last executing test programs: 49.346387435s ago: executing program 4 (id=388): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xd}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x10, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x7}}, @TCA_FW_ACT={0x4}]}}]}, 0x3c}}, 0x4000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\x00', @ANYRES32=r3], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000380), &(0x7f0000000200)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r7}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe0400010092"], 0x30}}, 0x0) 39.752883947s ago: executing program 4 (id=388): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xd}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x10, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x7}}, @TCA_FW_ACT={0x4}]}}]}, 0x3c}}, 0x4000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\x00', @ANYRES32=r3], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000380), &(0x7f0000000200)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r7}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe0400010092"], 0x30}}, 0x0) 30.008435789s ago: executing program 4 (id=388): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xd}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x10, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x7}}, @TCA_FW_ACT={0x4}]}}]}, 0x3c}}, 0x4000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\x00', @ANYRES32=r3], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000380), &(0x7f0000000200)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r7}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe0400010092"], 0x30}}, 0x0) 20.969287919s ago: executing program 4 (id=388): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xd}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x10, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x7}}, @TCA_FW_ACT={0x4}]}}]}, 0x3c}}, 0x4000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\x00', @ANYRES32=r3], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000380), &(0x7f0000000200)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r7}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe0400010092"], 0x30}}, 0x0) 11.808758149s ago: executing program 4 (id=388): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xd}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x10, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x7}}, @TCA_FW_ACT={0x4}]}}]}, 0x3c}}, 0x4000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\x00', @ANYRES32=r3], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000380), &(0x7f0000000200)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r7}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe0400010092"], 0x30}}, 0x0) 4.415185689s ago: executing program 0 (id=1205): socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000c6fc4b87473b178b0000"], 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01d90000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d1d38ce1ad8b1441c94b904b09ec4cbfce370d250c35144dbc021da607097213dc511e341d3391ba8f74f496e637c607371de42329d8c29bd2020f11a1edb2aca8db707b8daece74fa7550e90c3ed924324959c12fb7e64bde2062be7f400f79b395755da5f21dd3ae7d03e40a8b35d2348f7321878e194af25762e7a7a48baf18ef6a5d567dde22e102216554a8095e5e51f8f5ec08dfc89f337243411bd9702a14c5c7b62a734c5482c023ccd9d82c391ba0222f4f1e432bb126fd38d986aeff87fcf29bb9f4d5789aff34e0aa0b2ced95fe5761b75a6289fe12d384a94c94a5604aba7f91e3ee"], 0x3c}, 0x1, 0x0, 0x0, 0x841}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x10000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r5) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx2\x00'}, 0x58) (async) accept4(r6, 0x0, 0x0, 0x0) (async) socket$inet(0x2, 0xa, 0x7) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/19, @ANYRES32=r7, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000500170000000000060018"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) (async) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="38000000101401002cbd7000fedbdf2d080003000100000008004a0001000000080001000000000008004c000100000008004b00130000006ed99c44835b85f5f38397af7ea65010a5f749725601373689057f6d75fd12992c1bd7dc842aa7f5e8cf4ef51b64446c3ce4126fcc5ebedba17d43262e7913576905f64e71d534b15e7d3bc565da8b067fd5dce08a9a74a8e7ba4ec3b07ce6e92dde332281a847d6a577679c8854df8adbd7a323ff62f44249fc2ca7969c6265421ddc81c0478f38ccd593d3831bbb11874783aaf1d6c8c53ae7bd30750fd0b7b127c308946f1faed5392b"], 0x38}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSETELEM={0x16b8, 0xc, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x167c, 0x3, 0x0, 0x1, [{0xb20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x7b8, 0xb, 0x0, 0x1, [{0x324, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x314, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0xbc, 0x3, "68ef4fa2b6f9c023b3669770fe8e0b8e1f8156facd61091305a0cef583b859779329134564c55a188aa5171e74b2dd4f87d651dadff52494fa03285fe0a94eb80de40c86199018b67a6456596fdaaccfc51c9065e483f23e40400dfbecd206557ac4db97cc599215f16eb45793a625d1bbe0e1e44f7ac4966989224c8fb3ecb58f18d595fa30e1ed656a46f21d9c89c528a37b181697239bd9ab3fcef138531f7d840beccfd327187721fbec411f77156fb8a1fd1a68b9f7"}, @NFTA_TARGET_NAME={0xc, 0x1, 'NFQUEUE\x00'}, @NFTA_TARGET_INFO={0xbc, 0x3, "eeb35b955e434d50a2cf104cfb5c64399bb6d9ee4ec8b2df3ea1ed033dbf298edf83fbd45aa7f6e4dc23fbf07889d472cdfc777806e8c59f4793c6fb78f5edfebb545df512ffe29d9f9069e65f50176ef5f2c79fb86d26bd99a83418110e8cf6540c678d25eae125f99c79a128c689447889d0013f2bf97275dd50545a92ae04cbee365f298b4875fd949108cbf3d349e7111f10ed935aeef1ce17c1661e88cd0d4bceb0d07262c2b643c2777dbd164d2f76573469b8156e"}, @NFTA_TARGET_NAME={0x9, 0x1, 'MARK\x00'}, @NFTA_TARGET_INFO={0xb9, 0x3, "bde272ea4969dcc880c148639cf0500bb729700f5c1cbae2d6708359f78ae8ce484a5ee240aeed9f0d8c4bfc61fa208d47b8a9edb180abbe324e98f5b624ccc4c962517c81b12b09fcacf15f882308ea968c57e2e82c07c75f16493b602f9b22637c496af1f0948892019aac71651400b801801b9c041e58c09ced9959dd2f928f4313e25d13e19b13509d3e400f9533106075b15940a6412f11fa767b0ff0ef2722971a0d0b26f4a420837a69021c6e10c860caa3"}, @NFTA_TARGET_INFO={0xc3, 0x3, "fd503369afebc93880338a65e634e22595a36a52279afd43cf52e9f0704a70ba437600e1d243c4542acbed80d9a6e1e775839b6f55e1b5714058466f9c390ba6d05bb2f4d16fbe0ed033e2c9282477f8503d55746b4ab7e69a4a2a132a818ea555e9b58169c1328dc768cbf767b29b8d14bedc0edb0d888b6cdd2c80f3f5875126932e53b2a339275d454427d190ee2e7ada069f915a33eb73c9116517be8cc4c7f48253e9d7fbf79ed406c8918d87bac45477c7bebd3c288838e328e7a710"}]}}}, {0x30, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0x61}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x60, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_LOG_FLAGS={0x8}, @NFTA_LOG_PREFIX={0x6, 0x2, 0x1, 0x0, ',\x00'}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0xc189}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x5}]}}}, {0x33c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x32c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DATA={0x120, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x10, 0x1, "5c6ffdfd91b823435847aa98"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_BITWISE_DATA={0x1f8, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1e, 0x1, "78bec418a015f46c71ba1b20621824852d451281001352f49442"}, @NFTA_DATA_VALUE={0xac, 0x1, "ba24bfe15dfecd1eb6fcae870a9dbaec7d37c34b1c4e2b6c1189830f93a991d3de9cb173a8fcb1ab05e614c5dc396d5b8e952d117fb555e3689a8e4d1cde86f88b6da45294059e10bc2c5775a0627108610f5ffd2235220895df779923a716139b2a04818ac3dfd7c7cc83203e03e7bea3d40ab7c731ca944b434d1fe3b25d0b5791d1cd9ec02fb78fc1b2b91534995f1fa015d8f141b79e58c740bd42cc8bd1fc3e08940f38f78d"}, @NFTA_DATA_VALUE={0x3c, 0x1, "53a283279803cce0d53eeb9000ab7294aa5b3df6b4e7fabc874122dc12b500471b0bc6d0d56e98d5eaca06a4ca1cc8ab026bc46b5fe846a9"}, @NFTA_DATA_VALUE={0xe5, 0x1, "ab1c82b18b2a5d636daa9a7d88cd09b094f3323b78bb97b77a21cfaf6862606c2a4cd47f81c1132099a38cd930fe0702429a8559ee8e18759b59943b752da7eb47b92cc747d0a9981461ca329fc703e8c290d6c33f95bb39c5e2ee642e42767882adda1ff3a5d620ccc9e49fc7a662ee67fb532111e7d73661d0896e631c3a3e020fdea13e683abffaf9af96c910a0de6a03234d9625bd4bc7c21005b915fa390b8c15c1bd54f9e20084eb08603f0decdb2b591c47e9b018111a99a6417a9238da2c35518b6c6edf75f5360b52b6f048f57e48d8c508237d227f7543fd34abecb6"}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_BITWISE_OP={0x8}]}}}, {0x58, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x6}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_OSF_TTL={0x5, 0x2, 0x3}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x7}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_OSF_TTL={0x5, 0x2, 0x4}, @NFTA_OSF_FLAGS={0x8}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_EXPRESSIONS={0x84, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xc154}]}}}, {0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}]}}}, {0x34, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_SET_ELEM_KEY={0x1ec, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa2, 0x1, "95a834b7b5ad4e4d34ba2ca6e6d34e33222f86b913b5dff040d17b8fedf8a254ccfdd7d6d72e4bdc3decacd0bfebafed13c0864a548e9f1329e3a32eb4e13e7e1fa06fc4b5989994e8b6c1ad4f7aef1555fbc9606f66f011d3b8ca0e0fbf3ed564e41f9e958dffc8e05dd14fa67b378af57120c45e6c20d32eeb677e4a94e43a29d1b2d577cb10e726e300c96eb5c2209d5880e1edd726245f568bf265f9"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xe8, 0x1, "c4f3b1774605827358cc3e5c4e96a61ca9a26e46a203dd48a3d7a2864bc0f716c5bd927e39b64fe7f152ea950d78b441326f29d411691b86aec0f2ccd581845f1bb4d5e6379d11b566298780df7cb090c4f2b1309f72c6609588bc96755b984a9326635f2438ed84b575e1b79b0fe68b0c48a0a665f5ccc9faadcef2a6cbb01589ace58bd2abfc99fdf4e83ccd35397355a709bf598976cc6c6521be0aa40574d9e2b165d13cf943d16a04a7174c1f61a09bad68027e3b240d7ad84b090383944e07a5ecf059c8bd7a8cf18901afd19ed587778fd7734409f329878aeaa71f9b6498320f"}]}, @NFTA_SET_ELEM_DATA={0xc8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x47, 0x1, "52745cb8e137773035f812c2cbff64e6c88022f3a4f25f594914f670293a4b3333011a88f42bcd39a10d4066dad37c03323e9173c71bd5f861d5e0729a6d778edfa9a9"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x400}]}, {0xb58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x2ac, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x84, 0x1, "f87fb7a8f973ae03ecf80f676fa4677df20c6b3beeacf7a35ea45f787ae186fb6a78584629062a9182076cd87e46bfc4eebd01b90d898ddef4b9f3a8e0045527bb87c5a6ce257e7f69cbc36be040fba2afb245fcf13666db3555310c069e7b9df2df4cfeee104c8159ff7e4cec0a43ba68d43866a4457a9c923a3a3feb16f305"}, @NFTA_DATA_VALUE={0xe2, 0x1, "9172d983e83a7c02bdb4316aab9545c5092428f4a8d51d5c91a2179c0acb5184c692582052deb1d3a24c3f4fe1b4cee9ec363e0303489fd535cd5230953dfa22e2c417803142b470a1921e46b691ab8f3ca9da43d6c1597504fe99c626cb3df2649f9d74d5b11392c6b86dfc3d33089aee9e58d646b8c49e1ce80bc0b46165b1adfaedea342c38e667ca265e758471f4207cf592c3c07cf8504d08c5b767d4eba0e0e02bd998eccf888fbac402cf13956c4c4f8dab724c5729702abffafbfddef392850b061209819f028fbd0600cbdba056ca72cf46002e48a08f9f0c0d"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x86, 0x1, "83489c52a6e1a85f5630ff7213c7fad2e5f13f3220b47b5c725ea0309b179d83570028018dd2338d1e10a5abe0d6c24d44a1ed083538e1aea76cf30de65a276d0735f556cc366f07b668d204c5ec9da0f633161443b6ccb8e031330198824765ff737ade8c4ed9da3eeb67ab3badfadafab9b10f21fbc4b07fe430d6906b85107c98"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x2d0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'D'}, @NFTA_DATA_VALUE={0x66, 0x1, "9e20bb3b4535f1cf7f6e467a83bb68f9e4415854b8e11e2ceb778a6155aacdea4cc1c91e90405c990beb67a91a4e53b954b84a0cda00926d14c6e028cd81332d494bd422b6730c69e4c498caf0ed2cf70dadf7d68b244657aeb4bad3533dcac277f8"}, @NFTA_DATA_VALUE={0xad, 0x1, "e5f0fe2c66cdc5445c38cd08d4034aa1e5bd11e2ff324fe2ce2e2fe63dd1dcd0a8f5e79315a444a7fc8d8a37058da6aa0d93c23932ac7be3975a76a12394afa27c27cc5484bb1085a1fe05a7e111012debf8f1c698fd28f6f7cbd7f393f7d41f129a56373cb5b4006562afe55a92ef4cd55d9c4f6dbf91556d542311047ec34a86eb687d0e1840512dc672d2ddd6d0053a3e001b22ea17eb39ad7d29ad0147ccee4844f6579f2e736f"}, @NFTA_DATA_VALUE={0x9f, 0x1, "28d3811821a076e8324c75493a8e8bed62d2895fdb04ca7489d1ac7736230a78aa538a7dc71cc6355f393ce448fd2d3e6b55e3c9dc4d7dda57f84e2b2edd30c16eaac1ccb6400a856f61501a569bb89171f404c6ab386a5125e7500ef43693a33d25771847ab166a868a8b815bc0be30d5050ccddee5c2d106712bdb7ecab20dcb4c155432a96fa7274c4e511b253ce87cb30d44b3c5a542bf651b"}, @NFTA_DATA_VALUE={0x5b, 0x1, "02d358ccc698820b5887f044da02c57c8a5d5691f73414c5794fccfff521c907ad30aafce31c8b764da9049dee8fcbd0fb7cca8f5c531ab8c274891968d1b532523c533a81d304ddf124fa89e6218d9cbd1a6f331dba6d"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_DATA={0x1cc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xf5, 0x1, "9068bab8b687d7e585745a480000be998cdcdf43258fc44824a3ab3a9b4055c34716e2f4a83509d1d1f271fc94c4c0a028c48703d8e10a2a943ad963bdb6fc3cd736b2123815adad1774325a1f91d8f59258a6dcf7cbdb9be84e7895aee1083145b1652a292db4efdd5a62bbfd646f615793b28cfe4fbe1f256c6dbd74a1d30889854fc266da11fb7295ec52e6747c1e32e82c0572987492512279e2a209304f6736348f8eb0f7900c253a87f4134a67a9944f2452db880dfef7d2c2f511ddc75adc50dff9f5335e261cb606485a6ae6ca8f264a5fe893a9ac3d8038a6543cf9cb5e09fb231d95889abd812865c282183a"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7f}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x9}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0x3ac, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa9, 0x1, "21f64f2310d950fffc7f9520eee09352d626eabdc6876eb086b932e12dcc67bba0b6ddb4d3e3b989df11a7a65ecf25283f090da9c71f18ec76a37ec48d9aae744f4c01e4098fece01b69b0e851df6e460ba487f4ad6f9046b3e3eed5d96d9e1a2c3da3f9b3e79cf3edd7f9c1f322b6f0ad0dca520ff582aac1d27a794ec70501126f1e57e19c027a66de519937ea25f293deaba4c3513b021fdca1aebd968feda3d93e08b0"}, @NFTA_DATA_VALUE={0xdb, 0x1, "d8d12d226795e74396fd2454fb323473d9aa425bc741630b0a384f52558d308eec7db777067185e44c58e0d7bd9083ca810ca07417410420522900d2ea01faf5c92ae29c58269b705174d1b93e9ac6d288c35925a08440d55dd55380d9f92d5957e3ff07bb7d1789a8caecd01cdb9768e499838f755a086c9b22f0b19c6576968c43e9cacc2b020d70675fe10847fe3713141c43c7fc489293f88986f2fe711514b1df8123f06e7ee9110e018555adbbd261338278765b0bbd293cfe403d44ef13106161b26594e73849d73a777bfad6f093b518c8cd75"}, @NFTA_DATA_VALUE={0x7b, 0x1, "de1ff9973055105f6cf839ae7d2bfbea0e108b8e1a70917a2f8da909adbf755898a8775f2fe5fb5170bc14aef11a1d428522cb1c9f8589bd88e48c885e0312eebcc7065061463974e043a7c15b4317fd13f9b951865017c0b24689f7b2c3a5580c13fcc52bc5a8ee3d59996eda37cff9eabdd89207b133"}, @NFTA_DATA_VALUE={0x65, 0x1, "4a26ad45e0dae376aa02961c27be6dfaa209cbe37250c8cee9b2f213ee8f2659f7b90cc3b8f8cebd706fcf4e964e78c6d6e8d9bf3b2f7b94d74fc514b8efdb51c4ef7d4596e82d7bfea447c5236bd4dcbcd50534e122bbfcdb85a21a40918fc362"}, @NFTA_DATA_VALUE={0xae, 0x1, "b3f585599e6118d14597ec85f970251de0781d02684249ba1b0260198823a035bfb9de57d2db1e2fc5bbda651b5de48631dfc95fac6ddd423d690c1754bef9dd6e89b69c1eb78256793d05283b877e50cccd00288e14b6c7968d0d0a197fe3be3f567637ca52379c7de1aed4c13641551867474ce4fe9b885e5dbe7ddc6492f13bac42ab9e5eea4c48eec6c535aec1b95bbab34bc87c624a0ea8923011c296aabf2a19c94a0aece1e4b6"}, @NFTA_DATA_VALUE={0x89, 0x1, "25d17143fa2832f7bd4df796fc725fce8045f02377f83ae80730b54a908e3a056e3187b0d46ee9777899c0e9d4b404595d31307660850963ac0b028a43171eac87a09f29879b8140285c96cf338e3806ba039603baa3e85c7c947fe9956dce672d426ae0610bfc3ac2f63351fb90fd6906aa45480476b3b01afd0aa817c037b4510380da9f"}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x16e0}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x30000001}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) 4.131697389s ago: executing program 0 (id=1207): r0 = socket$netlink(0x10, 0x3, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001800128008000100677265000c0002800507130001000000"], 0x38}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="fe0000000000000034002b8008000110", @ANYRES32, @ANYBLOB="0800030000000000080003000600000008000800", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32, @ANYBLOB="08001b"], 0x5c}}, 0x0) socket$l2tp(0x2, 0x2, 0x73) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0xf, 0xfff3}, {}, {0xb, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r8}, 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11}, 0xc) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0x2, 0x1, 0x9, 0x0, 0x6, 0x8000000000000001]}, &(0x7f00000000c0)=0x8f) 3.860884488s ago: executing program 1 (id=1210): r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000000100)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f00000003c0)}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="05d9feff000500001861000008000000000000000b000000850000004500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000085100000ffffffff85100000ffffffff186400000e0000000000000063000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000180)={'IDLETIMER\x00'}, &(0x7f0000000640)=0x1e) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000001010000000000"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x19) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x34, 0xfffffffe}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$can_bcm(0x1d, 0x2, 0x2) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x90}}, 0x804) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x0, &(0x7f0000000280)=0x98b, 0x4) readv(r6, &(0x7f0000000200)=[{0x0}], 0x1) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, 'lo\x00'}}, 0x1e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r7, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/82, 0x5e}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700), 0x1000013d}}], 0x2, 0x0, 0x0) 3.66171246s ago: executing program 0 (id=1215): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="1c0000000005000000cc"], 0x42) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001000000800000000206b4a24c8941c0cde16017ad3fd0d322a03700733e2da3056de004ae3ccfec5713afb78684521829300f586404b4a44880f0769adf866326b390ccf70934127fff2ff900008d3ddf35463685e0aabb9c48cf9f7178b76ad6904122abe8e0634f89f3dcb82e947002855221deab8302269b0ea0", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800000b000014000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090500000000019400000000070000b7020000000000006b9af0ff000000007609000000000000dbaaf0fff1000000bf86000000000000070800000d000000bfa400000000000007040000f0ffffff560000000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000089000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 3.404094293s ago: executing program 0 (id=1217): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) socket$l2tp6(0xa, 0x2, 0x73) socket$inet(0x2, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r1], 0x48) socket$l2tp6(0xa, 0x2, 0x73) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_sctp(0x2, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket(0x1000000010, 0x80002, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x801, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) 2.930088785s ago: executing program 1 (id=1220): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x1800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a320000000014000780080013400000000008001240000a2000050005000a000000050004000000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)={0x2c, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x2c}}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000240)={r5, @in6={{0xa, 0x4e23, 0x4e, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc2}}, [0x4, 0x8000000000000001, 0x5d07, 0x2c82, 0x26, 0x8, 0x101, 0x5, 0x6, 0x8, 0x4, 0x793, 0x4, 0x5, 0x4]}, &(0x7f00000001c0)=0x100) socket$inet(0x2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r4, 0x7}, &(0x7f0000000340)=0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) r10 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x6c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x9, 0x3, 0x0, 0x6, 0xfffffefa, 0x22}, [@TCA_NETEM_RATE={0x14, 0x6, {0xe1, 0x79d, 0x0, 0x3}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xe61c6a5c983a3b82}]}}}]}, 0x6c}}, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000003c0)={@remote, @loopback, 0x1}, 0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r10, 0x84, 0x10, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001180)={0x1a, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001200)={'wlan1\x00', &(0x7f0000001100)=@ethtool_rxnfc={0x2a, 0x8, 0x7e1ab084, {0x3, @usr_ip4_spec={@multicast1, @multicast1, 0x53, 0x7f, 0x1, 0x9}, {0x0, @random="7729ba522e59", 0xa, 0x0, [0x10000, 0x3]}, @hdata="a86b57371eff451fd353517f755532b803741b5b2aade83e68f35d937d79d8993111b4ca75f0612da64df99e636e9cb7eb62b35f", {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x9, 0x6, [0x6]}, 0x3, 0x6}}}) 2.617690577s ago: executing program 2 (id=1224): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000910000000010000000000000005000600000000000a00000000000000000000000000000000000000050000000000000000000000020001000000000000000702000000ff05000500000000000a00000000000000ff17000080ff0000000000000000000100000000000000000200080008"], 0x80}}, 0x0) 2.601132551s ago: executing program 3 (id=1225): ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x40305839, &(0x7f0000000a00)={{}, "43034353bc9f685fc5d678c047a4a5292e3237ca30cb0f3a9420c9fba0ec4682958baa9e0e94da65970a1c631b5f0139cf3987ad6efa4f483175bc44153da819970a879c6f3ada010c83640ed4e74958a739e85472f4c4c77469644ceadcdc5c688787fd96c27af4ce68d4a65843bd76785c6e519ee90f9a6920bf477c4891a82b124921220cbe3b082be08d48c6ed9eb46a9dc47e23779e961a3f99ea4191028fc46a22e8aad0c413261138ed0b5e2056e522c88a23ad104748d91912d3a9d239ce3ef5ce9c223039b540070954e9505d511ad49ed448daf48cab80390481984f69d19168efdba082cd2a7655d6b0139b0df978c71cd356bf0fe9a685e0f79624ac8eb9850ec36fdf31c73234e61c34de1be1c48b7bc738125753deb1f50a00415fb76765ea1155af266b7f6f3ecc7c7754a7209684c4384e6a0884561230064b245748e9fa9f40e206d6c0008730bc1c1bc1a5649e2c4252cab52fe3b883b9a0f3f8deb174325b2a1734809c927458120698ade675a545a0082dc1a3daa41ae2923d0531d18f8231909d20edb1475df9c0684bcbd764711d9df0fcc98375d8afb5b613b79af337615b069f10f2d445fc76905d8fa1a120b65a0d62c4bef582e7292ee61629555dfaece502e533d2789773100c9ddcc1080e9574db85ffc46167537683ecc535c0684b4f64ae228bc16b6236a85e74f61886ea3aba3c6e4faf1dbd2722af34655cbe76df53958323fa8a59e1543cf60721caa411cb9c824798756d3631c61d45bf5018d09f7a2884e3672fefa55c0d7222ef614598f80518d4067061a18ef791d1dc153131417515b13afd314a49370ab130756c19c344daec5c857a867cdd5e73e7f7f4e4611a83b484af2d8cfe7a70d248719ac90c463182edec6c2fb702d9c0a4a141fdfb2a88121532da6f7bee16a4bfd9aa342a744eb798d4c274ce2fe5395966f69736b1d8e8cc737d2b7d1be6dd133eb76e2697ef6a07766a5ec66348fa6373d085be3310936bf6c39807d670d2a68c9510142f55f48455ae19377d690acefb34294622c44384def20d9d2b5f2001f94ddf291945746b3c264acf6face324e50b919f5f36dad3cacd6e6a894d773068481821d478f196ac8a1b097cfe1176b4f46e1db657e56cbd482abe729e7fc4d2b11f094cbaedd342cf72738683c8f8a075e1a6f27edff0d9e891e22b4d51e0c6bcb612390b395ec9b6b6590ca6eae2f7a8a0ffe079b8083d4a0601441571cb3ad6a5da6c1ac4143c17937710d01ff9b3f00908d8c2a9d6950d02b47b3b282aad26980f2b30d4366d7ac3691a2ef8aa959aaabc5b306ad2597a2613fb7237040e95d950ba6b78dbc4522fa0af7711f448be54019bf002719f2450d36ba9e80291357360634df225a9fcf5699658a26243ac82c15b8d4fb5eca179f09cee87a8bef8fdacbcfa74f93bf2a9a79063c17c08995ed2fe5e41eafb99b6eb7090623e3147d04f94e21d0302b1e398c0e74863156a2e4cf34c0f65a7b927f8cb840ca7ea907a6ee218bf39e24134f0f33206ca13366041940d265009eb2ee66a9f0ab3335ab14ff5a19b9d18fc98c547880cc7bf19513a353395933f1df3ad602e718ff3c344234678ee263e6f1023470466899bda51ce5e4f82f403e273a0ea32bf813f4ce90f21acc91a38379cfa454c183d5cdf670d25dd6ad168b7c4fb74cc5e6e17af5eef96478df04de0f703716e592ff8f2f7f4d36eef28095151aa1082bf828e12ca9a331ddeefddcfdb52ad2b4e89448f309ee8756224ff1878e37f3a177c0d78d7f71013252377616fa9d6d547ed9e562eae85a4c7e8776770c58e6d77ff3376c0f5c16966b8545a5f1a336bf4d60eb606035f284e14c69ab8b909938dd4f8257f5da1e8d16513c0f1a561d55208db14d69d33259d9e2befde605014340018f26079860879627754ba9e924dc3efbec4fa1186d075666a87662113bfb8750fd83a26b227ca421d5a266fac72a4258462e0fb7b2ce5ac6e692d82c2c6c8383bbae39d884c23c4c47555f924b22b60f621f2db8d009da303c919c847962ddefa13f1a0195e3b33881f11d0a15faf5617b8af3e684f50cb3a53e13b18e23a93059ecc630f98832c3f9cc8617a307b7373971aa35ddcf474fce083578ed556fbb0dc9e5ccebcaccf9fc382931278e5ad16b73432287be57f9e9d746a1b0ed9558378a7e819fd808b3aa608203c9f62bfbe88785be6c4da06dca42dcac31c6d850b82166951524df711bc044e12abf6d1817be7dbeaf19dbe068db18d93e87e1101d8c09298a71fd891d5976fc311903c9977c45fd8c8f375fc2d3f2b2ef58bf4378f148ff3a4d378174e1f26085b22cee03e252e73c28c71fc4552f1f3b9198fb6fed1c2133a65c7eda35a21b5c891db6e9cfc78abae9d2caff25bbf982f665ebaa870e87d289eb59f9b8f6151545dedf74c4d27d4aff17b507bcd71fe12efa3195bdbf58f3a4b77283f7e6cd56d566c2bb3918d860eb23db3933ab1bbbf5ca63b5026f72dab99dac9a4a613b2da18eac33a398d158763bef75f70e7fc5c75a7cb7ab56b325f95a1e6d9743dd2487b6c7b5709258add8b5019a2fc22f0d18822ac79c5b3b8d5b8f7dbf611a6b1143c21ffdfb4764d10899f84892a28034a5872f7ee1015141f76368762dbd61d68308746375f8f9640019a25dd3a11c4b3596d86c83e8047cf5c47739623cb9aab3e9273b741b89a12d00829ba96301bf35f9bc7164428a031edeab4c746c1f4a38c9c05e8b0d891b7cc03aa35e9c9aacecf158381241114806a91ee0d5c1f2523b5b9f7b8f38e083c05bca2200ac96dc63272004e9ef20fd577ea7ae4a3387306fa5656229c03e4f968ce39ef07b7a89051f4f577d65651fb64ac6265be9aa8dcb238343cedcafaf7c562225fd1840dc5ccb90322766d1634993360570ec7feb40cb3101bca80a58640d0bac91308437014df7c14da356427a6ecca491e6f9588ec2c7f896e39b099591086b04d0d568eb399f0bb8c841611931cb2fd6fd73ebb7f8b9b73d48fb3b294e052953b315a951019a043b7ebca3c4821d7c540facf4c2bb4534aa3445decfd270b8f03a9d71dc2a8e4c50439c956161e1ad4b067b197db3b86b8b4022f2ee27a7e9d4658c3cd641e34ad088969674f3cc7bcc6256221922fed4c749a0d41c095c0e3995056b43744ad9b8b6ba6565c2cc4fd43d8a9abeb60e5c2db0fee542869de33fd32ef72d7bc6a918763f187538a830280e326448dca9fa31403054357234592cc1d55504d9ab55cdaa369958626b476bdbf7c5913f38db214f1be91020b327346b1e05a90026b67915abbf1fd69103935e87699dd3f920da161441764598005fbd92ff22f287ca6809be5497322b42cc300e76e7877d42949a10c79cf8a7b22e46b34b4624a0550de07ef48547abac7d30e79d6028c70aa6942c8558d61c4d3e831cb586ed72e18fd5c1a15e4d81d1c35b5bd143ec188983c524a52f69ba844fdb3b20909d32997cdc822a5646adc597463c0f354aa55943d9eca6b01751902cd8ad8bb8e19f82cccbc696989332be3af34fc9547abfbee54267d775e85e65b2d5ecc0947b2772aeb7b41db3edd3025f5f2d57b0edda51b69191bbe8bfdc06ccb2bb1f55a104bc3b4298470d44531a1b1f1400a094453a9ebe3e06f522847be402b85aecc13422ca423c7357c7cefd5acb9b7dab1e724076b755323bf375918f0de79c78dd2b76963f35ca8c3c7bf3e9fa3b6e12b63646a717a92abac968286b1d0c6b4277b9a4a975fd6a5ad30e18aeae32040687265d0d1848d30190e43cdcf167f8db57ea04be0ce696f4257abe3427eb9b785ee619c52aef573266a886b298c4371ae2e7c141c5263dd6fa898171b3b6e3194a446fe27807bb685b700188acff8d10cf5ed0d8007db138dd93b5afc9dd60470e1639b712aa8669094c32f8c8652be3d2b7100281d7d9495795a97c3dff5a844ce6a2c2c1aa92356bc7b767db8bf3a9a438aaea4d3806afa53ba86922e4c4424485cc05dc26b44059528cbf208a6774eb6dfdf1492393d9c17268a97ead7700fb2d61e3b9378f09e5bafec089b2b8f971b78ac6b5dfda6ae423ad9fb162306912c76cc6c6936b4cc08598b5cf4f3037ce1c03f0dda1018d1600c3f452d2ad9a7b52eae3b55f1d9b0e0a3283cca3db142d3daf62a8c758b9a294779b645b05dcd478c42ad24e5cec8c25da6bd7271e9df0195e13737f86996da964b6b11fabce88258c5b628cc3368ebcb7c8350f0d17c9af5250516c8cf31407ed32704a5fb5d7da05750485c687452ad238bc7f645dc9efa61f88b3f8c3faeb1f8e44a9b907fc5c3ad527270732f3ebd574a75e8ff7b6e6537f54fbf0e8e3316efda3eab14e4f0d7c74d6e3f82e0145588106be9da5d1c74297cc72bf4783078d7ffee9ded2349a53305910998c2837254e864f31e2287dcc19a7d6fb6cdcf80a5dede163a6c3d36e2c5861b89a46eaf0504ad0c7d16ddf02bf6f1d90bf9feaa0b7d9cfefd47d08aac22ee4a6241191f4d6acbdcf6eceae1d2d2028b6e559fb550e1f4a5ee9866da456c7eb034c2f34238572f0d3e3085b1f03509cca9958701fc4a73539c4d446c065bc9e2a4ff1861471c31c6223882ccf0258dcd79634975b560a4905843e26ac6a99346e2de740e4deaa6925a7afdc98025b9b89fc02035efa1457f7b343d3a4c0feeff66f6c719db8528bc49bffcdae000b64fdf1cc755d993b9a77da4c26d8cb8700545c68e4ca1bfd30fb70ad2fe57ce2881cc5b1b6e5126e7705abcc0b8e553252ebc893b5f045e51acdb19944ace5182269f111d1a3533de0c38ec8db309dc44a1c5734846fd5d9e18b07df7ebdbb546f115dc5ef4423351f131c5739e4eed6136dfa022c99c1323144db427af9e3e5c2be67967a3b637413beca8c2081d664af22ac9058bbeeb0d843d09111245a36a245e77fccd3d4e7b359f6ba6521e5a6cbd99b2ef135df13d76d07d0e847ae16ce2b4050c58a775460b6ed86631074516667d590771b2809d55d32b1ed895531e1ee10b25eec4939b0360a2064076a40a8780611ec7f261132e5f7dca1e7284085795408d1385ed7fe4a5cb18c29108cde9b7cbe844d929838a231899e772a381403685446273a564ce6c35aa294ea02b91f61e093ef9191c2d4cf8b722b17093b16d6a3b34444ff9e22ca1dd429d40c2f655ddcf7564aa1cde88a652c5a8589b522ff88938203b09b2fca155be384af4c8d12a32e705ad1d2c4e4e3a9d1a151956ae0f19f9c88ab11137975a5ab53047f5ee69ebbb8c1a2b605e738584a29ad501c0f949aa6a9c0247f17b40f3d8ccbef3c9cc2602d2eb5bf84c7d5bd2480f3478b7975cfa90faf03bbea007baa6682bce23cd245ac372523cf758b939030ad185bc1d0f5753a7268bee39056345130353e0d44d5e46f4a1d933e553f7768071b41d08631a1165b5af7ca4e9d17a3c67ac57aea2d530b6b3a21c279708e71ed6464d01409da47dbadbce0583609105ea631eab93924c1937bf496afe2a4e0758ca521753f8e03e9998618a3304329f70f9a8358416b96c0b42a2287cbd435390a2131d33a8081d5199834a13de7d195ee118bd442af7f34ac1bcce9fad8d61ccc124ed99830dec1d77e90f061ff04043d5e0ea6f1e581a378d2bcbe128ac3756e6070b8321ee6a27634deb278e60e73b9a75083f470808b4b3c4e8661ca91ebed4d028c0683623dc8cbdc01baac0a9451319d96000"}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000640)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x9, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000017000000bca30000000000002403000040feffff6b0af0ff0000000071a4f0ff000000001f030000000000002e0a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000002080)=ANY=[@ANYBLOB="140100001e00010000000077fc8b000003"], 0x114}], 0x1}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800000}, [@call={0x85, 0x0, 0x0, 0x50}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x20, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "1770e235285db2cb", "278aa3520f3a0ff8cef6713fa6b703a6", "610cde48", "dbb0e9ddc00c20ee"}, 0x28) setsockopt$inet_int(r4, 0x0, 0x18, &(0x7f0000000100)=0x1008001, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r3, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x0, 0xb6, 0x0, 0x0, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x93, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7) r8 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xc1}], 0x30}, 0x0) sendmsg$nl_route_sched_retired(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000f5c5f146c6f95e4de672fd8f907640000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) 2.489233742s ago: executing program 2 (id=1226): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x0, 0x111, 0x4b4, 0x100, 0xd4feffff, 0x1c8, 0x20a, 0x278, 0x1c8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0x1], [], 0x0, 0x0, 0x2, 0xe}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@empty, @mcast1, [0xffffffff, 0xffffff00, 0xffffff00, 0xff000000], [0xffffff00, 0xff, 0xff000000], 'nr0\x00', 'pim6reg\x00', {0xff}, {}, 0x6, 0x0, 0x7, 0x5f}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000070001004d0000000800030046cec2bfe245a1f837f3ee851812894bc26154ec0d76ea7f436a00005490301f9fd76c900ce3dd9428292dda65c9d46c155122e7f5", @ANYRES32=r3, @ANYBLOB="140004006e6963766630000000000000000000000800050006000000"], 0x40}, 0x1, 0x0, 0x0, 0x8050}, 0x240048c0) 2.471474658s ago: executing program 0 (id=1227): unshare(0x22020600) socket$inet_sctp(0x2, 0x1, 0x84) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="120000000800000004000000b4"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="000000fff8000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.345603554s ago: executing program 2 (id=1228): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xcf, 0x0, 0x4) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r7, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x2c}}, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000580)=0xc) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8001) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x30, r12, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xffffffff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x8c, r7, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x4}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xc6}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x3}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x7fff}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xff}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x100}}, @NL80211_ATTR_MESH_CONFIG={0x4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x81}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0xffff}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004810}, 0x8000) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r3, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000380)=[0x0], &(0x7f0000000400)=[0x0], 0x0, 0x53, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f0000000500), 0x8, 0xa, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r13, @ANYBLOB="0000000000000000b705000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r14, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r15}, 0xc) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x8c4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x40000012, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.233257541s ago: executing program 3 (id=1229): unshare(0xa020480) r0 = socket$xdp(0x2c, 0x3, 0x0) poll(&(0x7f0000001f00)=[{r0, 0x200, 0xfdfe}], 0x1, 0x9) 2.196995902s ago: executing program 3 (id=1230): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9444000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x200}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000014) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)=0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000200)=0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xd4, r3, 0x908, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r7, 0xe08, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xffff}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x5713e04bbd6fa84}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x8880) syz_open_procfs$namespace(r6, &(0x7f0000000580)='ns/mnt\x00') sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, r3, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x7fffffff}]}, 0x40}, 0x1, 0x0, 0x0, 0x2400c8c4}, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000880)={'syztnl2\x00', &(0x7f0000000740)={'syztnl0\x00', 0x0, 0x7f80, 0x7800, 0x1, 0x1, {{0x39, 0x4, 0x0, 0x39, 0xe4, 0x68, 0x0, 0x4, 0x4, 0x0, @private=0xa010101, @loopback, {[@rr={0x7, 0xf, 0x55, [@broadcast, @multicast2, @multicast1]}, @ssrr={0x89, 0xb, 0x62, [@empty, @private=0xa010101]}, @rr={0x7, 0x2b, 0x26, [@remote, @local, @private=0xa010102, @remote, @local, @multicast1, @broadcast, @private=0xa010102, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x23, 0x40, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @remote, @loopback, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x28}, @rand_addr=0x64010102, @multicast1]}, @lsrr={0x83, 0x27, 0x18, [@remote, @rand_addr=0x64010102, @loopback, @multicast2, @rand_addr=0x64010100, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @loopback]}, @generic={0x0, 0xd, "3d077c22bbde3dfe797cd6"}, @cipso={0x86, 0x32, 0x3, [{0x1, 0x11, "379e8f1f61186d5a286d6e8a5f120b"}, {0x7, 0x3, "88"}, {0x2, 0x11, "6a38933197dfe70a099a2d7f1ab684"}, {0x5, 0x7, "1f89a8f5ba"}]}]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000008c0)={0x0, @broadcast, @loopback}, &(0x7f0000000900)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a00)={'syztnl2\x00', &(0x7f0000000940)={'syztnl2\x00', 0x0, 0x8000, 0x1, 0xd, 0x7, {{0x1a, 0x4, 0x3, 0x35, 0x68, 0x65, 0x0, 0x9, 0x29, 0x0, @remote, @loopback, {[@end, @timestamp={0x44, 0x8, 0x95, 0x0, 0x6, [0x2]}, @timestamp_prespec={0x44, 0xc, 0x1f, 0x3, 0x9, [{@remote, 0xffffffff}]}, @ssrr={0x89, 0x1f, 0xc5, [@loopback, @dev={0xac, 0x14, 0x14, 0x39}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x39}, @loopback]}, @generic={0x41, 0x9, "5a3de37ba3ff1f"}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0xb2, 0x0, 0x5, [0x4, 0x7fffffff, 0x1]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000a80)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000c80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x808000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x160, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x4}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4004010}, 0x80) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x2c, 0x2, 0x2, 0x801, 0x0, 0x0, {0x2}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0xb}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5e48}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x4048050) r13 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x2) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000dc0)) r14 = socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r14, 0x84, 0x14, &(0x7f0000000e00)=@assoc_value, &(0x7f0000000e40)=0x8) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r13) sendmsg$NL80211_CMD_FLUSH_PMKSA(r15, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14, r16, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000001) setsockopt$sock_attach_bpf(r15, 0x1, 0x32, &(0x7f0000000fc0), 0x4) 2.178210244s ago: executing program 2 (id=1231): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x80, 0x7800, 0x100, 0x4, {{0xc, 0x4, 0x0, 0x6, 0x30, 0x66, 0x0, 0x27, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x16}, {[@timestamp_prespec={0x44, 0xc, 0x53, 0x3, 0xb, [{@dev={0xac, 0x14, 0x14, 0x2a}, 0x8}]}, @ssrr={0x89, 0xf, 0x26, [@private=0xa010100, @broadcast, @multicast1]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009110a8000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.068555813s ago: executing program 2 (id=1232): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r2) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0x7, &(0x7f0000000340), 0x4) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x300040d5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0xa, 0x8, 0x8, 0x0, r0, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x2c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r5}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x14, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000032b5bb00"/25, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r7, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r10, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r10, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x48, &(0x7f0000000240)={0x0, 0x0}, 0x2c) connect$tipc(r10, &(0x7f0000000280)=@id={0x1e, 0x3, 0x1, {0x4e22, 0x1}}, 0x10) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000180)=@req={0x401, 0xfffffffe, 0xb, 0x5}, 0x10) sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x3, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x28000000) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @local}, 0x2}}, 0x2e) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x2, 0x3, 0x0, 0x4}}, 0x2e) socket(0x10, 0x803, 0x0) 2.040134433s ago: executing program 1 (id=1233): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040), 0x4) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) syz_emit_ethernet(0x8b, &(0x7f0000000540)={@broadcast, @local, @void, {@x25={0x805, {0x3, 0x8, 0xfb, "2da93cc7ae143442a30711ac4f7bb33c3569d68c28840c5a50f17a9a4912db78de27132b0d724470ead28d7c2d28375cfcc8e8312f6edff5051d890c73230d3c7e2fb0dc29db60ed514c16e07e54707c68faf87bb43488fef1e3d40b916e12b7c84ed75d4f3f11df02e66c6bc02476a58ac03494e8be89067e2e"}}}}, 0x0) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYRES64=r7, @ANYRES64=0x0, @ANYRESHEX=r7], 0x20) (async) r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/ipc\x00') sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0xd0, r3, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x50}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x2f, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.001135495s ago: executing program 3 (id=1234): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYBLOB="6cbd5d673995c843fd021bcdd912b37bac9d75bc26e52c82b51caf2a73e21c3b0455ecafc5eb1922af8b4e138378494dded7308587cc", @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x240008c0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c000280080004400000000408000740000300040800064000000001050002000000000008000340000000040900010073797a30000000000900020073797a32"], 0x94}}, 0x0) 1.893314159s ago: executing program 1 (id=1235): r0 = socket$netlink(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x10) pipe(&(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd70000000000005000000180001801400020073797a5f74756e000000000000000006050006"], 0x34}}, 0x0) 1.872380923s ago: executing program 3 (id=1236): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@getlink={0x28, 0x12, 0x4b106f8694e05f37, 0x70bd3f, 0x0, {0x7}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xb40e}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x880) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028006002700"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000500)={r7, 0xaa4, 0xfff9, 0x9, 0xfe, 0x401}, 0x14) 1.861920054s ago: executing program 1 (id=1237): r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$ax25(0x3, 0x2, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) (async) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYRES64=r3, @ANYRES64=0x0, @ANYRESHEX=r3], 0x20) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_pressure(r7, &(0x7f00000002c0)='cpu.pressure\x00', 0x2, 0x0) pwritev(r8, &(0x7f0000000600)=[{&(0x7f0000000940)="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", 0xffc}, {&(0x7f0000000380)="d8ad23cf4a", 0x5}], 0x2, 0x0, 0x4) (async) pwritev(r8, &(0x7f0000000600)=[{&(0x7f0000000940)="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", 0xffc}, {&(0x7f0000000380)="d8ad23cf4a", 0x5}], 0x2, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x38, r6, 0x1, 0x70bd2e, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0xa, 0x5, 0x81, 0x9, 0x7fff, 0x1]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20}, 0x40) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000400)=""/196, &(0x7f0000000040)=0xc4) 1.790436773s ago: executing program 4 (id=388): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xd}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x10, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x7}}, @TCA_FW_ACT={0x4}]}}]}, 0x3c}}, 0x4000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\x00', @ANYRES32=r3], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000380), &(0x7f0000000200)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r7}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe0400010092"], 0x30}}, 0x0) 602.171128ms ago: executing program 0 (id=1238): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x4010, r0, 0x2ffc2000) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@private2, @dev={0xac, 0x14, 0x14, 0x1e}, 0x4, 0xb}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0x0, 0xe, 0x43, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x7, 0x4, 0x10000}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r2, 0x20, 0x8000, 0x45, 0x4, {{0x13, 0x4, 0x2, 0x25, 0x4c, 0x68, 0x0, 0x0, 0x2f, 0x0, @multicast1, @loopback, {[@timestamp_prespec={0x44, 0x14, 0x77, 0x3, 0x9, [{@broadcast, 0x100}, {@broadcast, 0x7f}]}, @timestamp_prespec={0x44, 0xc, 0x78, 0x3, 0x8, [{@private=0xa010102, 0x3}]}, @rr={0x7, 0x17, 0xa7, [@empty, @dev={0xac, 0x14, 0x14, 0x13}, @multicast1, @dev={0xac, 0x14, 0x14, 0x1c}, @multicast2]}]}}}}}) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000240)=@req={0x28, &(0x7f0000000200)={'macvlan0\x00', @ifru_mtu=0x8}}) recvmsg(r1, &(0x7f0000001400)={&(0x7f0000000280)=@alg, 0x80, &(0x7f0000001380)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/105, 0x69}], 0x2, &(0x7f00000013c0)=""/5, 0x5}, 0x40000022) socket$inet_sctp(0x2, 0x7, 0x84) bind$inet(r1, &(0x7f0000001440)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000001480)={r1}, 0x8) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000014c0)={'veth1_virt_wifi\x00', 0x2000}) socket$inet6_dccp(0xa, 0x6, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x28, r5, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0xf07}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x1) socket$kcm(0x29, 0x2, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001680), r3) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000001780)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x4c, r6, 0x100, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4020801}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000019c0)={0x11, 0x1a, &(0x7f0000001800)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @generic={0x9, 0x8, 0xb, 0x5, 0xc883}, @generic={0x25, 0x5, 0x8, 0x8, 0x5}, @generic={0x40, 0x8, 0xf, 0x7}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], &(0x7f0000001900)='GPL\x00', 0x5a4, 0x0, &(0x7f0000001940), 0x41000, 0x6, '\x00', r2, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[0x1, r3, r3, r3, r3, r3], 0x0, 0x10, 0xf6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a80)={&(0x7f00000017c0)='xprtrdma_reply\x00', r7, 0x0, 0x4}, 0x18) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000001ac0), r4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001b00)={'wlan1\x00'}) bind$inet(r3, &(0x7f0000001b40)={0x2, 0x4e24, @broadcast}, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000001b80)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=@bloom_filter={0x1e, 0x800, 0x8001, 0x7, 0x8, r3, 0x2, '\x00', r9, 0xffffffffffffffff, 0x0, 0x5, 0x1, 0x8, @void, @value, @void, @value}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r8, &(0x7f0000001e00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0xf8, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x195}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xb}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xc71a}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8814}, 0x20000000) 14.314359ms ago: executing program 1 (id=1239): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b16000000e8fe55a11800150006001400030000120800040043000000a80016000a0001400d000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {0x0, 0xfffffffc, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8bf}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x40}, {}, {}, {0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9d54}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x3ff}], [{0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@ipv6_newrule={0x44, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x80, 0x80}, [@FRA_SRC={0x14, 0x2, @private1}, @FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x44}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x4) (async, rerun: 32) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f000000b800)=ANY=[@ANYBLOB="00020201"], 0x18) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000069000010000000000100000018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100fef7"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 64) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r6, 0x29, 0x4b, 0x0, 0x0) (async) sendmmsg$inet6(r6, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00'], 0x28}}], 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfe}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x14) (async, rerun: 32) pselect6(0x517, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) (rerun: 32) bind$netlink(r7, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0x200}, 0x31) (async, rerun: 64) socket$kcm(0x11, 0x3, 0x0) (async, rerun: 64) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3573], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r8}, 0x10) (async, rerun: 64) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000300)={'veth1_vlan', 0x32, 0x30}, 0xd) (rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xe, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 3.05832ms ago: executing program 2 (id=1240): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2d, 'cpu'}]}, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="05d58fc847ace34236a0676e9389460000000080000000000000000000008510fd0002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x100, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1839, @void, @value}, 0x94) 0s ago: executing program 3 (id=1241): unshare(0xa020480) r0 = socket$xdp(0x2c, 0x3, 0x0) poll(&(0x7f0000001f00)=[{r0, 0x200, 0xfefd}], 0x1, 0x9) 0s ago: executing program 3 (id=1243): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0xd, 0x3, 0x6}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3b071, 0xffffffffffffffff, 0x0) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x1016, &(0x7f0000003080)=""/4118, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): target [ 105.625783][ T7469] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 105.820116][ T12] bond0 (unregistering): (slave veth3): Releasing active interface [ 105.833022][ T12] bond0 (unregistering): Released all slaves [ 105.943650][ T12] tipc: Disabling bearer [ 105.998664][ T12] tipc: Left network mode [ 106.042497][ T7382] chnl_net:caif_netlink_parms(): no params data found [ 106.048218][ T7480] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 106.122661][ T7484] batadv_slave_1: entered promiscuous mode [ 106.196960][ T7491] netlink: 24 bytes leftover after parsing attributes in process `syz.0.417'. [ 106.280592][ T7498] FAULT_INJECTION: forcing a failure. [ 106.280592][ T7498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.296036][ T7498] CPU: 0 UID: 0 PID: 7498 Comm: syz.2.419 Not tainted 6.14.0-rc4-syzkaller-00873-g3424291dd242 #0 [ 106.296060][ T7498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 106.296070][ T7498] Call Trace: [ 106.296075][ T7498] [ 106.296082][ T7498] dump_stack_lvl+0x241/0x360 [ 106.296107][ T7498] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.296123][ T7498] ? __pfx__printk+0x10/0x10 [ 106.296142][ T7498] ? __bpf_prog_test_run_raw_tp+0x2ce/0x440 [ 106.296167][ T7498] should_fail_ex+0x40a/0x550 [ 106.296193][ T7498] _copy_to_user+0x31/0xb0 [ 106.296214][ T7498] bpf_prog_test_run_raw_tp+0x557/0x710 [ 106.296236][ T7498] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 106.296254][ T7498] ? __fget_files+0x2a/0x410 [ 106.296279][ T7498] ? fput+0x21b/0x290 [ 106.296297][ T7498] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 106.296317][ T7498] bpf_prog_test_run+0x2e4/0x360 [ 106.296342][ T7498] __sys_bpf+0x487/0x820 [ 106.296364][ T7498] ? __pfx___sys_bpf+0x10/0x10 [ 106.296396][ T7498] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 106.296420][ T7498] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 106.296443][ T7498] ? do_syscall_64+0x100/0x230 [ 106.296469][ T7498] __x64_sys_bpf+0x7c/0x90 [ 106.296489][ T7498] do_syscall_64+0xf3/0x230 [ 106.296510][ T7498] ? clear_bhb_loop+0x35/0x90 [ 106.296533][ T7498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.296553][ T7498] RIP: 0033:0x7f615cd8d169 [ 106.296567][ T7498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.296579][ T7498] RSP: 002b:00007f615dba2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 106.296597][ T7498] RAX: ffffffffffffffda RBX: 00007f615cfa5fa0 RCX: 00007f615cd8d169 [ 106.296608][ T7498] RDX: 0000000000000050 RSI: 0000400000000000 RDI: 000000000000000a [ 106.296618][ T7498] RBP: 00007f615dba2090 R08: 0000000000000000 R09: 0000000000000000 [ 106.296628][ T7498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.296638][ T7498] R13: 0000000000000000 R14: 00007f615cfa5fa0 R15: 00007ffc0c9844d8 [ 106.296663][ T7498] [ 106.514613][ T5845] Bluetooth: hci4: command tx timeout [ 106.639484][ T7382] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.646998][ T7382] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.654296][ T7382] bridge_slave_0: entered allmulticast mode [ 106.660616][ T7502] openvswitch: netlink: Duplicate or invalid key (type 0). [ 106.661303][ T7382] bridge_slave_0: entered promiscuous mode [ 106.671016][ T7502] openvswitch: netlink: Actions may not be safe on all matching packets [ 106.696270][ T7382] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.703355][ T7382] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.724221][ T7382] bridge_slave_1: entered allmulticast mode [ 106.731732][ T7382] bridge_slave_1: entered promiscuous mode [ 106.833310][ T7514] netlink: 24 bytes leftover after parsing attributes in process `syz.0.424'. [ 106.866833][ T7382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.880660][ T12] hsr_slave_0: left promiscuous mode [ 106.915408][ T12] hsr_slave_1: left promiscuous mode [ 106.921666][ T12] batman_adv: batadv0: Removing interface: dummy0 [ 106.936290][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.954765][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.990844][ T7517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.425'. [ 107.002193][ T12] batadv0: left allmulticast mode [ 107.010216][ T12] batadv0: left promiscuous mode [ 107.016121][ T12] veth1_vlan: left promiscuous mode [ 107.023646][ T12] veth0_vlan: left promiscuous mode [ 107.045617][ T7519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.426'. [ 107.149259][ T7521] netlink: 32 bytes leftover after parsing attributes in process `syz.0.427'. [ 107.677184][ T12] team0 (unregistering): Port device team_slave_1 removed [ 107.699190][ T7534] FAULT_INJECTION: forcing a failure. [ 107.699190][ T7534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.717694][ T7534] CPU: 0 UID: 0 PID: 7534 Comm: syz.1.431 Not tainted 6.14.0-rc4-syzkaller-00873-g3424291dd242 #0 [ 107.717717][ T7534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 107.717726][ T7534] Call Trace: [ 107.717732][ T7534] [ 107.717739][ T7534] dump_stack_lvl+0x241/0x360 [ 107.717764][ T7534] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.717823][ T7534] ? __pfx__printk+0x10/0x10 [ 107.717847][ T7534] ? snprintf+0xda/0x120 [ 107.717868][ T7534] should_fail_ex+0x40a/0x550 [ 107.717893][ T7534] _copy_to_user+0x31/0xb0 [ 107.717914][ T7534] simple_read_from_buffer+0xca/0x150 [ 107.717945][ T7534] proc_fail_nth_read+0x1e9/0x250 [ 107.717968][ T7534] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 107.717991][ T7534] ? rw_verify_area+0x243/0x630 [ 107.718007][ T7534] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 107.718028][ T7534] vfs_read+0x1f8/0xb40 [ 107.718045][ T7534] ? fdget_pos+0x254/0x320 [ 107.718066][ T7534] ? __pfx___mutex_lock+0x10/0x10 [ 107.718089][ T7534] ? __pfx_vfs_read+0x10/0x10 [ 107.718108][ T7534] ? __fget_files+0x2a/0x410 [ 107.718130][ T7534] ? __fget_files+0x395/0x410 [ 107.718149][ T7534] ? __fget_files+0x2a/0x410 [ 107.718178][ T7534] ksys_read+0x18f/0x2b0 [ 107.718196][ T7534] ? __pfx_ksys_read+0x10/0x10 [ 107.718213][ T7534] ? do_syscall_64+0x100/0x230 [ 107.718237][ T7534] ? do_syscall_64+0xb6/0x230 [ 107.718262][ T7534] do_syscall_64+0xf3/0x230 [ 107.718283][ T7534] ? clear_bhb_loop+0x35/0x90 [ 107.718306][ T7534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.718326][ T7534] RIP: 0033:0x7f0e8c38bb7c [ 107.718340][ T7534] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 107.718353][ T7534] RSP: 002b:00007f0e8a1f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 107.718370][ T7534] RAX: ffffffffffffffda RBX: 00007f0e8c5a5fa0 RCX: 00007f0e8c38bb7c [ 107.718382][ T7534] RDX: 000000000000000f RSI: 00007f0e8a1f60a0 RDI: 0000000000000005 [ 107.718392][ T7534] RBP: 00007f0e8a1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 107.718402][ T7534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.718411][ T7534] R13: 0000000000000000 R14: 00007f0e8c5a5fa0 R15: 00007fff49542d38 [ 107.718438][ T7534] [ 107.969323][ T12] team0 (unregistering): Port device team_slave_0 removed [ 108.015748][ T7536] netlink: 124 bytes leftover after parsing attributes in process `syz.1.432'. [ 108.177731][ T7539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.432'. [ 108.282243][ T7382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.322225][ T7537] veth0_to_bond: entered promiscuous mode [ 108.470860][ T7539] veth0_to_bond (unregistering): left promiscuous mode [ 108.557305][ T7539] bond0: (slave bond_slave_0): Releasing backup interface [ 108.585142][ T5845] Bluetooth: hci4: command tx timeout [ 108.691080][ T7382] team0: Port device team_slave_0 added [ 108.750595][ T7382] team0: Port device team_slave_1 added [ 108.794965][ T7558] __nla_validate_parse: 1 callbacks suppressed [ 108.794984][ T7558] netlink: 88 bytes leftover after parsing attributes in process `syz.3.438'. [ 108.938310][ T7382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.957675][ T7382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.993399][ T7382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.013632][ T7382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.033801][ T7382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.071438][ T7382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.147640][ T7382] hsr_slave_0: entered promiscuous mode [ 109.159741][ T7382] hsr_slave_1: entered promiscuous mode [ 109.168535][ T7382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.177350][ T7382] Cannot create hsr debugfs directory [ 109.522362][ T7574] batadv_slave_0: entered promiscuous mode [ 109.567361][ T7570] batadv_slave_0: left promiscuous mode [ 109.609171][ T7578] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 109.701998][ T7581] netlink: 1272 bytes leftover after parsing attributes in process `syz.0.446'. [ 109.851362][ T7382] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 109.886609][ T7382] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 109.945414][ T7382] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 110.020064][ T7382] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 110.054899][ T7605] openvswitch: netlink: Actions may not be safe on all matching packets [ 110.099889][ T7609] Illegal XDP return value 4294967274 on prog (id 178) dev N/A, expect packet loss! [ 110.217051][ T7621] netlink: 16 bytes leftover after parsing attributes in process `syz.0.455'. [ 110.310911][ T7382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.350695][ T7382] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.371767][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.378943][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.410375][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.417603][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.475282][ T7627] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 110.646018][ T7636] netlink: 1272 bytes leftover after parsing attributes in process `syz.1.461'. [ 110.666215][ T5845] Bluetooth: hci4: command tx timeout [ 110.880410][ T7382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.152379][ T7651] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.160070][ T7651] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.195150][ T7668] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 111.238476][ T977] IPVS: starting estimator thread 0... [ 111.333966][ T7670] IPVS: using max 24 ests per chain, 57600 per kthread [ 111.367207][ T7651] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.376882][ T7651] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.385995][ T7651] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.394856][ T7651] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.423082][ T7651] bridge0: left allmulticast mode [ 111.428481][ T7651] bridge0: left promiscuous mode [ 111.566818][ T7382] veth0_vlan: entered promiscuous mode [ 111.582478][ T7382] veth1_vlan: entered promiscuous mode [ 111.627866][ T7680] netlink: 1272 bytes leftover after parsing attributes in process `syz.3.473'. [ 111.631801][ T7382] veth0_macvtap: entered promiscuous mode [ 111.673196][ T7681] netlink: 'syz.2.474': attribute type 4 has an invalid length. [ 111.682749][ T7382] veth1_macvtap: entered promiscuous mode [ 111.708361][ T7683] netlink: 28 bytes leftover after parsing attributes in process `syz.0.475'. [ 111.728503][ T7683] netlink: 28 bytes leftover after parsing attributes in process `syz.0.475'. [ 111.744881][ T7685] netlink: 'syz.2.474': attribute type 4 has an invalid length. [ 111.752262][ T7683] netlink: 'syz.0.475': attribute type 6 has an invalid length. [ 111.951318][ T7382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.968637][ T7382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.981586][ T7382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.003413][ T7382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.033945][ T7382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.056318][ T7382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.067584][ T7708] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 112.159453][ T7700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.168479][ T7700] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.178816][ T7700] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 112.201587][ T7710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.216441][ T7710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.254962][ T7710] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 112.302121][ T7382] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.321609][ T7382] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.339904][ T7382] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.359858][ T7382] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.369815][ T7700] syz.1.479 (7700) used greatest stack depth: 18064 bytes left [ 112.398138][ T7722] Cannot find set identified by id 0 to match [ 112.541691][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.554482][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.625206][ T7731] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.632648][ T7731] bridge0: port 1(bond2) entered blocking state [ 112.639553][ T7731] bridge0: port 1(bond2) entered disabled state [ 112.647477][ T7731] bond2: entered allmulticast mode [ 112.656719][ T7731] bridge0: port 1(bond2) entered blocking state [ 112.663528][ T7731] bridge0: port 1(bond2) entered forwarding state [ 112.680920][ T6616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.692208][ T2963] bridge0: port 1(bond2) entered disabled state [ 112.693818][ T6616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.745187][ T5845] Bluetooth: hci4: command tx timeout [ 112.975852][ T7750] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 113.509061][ T7770] netlink: 244 bytes leftover after parsing attributes in process `syz.1.498'. [ 113.798886][ T7773] netlink: 24 bytes leftover after parsing attributes in process `syz.0.500'. [ 114.147953][ T6616] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.163298][ T7791] netlink: 1272 bytes leftover after parsing attributes in process `syz.0.507'. [ 114.381722][ T7797] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 114.467716][ T7803] trusted_key: syz.2.509 sent an empty control message without MSG_MORE. [ 114.561810][ T6616] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.675403][ T7804] netlink: 28 bytes leftover after parsing attributes in process `syz.0.511'. [ 114.715450][ T6616] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.767339][ T7804] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 114.845042][ T6616] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.953118][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 114.963800][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 114.972779][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 114.990791][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 114.998740][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 115.029226][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 115.169481][ T6616] bridge_slave_1: left allmulticast mode [ 115.176797][ T6616] bridge_slave_1: left promiscuous mode [ 115.183064][ T6616] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.198226][ T6616] bridge_slave_0: left allmulticast mode [ 115.205749][ T6616] bridge_slave_0: left promiscuous mode [ 115.212545][ T6616] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.753692][ T6616] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.766280][ T6616] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.776814][ T6616] bond0 (unregistering): Released all slaves [ 115.812956][ T7835] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.822166][ T7831] IPv6: NLM_F_REPLACE set, but no existing node found! [ 115.954653][ T7843] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20001 [ 116.034490][ T7845] netlink: 1272 bytes leftover after parsing attributes in process `syz.1.519'. [ 116.065459][ T7841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.517'. [ 116.127191][ T7820] chnl_net:caif_netlink_parms(): no params data found [ 116.337674][ T7862] netlink: 28 bytes leftover after parsing attributes in process `syz.1.523'. [ 116.396552][ T6616] hsr_slave_0: left promiscuous mode [ 116.424030][ T6616] hsr_slave_1: left promiscuous mode [ 116.430427][ T6616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.450789][ T6616] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.475184][ T6616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.490324][ T6616] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.500655][ T7874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.523'. [ 116.528361][ T7873] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 116.578534][ T6616] veth1_macvtap: left promiscuous mode [ 116.586344][ T6616] veth0_macvtap: left promiscuous mode [ 116.592242][ T6616] veth1_vlan: left promiscuous mode [ 116.598029][ T6616] veth0_vlan: left promiscuous mode [ 116.688337][ T7881] xt_hashlimit: max too large, truncated to 1048576 [ 117.023103][ T6616] team0 (unregistering): Port device team_slave_1 removed [ 117.067477][ T6616] team0 (unregistering): Port device team_slave_0 removed [ 117.076221][ T54] Bluetooth: hci4: command tx timeout [ 117.489682][ T7873] lo speed is unknown, defaulting to 1000 [ 117.517604][ T7873] lo speed is unknown, defaulting to 1000 [ 117.526881][ T7873] lo speed is unknown, defaulting to 1000 [ 117.567651][ T7873] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 117.573284][ T7887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.528'. [ 117.592003][ T7873] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 117.678962][ T7873] lo speed is unknown, defaulting to 1000 [ 117.691864][ T7820] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.713600][ T7820] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.721276][ T7820] bridge_slave_0: entered allmulticast mode [ 117.736200][ T7820] bridge_slave_0: entered promiscuous mode [ 117.752972][ T7820] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.760882][ T7820] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.768663][ T7820] bridge_slave_1: entered allmulticast mode [ 117.776247][ T7820] bridge_slave_1: entered promiscuous mode [ 117.783354][ T7873] lo speed is unknown, defaulting to 1000 [ 117.836950][ T7820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.854676][ T7873] lo speed is unknown, defaulting to 1000 [ 117.863610][ T7873] lo speed is unknown, defaulting to 1000 [ 117.872476][ T7820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.957839][ T7896] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 117.969551][ T7873] lo speed is unknown, defaulting to 1000 [ 117.986086][ T7820] team0: Port device team_slave_0 added [ 117.988052][ T7900] netlink: 1272 bytes leftover after parsing attributes in process `syz.2.531'. [ 118.035371][ T7820] team0: Port device team_slave_1 added [ 118.042152][ T7873] lo speed is unknown, defaulting to 1000 [ 118.114525][ T7873] lo speed is unknown, defaulting to 1000 [ 118.168284][ T7820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.188394][ T7820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.234613][ T7820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.252839][ T7820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.260261][ T7820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.292522][ T7820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.599542][ T7918] batadv_slave_1: left promiscuous mode [ 118.683989][ T7918] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.700998][ T7918] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.710463][ T7918] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.719773][ T7918] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.808021][ T7918] macsec1: left promiscuous mode [ 118.813014][ T7918] macsec1: left allmulticast mode [ 118.962031][ T7946] netlink: 48 bytes leftover after parsing attributes in process `syz.0.543'. [ 118.995435][ T7950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.542'. [ 119.100398][ T7820] hsr_slave_0: entered promiscuous mode [ 119.131552][ T7820] hsr_slave_1: entered promiscuous mode [ 119.149358][ T54] Bluetooth: hci4: command tx timeout [ 119.155889][ T7820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.165495][ T7820] Cannot create hsr debugfs directory [ 119.168153][ T7957] __nla_validate_parse: 1 callbacks suppressed [ 119.168167][ T7957] netlink: 20 bytes leftover after parsing attributes in process `syz.0.543'. [ 119.254613][ T7962] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 119.421093][ T7971] netlink: 1272 bytes leftover after parsing attributes in process `syz.0.549'. [ 119.452818][ T7966] IPVS: length: 24 != 3221225496 [ 119.469424][ T7971] FAULT_INJECTION: forcing a failure. [ 119.469424][ T7971] name failslab, interval 1, probability 0, space 0, times 0 [ 119.510211][ T7971] CPU: 0 UID: 0 PID: 7971 Comm: syz.0.549 Not tainted 6.14.0-rc4-syzkaller-00873-g3424291dd242 #0 [ 119.510234][ T7971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 119.510244][ T7971] Call Trace: [ 119.510250][ T7971] [ 119.510258][ T7971] dump_stack_lvl+0x241/0x360 [ 119.510287][ T7971] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.510304][ T7971] ? __pfx__printk+0x10/0x10 [ 119.510323][ T7971] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 119.510346][ T7971] ? __pfx___might_resched+0x10/0x10 [ 119.510370][ T7971] should_fail_ex+0x40a/0x550 [ 119.510397][ T7971] should_failslab+0xac/0x100 [ 119.510419][ T7971] kmem_cache_alloc_node_noprof+0x77/0x380 [ 119.510440][ T7971] ? __alloc_skb+0x1c3/0x440 [ 119.510463][ T7971] __alloc_skb+0x1c3/0x440 [ 119.510483][ T7971] ? ____sys_sendmsg+0x53a/0x860 [ 119.510507][ T7971] ? __pfx___alloc_skb+0x10/0x10 [ 119.510534][ T7971] ? netlink_ack_tlv_len+0x6e/0x200 [ 119.510555][ T7971] netlink_ack+0x145/0xa60 [ 119.510570][ T7971] ? __pfx_lock_acquire+0x10/0x10 [ 119.510591][ T7971] ? __pfx_ovs_flow_cmd_set+0x10/0x10 [ 119.510612][ T7971] ? __pfx___might_resched+0x10/0x10 [ 119.510641][ T7971] netlink_rcv_skb+0x294/0x480 [ 119.510658][ T7971] ? __pfx_genl_rcv_msg+0x10/0x10 [ 119.510679][ T7971] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 119.510706][ T7971] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 119.510736][ T7971] genl_rcv+0x28/0x40 [ 119.510755][ T7971] netlink_unicast+0x7f6/0x990 [ 119.510778][ T7971] ? __pfx_netlink_unicast+0x10/0x10 [ 119.510792][ T7971] ? __virt_addr_valid+0x45f/0x530 [ 119.510808][ T7971] ? __phys_addr_symbol+0x2f/0x70 [ 119.510830][ T7971] ? __check_object_size+0x47a/0x730 [ 119.510854][ T7971] netlink_sendmsg+0x8de/0xcb0 [ 119.510884][ T7971] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.510906][ T7971] ? aa_sock_msg_perm+0x91/0x160 [ 119.510934][ T7971] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.510950][ T7971] __sock_sendmsg+0x221/0x270 [ 119.510971][ T7971] ____sys_sendmsg+0x53a/0x860 [ 119.511000][ T7971] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.511019][ T7971] ? __fget_files+0x2a/0x410 [ 119.511044][ T7971] ? __fget_files+0x2a/0x410 [ 119.511073][ T7971] __sys_sendmsg+0x269/0x350 [ 119.511100][ T7971] ? __pfx___sys_sendmsg+0x10/0x10 [ 119.511136][ T7971] ? do_sys_openat2+0x17a/0x1d0 [ 119.511183][ T7971] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 119.511214][ T7971] ? do_syscall_64+0x100/0x230 [ 119.511243][ T7971] ? do_syscall_64+0xb6/0x230 [ 119.511267][ T7971] do_syscall_64+0xf3/0x230 [ 119.511288][ T7971] ? clear_bhb_loop+0x35/0x90 [ 119.511311][ T7971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.511331][ T7971] RIP: 0033:0x7f2eb658d169 [ 119.511346][ T7971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.511359][ T7971] RSP: 002b:00007f2eb7355038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.511377][ T7971] RAX: ffffffffffffffda RBX: 00007f2eb67a5fa0 RCX: 00007f2eb658d169 [ 119.511388][ T7971] RDX: 000000000000c000 RSI: 0000400000000000 RDI: 0000000000000003 [ 119.511399][ T7971] RBP: 00007f2eb7355090 R08: 0000000000000000 R09: 0000000000000000 [ 119.511408][ T7971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.511418][ T7971] R13: 0000000000000000 R14: 00007f2eb67a5fa0 R15: 00007fffb9c77c08 [ 119.511445][ T7971] [ 119.871808][ T7976] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 120.259878][ T7996] netlink: 1272 bytes leftover after parsing attributes in process `syz.1.557'. [ 120.482869][ T8002] netlink: 1272 bytes leftover after parsing attributes in process `syz.1.561'. [ 120.523817][ T8002] FAULT_INJECTION: forcing a failure. [ 120.523817][ T8002] name failslab, interval 1, probability 0, space 0, times 0 [ 120.538467][ T8002] CPU: 0 UID: 0 PID: 8002 Comm: syz.1.561 Not tainted 6.14.0-rc4-syzkaller-00873-g3424291dd242 #0 [ 120.538489][ T8002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 120.538498][ T8002] Call Trace: [ 120.538503][ T8002] [ 120.538508][ T8002] dump_stack_lvl+0x241/0x360 [ 120.538530][ T8002] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.538544][ T8002] ? __pfx__printk+0x10/0x10 [ 120.538558][ T8002] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 120.538577][ T8002] ? __pfx___might_resched+0x10/0x10 [ 120.538598][ T8002] should_fail_ex+0x40a/0x550 [ 120.538621][ T8002] should_failslab+0xac/0x100 [ 120.538639][ T8002] kmem_cache_alloc_node_noprof+0x77/0x380 [ 120.538656][ T8002] ? __alloc_skb+0x1c3/0x440 [ 120.538683][ T8002] __alloc_skb+0x1c3/0x440 [ 120.538701][ T8002] ? ____sys_sendmsg+0x53a/0x860 [ 120.538722][ T8002] ? __pfx___alloc_skb+0x10/0x10 [ 120.538745][ T8002] ? netlink_ack_tlv_len+0x6e/0x200 [ 120.538762][ T8002] netlink_ack+0x145/0xa60 [ 120.538785][ T8002] ? __pfx_lock_acquire+0x10/0x10 [ 120.538804][ T8002] ? __pfx_ovs_flow_cmd_set+0x10/0x10 [ 120.538824][ T8002] ? __pfx___might_resched+0x10/0x10 [ 120.538851][ T8002] netlink_rcv_skb+0x294/0x480 [ 120.538867][ T8002] ? __pfx_genl_rcv_msg+0x10/0x10 [ 120.538888][ T8002] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 120.538916][ T8002] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 120.538946][ T8002] genl_rcv+0x28/0x40 [ 120.538965][ T8002] netlink_unicast+0x7f6/0x990 [ 120.538988][ T8002] ? __pfx_netlink_unicast+0x10/0x10 [ 120.539001][ T8002] ? __virt_addr_valid+0x45f/0x530 [ 120.539016][ T8002] ? __phys_addr_symbol+0x2f/0x70 [ 120.539037][ T8002] ? __check_object_size+0x47a/0x730 [ 120.539060][ T8002] netlink_sendmsg+0x8de/0xcb0 [ 120.539088][ T8002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.539109][ T8002] ? aa_sock_msg_perm+0x91/0x160 [ 120.539133][ T8002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.539147][ T8002] __sock_sendmsg+0x221/0x270 [ 120.539168][ T8002] ____sys_sendmsg+0x53a/0x860 [ 120.539199][ T8002] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.539219][ T8002] ? __fget_files+0x2a/0x410 [ 120.539243][ T8002] ? __fget_files+0x2a/0x410 [ 120.539272][ T8002] __sys_sendmsg+0x269/0x350 [ 120.539300][ T8002] ? __pfx___sys_sendmsg+0x10/0x10 [ 120.539331][ T8002] ? do_sys_openat2+0x17a/0x1d0 [ 120.539374][ T8002] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 120.539397][ T8002] ? do_syscall_64+0x100/0x230 [ 120.539422][ T8002] ? do_syscall_64+0xb6/0x230 [ 120.539446][ T8002] do_syscall_64+0xf3/0x230 [ 120.539467][ T8002] ? clear_bhb_loop+0x35/0x90 [ 120.539492][ T8002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.539511][ T8002] RIP: 0033:0x7f0e8c38d169 [ 120.539525][ T8002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.539537][ T8002] RSP: 002b:00007f0e8a1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.539555][ T8002] RAX: ffffffffffffffda RBX: 00007f0e8c5a5fa0 RCX: 00007f0e8c38d169 [ 120.539567][ T8002] RDX: 000000000000c000 RSI: 0000400000000000 RDI: 0000000000000003 [ 120.539577][ T8002] RBP: 00007f0e8a1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 120.539586][ T8002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.539596][ T8002] R13: 0000000000000000 R14: 00007f0e8c5a5fa0 R15: 00007fff49542d38 [ 120.539622][ T8002] [ 121.089999][ T7820] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 121.120824][ T7820] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 121.131828][ T7820] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 121.145286][ T7820] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 121.224029][ T54] Bluetooth: hci4: command tx timeout [ 121.264991][ T7820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.290252][ T7820] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.336808][ T6616] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.343975][ T6616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.401796][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.409282][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.484705][ T7820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.495377][ T8023] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 121.713071][ T8034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.569'. [ 121.790753][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.568'. [ 121.802558][ T7820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.986041][ T8046] netlink: 1272 bytes leftover after parsing attributes in process `syz.2.573'. [ 122.041659][ T8051] netlink: 80 bytes leftover after parsing attributes in process `syz.0.574'. [ 122.104685][ T8055] netlink: 1272 bytes leftover after parsing attributes in process `syz.3.571'. [ 122.226272][ T8060] lo speed is unknown, defaulting to 1000 [ 122.315001][ T8063] lo speed is unknown, defaulting to 1000 [ 122.476271][ T8063] lo speed is unknown, defaulting to 1000 [ 122.482689][ T8063] lo speed is unknown, defaulting to 1000 [ 122.651822][ T8060] netlink: 36 bytes leftover after parsing attributes in process `syz.2.575'. [ 122.748619][ T7820] veth0_vlan: entered promiscuous mode [ 122.835925][ T7820] veth1_vlan: entered promiscuous mode [ 122.996623][ T8086] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 123.059204][ T7820] veth0_macvtap: entered promiscuous mode [ 123.079837][ T7820] veth1_macvtap: entered promiscuous mode [ 123.123815][ T8063] infiniband syz0: set active [ 123.138895][ T8090] 0ªX¹¦À: renamed from caif0 [ 123.143667][ T8063] infiniband syz0: added lo [ 123.150787][ T8063] syz0: rxe_create_cq: returned err = -12 [ 123.171795][ T8090] 0ªX¹¦À: entered allmulticast mode [ 123.178013][ T8063] infiniband syz0: Couldn't create ib_mad CQ [ 123.186587][ T8090] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 123.202966][ T8063] infiniband syz0: Couldn't open port 1 [ 123.230720][ T8063] RDS/IB: syz0: added [ 123.239744][ T25] lo speed is unknown, defaulting to 1000 [ 123.254482][ T8063] smc: adding ib device syz0 with port count 1 [ 123.272381][ T8063] smc: ib device syz0 port 1 has pnetid [ 123.304216][ T54] Bluetooth: hci4: command tx timeout [ 123.338612][ T25] lo speed is unknown, defaulting to 1000 [ 123.340971][ T7820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.369723][ T7820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.389308][ T7820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.402831][ T7820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.413314][ T7820] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.428453][ T7820] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.440951][ T7820] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.452068][ T7820] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.477702][ T8063] lo speed is unknown, defaulting to 1000 [ 123.579044][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.596161][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.636153][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.656523][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.682333][ T8063] lo speed is unknown, defaulting to 1000 [ 123.863333][ T8063] lo speed is unknown, defaulting to 1000 [ 124.018885][ T8063] lo speed is unknown, defaulting to 1000 [ 124.151052][ T8063] lo speed is unknown, defaulting to 1000 [ 124.370357][ T8118] __nla_validate_parse: 4 callbacks suppressed [ 124.370375][ T8118] netlink: 1272 bytes leftover after parsing attributes in process `syz.2.591'. [ 124.523309][ T8129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.595'. [ 124.539165][ T8131] netlink: 32 bytes leftover after parsing attributes in process `syz.2.596'. [ 124.723484][ T1090] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.773307][ T8137] lo speed is unknown, defaulting to 1000 [ 124.774344][ T8145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.600'. [ 124.789940][ T8137] lo speed is unknown, defaulting to 1000 [ 124.816575][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.600'. [ 125.094818][ T8154] netlink: 16 bytes leftover after parsing attributes in process `syz.1.597'. [ 125.143570][ T1090] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.555434][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 125.596530][ T1090] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.608261][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 125.619948][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 125.644911][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 125.662211][ T5845] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 125.674010][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 125.777019][ T8166] openvswitch: netlink: nsh attr 2 has unexpected len 0 expected 16 [ 125.787287][ T8166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.956366][ T1090] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.046743][ T8176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'. [ 126.056197][ T8161] lo speed is unknown, defaulting to 1000 [ 126.068028][ T8176] netlink: 32 bytes leftover after parsing attributes in process `syz.3.607'. [ 126.105735][ T8179] netlink: 1272 bytes leftover after parsing attributes in process `syz.2.608'. [ 126.147298][ T8161] lo speed is unknown, defaulting to 1000 [ 126.147372][ T8177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'. [ 126.184110][ T1090] bridge_slave_1: left allmulticast mode [ 126.205841][ T1090] bridge_slave_1: left promiscuous mode [ 126.224385][ T1090] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.270126][ T1090] bridge_slave_0: left allmulticast mode [ 126.276993][ T1090] bridge_slave_0: left promiscuous mode [ 126.285796][ T1090] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.715521][ T1090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.728979][ T1090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.739300][ T1090] bond0 (unregistering): Released all slaves [ 126.772982][ T8185] lo speed is unknown, defaulting to 1000 [ 126.782965][ T8188] netlink: 'syz.2.611': attribute type 26 has an invalid length. [ 126.863004][ T8185] lo speed is unknown, defaulting to 1000 [ 126.927422][ T8198] No such timeout policy "syz0" [ 127.278647][ T8230] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 127.289386][ T8230] 0ªX¹¦Dö»: entered allmulticast mode [ 127.542184][ T8161] chnl_net:caif_netlink_parms(): no params data found [ 127.646991][ T1090] hsr_slave_0: left promiscuous mode [ 127.654675][ T1090] hsr_slave_1: left promiscuous mode [ 127.660555][ T1090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.668667][ T1090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.678912][ T1090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.686705][ T1090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.719804][ T1090] veth1_macvtap: left promiscuous mode [ 127.725565][ T1090] veth0_macvtap: left promiscuous mode [ 127.732119][ T1090] veth1_vlan: left promiscuous mode [ 127.738047][ T1090] veth0_vlan: left promiscuous mode [ 127.784205][ T54] Bluetooth: hci4: command tx timeout [ 128.179387][ T1090] team0 (unregistering): Port device team_slave_1 removed [ 128.226712][ T1090] team0 (unregistering): Port device team_slave_0 removed [ 128.795603][ T8258] bridge0: entered promiscuous mode [ 128.801182][ T8258] bond2: entered promiscuous mode [ 128.808351][ T8258] macvlan2: entered promiscuous mode [ 128.925347][ T8161] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.934654][ T8161] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.942098][ T8161] bridge_slave_0: entered allmulticast mode [ 128.955046][ T8161] bridge_slave_0: entered promiscuous mode [ 128.973107][ T8161] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.993993][ T8161] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.001252][ T8161] bridge_slave_1: entered allmulticast mode [ 129.025366][ T8161] bridge_slave_1: entered promiscuous mode [ 129.107273][ T8161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.138589][ T8161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.249819][ T8161] team0: Port device team_slave_0 added [ 129.290141][ T8275] smc: removing ib device syz0 [ 129.304512][ T8161] team0: Port device team_slave_1 added [ 129.483675][ T8161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.493852][ T8161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.534070][ T8161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.566816][ T8286] lo speed is unknown, defaulting to 1000 [ 129.568889][ T8161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.580084][ T8161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.611310][ T8161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.678984][ T8284] lo speed is unknown, defaulting to 1000 [ 129.865187][ T54] Bluetooth: hci4: command tx timeout [ 130.054236][ T8161] hsr_slave_0: entered promiscuous mode [ 130.060847][ T8161] hsr_slave_1: entered promiscuous mode [ 130.070712][ T8161] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.079003][ T8161] Cannot create hsr debugfs directory [ 130.349484][ T8299] netlink: 'syz.3.636': attribute type 11 has an invalid length. [ 130.829405][ T8323] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 130.845850][ T8328] __nla_validate_parse: 9 callbacks suppressed [ 130.845869][ T8328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.647'. [ 130.873083][ T8328] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.021469][ T8161] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 131.056412][ T8161] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 131.088166][ T8161] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 131.117092][ T8338] netlink: 20 bytes leftover after parsing attributes in process `syz.0.648'. [ 131.135885][ T8161] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 131.303073][ T8161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.331720][ T8346] Unsupported ieee802154 address type: 0 [ 131.348989][ T8161] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.385952][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.393107][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.406521][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.413664][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.767002][ T8161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.886107][ T8362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.657'. [ 131.944954][ T54] Bluetooth: hci4: command tx timeout [ 131.972832][ T8368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.658'. [ 132.120160][ T8161] veth0_vlan: entered promiscuous mode [ 132.146828][ T8161] veth1_vlan: entered promiscuous mode [ 132.197844][ T8161] veth0_macvtap: entered promiscuous mode [ 132.208893][ T8161] veth1_macvtap: entered promiscuous mode [ 132.265474][ T8161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.278482][ T8161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.292948][ T8161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.313679][ T8161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.349433][ T8161] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.393917][ T8161] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.411581][ T8161] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.421734][ T8161] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.594017][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.601888][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.668702][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.676803][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.180930][ T7930] lo speed is unknown, defaulting to 1000 [ 133.267580][ T8432] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 133.309915][ T8434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.679'. [ 133.369397][ T8436] netlink: 'syz.3.680': attribute type 75 has an invalid length. [ 133.387811][ T8438] netlink: 52 bytes leftover after parsing attributes in process `syz.2.681'. [ 133.441983][ T8440] netlink: 24 bytes leftover after parsing attributes in process `syz.3.682'. [ 133.695473][ T8450] netlink: 84 bytes leftover after parsing attributes in process `syz.1.684'. [ 133.697373][ T8452] netlink: 'syz.3.687': attribute type 29 has an invalid length. [ 133.730123][ T8453] netlink: 'syz.2.686': attribute type 1 has an invalid length. [ 133.734816][ T8452] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 133.769143][ T8453] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.803421][ T8453] macvlan2: entered promiscuous mode [ 133.815907][ T8453] macvlan2: entered allmulticast mode [ 133.826763][ T8453] bond0: entered allmulticast mode [ 133.832228][ T8453] bond0: entered promiscuous mode [ 133.846774][ T8453] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 133.858551][ T8453] bond1: (slave macvlan2): Enslaving as an active interface with a down link [ 133.893189][ T8457] netlink: 'syz.3.687': attribute type 29 has an invalid length. [ 134.081658][ T8457] IPv6: sit1: Disabled Multicast RS [ 134.127800][ T8457] sit1: entered allmulticast mode [ 134.318576][ T8464] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 134.441812][ T7400] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.995406][ T8473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.692'. [ 135.273279][ T8488] netlink: 44 bytes leftover after parsing attributes in process `syz.3.695'. [ 135.461310][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 135.481699][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 135.490079][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 135.501106][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 135.509949][ T5845] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 135.522317][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 135.542328][ T7400] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.568974][ T8508] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 135.652053][ T7400] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.674936][ T8500] lo speed is unknown, defaulting to 1000 [ 135.777280][ T7400] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.942251][ T8500] chnl_net:caif_netlink_parms(): no params data found [ 136.024169][ T7400] bridge_slave_1: left allmulticast mode [ 136.029865][ T7400] bridge_slave_1: left promiscuous mode [ 136.044140][ T7400] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.058687][ T7400] bridge_slave_0: left allmulticast mode [ 136.064636][ T7400] bridge_slave_0: left promiscuous mode [ 136.072538][ T7400] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.617603][ T7400] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.629263][ T7400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.642516][ T7400] bond0 (unregistering): Released all slaves [ 136.659924][ T8538] netlink: 'syz.2.708': attribute type 4 has an invalid length. [ 136.724230][ T8548] lo speed is unknown, defaulting to 1000 [ 136.934943][ T8500] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.945586][ T8500] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.952839][ T8500] bridge_slave_0: entered allmulticast mode [ 136.962465][ T8500] bridge_slave_0: entered promiscuous mode [ 136.982429][ T8556] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 137.015184][ T8500] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.039945][ T8500] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.059951][ T8500] bridge_slave_1: entered allmulticast mode [ 137.080344][ T8500] bridge_slave_1: entered promiscuous mode [ 137.253560][ T8500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.326238][ T8500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.354798][ T8580] netlink: 'syz.1.722': attribute type 10 has an invalid length. [ 137.363956][ T8581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.720'. [ 137.378081][ T8580] team0: Port device bridge0 added [ 137.396091][ T7400] hsr_slave_0: left promiscuous mode [ 137.408970][ T7400] hsr_slave_1: left promiscuous mode [ 137.415041][ T7400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.422512][ T7400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.440094][ T7400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.447739][ T7400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.499377][ T7400] veth1_macvtap: left promiscuous mode [ 137.507028][ T7400] veth0_macvtap: left promiscuous mode [ 137.512663][ T7400] veth1_vlan: left promiscuous mode [ 137.518279][ T7400] veth0_vlan: left promiscuous mode [ 137.631193][ T5845] Bluetooth: hci4: command tx timeout [ 138.443609][ T7400] team0 (unregistering): Port device team_slave_1 removed [ 138.516883][ T7400] team0 (unregistering): Port device team_slave_0 removed [ 139.158710][ T8500] team0: Port device team_slave_0 added [ 139.207433][ T8500] team0: Port device team_slave_1 added [ 139.301400][ T8606] netlink: 144 bytes leftover after parsing attributes in process `syz.0.730'. [ 139.332134][ T8500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.353781][ T8500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.403982][ T8500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.436293][ T8500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.443285][ T8500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.502805][ T8500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.622081][ T8500] hsr_slave_0: entered promiscuous mode [ 139.641810][ T8500] hsr_slave_1: entered promiscuous mode [ 139.659609][ T8500] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.680761][ T8500] Cannot create hsr debugfs directory [ 139.704048][ T5845] Bluetooth: hci4: command tx timeout [ 139.713089][ T8624] wg1 speed is unknown, defaulting to 1000 [ 139.737936][ T8622] lo speed is unknown, defaulting to 1000 [ 139.810573][ T8624] wg1 speed is unknown, defaulting to 1000 [ 139.835057][ T8632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.737'. [ 139.876080][ T8624] wg1 speed is unknown, defaulting to 1000 [ 139.891177][ T8624] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 139.931832][ T8624] wg1 speed is unknown, defaulting to 1000 [ 139.939059][ T8624] wg1 speed is unknown, defaulting to 1000 [ 139.946290][ T8624] wg1 speed is unknown, defaulting to 1000 [ 139.953239][ T8624] wg1 speed is unknown, defaulting to 1000 [ 139.970658][ T8635] netlink: 20 bytes leftover after parsing attributes in process `syz.3.739'. [ 139.977991][ T8624] wg1 speed is unknown, defaulting to 1000 [ 139.983563][ T8635] netlink: 20 bytes leftover after parsing attributes in process `syz.3.739'. [ 140.011521][ T8624] wg1 speed is unknown, defaulting to 1000 [ 140.143804][ T8624] wg1 speed is unknown, defaulting to 1000 [ 140.164286][ T8637] netlink: 260 bytes leftover after parsing attributes in process `syz.3.740'. [ 140.178243][ T8637] netlink: 260 bytes leftover after parsing attributes in process `syz.3.740'. [ 140.200733][ T8638] netlink: 'syz.3.740': attribute type 10 has an invalid length. [ 140.230238][ T8638] team0: Device ipvlan1 failed to register rx_handler [ 140.279732][ T8622] netlink: 28 bytes leftover after parsing attributes in process `syz.1.735'. [ 140.352845][ T8622] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 140.381133][ T8645] raw_sendmsg: syz.3.742 forgot to set AF_INET. Fix it! [ 140.469747][ T8626] lo speed is unknown, defaulting to 1000 [ 140.526416][ T8626] wg1 speed is unknown, defaulting to 1000 [ 140.541952][ T8648] netlink: 1272 bytes leftover after parsing attributes in process `syz.3.743'. [ 140.703300][ T8653] netlink: 40 bytes leftover after parsing attributes in process `syz.3.746'. [ 140.732664][ T8500] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 140.763402][ T8500] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 140.781773][ T8500] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 140.796627][ T8500] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 141.060487][ T8500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.105626][ T8500] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.127615][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.134862][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.169163][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.176379][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.493282][ T8681] netlink: 'syz.1.753': attribute type 10 has an invalid length. [ 141.507773][ T8681] veth0_vlan: left promiscuous mode [ 141.523014][ T8681] veth0_vlan: entered promiscuous mode [ 141.538990][ T8681] team0: Device veth0_vlan failed to register rx_handler [ 141.587637][ T8686] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 141.660968][ T8681] lo speed is unknown, defaulting to 1000 [ 141.685890][ T8681] wg1 speed is unknown, defaulting to 1000 [ 141.738809][ T8693] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 141.750061][ T8693] bond0: left allmulticast mode [ 141.755167][ T8693] bond0: left promiscuous mode [ 141.761469][ T8693] macvlan2: left promiscuous mode [ 141.769538][ T8693] macvlan2: left allmulticast mode [ 141.781482][ T8695] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 141.790840][ T5845] Bluetooth: hci4: command tx timeout [ 141.798535][ T8695] macsec1: entered promiscuous mode [ 141.804375][ T8695] macsec1: entered allmulticast mode [ 141.814100][ T8695] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 141.842949][ T8500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.403350][ T8730] __nla_validate_parse: 4 callbacks suppressed [ 142.403372][ T8730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.764'. [ 142.511216][ T8500] veth0_vlan: entered promiscuous mode [ 142.551369][ T8500] veth1_vlan: entered promiscuous mode [ 142.592541][ T8739] netlink: 'syz.1.767': attribute type 1 has an invalid length. [ 142.616449][ T8500] veth0_macvtap: entered promiscuous mode [ 142.620788][ T8739] netlink: 'syz.1.767': attribute type 2 has an invalid length. [ 142.642417][ T8500] veth1_macvtap: entered promiscuous mode [ 142.662768][ T8741] netlink: 1272 bytes leftover after parsing attributes in process `syz.0.770'. [ 142.700288][ T8500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.734796][ T8743] netlink: 60 bytes leftover after parsing attributes in process `syz.3.771'. [ 142.772156][ T8500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.800303][ T8500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.834858][ T8500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.027569][ T8500] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.041861][ T8500] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.051976][ T8500] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.061158][ T8500] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.482531][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.777'. [ 143.699413][ T2963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.730850][ T2963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.791217][ T8776] netlink: 1272 bytes leftover after parsing attributes in process `syz.3.782'. [ 143.863916][ T5845] Bluetooth: hci4: command tx timeout [ 143.879897][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.913842][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.990712][ T8783] netlink: 60 bytes leftover after parsing attributes in process `syz.3.784'. [ 143.993548][ T8785] netlink: 24 bytes leftover after parsing attributes in process `syz.2.783'. [ 144.339257][ T8789] lo speed is unknown, defaulting to 1000 [ 144.366918][ T8789] wg1 speed is unknown, defaulting to 1000 [ 144.561406][ T8795] mac80211_hwsim hwsim7 wlan0 (unregistering): left allmulticast mode [ 144.586818][ T8800] xt_hashlimit: size too large, truncated to 1048576 [ 144.679026][ T8805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.790'. [ 144.689336][ T8809] netlink: 40 bytes leftover after parsing attributes in process `syz.1.788'. [ 144.696652][ T8808] xt_hashlimit: invalid rate [ 144.715367][ T8805] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 144.884999][ T8793] tun0: tun_chr_ioctl cmd 1074025677 [ 144.894697][ T8793] tun0: linktype set to 776 [ 144.955394][ T8815] netlink: 1296 bytes leftover after parsing attributes in process `syz.2.794'. [ 144.981144][ T8815] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 145.300540][ T8832] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 145.410510][ T6616] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.566453][ T6616] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.637896][ T6616] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.719188][ T6616] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.840657][ T6616] bridge_slave_1: left allmulticast mode [ 145.846366][ T6616] bridge_slave_1: left promiscuous mode [ 145.852034][ T6616] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.860742][ T6616] bridge_slave_0: left allmulticast mode [ 145.866844][ T6616] bridge_slave_0: left promiscuous mode [ 145.872525][ T6616] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.498568][ T6616] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.518995][ T6616] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.532764][ T6616] bond0 (unregistering): Released all slaves [ 146.604642][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 146.621069][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 146.649633][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 146.670353][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 146.680999][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 146.689867][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 146.740203][ T8866] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 146.852893][ T8863] lo speed is unknown, defaulting to 1000 [ 146.932049][ T8863] wg1 speed is unknown, defaulting to 1000 [ 147.028935][ T6616] hsr_slave_0: left promiscuous mode [ 147.038484][ T6616] hsr_slave_1: left promiscuous mode [ 147.050156][ T6616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.083022][ T6616] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.107696][ T6616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.124948][ T6616] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.206109][ T6616] veth1_macvtap: left promiscuous mode [ 147.218582][ T6616] veth0_macvtap: left promiscuous mode [ 147.244021][ T6616] veth1_vlan: left promiscuous mode [ 147.252876][ T6616] veth0_vlan: left promiscuous mode [ 147.883622][ T6616] team0 (unregistering): Port device team_slave_1 removed [ 147.928491][ T6616] team0 (unregistering): Port device team_slave_0 removed [ 148.367829][ T8883] bond2: left allmulticast mode [ 148.373393][ T8883] bond2: left promiscuous mode [ 148.379495][ T8883] bridge0: port 1(bond2) entered disabled state [ 148.491908][ T8872] lo speed is unknown, defaulting to 1000 [ 148.527082][ T8872] wg1 speed is unknown, defaulting to 1000 [ 148.717136][ T8912] __nla_validate_parse: 10 callbacks suppressed [ 148.717155][ T8912] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.821'. [ 148.750408][ T5845] Bluetooth: hci4: command tx timeout [ 148.778727][ T8914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.826407][ T8909] netlink: 52 bytes leftover after parsing attributes in process `syz.0.819'. [ 148.854835][ T8863] chnl_net:caif_netlink_parms(): no params data found [ 148.962880][ T8922] netlink: 1272 bytes leftover after parsing attributes in process `syz.1.823'. [ 148.977261][ T8922] openvswitch: netlink: Message has 8 unknown bytes. [ 148.987351][ T8924] netlink: 64 bytes leftover after parsing attributes in process `syz.2.822'. [ 149.198199][ T8927] lo speed is unknown, defaulting to 1000 [ 149.204267][ T8863] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.211470][ T8863] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.224653][ T8863] bridge_slave_0: entered allmulticast mode [ 149.235589][ T8863] bridge_slave_0: entered promiscuous mode [ 149.330974][ T8863] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.343210][ T8863] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.362574][ T8863] bridge_slave_1: entered allmulticast mode [ 149.384313][ T8863] bridge_slave_1: entered promiscuous mode [ 149.487638][ T8927] wg1 speed is unknown, defaulting to 1000 [ 149.527469][ T8863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.570038][ T8932] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 149.577375][ T8932] IPv6: NLM_F_CREATE should be set when creating new route [ 149.640919][ T8863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.683026][ T8954] netlink: 1272 bytes leftover after parsing attributes in process `syz.2.832'. [ 149.768345][ T8959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.831'. [ 149.778014][ T8959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.831'. [ 149.901483][ T8863] team0: Port device team_slave_0 added [ 149.920978][ T8863] team0: Port device team_slave_1 added [ 150.064183][ T8973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.836'. [ 150.097182][ T8863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.110866][ T8863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.138135][ T8863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.163218][ T8863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.200732][ T8863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.254266][ T8863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.358651][ T8863] hsr_slave_0: entered promiscuous mode [ 150.373038][ T8863] hsr_slave_1: entered promiscuous mode [ 150.386487][ T8863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.417791][ T8863] Cannot create hsr debugfs directory [ 150.533554][ T8985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.837'. [ 150.563653][ T8991] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.656641][ T8991] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.733032][ T8991] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.824037][ T5845] Bluetooth: hci4: command tx timeout [ 150.854098][ T8997] netlink: 44 bytes leftover after parsing attributes in process `syz.1.843'. [ 150.879616][ T8991] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.062648][ T8991] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.148289][ T8991] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.195130][ T8991] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.240329][ T8991] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.302563][ T8994] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.413899][ T8994] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.532101][ T8863] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 151.572672][ T8994] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.601651][ T8863] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 151.615860][ T8863] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 151.640435][ T9030] macsec2: entered promiscuous mode [ 151.656223][ T9030] vlan0: entered promiscuous mode [ 151.661430][ T9030] macsec2: entered allmulticast mode [ 151.669344][ T9030] vlan0: entered allmulticast mode [ 151.686251][ T9030] vlan0: left allmulticast mode [ 151.691359][ T9030] vlan0: left promiscuous mode [ 151.721471][ T9026] lo speed is unknown, defaulting to 1000 [ 151.729026][ T8863] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 151.748867][ T8994] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.771905][ T9026] wg1 speed is unknown, defaulting to 1000 [ 151.911780][ T8863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.934745][ T8863] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.959278][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.966464][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.992198][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.999442][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.218217][ T8863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.605486][ T8863] veth0_vlan: entered promiscuous mode [ 152.668379][ T8863] veth1_vlan: entered promiscuous mode [ 152.696486][ T9074] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.737042][ T8863] veth0_macvtap: entered promiscuous mode [ 152.775815][ T8863] veth1_macvtap: entered promiscuous mode [ 152.802858][ T8863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.866730][ T8863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.904880][ T5845] Bluetooth: hci4: command tx timeout [ 152.912551][ T8863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.939472][ T8863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.177121][ T9089] lo speed is unknown, defaulting to 1000 [ 153.184426][ T8863] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.193181][ T8863] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.224236][ T8863] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.232989][ T8863] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.260644][ T9089] wg1 speed is unknown, defaulting to 1000 [ 153.510320][ T2963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.548747][ T2963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.717716][ T7400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.733334][ T7400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.936317][ T9123] __nla_validate_parse: 7 callbacks suppressed [ 153.936337][ T9123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.865'. [ 154.004609][ T9127] netlink: 1272 bytes leftover after parsing attributes in process `syz.3.866'. [ 154.052303][ T9127] openvswitch: netlink: EtherType 500 is less than min 600 [ 154.060026][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.864'. [ 154.077127][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.864'. [ 154.138343][ T9129] unsupported nla_type 33050 [ 154.305998][ T8223] IPVS: starting estimator thread 0... [ 154.324536][ T9139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.871'. [ 154.339515][ T9141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.871'. [ 154.340479][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.871'. [ 154.393883][ T9140] IPVS: using max 24 ests per chain, 57600 per kthread [ 154.464148][ T9151] netlink: 28 bytes leftover after parsing attributes in process `syz.3.874'. [ 154.473306][ T9151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.874'. [ 154.484389][ T9151] bridge0: port 3(syz_tun) entered blocking state [ 154.491585][ T9151] bridge0: port 3(syz_tun) entered disabled state [ 154.498850][ T9151] syz_tun: entered allmulticast mode [ 154.506725][ T9151] syz_tun: entered promiscuous mode [ 154.514627][ T9151] bridge0: port 3(syz_tun) entered blocking state [ 154.521639][ T9151] bridge0: port 3(syz_tun) entered forwarding state [ 154.535227][ T9151] nbd: must specify a size in bytes for the device [ 154.568140][ T9154] netlink: 24 bytes leftover after parsing attributes in process `syz.2.875'. [ 154.677016][ T8994] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.691115][ T8994] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.705484][ T8994] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.719230][ T8994] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.828223][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.461306][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.677323][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.824039][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.980875][ T35] bridge_slave_1: left allmulticast mode [ 155.997235][ T35] bridge_slave_1: left promiscuous mode [ 156.015104][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.028078][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 156.040331][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 156.050198][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 156.050684][ T35] bridge_slave_0: left allmulticast mode [ 156.069033][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 156.073468][ T35] bridge_slave_0: left promiscuous mode [ 156.082788][ T5837] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 156.083429][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.099038][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 156.233382][ T9197] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 156.346557][ T5837] Bluetooth: hci3: command 0x0405 tx timeout [ 156.397158][ T9174] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 156.405801][ T9203] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 156.793472][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.809265][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.830968][ T35] bond0 (unregistering): Released all slaves [ 156.864739][ T9194] pim6reg1: entered promiscuous mode [ 156.871146][ T9194] pim6reg1: entered allmulticast mode [ 157.162871][ T9187] lo speed is unknown, defaulting to 1000 [ 157.266800][ T9187] wg1 speed is unknown, defaulting to 1000 [ 157.271528][ T9238] lo speed is unknown, defaulting to 1000 [ 157.288770][ T9238] wg1 speed is unknown, defaulting to 1000 [ 157.412241][ T35] hsr_slave_0: left promiscuous mode [ 157.426372][ T35] hsr_slave_1: left promiscuous mode [ 157.439162][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.451550][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.463223][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.480562][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.492959][ T9255] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 157.511128][ T35] veth1_macvtap: left promiscuous mode [ 157.517448][ T35] veth0_macvtap: left promiscuous mode [ 157.523267][ T35] veth1_vlan: left promiscuous mode [ 157.529095][ T35] veth0_vlan: left promiscuous mode [ 157.624223][ T54] Bluetooth: hci0: command 0x0401 tx timeout [ 158.009923][ T35] team0 (unregistering): Port device team_slave_1 removed [ 158.086266][ T35] team0 (unregistering): Port device team_slave_0 removed [ 158.184226][ T54] Bluetooth: hci4: command tx timeout [ 158.545589][ T9257] vxcan1: entered allmulticast mode [ 158.787095][ T9283] openvswitch: netlink: Flow key attr not present in new flow. [ 158.942180][ T9187] chnl_net:caif_netlink_parms(): no params data found [ 159.225442][ T9304] netlink: 'syz.0.911': attribute type 11 has an invalid length. [ 159.282904][ T9306] IPv6: syztnl1: Disabled Multicast RS [ 159.311689][ T9187] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.331780][ T9187] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.351876][ T9187] bridge_slave_0: entered allmulticast mode [ 159.372973][ T9187] bridge_slave_0: entered promiscuous mode [ 159.403246][ T9187] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.426352][ T9187] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.442512][ T9187] bridge_slave_1: entered allmulticast mode [ 159.452590][ T9187] bridge_slave_1: entered promiscuous mode [ 159.538639][ T9187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.558687][ T9187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.712573][ T9187] team0: Port device team_slave_0 added [ 159.777830][ T9187] team0: Port device team_slave_1 added [ 159.790156][ T9325] __nla_validate_parse: 7 callbacks suppressed [ 159.790168][ T9325] netlink: 56 bytes leftover after parsing attributes in process `syz.3.916'. [ 159.917583][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.919'. [ 159.927142][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.919'. [ 159.970564][ T9187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.000017][ T9187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.005587][ T9333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.920'. [ 160.041823][ T9187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.135304][ T9187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.148744][ T9187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.179665][ T9187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.268387][ T54] Bluetooth: hci4: command tx timeout [ 160.299858][ T9187] hsr_slave_0: entered promiscuous mode [ 160.310255][ T9187] hsr_slave_1: entered promiscuous mode [ 160.317872][ T9187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.329805][ T9187] Cannot create hsr debugfs directory [ 160.359041][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.925'. [ 160.387814][ T9348] netlink: 32 bytes leftover after parsing attributes in process `syz.3.925'. [ 160.397151][ T9349] netlink: 240 bytes leftover after parsing attributes in process `syz.2.923'. [ 160.420526][ T9345] lo speed is unknown, defaulting to 1000 [ 160.488210][ T9352] rose1: entered allmulticast mode [ 160.512724][ T9345] wg1 speed is unknown, defaulting to 1000 [ 160.713144][ T9365] netlink: 30 bytes leftover after parsing attributes in process `syz.0.930'. [ 161.082720][ T9187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 161.175333][ T9187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 161.211504][ T9187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 161.249882][ T9187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 161.316097][ T9389] netlink: 'syz.3.937': attribute type 10 has an invalid length. [ 161.367227][ T9389] bridge0: port 3(syz_tun) entered disabled state [ 161.393525][ T9389] syz_tun: left allmulticast mode [ 161.412414][ T9389] bridge0: port 3(syz_tun) entered disabled state [ 161.428874][ T9389] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 161.528939][ T9187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.589169][ T9187] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.598742][ T9396] netlink: 'syz.3.939': attribute type 1 has an invalid length. [ 161.617946][ T2992] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.625167][ T2992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.636968][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.644203][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.668486][ T9398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.938'. [ 162.344482][ T54] Bluetooth: hci4: command tx timeout [ 162.558431][ T9431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.944'. [ 162.572725][ T9187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.970819][ T9187] veth0_vlan: entered promiscuous mode [ 162.991538][ T9460] netlink: 'syz.1.952': attribute type 30 has an invalid length. [ 162.996214][ T9187] veth1_vlan: entered promiscuous mode [ 163.009013][ T9456] lo speed is unknown, defaulting to 1000 [ 163.055352][ T9456] wg1 speed is unknown, defaulting to 1000 [ 163.055784][ T9187] veth0_macvtap: entered promiscuous mode [ 163.096871][ T9187] veth1_macvtap: entered promiscuous mode [ 163.235677][ T9461] lo speed is unknown, defaulting to 1000 [ 163.242773][ T9187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.326914][ T9461] wg1 speed is unknown, defaulting to 1000 [ 163.327615][ T9187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.354963][ T9187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.394910][ T9187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.432471][ T9480] netlink: 'syz.1.955': attribute type 29 has an invalid length. [ 163.480557][ T9187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.513305][ T9187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.554030][ T9187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.574062][ T9187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.622117][ T9488] netlink: 'syz.1.955': attribute type 29 has an invalid length. [ 163.659712][ T9488] netlink: 'syz.1.955': attribute type 29 has an invalid length. [ 163.674126][ T9488] netlink: 'syz.1.955': attribute type 29 has an invalid length. [ 163.702036][ T9488] netlink: 'syz.1.955': attribute type 29 has an invalid length. [ 163.768327][ T9488] netlink: 'syz.1.955': attribute type 29 has an invalid length. [ 163.859063][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.895599][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.921369][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.954766][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.008710][ T9503] lo speed is unknown, defaulting to 1000 [ 164.054329][ T9503] wg1 speed is unknown, defaulting to 1000 [ 164.792364][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.000417][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.250092][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.317369][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.424257][ T52] bridge_slave_1: left allmulticast mode [ 165.430477][ T52] bridge_slave_1: left promiscuous mode [ 165.436327][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.448564][ T52] bridge_slave_0: left allmulticast mode [ 165.454680][ T52] bridge_slave_0: left promiscuous mode [ 165.460634][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.641457][ T9533] __nla_validate_parse: 1 callbacks suppressed [ 165.641476][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.970'. [ 165.973439][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 165.985315][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 165.996036][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 166.008694][ T9546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.974'. [ 166.020843][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 166.032506][ T5845] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 166.041385][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 166.238421][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.249640][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.259712][ T52] bond0 (unregistering): Released all slaves [ 166.271157][ T9534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.968'. [ 166.281800][ T9541] syzkaller0: Caught tx_queue_len zero misconfig [ 166.424117][ T5837] Bluetooth: hci3: command 0x0405 tx timeout [ 166.609574][ T9547] lo speed is unknown, defaulting to 1000 [ 166.632760][ T9547] wg1 speed is unknown, defaulting to 1000 [ 166.639944][ T9572] validate_nla: 20 callbacks suppressed [ 166.639960][ T9572] netlink: 'syz.1.978': attribute type 9 has an invalid length. [ 166.665359][ T9572] netlink: 'syz.1.978': attribute type 6 has an invalid length. [ 166.705434][ T9571] netlink: 'syz.3.981': attribute type 10 has an invalid length. [ 166.713235][ T9571] netlink: 2 bytes leftover after parsing attributes in process `syz.3.981'. [ 166.793426][ T9571] team0: entered promiscuous mode [ 166.799402][ T9571] team_slave_0: entered promiscuous mode [ 166.806120][ T9571] team_slave_1: entered promiscuous mode [ 166.812005][ T9571] bridge0: port 3(team0) entered blocking state [ 166.818564][ T9571] bridge0: port 3(team0) entered disabled state [ 166.826982][ T9571] team0: entered allmulticast mode [ 166.832137][ T9571] team_slave_0: entered allmulticast mode [ 166.838266][ T9571] team_slave_1: entered allmulticast mode [ 166.848091][ T9571] bridge0: port 3(team0) entered blocking state [ 166.854933][ T9571] bridge0: port 3(team0) entered forwarding state [ 166.875498][ T9571] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.981'. [ 166.921839][ T52] hsr_slave_0: left promiscuous mode [ 166.929134][ T52] hsr_slave_1: left promiscuous mode [ 166.941535][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.949923][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.960238][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.968424][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.990237][ T52] veth1_macvtap: left promiscuous mode [ 166.996843][ T52] veth0_macvtap: left promiscuous mode [ 167.002909][ T52] veth1_vlan: left promiscuous mode [ 167.009535][ T52] veth0_vlan: left promiscuous mode [ 167.484988][ T52] team0 (unregistering): Port device team_slave_1 removed [ 167.537241][ T52] team0 (unregistering): Port device team_slave_0 removed [ 168.110747][ T54] Bluetooth: hci4: command tx timeout [ 168.422185][ T9547] chnl_net:caif_netlink_parms(): no params data found [ 168.648566][ T9646] netlink: 'syz.3.999': attribute type 2 has an invalid length. [ 168.658507][ T9646] netlink: 'syz.3.999': attribute type 2 has an invalid length. [ 168.670665][ T9547] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.674324][ T9646] netlink: 'syz.3.999': attribute type 2 has an invalid length. [ 168.686337][ T9646] netlink: 'syz.3.999': attribute type 2 has an invalid length. [ 168.694409][ T9646] netlink: 'syz.3.999': attribute type 2 has an invalid length. [ 168.707491][ T9547] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.725759][ T9547] bridge_slave_0: entered allmulticast mode [ 168.741975][ T9547] bridge_slave_0: entered promiscuous mode [ 168.773140][ T9547] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.786998][ T9547] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.796685][ T9547] bridge_slave_1: entered allmulticast mode [ 168.804077][ T9547] bridge_slave_1: entered promiscuous mode [ 168.811842][ T9651] sit0: entered promiscuous mode [ 168.829682][ T9651] netlink: 'syz.1.1000': attribute type 1 has an invalid length. [ 168.856804][ T9651] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1000'. [ 168.908211][ T9651] netlink: 1272 bytes leftover after parsing attributes in process `syz.1.1000'. [ 168.953498][ T9547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.975947][ T9547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.060846][ T9547] team0: Port device team_slave_0 added [ 169.081249][ T9547] team0: Port device team_slave_1 added [ 169.147484][ T9547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.162415][ T9547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.226572][ T9547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.275886][ T9547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.283041][ T9547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.356415][ T9547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.488859][ T9547] hsr_slave_0: entered promiscuous mode [ 169.499394][ T9667] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 169.514419][ T9547] hsr_slave_1: entered promiscuous mode [ 169.525223][ T9547] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.551271][ T9547] Cannot create hsr debugfs directory [ 169.596429][ T9671] x_tables: duplicate underflow at hook 1 [ 169.628734][ T9675] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.1009'. [ 169.641831][ T9675] openvswitch: netlink: Flow actions attr not present in new flow. [ 169.799724][ T9683] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.1012'. [ 169.917488][ T9693] netlink: 'syz.2.1015': attribute type 23 has an invalid length. [ 169.947800][ T9695] dccp_invalid_packet: P.Data Offset(0) too small [ 170.081604][ T9706] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 170.185138][ T5837] Bluetooth: hci4: command tx timeout [ 170.225651][ T9712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1022'. [ 170.238017][ T9712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.351272][ T9547] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 170.362499][ T9547] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 170.378598][ T9547] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 170.388878][ T9547] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 170.560109][ T9723] lo speed is unknown, defaulting to 1000 [ 170.591903][ T9547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.599488][ T9722] unsupported nlmsg_type 40 [ 170.611198][ T9723] wg1 speed is unknown, defaulting to 1000 [ 170.637559][ T9547] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.676949][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.684153][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.724934][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.732153][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.764857][ T9730] __nla_validate_parse: 2 callbacks suppressed [ 170.764873][ T9730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1026'. [ 170.909616][ T9743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1029'. [ 171.028808][ T9748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1031'. [ 171.053508][ T9748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1031'. [ 171.161582][ T9750] bond1: (slave ip6gretap1): Releasing backup interface [ 171.292837][ T9547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.451080][ T9768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1038'. [ 171.466368][ T9772] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1039'. [ 171.566122][ T5926] IPVS: starting estimator thread 0... [ 171.573266][ T9770] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 171.684065][ T9775] IPVS: using max 38 ests per chain, 91200 per kthread [ 171.747786][ T9547] veth0_vlan: entered promiscuous mode [ 171.779907][ T9547] veth1_vlan: entered promiscuous mode [ 171.792768][ T9787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1044'. [ 171.815230][ T9787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1044'. [ 171.835109][ T9789] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1045'. [ 171.848300][ T9547] veth0_macvtap: entered promiscuous mode [ 171.857809][ T9789] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1045'. [ 171.860926][ T9547] veth1_macvtap: entered promiscuous mode [ 171.896215][ T9789] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 171.910587][ T9789] erspan0: entered promiscuous mode [ 171.917290][ T9789] hsr1: Slave A (wlan1) is not up; please bring it up to get a fully working HSR network [ 171.931839][ T9789] hsr1: Slave B (erspan0) is not up; please bring it up to get a fully working HSR network [ 171.990432][ T9547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.030334][ T9547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.058514][ T9547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.101070][ T9547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.142142][ T9547] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.165702][ T9547] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.189320][ T9547] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.211905][ T9547] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.274201][ T5837] Bluetooth: hci4: command 0x040f tx timeout [ 172.395896][ T2992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.404109][ T2992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.462551][ T2992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.480676][ T2992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.928283][ T9830] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 172.946157][ T9830] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 172.965042][ T9830] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 172.986094][ T9830] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 172.997610][ T9830] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 173.008165][ T9830] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 173.035150][ T9830] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 173.079276][ T9830] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 173.120127][ T9830] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 173.141311][ T9830] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 173.510803][ T9862] x_tables: duplicate underflow at hook 2 [ 173.639379][ T1090] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.974884][ T1090] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.157859][ T1090] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.237510][ T1090] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.338028][ T1090] bridge_slave_1: left allmulticast mode [ 174.343680][ T1090] bridge_slave_1: left promiscuous mode [ 174.349781][ T1090] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.359622][ T1090] bridge_slave_0: left allmulticast mode [ 174.365503][ T1090] bridge_slave_0: left promiscuous mode [ 174.371846][ T1090] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.051248][ T1090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.065717][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 175.073934][ T1090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.088780][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 175.090465][ T1090] bond0 (unregistering): Released all slaves [ 175.102350][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 175.110572][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 175.120882][ T5837] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 175.128365][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 175.225429][ T9896] lo speed is unknown, defaulting to 1000 [ 175.232947][ T9896] wg1 speed is unknown, defaulting to 1000 [ 175.498111][ T9902] lo speed is unknown, defaulting to 1000 [ 175.589944][ T9902] wg1 speed is unknown, defaulting to 1000 [ 175.682090][ T1090] hsr_slave_0: left promiscuous mode [ 175.688088][ T1090] hsr_slave_1: left promiscuous mode [ 175.694090][ T1090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.701625][ T1090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.712816][ T1090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.720329][ T1090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.741764][ T1090] veth1_macvtap: left promiscuous mode [ 175.747829][ T1090] veth0_macvtap: left promiscuous mode [ 175.753402][ T1090] veth1_vlan: left promiscuous mode [ 175.758783][ T1090] veth0_vlan: left promiscuous mode [ 176.150369][ T1090] team0 (unregistering): Port device team_slave_1 removed [ 176.197080][ T1090] team0 (unregistering): Port device team_slave_0 removed [ 176.572951][ T9896] chnl_net:caif_netlink_parms(): no params data found [ 176.680464][ T9896] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.687721][ T9896] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.695408][ T9896] bridge_slave_0: entered allmulticast mode [ 176.706650][ T9896] bridge_slave_0: entered promiscuous mode [ 176.717213][ T9896] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.725673][ T9896] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.732899][ T9896] bridge_slave_1: entered allmulticast mode [ 176.740293][ T9896] bridge_slave_1: entered promiscuous mode [ 176.775756][ T9896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.798886][ T9896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.838832][ T9896] team0: Port device team_slave_0 added [ 176.865988][ T9896] team0: Port device team_slave_1 added [ 176.933948][ T9932] __nla_validate_parse: 2 callbacks suppressed [ 176.933965][ T9932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1083'. [ 176.974970][ T9896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.995303][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1085'. [ 177.001516][ T9896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.022607][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1085'. [ 177.079306][ T9896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.119807][ T9896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.128098][ T9940] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1087'. [ 177.147737][ T9896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.204446][ T9896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.224410][ T5837] Bluetooth: hci4: command tx timeout [ 177.394954][ T9896] hsr_slave_0: entered promiscuous mode [ 177.401430][ T9896] hsr_slave_1: entered promiscuous mode [ 177.410106][ T9956] validate_nla: 2 callbacks suppressed [ 177.410122][ T9956] netlink: 'syz.2.1092': attribute type 10 has an invalid length. [ 177.417628][ T9896] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.451431][ T9896] Cannot create hsr debugfs directory [ 177.462050][ T9959] lo speed is unknown, defaulting to 1000 [ 177.528594][ T9959] wg1 speed is unknown, defaulting to 1000 [ 177.937452][ T9984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1098'. [ 177.979295][ T9984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1098'. [ 178.327228][T10002] bond4: entered promiscuous mode [ 178.334158][T10002] bond4: entered allmulticast mode [ 178.339605][T10002] 8021q: adding VLAN 0 to HW filter on device bond4 [ 178.448602][T10005] lo speed is unknown, defaulting to 1000 [ 178.490218][T10005] wg1 speed is unknown, defaulting to 1000 [ 178.538871][ T9896] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 178.560358][T10010] lo speed is unknown, defaulting to 1000 [ 178.560719][ T9896] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 178.613258][ T9896] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 178.659742][T10010] wg1 speed is unknown, defaulting to 1000 [ 178.701056][ T9896] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 178.787852][T10021] lo speed is unknown, defaulting to 1000 [ 178.861913][T10028] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1106'. [ 178.868414][T10021] wg1 speed is unknown, defaulting to 1000 [ 179.042463][T10032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1108'. [ 179.065530][T10032] netlink: 'syz.1.1108': attribute type 7 has an invalid length. [ 179.093921][T10034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1110'. [ 179.123882][T10034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1110'. [ 179.191494][ T9896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.287705][ T9896] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.305080][ T5147] Bluetooth: hci4: command tx timeout [ 179.318497][ T7400] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.325685][ T7400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.380598][T10044] set match dimension is over the limit! [ 179.387670][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.395104][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.448560][T10041] gtp0: entered promiscuous mode [ 179.461072][T10041] gtp0: entered allmulticast mode [ 180.109830][ T9896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.127744][T10080] netlink: 'syz.0.1120': attribute type 1 has an invalid length. [ 180.369880][T10096] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 180.378661][T10096] CPU: 0 UID: 0 PID: 10096 Comm: syz.0.1125 Not tainted 6.14.0-rc4-syzkaller-00873-g3424291dd242 #0 [ 180.378688][T10096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 180.378699][T10096] Call Trace: [ 180.378705][T10096] [ 180.378713][T10096] dump_stack_lvl+0x241/0x360 [ 180.378751][T10096] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.378780][T10096] ? __pfx__printk+0x10/0x10 [ 180.378802][T10096] ? __kmalloc_cache_noprof+0x243/0x390 [ 180.378823][T10096] ? sysfs_warn_dup+0x51/0xa0 [ 180.378846][T10096] sysfs_warn_dup+0x8e/0xa0 [ 180.378863][T10096] sysfs_do_create_link_sd+0xbe/0x110 [ 180.378884][T10096] device_add_class_symlinks+0x1c5/0x250 [ 180.378911][T10096] device_add+0x553/0xbf0 [ 180.378941][T10096] wiphy_register+0x1922/0x2650 [ 180.378972][T10096] ? __pfx_wiphy_register+0x10/0x10 [ 180.378987][T10096] ? minstrel_ht_alloc+0x84b/0x940 [ 180.379013][T10096] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 180.379036][T10096] ieee80211_register_hw+0x35d9/0x42e0 [ 180.379070][T10096] ? ieee80211_register_hw+0x15f1/0x42e0 [ 180.379099][T10096] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 180.379129][T10096] ? __asan_memset+0x23/0x50 [ 180.379146][T10096] ? __hrtimer_init+0x170/0x250 [ 180.379169][T10096] mac80211_hwsim_new_radio+0x2ae8/0x4a40 [ 180.379220][T10096] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 180.379240][T10096] ? trace_kmalloc+0x1f/0xd0 [ 180.379259][T10096] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 180.379283][T10096] ? kstrndup+0xbb/0x150 [ 180.379316][T10096] hwsim_new_radio_nl+0xece/0x2290 [ 180.379350][T10096] ? __pfx___nla_validate_parse+0x10/0x10 [ 180.379372][T10096] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 180.379426][T10096] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 180.379460][T10096] genl_rcv_msg+0xb1f/0xec0 [ 180.379493][T10096] ? __pfx_genl_rcv_msg+0x10/0x10 [ 180.379546][T10096] ? __pfx_lock_acquire+0x10/0x10 [ 180.379570][T10096] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 180.379590][T10096] ? __pfx___might_resched+0x10/0x10 [ 180.379623][T10096] netlink_rcv_skb+0x206/0x480 [ 180.379644][T10096] ? __pfx_genl_rcv_msg+0x10/0x10 [ 180.379669][T10096] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 180.379716][T10096] genl_rcv+0x28/0x40 [ 180.379736][T10096] netlink_unicast+0x7f6/0x990 [ 180.379768][T10096] ? __pfx_netlink_unicast+0x10/0x10 [ 180.379784][T10096] ? __virt_addr_valid+0x45f/0x530 [ 180.379801][T10096] ? __phys_addr_symbol+0x2f/0x70 [ 180.379826][T10096] ? __check_object_size+0x47a/0x730 [ 180.379851][T10096] netlink_sendmsg+0x8de/0xcb0 [ 180.379881][T10096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.379905][T10096] ? aa_sock_msg_perm+0x91/0x160 [ 180.379933][T10096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.379950][T10096] __sock_sendmsg+0x221/0x270 [ 180.379973][T10096] ____sys_sendmsg+0x53a/0x860 [ 180.380004][T10096] ? __pfx_____sys_sendmsg+0x10/0x10 [ 180.380026][T10096] ? __fget_files+0x2a/0x410 [ 180.380051][T10096] ? __fget_files+0x2a/0x410 [ 180.380082][T10096] __sys_sendmsg+0x269/0x350 [ 180.380104][T10096] ? __pfx_futex_wake+0x10/0x10 [ 180.380131][T10096] ? __pfx___sys_sendmsg+0x10/0x10 [ 180.380196][T10096] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 180.380222][T10096] ? do_syscall_64+0x100/0x230 [ 180.380250][T10096] ? do_syscall_64+0xb6/0x230 [ 180.380275][T10096] do_syscall_64+0xf3/0x230 [ 180.380298][T10096] ? clear_bhb_loop+0x35/0x90 [ 180.380321][T10096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.380342][T10096] RIP: 0033:0x7f2eb658d169 [ 180.380367][T10096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.380383][T10096] RSP: 002b:00007f2eb7355038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.380409][T10096] RAX: ffffffffffffffda RBX: 00007f2eb67a5fa0 RCX: 00007f2eb658d169 [ 180.380420][T10096] RDX: 0000000000004804 RSI: 0000400000000100 RDI: 000000000000000a [ 180.380427][T10096] RBP: 00007f2eb660e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 180.380433][T10096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.380440][T10096] R13: 0000000000000000 R14: 00007f2eb67a5fa0 R15: 00007fffb9c77c08 [ 180.380456][T10096] [ 180.950613][ T9896] veth0_vlan: entered promiscuous mode [ 180.998169][ T9896] veth1_vlan: entered promiscuous mode [ 181.135531][ T9896] veth0_macvtap: entered promiscuous mode [ 181.144854][ T9896] veth1_macvtap: entered promiscuous mode [ 181.160855][ T9896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.170456][ T9896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.181136][ T9896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.192168][ T9896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.205239][ T9896] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.214488][ T9896] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.226127][ T5147] Bluetooth: hci0: command 0x0401 tx timeout [ 181.237349][ T9896] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.246415][ T5147] Bluetooth: hci1: command 0x0406 tx timeout [ 181.246706][ T9896] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.253391][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 181.393896][ T5845] Bluetooth: hci4: command tx timeout [ 181.473831][ T7404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.506671][ T7404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.563985][T10016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.580982][T10136] vlan4: entered allmulticast mode [ 181.594900][T10016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.609972][T10136] veth0_to_batadv: entered allmulticast mode [ 182.548205][T10198] __nla_validate_parse: 11 callbacks suppressed [ 182.548227][T10198] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1146'. [ 182.630673][T10198] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1146'. [ 182.672706][T10198] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1146'. [ 182.682425][T10198] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1146'. [ 182.821257][T10207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1150'. [ 182.828409][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.911839][T10203] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1150'. [ 182.928070][T10203] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1150'. [ 183.098373][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.329800][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.498571][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.590712][ T35] bridge_slave_1: left allmulticast mode [ 183.597696][ T35] bridge_slave_1: left promiscuous mode [ 183.603412][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.617250][ T35] bridge_slave_0: left allmulticast mode [ 183.623179][ T35] bridge_slave_0: left promiscuous mode [ 183.629381][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.960278][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.971592][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.981981][ T35] bond0 (unregistering): Released all slaves [ 184.166390][T10222] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 184.309333][T10223] lo speed is unknown, defaulting to 1000 [ 184.331737][T10231] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1157'. [ 184.350732][T10231] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1157'. [ 184.362432][T10222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1154'. [ 184.407919][T10223] wg1 speed is unknown, defaulting to 1000 [ 184.542266][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 184.555001][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 184.565426][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 184.576842][ T35] hsr_slave_0: left promiscuous mode [ 184.583156][ T35] hsr_slave_1: left promiscuous mode [ 184.590431][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 184.597182][T10241] nbd: must specify at least one socket [ 184.601136][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.612321][ T5837] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 184.620093][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.628784][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 184.651864][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.669878][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.712150][ T35] veth1_macvtap: left promiscuous mode [ 184.717835][ T35] veth0_macvtap: left promiscuous mode [ 184.723459][ T35] veth1_vlan: left promiscuous mode [ 184.729588][ T35] veth0_vlan: left promiscuous mode [ 185.406271][ T35] team0 (unregistering): Port device team_slave_1 removed [ 185.453687][ T35] team0 (unregistering): Port device team_slave_0 removed [ 185.914126][T10263] vlan3: entered allmulticast mode [ 185.926300][T10263] veth0_to_batadv: entered allmulticast mode [ 186.013068][T10237] lo speed is unknown, defaulting to 1000 [ 186.027476][T10237] wg1 speed is unknown, defaulting to 1000 [ 186.235901][T10237] chnl_net:caif_netlink_parms(): no params data found [ 186.378968][T10283] sctp: [Deprecated]: syz.1.1165 (pid 10283) Use of struct sctp_assoc_value in delayed_ack socket option. [ 186.378968][T10283] Use struct sctp_sack_info instead [ 186.597777][T10237] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.609787][T10237] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.618221][T10237] bridge_slave_0: entered allmulticast mode [ 186.626169][T10237] bridge_slave_0: entered promiscuous mode [ 186.639807][T10237] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.647445][T10237] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.655606][T10237] bridge_slave_1: entered allmulticast mode [ 186.671752][T10237] bridge_slave_1: entered promiscuous mode [ 186.674193][ T5837] Bluetooth: hci4: command tx timeout [ 186.816087][T10310] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20004 [ 186.884641][T10300] bond1: (slave macvlan2): Releasing active interface [ 186.914541][T10300] bond0 (unregistering): Released all slaves [ 187.051549][T10237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.093171][T10237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.115778][T10314] lo speed is unknown, defaulting to 1000 [ 187.173020][T10237] team0: Port device team_slave_0 added [ 187.196578][T10237] team0: Port device team_slave_1 added [ 187.202473][T10314] wg1 speed is unknown, defaulting to 1000 [ 187.325540][T10237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.332542][T10237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.407627][T10237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.488727][T10332] nbd: device at index 3 is going down [ 187.519063][T10237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.530708][T10237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.564589][T10334] __nla_validate_parse: 7 callbacks suppressed [ 187.564606][T10334] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1182'. [ 187.589091][T10237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.600399][T10334] netlink: 'syz.1.1182': attribute type 1 has an invalid length. [ 187.783349][T10336] netlink: 'syz.0.1175': attribute type 1 has an invalid length. [ 187.791380][T10336] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1175'. [ 187.949550][T10315] lo speed is unknown, defaulting to 1000 [ 188.051824][T10315] wg1 speed is unknown, defaulting to 1000 [ 188.140853][T10237] hsr_slave_0: entered promiscuous mode [ 188.148155][T10237] hsr_slave_1: entered promiscuous mode [ 188.154873][T10237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.162713][T10237] Cannot create hsr debugfs directory [ 188.278100][T10367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1188'. [ 188.336762][T10367] vxcan1 (unregistering): left allmulticast mode [ 188.754080][ T5845] Bluetooth: hci4: command tx timeout [ 188.880665][T10394] xt_CT: No such helper "syz0" [ 188.882927][T10392] ip6tnl1: entered allmulticast mode [ 188.940675][T10388] netlink: 'syz.2.1194': attribute type 10 has an invalid length. [ 188.949643][T10388] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1194'. [ 188.986552][T10388] veth0_vlan: left promiscuous mode [ 188.991983][T10388] veth0_vlan: entered promiscuous mode [ 189.001196][T10388] veth0_vlan: entered allmulticast mode [ 189.012800][T10388] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 189.016537][T10399] FAULT_INJECTION: forcing a failure. [ 189.016537][T10399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.073126][T10237] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 189.083816][T10399] CPU: 1 UID: 0 PID: 10399 Comm: syz.1.1196 Not tainted 6.14.0-rc4-syzkaller-00873-g3424291dd242 #0 [ 189.083841][T10399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 189.083851][T10399] Call Trace: [ 189.083857][T10399] [ 189.083865][T10399] dump_stack_lvl+0x241/0x360 [ 189.083920][T10399] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.083936][T10399] ? __pfx__printk+0x10/0x10 [ 189.083953][T10399] ? __pfx_lock_release+0x10/0x10 [ 189.083975][T10399] ? validate_chain+0x11e/0x5920 [ 189.083994][T10399] should_fail_ex+0x40a/0x550 [ 189.084018][T10399] _copy_from_user+0x2d/0xb0 [ 189.084037][T10399] do_sys_poll+0x248/0x15d0 [ 189.084074][T10399] ? _parse_integer_limit+0x1b5/0x200 [ 189.084097][T10399] ? __pfx_do_sys_poll+0x10/0x10 [ 189.084116][T10399] ? mark_lock+0x9a/0x360 [ 189.084134][T10399] ? __lock_acquire+0x1397/0x2100 [ 189.084213][T10399] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 189.084239][T10399] ? ktime_get_ts64+0x9f/0x440 [ 189.084257][T10399] ? seqcount_lockdep_reader_access+0x157/0x220 [ 189.084299][T10399] ? __pfx_timespec64_add_safe+0x10/0x10 [ 189.084332][T10399] __se_sys_poll+0x1c5/0x400 [ 189.084357][T10399] ? __pfx___se_sys_poll+0x10/0x10 [ 189.084377][T10399] ? do_syscall_64+0x100/0x230 [ 189.084402][T10399] ? do_syscall_64+0xb6/0x230 [ 189.084426][T10399] do_syscall_64+0xf3/0x230 [ 189.084447][T10399] ? clear_bhb_loop+0x35/0x90 [ 189.084471][T10399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.084490][T10399] RIP: 0033:0x7f0e8c38d169 [ 189.084505][T10399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.084519][T10399] RSP: 002b:00007f0e8a1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 189.084537][T10399] RAX: ffffffffffffffda RBX: 00007f0e8c5a5fa0 RCX: 00007f0e8c38d169 [ 189.084549][T10399] RDX: 0000000000000009 RSI: 0000000000000001 RDI: 0000400000001f00 [ 189.084559][T10399] RBP: 00007f0e8a1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 189.084569][T10399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.084580][T10399] R13: 0000000000000000 R14: 00007f0e8c5a5fa0 R15: 00007fff49542d38 [ 189.084606][T10399] [ 189.330794][T10237] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 189.364539][T10237] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 189.408371][T10237] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 189.466667][T10405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1197'. [ 189.476232][T10401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1198'. [ 189.579947][T10237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.611240][T10237] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.631367][ T2992] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.638605][ T2992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.681831][ T7404] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.689053][ T7404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.701647][T10412] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1201'. [ 189.758148][T10237] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.800760][T10415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1201'. [ 189.867771][T10420] rdma_rxe: rxe_newlink: failed to add lo [ 189.955402][T10421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.972964][T10421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.986897][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1204'. [ 190.042953][T10421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.120204][T10237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.167200][T10433] netlink: 'syz.0.1205': attribute type 1 has an invalid length. [ 190.205939][T10433] bond5: entered promiscuous mode [ 190.214433][T10433] 8021q: adding VLAN 0 to HW filter on device bond5 [ 190.229849][T10432] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1205'. [ 190.535613][T10237] veth0_vlan: entered promiscuous mode [ 190.560516][T10447] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 190.621915][T10237] veth1_vlan: entered promiscuous mode [ 190.752933][T10237] veth0_macvtap: entered promiscuous mode [ 190.762856][T10237] veth1_macvtap: entered promiscuous mode [ 190.803659][T10237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.825382][ T5845] Bluetooth: hci4: command 0x040f tx timeout [ 190.855500][T10237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.902255][T10462] netlink: 'syz.2.1213': attribute type 11 has an invalid length. [ 190.906399][T10237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.933359][T10237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.982438][T10237] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.003831][T10237] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.013232][T10237] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.032398][T10237] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.170772][ T2992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.191196][ T2992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.222771][T10018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.231995][T10018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.757886][T10486] sctp: [Deprecated]: syz.1.1220 (pid 10486) Use of struct sctp_assoc_value in delayed_ack socket option. [ 191.757886][T10486] Use struct sctp_sack_info instead [ 191.814474][T10492] netlink: 'syz.2.1222': attribute type 21 has an invalid length. [ 192.034847][T10502] xt_TCPMSS: Only works on TCP SYN packets [ 192.681135][T10536] __nla_validate_parse: 3 callbacks suppressed [ 192.681154][T10536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1236'. [ 192.783193][T10016] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.632084][T10016] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.688614][T10016] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.769942][T10016] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.850439][T10016] bridge_slave_1: left allmulticast mode [ 193.856497][T10016] bridge_slave_1: left promiscuous mode [ 193.862173][T10016] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.871634][T10016] bridge_slave_0: left allmulticast mode [ 193.877721][T10016] bridge_slave_0: left promiscuous mode [ 193.883374][T10016] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.196278][T10561] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1242'. [ 194.292170][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 194.302879][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 194.311969][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 194.323996][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 194.331781][ T5845] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 194.339880][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 194.640107][T10016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.652364][T10016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.663056][T10016] bond0 (unregistering): Released all slaves [ 194.679626][T10562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1243'. [ 194.690505][T10562] ------------[ cut here ]------------ [ 194.696543][T10562] WARNING: CPU: 1 PID: 10562 at net/sched/sch_taprio.c:1223 taprio_get_start_time+0x16d/0x1a0 [ 194.706960][T10562] Modules linked in: [ 194.710986][T10562] CPU: 1 UID: 0 PID: 10562 Comm: syz.3.1243 Not tainted 6.14.0-rc4-syzkaller-00873-g3424291dd242 #0 [ 194.722015][T10562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 194.732338][T10562] RIP: 0010:taprio_get_start_time+0x16d/0x1a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 194.738571][T10562] Code: 00 74 08 48 89 ef e8 d2 b0 23 f8 48 89 5d 00 31 c0 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 34 70 bc f7 90 <0f> 0b 90 b8 f2 ff ff ff eb dd 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c [ 194.758360][T10562] RSP: 0018:ffffc9000499ee40 EFLAGS: 00010293 [ 194.764493][T10562] RAX: ffffffff8a054f0c RBX: 0000000000000001 RCX: ffff88807bc0bc00 [ 194.772689][T10562] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 194.780746][T10562] RBP: ffff888061f902d4 R08: ffffffff8a054eb5 R09: 1ffffffff28a973c [ 194.788896][T10562] R10: dffffc0000000000 R11: ffffffff816179a0 R12: 0000000000000000 [ 194.796954][T10562] R13: 0000002d526987fd R14: dffffc0000000000 R15: 0000000000000000 [ 194.805699][T10562] FS: 00007fbeb5b246c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 194.814710][T10562] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 194.821324][T10562] CR2: 00007f615db80f98 CR3: 0000000058954000 CR4: 00000000003526f0 [ 194.829376][T10562] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 194.837412][T10562] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 194.845469][T10562] Call Trace: [ 194.848773][T10562] [ 194.851724][T10562] ? __warn+0x165/0x4d0 [ 194.855965][T10562] ? taprio_get_start_time+0x16d/0x1a0 [ 194.861462][T10562] ? report_bug+0x2b3/0x500 [ 194.866052][T10562] ? taprio_get_start_time+0x16d/0x1a0 [ 194.871556][T10562] ? handle_bug+0x60/0x90 [ 194.875973][T10562] ? exc_invalid_op+0x1a/0x50 [ 194.880675][T10562] ? asm_exc_invalid_op+0x1a/0x20 [ 194.885783][T10562] ? __pfx_read_tsc+0x10/0x10 [ 194.890580][T10562] ? taprio_get_start_time+0x115/0x1a0 [ 194.896124][T10562] ? taprio_get_start_time+0x16c/0x1a0 [ 194.901618][T10562] ? taprio_get_start_time+0x16d/0x1a0 [ 194.907255][T10562] taprio_change+0x240d/0x44f0 [ 194.912074][T10562] ? __pfx_taprio_change+0x10/0x10 [ 194.917304][T10562] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 194.923240][T10562] taprio_init+0x9da/0xc80 [ 194.927739][T10562] ? ____sys_sendmsg+0x53a/0x860 [ 194.932790][T10562] ? __sys_sendmsg+0x269/0x350 [ 194.937636][T10562] ? do_syscall_64+0xf3/0x230 [ 194.942354][T10562] ? __pfx_taprio_init+0x10/0x10 [ 194.947375][T10562] ? lockdep_rtnl_is_held+0x26/0x40 [ 194.952603][T10562] ? qdisc_lookup+0x350/0x6b0 [ 194.957367][T10562] ? __pfx_taprio_init+0x10/0x10 [ 194.962331][T10562] qdisc_create+0x9d4/0x11a0 [ 194.967006][T10562] ? __pfx_qdisc_create+0x10/0x10 [ 194.972065][T10562] tc_modify_qdisc+0xbbb/0x1f10 [ 194.976999][T10562] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 194.982351][T10562] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 194.987979][T10562] rtnetlink_rcv_msg+0x73f/0xcf0 [ 194.992939][T10562] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 194.998126][T10562] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 195.003630][T10562] ? ref_tracker_free+0x643/0x7e0 [ 195.008754][T10562] netlink_rcv_skb+0x206/0x480 [ 195.013549][T10562] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 195.019099][T10562] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 195.024466][T10562] ? netlink_deliver_tap+0x2e/0x1b0 [ 195.029696][T10562] netlink_unicast+0x7f6/0x990 [ 195.034609][T10562] ? __pfx_netlink_unicast+0x10/0x10 [ 195.039917][T10562] ? __virt_addr_valid+0x45f/0x530 [ 195.045098][T10562] ? __phys_addr_symbol+0x2f/0x70 [ 195.050146][T10562] ? __check_object_size+0x47a/0x730 [ 195.055497][T10562] netlink_sendmsg+0x8de/0xcb0 [ 195.060317][T10562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.065672][T10562] ? aa_sock_msg_perm+0x91/0x160 [ 195.070627][T10562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.075953][T10562] __sock_sendmsg+0x221/0x270 [ 195.080641][T10562] ____sys_sendmsg+0x53a/0x860 [ 195.085472][T10562] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.090773][T10562] ? __fget_files+0x2a/0x410 [ 195.095514][T10562] ? __fget_files+0x2a/0x410 [ 195.100135][T10562] __sys_sendmsg+0x269/0x350 [ 195.104777][T10562] ? __pfx___sys_sendmsg+0x10/0x10 [ 195.109928][T10562] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 195.116337][T10562] ? do_syscall_64+0x100/0x230 [ 195.121113][T10562] ? do_syscall_64+0xb6/0x230 [ 195.125845][T10562] do_syscall_64+0xf3/0x230 [ 195.130382][T10562] ? clear_bhb_loop+0x35/0x90 [ 195.135302][T10562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.141314][T10562] RIP: 0033:0x7fbeb4d8d169 [ 195.145783][T10562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.165434][T10562] RSP: 002b:00007fbeb5b24038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.173912][T10562] RAX: ffffffffffffffda RBX: 00007fbeb4fa5fa0 RCX: 00007fbeb4d8d169 [ 195.181909][T10562] RDX: 0000000000000000 RSI: 00004000000007c0 RDI: 0000000000000004 [ 195.189920][T10562] RBP: 00007fbeb4e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 195.197930][T10562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.205984][T10562] R13: 0000000000000000 R14: 00007fbeb4fa5fa0 R15: 00007ffce7058248 [ 195.214038][T10562] [ 195.217089][T10562] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 195.224458][T10562] CPU: 1 UID: 0 PID: 10562 Comm: syz.3.1243 Not tainted 6.14.0-rc4-syzkaller-00873-g3424291dd242 #0 [ 195.235211][T10562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 195.245256][T10562] Call Trace: [ 195.248541][T10562] [ 195.251471][T10562] dump_stack_lvl+0x241/0x360 [ 195.256165][T10562] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.261359][T10562] ? __pfx__printk+0x10/0x10 [ 195.265937][T10562] ? _printk+0xd5/0x120 [ 195.270075][T10562] ? __init_begin+0x41000/0x41000 [ 195.275088][T10562] ? vscnprintf+0x5d/0x90 [ 195.279401][T10562] panic+0x349/0x880 [ 195.283277][T10562] ? __warn+0x174/0x4d0 [ 195.287421][T10562] ? __pfx_panic+0x10/0x10 [ 195.291834][T10562] __warn+0x344/0x4d0 [ 195.295805][T10562] ? taprio_get_start_time+0x16d/0x1a0 [ 195.301341][T10562] report_bug+0x2b3/0x500 [ 195.305665][T10562] ? taprio_get_start_time+0x16d/0x1a0 [ 195.311113][T10562] handle_bug+0x60/0x90 [ 195.315270][T10562] exc_invalid_op+0x1a/0x50 [ 195.319783][T10562] asm_exc_invalid_op+0x1a/0x20 [ 195.324634][T10562] RIP: 0010:taprio_get_start_time+0x16d/0x1a0 [ 195.330709][T10562] Code: 00 74 08 48 89 ef e8 d2 b0 23 f8 48 89 5d 00 31 c0 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 34 70 bc f7 90 <0f> 0b 90 b8 f2 ff ff ff eb dd 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c [ 195.350319][T10562] RSP: 0018:ffffc9000499ee40 EFLAGS: 00010293 [ 195.356379][T10562] RAX: ffffffff8a054f0c RBX: 0000000000000001 RCX: ffff88807bc0bc00 [ 195.364438][T10562] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 195.372396][T10562] RBP: ffff888061f902d4 R08: ffffffff8a054eb5 R09: 1ffffffff28a973c [ 195.380381][T10562] R10: dffffc0000000000 R11: ffffffff816179a0 R12: 0000000000000000 [ 195.388383][T10562] R13: 0000002d526987fd R14: dffffc0000000000 R15: 0000000000000000 [ 195.396351][T10562] ? __pfx_read_tsc+0x10/0x10 [ 195.401017][T10562] ? taprio_get_start_time+0x115/0x1a0 [ 195.406461][T10562] ? taprio_get_start_time+0x16c/0x1a0 [ 195.411916][T10562] taprio_change+0x240d/0x44f0 [ 195.416687][T10562] ? __pfx_taprio_change+0x10/0x10 [ 195.421800][T10562] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 195.427785][T10562] taprio_init+0x9da/0xc80 [ 195.432185][T10562] ? ____sys_sendmsg+0x53a/0x860 [ 195.437133][T10562] ? __sys_sendmsg+0x269/0x350 [ 195.441899][T10562] ? do_syscall_64+0xf3/0x230 [ 195.446621][T10562] ? __pfx_taprio_init+0x10/0x10 [ 195.451552][T10562] ? lockdep_rtnl_is_held+0x26/0x40 [ 195.456743][T10562] ? qdisc_lookup+0x350/0x6b0 [ 195.461418][T10562] ? __pfx_taprio_init+0x10/0x10 [ 195.466395][T10562] qdisc_create+0x9d4/0x11a0 [ 195.471007][T10562] ? __pfx_qdisc_create+0x10/0x10 [ 195.476028][T10562] tc_modify_qdisc+0xbbb/0x1f10 [ 195.480900][T10562] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 195.486193][T10562] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 195.491488][T10562] rtnetlink_rcv_msg+0x73f/0xcf0 [ 195.496418][T10562] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 195.501530][T10562] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 195.506983][T10562] ? ref_tracker_free+0x643/0x7e0 [ 195.511998][T10562] netlink_rcv_skb+0x206/0x480 [ 195.516767][T10562] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 195.522208][T10562] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 195.527534][T10562] ? netlink_deliver_tap+0x2e/0x1b0 [ 195.532720][T10562] netlink_unicast+0x7f6/0x990 [ 195.537480][T10562] ? __pfx_netlink_unicast+0x10/0x10 [ 195.542764][T10562] ? __virt_addr_valid+0x45f/0x530 [ 195.547952][T10562] ? __phys_addr_symbol+0x2f/0x70 [ 195.552976][T10562] ? __check_object_size+0x47a/0x730 [ 195.558276][T10562] netlink_sendmsg+0x8de/0xcb0 [ 195.563033][T10562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.568322][T10562] ? aa_sock_msg_perm+0x91/0x160 [ 195.573325][T10562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.578702][T10562] __sock_sendmsg+0x221/0x270 [ 195.583412][T10562] ____sys_sendmsg+0x53a/0x860 [ 195.588213][T10562] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.593518][T10562] ? __fget_files+0x2a/0x410 [ 195.598105][T10562] ? __fget_files+0x2a/0x410 [ 195.602705][T10562] __sys_sendmsg+0x269/0x350 [ 195.607308][T10562] ? __pfx___sys_sendmsg+0x10/0x10 [ 195.612437][T10562] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 195.618765][T10562] ? do_syscall_64+0x100/0x230 [ 195.623530][T10562] ? do_syscall_64+0xb6/0x230 [ 195.628210][T10562] do_syscall_64+0xf3/0x230 [ 195.632716][T10562] ? clear_bhb_loop+0x35/0x90 [ 195.637391][T10562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.643272][T10562] RIP: 0033:0x7fbeb4d8d169 [ 195.647672][T10562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.667377][T10562] RSP: 002b:00007fbeb5b24038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.675804][T10562] RAX: ffffffffffffffda RBX: 00007fbeb4fa5fa0 RCX: 00007fbeb4d8d169 [ 195.683771][T10562] RDX: 0000000000000000 RSI: 00004000000007c0 RDI: 0000000000000004 [ 195.691739][T10562] RBP: 00007fbeb4e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 195.699713][T10562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.707679][T10562] R13: 0000000000000000 R14: 00007fbeb4fa5fa0 R15: 00007ffce7058248 [ 195.716010][T10562] [ 195.719392][T10562] Kernel Offset: disabled [ 195.723821][T10562] Rebooting in 86400 seconds..