090': attribute type 1 has an invalid length. [ 458.651594][T16710] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3090'. [ 458.723870][T16710] tipc: Enabled bearer , priority 0 [ 458.893254][T16710] syzkaller0: entered promiscuous mode [ 458.908313][T16710] syzkaller0: entered allmulticast mode [ 458.921273][T16710] tipc: Resetting bearer [ 459.025738][T16710] tipc: Resetting bearer [ 459.350314][T16724] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3094'. [ 461.688891][T16710] tipc: Disabling bearer [ 461.748285][T16432] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 461.761400][T16432] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 461.770166][T16432] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 461.789965][T16432] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 461.811556][T16432] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 461.854032][T16432] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 461.883620][T16432] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 461.897763][T16432] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 462.140617][T16432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.188794][T16432] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.227727][T16763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3106'. [ 462.242657][T14044] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.249965][T14044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.291720][T16761] netlink: 'syz.0.3105': attribute type 30 has an invalid length. [ 462.302039][T14051] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.309274][T14051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.314470][T16761] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3105'. [ 462.568240][T16788] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3109'. [ 462.592068][T16788] netlink: 'syz.2.3109': attribute type 1 has an invalid length. [ 462.593782][T16791] netlink: 'syz.0.3110': attribute type 3 has an invalid length. [ 462.739935][T16780] netlink: 1040 bytes leftover after parsing attributes in process `syz.0.3110'. [ 463.030550][T16798] lo speed is unknown, defaulting to 1000 [ 463.139461][T16809] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3116'. [ 463.175958][T16811] netlink: 'syz.2.3117': attribute type 2 has an invalid length. [ 463.342241][T16820] netlink: 360 bytes leftover after parsing attributes in process `syz.4.3120'. [ 463.366787][T16820] openvswitch: netlink: Flow key attr not present in new flow. [ 463.642348][T16830] bond2: invalid ARP target 0.0.0.0 specified for addition [ 463.650117][T16830] bond2: option arp_ip_target: invalid value (0) [ 463.667890][T16830] bond2 (unregistering): Released all slaves [ 463.784531][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 463.835302][T16798] lo speed is unknown, defaulting to 1000 [ 463.903942][T16840] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3125'. [ 464.021905][T16432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.124865][T16845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3127'. [ 464.202604][T16847] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3128'. [ 464.223091][T16845] bond9: entered promiscuous mode [ 464.230679][T16845] bond9: entered allmulticast mode [ 464.342048][T16852] syzkaller0: entered promiscuous mode [ 464.351060][T16852] syzkaller0: entered allmulticast mode [ 464.490177][T16857] netlink: 'syz.0.3130': attribute type 19 has an invalid length. [ 464.600095][T16860] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3130'. [ 465.704512][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 466.853529][T16432] veth0_vlan: entered promiscuous mode [ 467.020043][T16432] veth1_vlan: entered promiscuous mode [ 467.031789][T16864] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20002 [ 467.047926][T16865] x_tables: duplicate underflow at hook 1 [ 467.099077][T16867] geneve2: entered promiscuous mode [ 467.202126][T16432] veth0_macvtap: entered promiscuous mode [ 467.243049][T16432] veth1_macvtap: entered promiscuous mode [ 467.366480][T16432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.377517][T16879] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3135'. [ 467.400773][T16879] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3135'. [ 467.417794][T16432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.426678][T16878] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3136'. [ 467.447504][T16879] syz_tun: entered promiscuous mode [ 467.459850][T16879] gretap0: entered promiscuous mode [ 467.478025][T16879] debugfs: 'hsr1' already exists in 'hsr' [ 467.483904][T16879] Cannot create hsr debugfs directory [ 467.568674][T14051] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.581411][T14051] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.591561][T14051] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.610901][T14051] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.625920][ C1] bridge0: port 1(veth0_virt_wifi) entered learning state [ 467.830816][T16881] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3137'. [ 467.845789][T14044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.851860][T16881] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3137'. [ 467.873235][T14044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.989479][T14052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.004883][T14052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.206314][T16885] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3139'. [ 468.323123][T16897] netlink: 'syz.2.3141': attribute type 13 has an invalid length. [ 468.332036][T16897] netlink: 'syz.2.3141': attribute type 17 has an invalid length. [ 468.411069][T16892] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 468.802839][ T5638] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 468.819386][ T5638] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 468.831766][ T5638] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 468.840112][ T5638] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 468.852120][ T5638] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 469.117572][T16921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3146'. [ 469.380651][T16897] sit0: left promiscuous mode [ 469.452342][T16897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.465545][T16897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.517311][T16897] bridge0: port 1(veth0_virt_wifi) entered blocking state [ 469.524644][T16897] bridge0: port 1(veth0_virt_wifi) entered listening state [ 469.532705][T16897] veth1_macvtap: left promiscuous mode [ 469.541347][T16897] veth0_macvtap: left promiscuous mode [ 469.550148][T16897] veth0_macvtap: entered promiscuous mode [ 469.571170][T16897] veth1_macvtap: entered promiscuous mode [ 469.582288][T16897] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 469.589311][T16897] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 469.611415][T16897] 8021q: adding VLAN 0 to HW filter on device bond1 [ 469.637056][T16897] 8021q: adding VLAN 0 to HW filter on device bond2 [ 469.647783][T16897] geneve0: left promiscuous mode [ 469.659878][T16897] 8021q: adding VLAN 0 to HW filter on device bond3 [ 469.668335][T16897] 8021q: adding VLAN 0 to HW filter on device bond4 [ 469.682717][T16897] 8021q: adding VLAN 0 to HW filter on device bond5 [ 469.691305][T16897] bridge4: left promiscuous mode [ 469.698891][T16897] vlan3: left promiscuous mode [ 469.703701][T16897] bridge0: left promiscuous mode [ 469.709297][T16897] bridge0: entered promiscuous mode [ 469.718029][T16897] geneve3: left promiscuous mode [ 469.722987][T16897] geneve3: left allmulticast mode [ 469.730575][T16897] gretap3: left allmulticast mode [ 469.741238][T16897] 8021q: adding VLAN 0 to HW filter on device bond6 [ 469.755365][T16897] 8021q: adding VLAN 0 to HW filter on device eth0 [ 469.767466][T16897] 8021q: adding VLAN 0 to HW filter on device eth1 [ 469.779891][T16897] 8021q: adding VLAN 0 to HW filter on device eth2 [ 469.792020][T16897] 8021q: adding VLAN 0 to HW filter on device eth3 [ 469.808320][T16897] vlan0: left allmulticast mode [ 469.813206][T16897] erspan0: left allmulticast mode [ 469.820970][T16897] 8021q: adding VLAN 0 to HW filter on device bond7 [ 469.829758][T16897] geneve4: left promiscuous mode [ 469.837668][T16897] geneve5: left promiscuous mode [ 469.851754][T16897] bond8: left promiscuous mode [ 469.856644][T16897] bridge6: left promiscuous mode [ 469.862623][T16897] 8021q: adding VLAN 0 to HW filter on device bond8 [ 469.875252][T16897] vlan1: left promiscuous mode [ 469.880088][T16897] geneve1: left promiscuous mode [ 469.885480][T16897] vlan1: left allmulticast mode [ 469.890487][T16897] geneve1: left allmulticast mode [ 469.923071][T16897] bond9: left promiscuous mode [ 469.928256][T16897] bond9: left allmulticast mode [ 469.933469][T16897] 8021q: adding VLAN 0 to HW filter on device bond9 [ 470.112191][T16917] veth1_to_bond: entered allmulticast mode [ 470.269298][T16921] bond0: (slave bond_slave_1): Releasing backup interface [ 470.547309][T14051] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.599663][T14051] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.641364][T16954] Bluetooth: MGMT ver 1.23 [ 470.810714][T14052] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 470.904574][ T5638] Bluetooth: hci0: command tx timeout [ 470.908664][T14051] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.996326][T14051] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.051658][T16972] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3157'. [ 471.320863][T16971] bond1: entered promiscuous mode [ 471.363433][T16971] 8021q: adding VLAN 0 to HW filter on device bond1 [ 471.691126][T16998] netlink: 'syz.0.3167': attribute type 1 has an invalid length. [ 471.708183][T17000] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 471.856661][T14051] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.884382][T14051] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.961993][T17018] netlink: 'syz.2.3168': attribute type 1 has an invalid length. [ 471.971253][T17017] Cannot find add_set index 0 as target [ 471.983100][T17006] bond2: entered promiscuous mode [ 471.988460][T17006] bond2: entered allmulticast mode [ 471.998898][T17006] 8021q: adding VLAN 0 to HW filter on device bond2 [ 472.125244][T17010] bridge1: entered promiscuous mode [ 472.160174][T17010] bridge1: entered allmulticast mode [ 472.204361][T14057] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 472.247922][T17010] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 472.325221][T17015] bridge2: entered promiscuous mode [ 472.330931][T17015] bridge2: entered allmulticast mode [ 472.337905][T17015] bond2: (slave bridge2): Enslaving as a backup interface with a down link [ 472.347951][T14057] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 472.448460][T14051] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.471602][T14051] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.606248][T16914] lo speed is unknown, defaulting to 1000 [ 472.751933][T17035] lo speed is unknown, defaulting to 1000 [ 472.985475][ T5638] Bluetooth: hci0: command tx timeout [ 473.219916][T17045] bridge0: port 3(team0) entered blocking state [ 473.284956][T17045] bridge0: port 3(team0) entered disabled state [ 473.384701][T17045] team0: entered allmulticast mode [ 473.405419][T17045] team_slave_0: entered allmulticast mode [ 473.490810][T17045] team_slave_1: entered allmulticast mode [ 473.568451][T17045] team0: entered promiscuous mode [ 473.573556][T17045] team_slave_0: entered promiscuous mode [ 473.585948][T17045] team_slave_1: entered promiscuous mode [ 473.593474][T17045] bridge0: port 3(team0) entered blocking state [ 473.599989][T17045] bridge0: port 3(team0) entered forwarding state [ 473.808144][T16914] lo speed is unknown, defaulting to 1000 [ 473.957112][T14051] bridge_slave_1: left allmulticast mode [ 473.983022][T14051] bridge_slave_1: left promiscuous mode [ 474.007626][T14051] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.122322][T14051] bridge_slave_0: left allmulticast mode [ 474.142305][T17067] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3180'. [ 474.158769][T14051] bridge_slave_0: left promiscuous mode [ 474.168520][T17066] netlink: 'syz.1.3179': attribute type 1 has an invalid length. [ 474.188338][T14051] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.337948][T14051] pimreg: left allmulticast mode [ 474.982230][T14051] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 474.996587][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 475.074368][ T5638] Bluetooth: hci0: command tx timeout [ 475.090961][T14051] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 475.128172][T14051] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.138465][T14051] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.148154][T14051] bond0 (unregistering): Released all slaves [ 475.160177][T14051] bond1 (unregistering): Released all slaves [ 475.176985][T14051] bond2 (unregistering): (slave veth3): Releasing active interface [ 475.186897][T14051] bond2 (unregistering): Released all slaves [ 475.202519][T14051] bond3 (unregistering): Released all slaves [ 475.217326][T14051] bond4 (unregistering): Released all slaves [ 475.235486][T14051] bond5 (unregistering): Released all slaves [ 475.263352][T14051] bond6 (unregistering): Released all slaves [ 475.322047][T17035] lo speed is unknown, defaulting to 1000 [ 475.323921][ T5295] 8021q: adding VLAN 0 to HW filter on device eth1 [ 475.851892][T17083] siw: device registration error -23 [ 476.039974][T14051] tipc: Left network mode [ 476.602589][T17123] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 476.635328][T17125] xt_hashlimit: overflow, try lower: 18446744073709551615/32 [ 476.683652][T17123] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 476.709200][T17123] netlink: 'syz.2.3187': attribute type 11 has an invalid length. [ 476.717319][T17123] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.3187'. [ 477.145092][ T5638] Bluetooth: hci0: command tx timeout [ 477.329311][T17141] veth0: entered promiscuous mode [ 477.504010][T17140] veth0: left promiscuous mode [ 477.519359][ T5295] 8021q: adding VLAN 0 to HW filter on device eth2 [ 477.538951][T16914] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.559362][T16914] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.582855][T16914] bridge_slave_0: entered allmulticast mode [ 477.605246][T16914] bridge_slave_0: entered promiscuous mode [ 477.616964][T16914] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.624972][T16914] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.634732][T16914] bridge_slave_1: entered allmulticast mode [ 477.644124][T16914] bridge_slave_1: entered promiscuous mode [ 478.546148][T16914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.591704][T16914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.762730][T17158] lo speed is unknown, defaulting to 1000 [ 478.771577][T16914] team0: Port device team_slave_0 added [ 478.802501][T16914] team0: Port device team_slave_1 added [ 478.877259][T17174] netlink: 'syz.1.3199': attribute type 4 has an invalid length. [ 478.901261][T17174] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3199'. [ 479.088979][T17174] batadv1: entered promiscuous mode [ 479.115608][T17183] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3200'. [ 479.128797][T17174] batadv1: entered allmulticast mode [ 479.219803][T16914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.271472][T16914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.326969][T16914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.354506][T17182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3199'. [ 479.537852][T16914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.557523][T16914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.642882][T16914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.681052][T17158] lo speed is unknown, defaulting to 1000 [ 479.949961][T16914] hsr_slave_0: entered promiscuous mode [ 479.974793][T16914] hsr_slave_1: entered promiscuous mode [ 479.996598][T16914] debugfs: 'hsr0' already exists in 'hsr' [ 480.009261][T16914] Cannot create hsr debugfs directory [ 480.039246][T17214] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 480.581441][ T5295] 8021q: adding VLAN 0 to HW filter on device eth3 [ 480.876547][T17243] sctp: [Deprecated]: syz.4.3213 (pid 17243) Use of int in max_burst socket option. [ 480.876547][T17243] Use struct sctp_assoc_value instead [ 481.869537][T14051] hsr_slave_0: left promiscuous mode [ 481.898309][T14051] hsr_slave_1: left promiscuous mode [ 482.070913][T17278] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3218'. [ 482.662243][T14048] smc: removing ib device uyz0 [ 482.812950][T17271] netlink: 'syz.4.3216': attribute type 6 has an invalid length. [ 482.821470][T17274] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3216'. [ 482.833133][T17285] 8021q: VLANs not supported on lo [ 483.129765][T14048] smbdirect: ib_dev[uyz0] removed [ 483.617362][T17313] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3227'. [ 483.627136][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 484.087853][T17332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3229'. [ 484.120698][T17332] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3229'. [ 484.857395][T17342] bridge1: entered allmulticast mode [ 484.941932][T17344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3233'. [ 485.583854][T17351] syzkaller0: entered promiscuous mode [ 485.621470][T17351] syzkaller0: entered allmulticast mode [ 486.173369][T17386] sctp: [Deprecated]: syz.1.3239 (pid 17386) Use of int in maxseg socket option. [ 486.173369][T17386] Use struct sctp_assoc_value instead [ 489.897650][T16914] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 489.911912][T16914] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 489.981538][T16914] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 490.022911][T16914] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 490.043868][T16914] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 490.075297][T16914] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 490.090231][T16914] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 490.128895][T17434] netlink: 'syz.0.3243': attribute type 4 has an invalid length. [ 490.129711][T16914] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 490.408283][T14051] IPVS: stop unused estimator thread 0... [ 490.593849][T16914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.700920][T16914] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.779522][T17467] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3249'. [ 490.789512][T14040] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.796786][T14040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.800773][T17467] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3249'. [ 490.857037][T14040] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.864307][T14040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.310011][T12856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.402153][T17493] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3254'. [ 491.450582][T17493] netlink: 'syz.1.3254': attribute type 2 has an invalid length. [ 491.476441][T17495] bridge0: port 3(batadv1) entered blocking state [ 491.484716][T17493] netlink: 'syz.1.3254': attribute type 1 has an invalid length. [ 491.507463][T17495] bridge0: port 3(batadv1) entered disabled state [ 491.511143][T17493] netlink: 'syz.1.3254': attribute type 1 has an invalid length. [ 491.541627][T17495] batadv1: entered allmulticast mode [ 491.601612][T17495] batadv1: entered promiscuous mode [ 491.748170][T17509] syzkaller0: renamed from batadv_slave_1 (while UP) [ 491.812253][T17509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3258'. [ 491.862174][T17509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3258'. [ 491.954894][T14057] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 491.965903][T14057] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 492.037715][T17522] xt_cgroup: invalid path, errno=-2 [ 492.137393][T17522] x_tables: duplicate underflow at hook 2 [ 492.357600][ T8562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.585334][T17545] netlink: 'syz.2.3262': attribute type 13 has an invalid length. [ 492.782246][T17551] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3263'. [ 492.812850][T17551] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3263'. [ 492.883482][T16914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.915523][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.052976][T17561] nbd: socks must be embedded in a SOCK_ITEM attr [ 493.117135][T16914] veth0_vlan: entered promiscuous mode [ 493.123276][T17561] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3265'. [ 493.164425][T16914] veth1_vlan: entered promiscuous mode [ 493.207406][T17563] IPv6: sit2: Disabled Multicast RS [ 493.228902][T17565] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3266'. [ 493.336122][T16914] veth0_macvtap: entered promiscuous mode [ 493.384616][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.439129][T17567] syzkaller0: entered promiscuous mode [ 493.445148][T17567] syzkaller0: entered allmulticast mode [ 493.515069][T16914] veth1_macvtap: entered promiscuous mode [ 493.600516][T16914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.636969][T16914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.427155][T12856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.472756][ T8562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.951090][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.516656][ T8562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.726806][T14052] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.756390][T14052] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.793734][T14052] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.857492][T14052] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.929373][T17604] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3277'. [ 497.040462][T17607] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.3277'. [ 497.077503][ T1240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.176526][T17619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3279'. [ 497.221819][T17619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3279'. [ 497.416620][T14052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.444351][T14052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.544748][ T1240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.567548][T14052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.603520][T14052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.730977][T17640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3285'. [ 497.750084][T17638] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.757852][T17638] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.792868][T17640] netlink: 'syz.2.3285': attribute type 1 has an invalid length. [ 497.813035][T17638] bridge0: entered allmulticast mode [ 497.819797][T17640] netlink: 'syz.2.3285': attribute type 2 has an invalid length. [ 497.846364][T17640] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3285'. [ 497.874677][T17638] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3284'. [ 497.890870][T17638] netlink: 252 bytes leftover after parsing attributes in process `syz.1.3284'. [ 497.917316][T17638] bridge_slave_1: left allmulticast mode [ 497.940329][T17638] bridge_slave_1: left promiscuous mode [ 497.965342][T17638] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.017272][T17638] bridge_slave_0: left allmulticast mode [ 498.040269][T17638] bridge_slave_0: left promiscuous mode [ 498.061482][T17638] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.413038][ T5646] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 498.433649][ T5646] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 498.448123][ T5646] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 498.468021][ T5646] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 498.477983][ T5646] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 498.587852][T12856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.069037][T17682] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3294'. [ 499.121546][T17682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3294'. [ 499.159252][T17682] netlink: 'syz.4.3294': attribute type 2 has an invalid length. [ 499.628103][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.631699][ C0] bridge0: port 1(veth0_virt_wifi) entered learning state [ 499.654871][T12856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.760392][T17658] lo speed is unknown, defaulting to 1000 [ 499.777721][T17658] lo speed is unknown, defaulting to 1000 [ 500.104420][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.139882][T17741] raw_sendmsg: syz.4.3303 forgot to set AF_INET. Fix it! [ 500.265989][ T8565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.275767][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 500.405523][T17711] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.536973][T17734] lo speed is unknown, defaulting to 1000 [ 500.571126][T17734] lo speed is unknown, defaulting to 1000 [ 500.584513][ T5638] Bluetooth: hci2: command tx timeout [ 500.696606][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.712289][T17711] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.116884][ T8566] IPVS: starting estimator thread 0... [ 501.131414][T17711] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.256611][T17761] IPVS: using max 27 ests per chain, 64800 per kthread [ 501.370126][T17711] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.556938][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.644436][T17768] macsec1: entered promiscuous mode [ 501.652658][T17768] vlan0: entered promiscuous mode [ 501.666775][T17768] vlan0: left promiscuous mode [ 501.706034][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.304059][T17784] __nla_validate_parse: 3 callbacks suppressed [ 502.304079][T17784] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3308'. [ 502.339905][T17784] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3308'. [ 502.364660][T14057] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.448331][T14057] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.469300][T17793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3309'. [ 502.513392][T17658] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.521695][T17658] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.529363][T17658] bridge_slave_0: entered allmulticast mode [ 502.537024][T17658] bridge_slave_0: entered promiscuous mode [ 502.553378][T14048] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.563548][T17658] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.580840][T17658] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.613184][T17658] bridge_slave_1: entered allmulticast mode [ 502.621768][T17798] netlink: 'syz.4.3310': attribute type 62 has an invalid length. [ 502.629284][T17658] bridge_slave_1: entered promiscuous mode [ 502.664853][ T5638] Bluetooth: hci2: command tx timeout [ 502.679255][T14048] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.746731][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.762021][T17658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.817477][T17658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.977945][T17658] team0: Port device team_slave_0 added [ 502.996094][T17810] pim6reg1: entered promiscuous mode [ 503.005258][T17810] pim6reg1: entered allmulticast mode [ 503.020001][T17658] team0: Port device team_slave_1 added [ 503.092434][T17816] netlink: 'syz.3.3315': attribute type 1 has an invalid length. [ 503.097498][T17658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.107491][T17658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.137590][T17658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.148814][T11982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.201295][T17814] syzkaller0: entered promiscuous mode [ 503.207486][T17814] syzkaller0: entered allmulticast mode [ 503.216305][T17658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.223400][T17658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.263802][T17658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.292477][T17826] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3317'. [ 503.318592][T17828] xt_hashlimit: max too large, truncated to 1048576 [ 503.328812][T17828] xt_ecn: cannot match TCP bits for non-tcp packets [ 503.787233][T12856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.070038][T17835] xt_CT: No such helper "snmp_trap" [ 504.745908][ T5638] Bluetooth: hci2: command tx timeout [ 504.826096][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.870250][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.187649][ T8566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.322876][T17658] hsr_slave_0: entered promiscuous mode [ 506.342980][T17658] hsr_slave_1: entered promiscuous mode [ 506.355915][T17658] debugfs: 'hsr0' already exists in 'hsr' [ 506.357323][T17847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3320'. [ 506.364833][T17658] Cannot create hsr debugfs directory [ 506.439367][T17851] netlink: 'syz.1.3321': attribute type 13 has an invalid length. [ 506.460657][T17851] netlink: 'syz.1.3321': attribute type 17 has an invalid length. [ 506.824585][ T5638] Bluetooth: hci2: command tx timeout [ 506.904930][ T8562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.103785][T17848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 507.150298][T17848] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 507.573574][T17847] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 507.642795][T17866] Bluetooth: MGMT ver 1.23 [ 507.648159][T17851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.664482][T17851] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.677493][T17851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.729793][T17851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 507.740587][T17851] batman_adv: batadv0: Interface activated: syzkaller0 [ 507.770801][T17851] veth1_vlan: left promiscuous mode [ 507.777487][T17851] veth0_vlan: left promiscuous mode [ 507.783861][T17851] veth0_vlan: entered promiscuous mode [ 507.796650][T17851] veth1_vlan: entered promiscuous mode [ 507.809004][T17851] veth1_macvtap: left promiscuous mode [ 507.816014][T17851] veth0_macvtap: left promiscuous mode [ 507.823043][T17851] veth0_macvtap: entered promiscuous mode [ 507.840253][T17851] veth1_macvtap: entered promiscuous mode [ 507.853535][T17851] bond1: left promiscuous mode [ 507.858951][T17851] 8021q: adding VLAN 0 to HW filter on device bond1 [ 507.868724][T17851] 8021q: adding VLAN 0 to HW filter on device eth0 [ 507.883461][T17851] 8021q: adding VLAN 0 to HW filter on device eth1 [ 507.898645][T17851] 8021q: adding VLAN 0 to HW filter on device eth2 [ 507.911463][T17851] 8021q: adding VLAN 0 to HW filter on device eth3 [ 507.946605][ T8562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.046966][T17871] netlink: 'syz.1.3327': attribute type 1 has an invalid length. [ 508.310786][T17877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3328'. [ 508.415160][T17884] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 508.452946][T17889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.463883][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.469200][T17892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3332'. [ 508.482596][T17892] netlink: 'syz.3.3332': attribute type 8 has an invalid length. [ 508.504894][T17879] macvtap1: entered promiscuous mode [ 508.512134][T17879] macvtap1: entered allmulticast mode [ 508.520054][T17879] veth1_vlan: entered allmulticast mode [ 508.548484][T17885] pim6reg: entered allmulticast mode [ 508.602664][T17890] macvtap2: entered promiscuous mode [ 508.608754][T17890] macvtap2: entered allmulticast mode [ 508.640163][T17892] geneve2: entered promiscuous mode [ 508.654313][T17892] geneve2: entered allmulticast mode [ 508.799139][T17900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.809953][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.819932][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.828482][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.836808][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.845280][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.944740][T17904] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3336'. [ 509.016908][T17904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3336'. [ 509.477162][T17917] netlink: 'syz.3.3337': attribute type 11 has an invalid length. [ 509.495010][T17658] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.523265][T17917] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.3337'. [ 509.557886][T17658] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 509.635946][T17658] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 510.490674][T17938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3340'. [ 510.835850][T17939] lo speed is unknown, defaulting to 1000 [ 510.864610][T17939] lo speed is unknown, defaulting to 1000 [ 511.753131][T17658] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.819805][T17658] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 511.868362][T17658] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 511.914202][ C0] net_ratelimit: 15639 callbacks suppressed [ 511.914226][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.928691][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.937104][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.945532][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.953818][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.958502][T17949] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3344'. [ 511.962230][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.979421][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.987824][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.996191][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.004594][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.033351][T17950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3344'. [ 512.067713][T17949] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3344'. [ 512.117064][T17949] netlink: 31 bytes leftover after parsing attributes in process `syz.3.3344'. [ 512.127446][T17949] netlink: 'syz.3.3344': attribute type 3 has an invalid length. [ 512.154521][T17949] netlink: 'syz.3.3344': attribute type 2 has an invalid length. [ 512.178900][T17949] netlink: 'syz.3.3344': attribute type 2 has an invalid length. [ 512.228467][T14057] veth11: left allmulticast mode [ 512.252105][T14057] veth11: left promiscuous mode [ 512.269543][T14057] bridge9: port 3(veth11) entered disabled state [ 512.322826][T14057] veth0_to_bond: left allmulticast mode [ 512.345709][T14057] veth0_to_bond: left promiscuous mode [ 512.366902][T14057] bridge9: port 2(veth0_to_bond) entered disabled state [ 512.399832][T14057] veth9: left allmulticast mode [ 512.409529][T14057] veth9: left promiscuous mode [ 512.420395][T14057] bridge9: port 1(veth9) entered disabled state [ 512.926890][T14057] gretap0 (unregistering): left promiscuous mode [ 513.055241][T14057] bond1 (unregistering): (slave geneve2): Releasing active interface [ 513.223407][T14057] team0: Port device bridge3 removed [ 513.304977][T14057] team0: Port device bridge4 removed [ 513.547875][T14057] bond6 (unregistering): (slave bridge0): Releasing backup interface [ 513.634466][T14057] team0: Port device bridge8 removed [ 513.719088][T14057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 513.741794][T14057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 513.754104][T14057] bond0 (unregistering): Released all slaves [ 513.809823][T14057] bond1 (unregistering): Released all slaves [ 513.870227][T14057] bond2 (unregistering): Released all slaves [ 513.900518][T14057] bond3 (unregistering): Released all slaves [ 513.932983][T14057] bond4 (unregistering): (slave veth7): Releasing active interface [ 513.968468][T14057] bond4 (unregistering): Released all slaves [ 513.995988][T14057] bond5 (unregistering): Released all slaves [ 514.024882][T14057] bond6 (unregistering): Released all slaves [ 514.047819][T14057] bond7 (unregistering): Released all slaves [ 514.077892][T14057] bond8 (unregistering): Released all slaves [ 514.107173][T14057] bond9 (unregistering): Released all slaves [ 514.181504][T14057] bond10 (unregistering): Released all slaves [ 514.220737][T17961] tipc: Started in network mode [ 514.229261][T17961] tipc: Node identity aaaaaaaaaa3f, cluster identity 4711 [ 514.249148][T17961] tipc: Enabled bearer , priority 0 [ 514.257769][T17966] syzkaller0: entered promiscuous mode [ 514.263508][T17966] syzkaller0: entered allmulticast mode [ 514.702256][T17986] __nla_validate_parse: 2 callbacks suppressed [ 514.702277][T17986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3352'. [ 515.443520][T18013] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3356'. [ 515.502414][T18013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3356'. [ 516.347484][T17658] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.369133][T17658] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 516.393430][T17658] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 516.538497][T18000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3355'. [ 516.550650][T18000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3355'. [ 516.561043][T18000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3355'. [ 516.571214][T18000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3355'. [ 516.596022][T18000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3355'. [ 516.623455][T18000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3355'. [ 516.640345][T18000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3355'. [ 516.776314][ T5817] tipc: Node number set to 9808554 [ 516.924414][ C1] net_ratelimit: 24532 callbacks suppressed [ 516.924437][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.938763][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.947168][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.955546][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.963913][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.972192][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.980611][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.988896][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.997313][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.005616][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.169904][T18010] lo speed is unknown, defaulting to 1000 [ 517.191614][T14057] : left promiscuous mode [ 518.107349][T18010] lo speed is unknown, defaulting to 1000 [ 518.762501][T17658] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.849738][T17658] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 518.861246][T18055] netlink: 'syz.1.3360': attribute type 1 has an invalid length. [ 518.916623][T18055] netlink: 'syz.1.3360': attribute type 2 has an invalid length. [ 518.934553][T17658] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 519.302533][T14057] hmó3)ó: left promiscuous mode [ 520.138050][T18074] __nla_validate_parse: 72 callbacks suppressed [ 520.138075][T18074] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3363'. [ 520.558261][T18073] syzkaller0: left promiscuous mode [ 521.048882][T18088] 8021q: VLANs not supported on vxcan0 [ 521.934298][ C0] net_ratelimit: 23958 callbacks suppressed [ 521.934322][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.948652][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.957067][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.965382][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.973736][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.982100][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.990618][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.998962][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.007347][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.015634][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.941860][T14057] tipc: Disabling bearer [ 523.000816][T14057] tipc: Left network mode [ 523.009127][T18114] lo speed is unknown, defaulting to 1000 [ 523.031379][T18118] xt_cgroup: path and classid specified [ 523.167983][T18114] lo speed is unknown, defaulting to 1000 [ 523.581959][T17658] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 523.641622][T17658] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 523.672979][T17658] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 523.728459][T17658] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 523.748993][T17658] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 523.790549][T17658] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 523.818229][T17658] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 523.856719][T17658] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 524.259732][T17658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.511427][T17658] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.598594][T14053] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.605848][T14053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.710251][T18132] bond0: (slave wlan0): Error: Device can not be enslaved while up [ 524.785567][T14048] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.792801][T14048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.013002][T18137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3376'. [ 525.214932][T18137] dvmrp8: entered allmulticast mode [ 525.525310][T18142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3378'. [ 525.885837][T18149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3379'. [ 526.945122][ C0] net_ratelimit: 23684 callbacks suppressed [ 526.945145][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.959547][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.967880][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.976398][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.984733][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.993107][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.001444][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.010205][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.018607][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.027054][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.551892][T18181] syzkaller0: entered promiscuous mode [ 527.798262][T17658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.931941][T17658] veth0_vlan: entered promiscuous mode [ 527.974411][T17658] veth1_vlan: entered promiscuous mode [ 528.090962][T17658] veth0_macvtap: entered promiscuous mode [ 528.129518][T17658] veth1_macvtap: entered promiscuous mode [ 528.163934][T17658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.190438][T17658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.220646][T14049] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.241652][T14049] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.295130][T14049] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.317025][T14049] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.499387][T14052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.534956][T14052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.618514][T14048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.638513][T14048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.669694][T18199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3387'. [ 529.365400][T18211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3389'. [ 529.604038][T18221] netlink: 'syz.1.3391': attribute type 1 has an invalid length. [ 529.705813][ C0] bridge0: port 1(veth0_virt_wifi) entered forwarding state [ 529.713156][ C0] bridge0: topology change detected, propagating [ 529.936819][T18227] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3393'. [ 530.066936][T18228] bond1 (unregistering): Released all slaves [ 530.807560][T18240] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3398'. [ 530.822475][ T5646] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 530.842715][ T5646] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 530.857264][ T5646] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 530.865743][ T5646] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 530.880575][ T5646] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 530.941644][T18240] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3398'. [ 531.954323][ C0] net_ratelimit: 23159 callbacks suppressed [ 531.954346][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.968660][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.977117][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.985492][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.993929][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.002312][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.010778][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.019249][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.027696][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.036072][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.245914][T18239] lo speed is unknown, defaulting to 1000 [ 532.253978][T18239] lo speed is unknown, defaulting to 1000 [ 532.935114][T18239] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.942585][T18239] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.952646][T18239] bridge_slave_0: entered allmulticast mode [ 532.961694][T18239] bridge_slave_0: entered promiscuous mode [ 532.972461][T18239] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.980158][T18239] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.990620][ T5646] Bluetooth: hci1: command tx timeout [ 533.016682][T18239] bridge_slave_1: entered allmulticast mode [ 533.033226][T18239] bridge_slave_1: entered promiscuous mode [ 533.088018][T18239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.102536][T18239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 533.161172][T18239] team0: Port device team_slave_0 added [ 533.176522][T18239] team0: Port device team_slave_1 added [ 533.219753][T18239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.236852][T18239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 533.266923][T18239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.309383][T18239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.318259][T18239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 533.351206][T18239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.433048][T18239] hsr_slave_0: entered promiscuous mode [ 533.442717][T18239] hsr_slave_1: entered promiscuous mode [ 533.450141][T18239] debugfs: 'hsr0' already exists in 'hsr' [ 533.460560][T18239] Cannot create hsr debugfs directory [ 533.545376][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 534.281498][T18239] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 534.532366][T18239] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 534.577712][T18239] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 534.656091][T18239] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 534.696202][T18239] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 534.741871][T18239] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 534.795020][T18239] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 534.848897][T18239] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 534.858126][T18288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3404'. [ 534.878291][T18286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3405'. [ 535.064317][ T5646] Bluetooth: hci1: command tx timeout [ 535.126280][T18239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.161429][T18239] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.193737][T14040] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.201010][T14040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.222948][T14048] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.230235][T14048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.964280][ C0] net_ratelimit: 24997 callbacks suppressed [ 536.964301][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.978705][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.987056][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.995514][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.003773][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.012188][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.021871][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.030313][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.038724][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.047157][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.144780][ T5646] Bluetooth: hci1: command tx timeout [ 537.195651][T18239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.370574][T18331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3414'. [ 538.834464][T18344] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3413'. [ 539.010652][ T5638] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 539.030738][ T5638] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 539.046609][ T5638] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 539.084373][ T5638] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 539.095878][ T5638] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 539.224819][ T5638] Bluetooth: hci1: command tx timeout [ 540.907283][T18363] netlink: 'syz.2.3419': attribute type 10 has an invalid length. [ 541.225206][ T5638] Bluetooth: hci6: command tx timeout [ 541.974295][ C0] net_ratelimit: 25823 callbacks suppressed [ 541.974318][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.988687][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.997030][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.005382][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.013657][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.022031][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.030570][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.038987][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.047547][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.055966][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.304347][ T5638] Bluetooth: hci6: command tx timeout [ 543.876572][T18331] ipvlan2: entered allmulticast mode [ 543.903505][T18331] syz_tun: entered allmulticast mode [ 544.122023][T18363] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 544.589429][ T5638] Bluetooth: hci5: command 0x0406 tx timeout [ 544.859274][T18239] veth0_vlan: entered promiscuous mode [ 544.893215][T18239] veth1_vlan: entered promiscuous mode [ 545.013427][T18239] veth0_macvtap: entered promiscuous mode [ 545.024146][ C0] sched: DL replenish lagged too much [ 545.038621][T18239] veth1_macvtap: entered promiscuous mode [ 545.130084][T18239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.146497][T18345] lo speed is unknown, defaulting to 1000 [ 545.160780][T18239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.172931][T18345] lo speed is unknown, defaulting to 1000 [ 545.229727][ T1043] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.256219][ T1043] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.300679][ T1043] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.347717][ T1043] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.387776][ T5646] Bluetooth: hci6: command tx timeout [ 545.902572][T14052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.940320][T18381] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 545.958044][T14052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.011153][T18381] netlink: 284 bytes leftover after parsing attributes in process `syz.2.3422'. [ 546.081407][T14049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.120108][T14049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.901534][T18391] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3424'. [ 546.984198][ C0] net_ratelimit: 26149 callbacks suppressed [ 546.984218][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.998579][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.006948][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.015384][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.023601][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.032063][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.040288][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.048633][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.056936][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.065311][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.337402][T18345] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.345307][T18345] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.352884][T18345] bridge_slave_0: entered allmulticast mode [ 547.371798][T18345] bridge_slave_0: entered promiscuous mode [ 547.382190][T18345] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.390460][T18345] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.399144][T18345] bridge_slave_1: entered allmulticast mode [ 547.417410][T18345] bridge_slave_1: entered promiscuous mode [ 547.470209][ T5646] Bluetooth: hci6: command tx timeout [ 547.783858][T18345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.849956][T18345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.094852][T18405] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3428'. [ 548.146762][T18402] tipc: Enabling of bearer rejected, already enabled [ 548.176882][T18345] team0: Port device team_slave_0 added [ 548.222491][T18345] team0: Port device team_slave_1 added [ 548.440141][T18345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.468410][T18345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.567279][T18345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.774838][T18345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.782134][T18345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.815057][T18345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.004479][T18420] BUG: Bad rss-counter state mm:ffff88802a09d5c0 type:MM_FILEPAGES val:1 Comm:syz.4.3431 Pid:18420 [ 550.049453][T18420] BUG: Bad rss-counter state mm:ffff88802a09d5c0 type:MM_SWAPENTS val:148 Comm:syz.4.3431 Pid:18420 [ 550.126541][T18423] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3432'. [ 550.198836][T18345] hsr_slave_0: entered promiscuous mode [ 550.206372][T18345] hsr_slave_1: entered promiscuous mode [ 550.213749][T18345] debugfs: 'hsr0' already exists in 'hsr' [ 550.220432][T18345] Cannot create hsr debugfs directory [ 550.620730][T18345] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 550.647553][T18345] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 550.656962][T18345] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 550.676132][T18345] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 550.688970][T18345] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 550.709323][T18345] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 550.718425][T18345] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 550.731938][T18345] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 550.996911][T18345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.038213][T18345] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.060533][T14051] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.067804][T14051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.097369][T14051] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.104630][T14051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.994194][ C0] net_ratelimit: 25502 callbacks suppressed [ 551.994218][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.008493][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.010334][T18345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.017102][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.032136][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.040568][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.048871][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.057303][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.065658][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.074050][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.082490][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.591757][T18345] veth0_vlan: entered promiscuous mode [ 552.613582][T18345] veth1_vlan: entered promiscuous mode [ 552.677926][T18345] veth0_macvtap: entered promiscuous mode [ 552.718814][T18345] veth1_macvtap: entered promiscuous mode [ 552.771349][T18345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 552.808442][T18345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 552.840169][T14052] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.867847][T14052] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.899814][T14052] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.930997][T14052] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.106521][T14044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.121789][T14044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.216520][T14052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.232672][T14052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.004229][ C0] net_ratelimit: 33259 callbacks suppressed [ 557.004255][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.018499][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.026921][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.035218][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.043503][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.051770][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.060098][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.068480][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.076877][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.085285][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.810427][T14057] bridge_slave_0: left promiscuous mode [ 557.822045][T14057] bridge_slave_1: left promiscuous mode [ 557.974040][T14057] hsr_slave_0: left promiscuous mode [ 557.985870][T14057] hsr_slave_1: left promiscuous mode [ 557.992221][T14057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 558.010707][T14057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 558.676027][T14057] team0 (unregistering): Port device team_slave_1 removed [ 558.711738][T14057] team0 (unregistering): Port device team_slave_0 removed [ 559.331525][ T13] smbdirect: ib_dev[syz2] removed