last executing test programs: 5.399551135s ago: executing program 1 (id=434): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@multicast2, {0x0, 0x0, 0x20, 0x8, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e22, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) 5.208781592s ago: executing program 1 (id=437): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040)=0x1, 0x4) 4.988280709s ago: executing program 1 (id=441): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) r4 = accept$netrom(0xffffffffffffffff, &(0x7f0000000380)={{0x3, @bcast}, [@null, @default, @null, @netrom, @null, @null, @bcast, @bcast]}, &(0x7f00000000c0)=0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x7c, 0x30, 0xb, 0x5, 0x0, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r0, 0x20}, {r1, 0x1608}, {r2, 0x380}, {r3, 0x1a0}, {r4, 0x111}, {r5, 0x101}], 0x6, &(0x7f0000000440)={r6, r7+60000000}, &(0x7f0000000480)={[0x7]}, 0x8) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x44044) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) r13 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r13, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0) r14 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r14, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_regs={0x11}}) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8b0f, &(0x7f0000000040)={'wlan1\x00'}) 4.052862995s ago: executing program 1 (id=451): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000180)={'veth1\x00', 0x8}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff, 0x8069}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x404c000) 3.053756677s ago: executing program 2 (id=459): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b91f0000000000008000f0fffeffe809000000ffd9dd00000010000100000808004149004006040800", 0x58}], 0x1) (async) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b91f0000000000008000f0fffeffe809000000ffd9dd00000010000100000808004149004006040800", 0x58}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x80006e}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0xc, &(0x7f0000000300)=ANY=[@ANYRES8=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x10, 0x3f5, 0x4, 0x70bd2b, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc4081}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) r6 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x8, &(0x7f0000000000), 0x8) sendmsg$kcm(r6, &(0x7f0000000240)={&(0x7f0000000040)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)='a', 0x1}], 0x1}, 0x0) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000600)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000180)="85adb9ff1d8e809a65e5", 0xa}, {&(0x7f0000000ac0)="4986e59d3df6b0823023b228123af1af02dddf7368c29b3c419bcf52058cedbf760b8db46d089fe741e912929c1f5f37eb79d4ff10b2a1c1bbfca0dc905871e8ad536eb1760eb73e0f8c2a910da2ac96f053487ebb51d93c2efa4831dcb162f169380935fc5ea4b88312f358dee08c0795a862b7ab704023a0e75fdf84624b857bec96467abe347a45b207f3fc88f551d1c841972ccc5b2cb31a16739cf966ceee81ea8a12eb9c4da26388855527d9998641df9fb49f1b73d86bd23a2c6f868bca8b557e", 0xc4}, {&(0x7f0000000e40)="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", 0x13b}, {&(0x7f0000001d00)="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", 0x3a4}], 0x4}, 0x0) (async) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000600)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000180)="85adb9ff1d8e809a65e5", 0xa}, {&(0x7f0000000ac0)="4986e59d3df6b0823023b228123af1af02dddf7368c29b3c419bcf52058cedbf760b8db46d089fe741e912929c1f5f37eb79d4ff10b2a1c1bbfca0dc905871e8ad536eb1760eb73e0f8c2a910da2ac96f053487ebb51d93c2efa4831dcb162f169380935fc5ea4b88312f358dee08c0795a862b7ab704023a0e75fdf84624b857bec96467abe347a45b207f3fc88f551d1c841972ccc5b2cb31a16739cf966ceee81ea8a12eb9c4da26388855527d9998641df9fb49f1b73d86bd23a2c6f868bca8b557e", 0xc4}, {&(0x7f0000000e40)="0023e2f0de2db904ac0d37364982efdf19da8519d58e14520760bc669660ef6e75be9e29b18d2c61e2c395ff9f79e67d272970056e7c61ccbff0b59fd7a90abba66f547fe7a58efe74f1013ea3b98d4fb65ddc2f02dca37788fcf6c7572e3c350726dff00fcc52dd89235fbdf221cd6b8ca1cb1a9ced5545a5ca589e526414756edc7e6da231447b0839cbb69d5bccc523a4739965228b80fff1a633db8a017143744fe8574d8ab78c04881e854bd48b4293019a6b04f7ffa3c3db01dec1bcde61a13cd10bdef3304f116c37a651b32c3a7279d2fe791457684590799067a429a5237e6c542494983ddc056c8f28fd4640317e6037f955ab13a3a48ce3e9c0978aedd62ff1501971e4fbb58444ddad2cfb7430f0e897d91d15406fb2fed015683f161e3a0d197693ced1f2804688a6afef09a71b172ae3f9792699", 0x13b}, {&(0x7f0000001d00)="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", 0x3a4}], 0x4}, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x28, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x44880}, 0x40) (async) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x28, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x44880}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r3}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto$inet(r7, &(0x7f0000001040)="89", 0x1, 0x6000c804, 0x0, 0x0) (async) sendto$inet(r7, &(0x7f0000001040)="89", 0x1, 0x6000c804, 0x0, 0x0) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, 0x0, 0x0) (async) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(r8, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0x40052) 2.30459927s ago: executing program 1 (id=466): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x4, 0x8201, 0x0, 0x0, 0x2, 0x2fd, 0x100000}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x13, r1, 0xc252d000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r7, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0204"], 0x18) sendto$inet6(r7, 0x0, 0x0, 0x4000000, &(0x7f0000000000)={0xa, 0xd9, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x100000}, 0x1c) close(r6) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0x4, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x2000100, 0x7, 0x6361, 0x9, 0xfffffffe, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r11 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0x42, 0x4, 0x2a8, 0xffffffff, 0x178, 0x178, 0x178, 0xffffffff, 0xffffffff, 0x260, 0x260, 0x260, 0xffffffff, 0x4, 0x0, {[{{@ip={@private=0x1, @remote, 0x0, 0x0, 'rose0\x00', 'wg2\x00'}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @local, 0xffffffff, 0xff, 'ip6erspan0\x00', 'ipvlan0\x00', {}, {}, 0x8, 0x0, 0x40}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x100, 0x719, 0x5}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 2.278991344s ago: executing program 4 (id=468): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000480)="2f66de83fe29c25e", 0x8}], 0x1}, 0x4040081) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket(0x28, 0x805, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) connect$can_bcm(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x7fffffff, 0x34}, 0x1c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r3) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='veno\x00', 0x5) 2.087091511s ago: executing program 2 (id=469): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x4010) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x503, 0x70bd3b, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x5c}}, 0x800) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000440)={0x0, 0x3, 0x0, [0x44f, 0x2, 0x4, 0x9, 0x1], [0x6, 0x3ff, 0x7f, 0xffffffff, 0x7a, 0x0, 0xb1d, 0x8, 0x2110, 0xffffffffffff0001, 0x5, 0x61, 0x1, 0x9, 0xfffffffffffff801, 0xff, 0x1, 0x5, 0xfffffffffffffffe, 0x1800, 0xd945, 0x4, 0x5, 0x10, 0x401, 0x7fff, 0x3, 0x1, 0x3, 0xb50, 0x6, 0x5, 0x5, 0xffff, 0x5, 0x1ff, 0x3, 0x9, 0x64e1, 0x2, 0x47574f3e, 0x0, 0xd13, 0x6, 0x5, 0x1e1, 0x363, 0x1, 0x80, 0x401, 0x6, 0x4, 0x6, 0x7, 0x6, 0x80000001, 0xe, 0xf, 0x8, 0x4, 0x80, 0x10, 0x7, 0x0, 0x8, 0x9, 0x800, 0x0, 0x2, 0x8000, 0x3, 0x1, 0x4, 0xbc9, 0x5f, 0x6c, 0x1, 0x4, 0x9, 0x0, 0x2, 0x2, 0x7f, 0x8, 0x3, 0x3, 0x9, 0x80000000, 0x5, 0x6, 0x6d1, 0xee4a, 0x10001, 0xfffffffffffffffa, 0x160, 0x9, 0x10001, 0x2, 0x56, 0xfffffffffffffffe, 0xff, 0x2, 0x8, 0x0, 0x7, 0x101, 0x100000001, 0xc71, 0xa, 0x5ccb, 0x7fff, 0x3fffc0, 0x4, 0xc199, 0x9829, 0x4, 0xad, 0xdc, 0x8000000000000000, 0xffff, 0x3]}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000880)={r3, 0x7f, 0x1, [0x4, 0x9, 0x0, 0xe, 0xff], [0x7, 0x1, 0xfffffffffffff259, 0x3, 0x4, 0x1, 0xb, 0x9, 0xfffffffffffffffe, 0x1, 0x6, 0x9a1a, 0x8, 0x7, 0x101, 0x9, 0x0, 0x401, 0x0, 0x100, 0x80000000, 0x0, 0x4, 0x100000001, 0x5, 0x1ff, 0x0, 0x8, 0x5, 0x3, 0x3, 0x9, 0xffffffffffffffeb, 0x7fffffffffffffff, 0xffffffffffff7275, 0x8001, 0x1000, 0x1, 0x3, 0xc, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x400, 0x2, 0x2, 0x7, 0x5, 0x4c32, 0x2, 0x401, 0xffff, 0x5, 0x7ff, 0xfff, 0x1, 0x4d7, 0x7, 0x2, 0xffffffffffffffeb, 0x4, 0x1, 0x2, 0x7fffffffffffffff, 0xc5, 0x3ff, 0x100, 0x1, 0x1, 0x200, 0xf, 0x6, 0xe37, 0x8, 0x8b, 0x8, 0x9, 0x2, 0x0, 0x10, 0x4, 0x0, 0x300000000000, 0x0, 0x9, 0x1, 0xf, 0x3, 0x79, 0xffffffffffffff49, 0x4, 0x9, 0x4, 0x2, 0x1, 0x4, 0x100, 0x0, 0x101, 0x5, 0x9, 0x3, 0x5313, 0x6, 0x9, 0x1b, 0x4, 0x6170, 0x1860, 0x5, 0x2, 0x6, 0x0, 0xffffffff, 0xb14c, 0x5, 0x9, 0x9, 0x7fffffff, 0x100000000, 0x3]}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000e80)='blkio.bfq.io_serviced\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000fc0)=[{&(0x7f0000000ac0)=""/244, 0xf4}], 0x1, 0x0, 0x0) accept$ax25(r5, &(0x7f0000000140)={{0x3, @rose}, [@netrom, @rose, @bcast, @default, @default, @netrom, @netrom, @null]}, &(0x7f0000000240)=0x48) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x6, 0x4, 0xffd, 0x2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r8, &(0x7f0000000ac0)="c876f1c31ef0831156adb791103284ee9082639d20fe5145d5fcefcc79fd468e59053a5fd62c846579af10d9cdc9e540f622eb8ac161d95dca82368b8c06caae9015a30655971c7f0df6b1c67125fb668bb8b47a915183e21633cbe147f276fe29d5c033958ea62e64230816", &(0x7f00000009c0)=""/191}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r5, 0x0, 0xec, 0xb2, &(0x7f0000000280)="7a4636a7b5bda41598440b85d5e90f3ab034b12e34a8247b3da9fa2b127371af7b7348ee1691230d75e38761c70788163537d46744c15b6a6e870a51b15e48175d3c3d8ceae571c87ee545759714f4fa9ea026d6f9dfa75c0c614351e70fcaa3d2e255c059a23facdde858645648acf1afce0b8a9f5fd4e31b1bdee429ca270bddf29581170c3e213ba7c789b8fb94816f45c0dee47eeb8e87a86bb86e2db6b5885cc4e6803aa9d09e343e5b6a0a7d5688ab5cf9d90837896313190d6ddaed0a0a73b4218dba5445f222f36d69b4c1231fd9b32d2e9079b16ac52e41842a078d393a7e3208ff4171d9dd9577", &(0x7f0000000cc0)=""/178, 0x4, 0x0, 0xfc, 0x1000, &(0x7f0000000d80)="1b21b07d4bf5fd35d27a3b036063062d5baf1e4e517f47bd0ca4b2917d89da633efd963fe2f583dd36c0e25d8104512efb6ac66a8bcfcfee000f196e336a9337d528772476d02c57eeb14c00288a84b3bfa308dfa5ee59c41b3bf887c541e6eacca224a5a5f86946ddafd32b7726af09b7ae6910bb2165b124f2493bfd7ac7dd53449c01d48f1df19881da92a1610ccaa2a4499e9f5c5c64d82b970c3f95f793669f682145ab46589e406af186495982ba0370145e338e44e32e6b4a3a468edc1b9ec4f07f5418104ac4350dff76b8a4444e0df0cd1a6a72840e9c4725e5dadb86b5ccabcc4b236881da30f28a2506ae503b7e4f27dcf765046579b3", &(0x7f0000001000)="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", 0x0, 0x0, 0x51}, 0x50) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, r10, 0x1, 0xffffffff, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x90) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01007fde0000000000006600000008000300", @ANYRES32=0x0, @ANYBLOB="08002600cc1500000800b70099000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.77336117s ago: executing program 2 (id=471): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8) setsockopt(r1, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x5}, &(0x7f0000000180)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x1}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}]}}]}, 0x48}}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.772320631s ago: executing program 4 (id=472): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x2, 0x7, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xc84}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffff8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x814) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x5, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r2, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000050}, 0x800) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r1) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r7, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0xff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x84010}, 0x4004000) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000640)=[@in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e24, @multicast2}], 0x20) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r1) r9 = socket$inet_smc(0x2b, 0x1, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r10) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, r11, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008804}, 0x20040804) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wpan0\x00', 0x0}) r13 = getpid() r14 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x48, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r14}]}, 0x48}}, 0x40000) r15 = accept4$inet6(0xffffffffffffffff, &(0x7f00000009c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000a00)=0x1c, 0x80000) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000a40)={0x0, 0x6}, &(0x7f0000000a80)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r15, 0x84, 0x9, &(0x7f0000000ac0)={r16, @in6={{0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, 0x2, 0x5, 0x4a0a57a6, 0x7, 0x60, 0x800, 0x1}, &(0x7f0000000b80)=0x9c) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000bc0)={r17, 0x91, "b3a2cff6d6b27aab3b669202b39b899c9f46896d98af15913c7343fb26991b6b6281b3e165b6ee1e492998a3e93fa3d9e1173b3b779b5d6966ef53ef5ed70f0cda4358dfa8ca8fdc2fdc11b06a45cba932a2be5ad95167bba23e79402f21701708209959ba892b7ead0d1b3771c1821dc614868913234f5e1c182e44240b32d1f61d605c32e3f174c8329adb1e22b43620"}, &(0x7f0000000c80)=0x99) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000cc0)={0xffff, 0x10000, 0x3, 0x10001, r18}, 0x10) r19 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r19, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x84000}, 0x0) 1.401509162s ago: executing program 3 (id=473): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@multicast2, {0x0, 0x0, 0x1000000, 0x8, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e22, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) 1.365727105s ago: executing program 0 (id=474): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x388, 0xffffffff, 0x1e8, 0xd0, 0x1e8, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x3c, 0x0, 0x1, 0x46}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [], [], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f65318776d8001e770b667f173dfa40b58c10327e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) 1.252576445s ago: executing program 0 (id=475): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x9}, 0x8) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@type_tag={0x8, 0x0, 0x0, 0x12, 0x2}, @union={0x10, 0x1, 0x0, 0x5, 0x1, 0x2, [{0xb, 0x2, 0x8}]}]}, {0x0, [0x2e, 0x61, 0x61, 0x30, 0x0]}}, 0x0, 0x43, 0x0, 0x0, 0x3a0cd7e9, 0x10000}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x5, 0x200, 0x40, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000003c0), 0x7fff, r4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000001c0)={r4, 0x0, &(0x7f0000000180)=""/29}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a40)={0xffffffffffffffff, 0x400, 0x8}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000b80)}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x1, 0x10, 0x3, 0x8, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x5, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, [@map_fd={0x18, 0x9}]}, &(0x7f0000000600)='syzkaller\x00', 0x323, 0xdc, &(0x7f00000007c0)=""/220, 0x40f00, 0x21, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000980)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000009c0)={0x4, 0x4, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000c80)=[r4, r0, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, r7], &(0x7f0000000cc0)=[{0x2, 0x3, 0xe, 0x2}, {0x5, 0x5, 0x7, 0xa}, {0x0, 0x4, 0x4, 0x1}, {0x3, 0x2, 0x5, 0x9}, {0x3, 0x4, 0xd}], 0x10, 0xf}, 0x94) sendmmsg$inet6(r1, &(0x7f0000001500)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000003c0)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000008c0), 0x4) r8 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$sock_buf(r8, 0x1, 0x1c, &(0x7f0000000ec0)=""/59, &(0x7f0000000f00)=0x3b) sendmsg$DEVLINK_CMD_RATE_NEW(r0, 0x0, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r10 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000003d0007010080000008000000047c0000100008800c0008"], 0x24}, 0x1, 0x0, 0x0, 0x40440cd}, 0xc000) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x1, 0xfffffffd, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x30000001}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x18}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 1.230620318s ago: executing program 1 (id=476): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000500)=[{{&(0x7f0000000100)=@in={0x2, 0x0, @local}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/184, 0xb8}, {&(0x7f0000000340)=""/85, 0x55}, {&(0x7f0000000440)=""/73, 0x49}], 0x3}, 0x4cc}], 0x1, 0x10000, &(0x7f0000000540)) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x3c, r3, 0x1, 0x3, 0x0, {0x33}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x20000040) unshare(0x60000) close(0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) syz_open_procfs$namespace(r4, &(0x7f0000000000)='ns/pid\x00') unshare(0x6a040000) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00022cbd7000d3723412f69e17e7000000000200000008000b01"], 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={0x14, r6, 0x1, 0x0, 0x0, {{0x2}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000f2abd7000bfa8630bffdbdf255a0000008570b0e528bac6460ac38df0bd01bd56236cb39af6dea1b356ec48f0d00e0cd715000000000000000000000000aad8ad3cfbc29a5c57ad983e641f48b582e556b01f54b807d848f44fbb1cb3d23b63cf4ee14b6da141f5d151082299365c36188743420158a59c8a25ae646b3f4758283fd4c1b250de3dba96"], 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x4000041) close(0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014002000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'veth1_virt_wifi\x00', 0x0}) bind$packet(r9, &(0x7f0000000480)={0x11, 0xf8, r11, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x14) splice(0xffffffffffffffff, 0x0, r9, 0x0, 0x10500, 0x0) accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x20, 0x19, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb0e6, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000780)='syzkaller\x00', 0x7, 0x2d, &(0x7f00000008c0)=""/45, 0x41000, 0x20, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000a40)={0x3, 0x5, 0x7f, 0x1f}, 0x10, 0x0, 0xffffffffffffffff, 0x9, &(0x7f0000000d80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x2, 0x2, 0x3, 0x4}, {0x5, 0x1, 0xa, 0x3}, {0x0, 0x5, 0x10, 0xc}, {0x1, 0x2, 0x8, 0x2}, {0x1, 0x3, 0x0, 0xb}, {0x5, 0x3, 0x2, 0x8}, {0x3, 0x3, 0x10, 0x3}, {0x4, 0x1, 0x8, 0xa}, {0x3, 0x1, 0x2, 0xa}], 0x10, 0x5}, 0x94) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0x0, 0xc}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 1.229649631s ago: executing program 4 (id=477): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0xf4, 0x40, 0x107, 0x0, 0x25dfdbfd, {0x4, 0x7c}, [@typed={0x4}, @nested={0xd9, 0x1, 0x0, 0x1, [@generic="9cf5c106fb305e3ed9801ab88dd8a9c5a974aaa4cb1c0673ffa3eb27f5ed2682896dff8da8c8a198a5204ee8685e46a9eb04e0b20d357fcb5236660b74b61f31b81e72384ead233ff8812b585d1ce34141963c19bf2d04a69c2796fef2c0db342d856e80fa318815d5da5e4a1956de73cec9d81a92b56ea0cdd2f892afcc8dad15e4a8e0a9765438e92c7e395e22ba24c2bc2227c5d7cf55a8207427abeb95aa6f3d54974633c13fc9e51bcf27b332e245b6b67a47d91996ca506ab4f0a2cb594ed594f55f57eb42944ccc9767", @typed={0x8, 0x6, 0x0, 0x0, @pid}]}]}, 0xf4}}, 0x8004) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@map, 0x1, 0x1, 0x0, 0x0, 0xfd47, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$isdn_base(0x22, 0x3, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x2, {0x9, 0x9, 0x800, 0xffff}}}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x488d1}, 0x4000844) 1.128321323s ago: executing program 3 (id=478): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000140)=0x9, 0x4) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x8, 0x6, 0x678, 0x0, 0x370, 0x270, 0xd0, 0x488, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @private2, [], [], 'pimreg0\x00', 'nicvf0\x00'}, 0x0, 0x178, 0x1a0, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {}, 'netpci0\x00', {}, 0x0, 0x15}}, @common=@unspec=@physdev={{0x68}, {'veth1_to_bridge\x00', {}, 'gretap0\x00', {}, 0x0, 0x10}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@local, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'dvmrp1\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d8) shutdown(r1, 0x1) getsockopt$bt_hci(r1, 0x84, 0x6c, 0x0, &(0x7f00000000c0)) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)=ANY=[@ANYBLOB="10010000220001000000000000000000020100800c000100000000000000000014000b"], 0x110}], 0x1}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffe, @loopback}, 0x1c) (async) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000140)=0x9, 0x4) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) socket$igmp6(0xa, 0x3, 0x2) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x8, 0x6, 0x678, 0x0, 0x370, 0x270, 0xd0, 0x488, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @private2, [], [], 'pimreg0\x00', 'nicvf0\x00'}, 0x0, 0x178, 0x1a0, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {}, 'netpci0\x00', {}, 0x0, 0x15}}, @common=@unspec=@physdev={{0x68}, {'veth1_to_bridge\x00', {}, 'gretap0\x00', {}, 0x0, 0x10}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@local, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'dvmrp1\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d8) (async) shutdown(r1, 0x1) (async) getsockopt$bt_hci(r1, 0x84, 0x6c, 0x0, &(0x7f00000000c0)) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)=ANY=[@ANYBLOB="10010000220001000000000000000000020100800c000100000000000000000014000b"], 0x110}], 0x1}, 0x80) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) (async) 976.506883ms ago: executing program 4 (id=479): bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) listen(r0, 0x5) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x18, r1, 0x1, 0x1, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}}, 0x0) sendmmsg(r0, &(0x7f0000000180)=[{{&(0x7f0000000000)=@un=@abs={0x0, 0x0, 0x4e20}, 0x80, &(0x7f0000000080)=[{&(0x7f00000000c0)="aa", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}}], 0x2, 0x4040840) 864.10149ms ago: executing program 2 (id=480): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x19, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000002d00010026bd7000fcdbdf250400000008000c00", @ANYRES32=r1, @ANYBLOB="0c0016809b"], 0x28}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140200001000010000000071860000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100"], 0x54}, 0x1, 0x0, 0x0, 0x20048004}, 0x44) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) 773.335251ms ago: executing program 3 (id=481): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0xf, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r4, 0x400, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4, 0x7a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRES64=r1, @ANYBLOB="dd001200f4d56f13174b2c854792f833e7c31b782ca2484c2cda335b0a9b50e0ac93122fbc"], 0x24}, 0x1, 0x0, 0x0, 0x20008080}, 0x0) 720.409054ms ago: executing program 4 (id=482): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000040)={0x1f, @fixed}, 0x8) (async) r3 = socket$key(0xf, 0x3, 0x2) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x48, 0x0, &(0x7f0000000900)) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000017c0)=ANY=[@ANYBLOB="400000006800010003001000fdffff7f00001b00000000000c000200020000000800000014000c80080003000700000008003b4bf6ffffff0600030001"], 0x40}, 0x1, 0x0, 0x0, 0x24008098}, 0x4000080) (async) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f0000000440)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000480)=[{&(0x7f00000000c0)="08001eb3b0335d00", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x8000) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4, 0x3c}}}]}, 0x34}, 0x1, 0xba01, 0x0, 0x20000000}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000200)={r5}) connect$inet(r6, &(0x7f0000000400)={0x2, 0x4e22, @local}, 0x10) (async) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9) write(r7, &(0x7f00000000c0)="240000001e005f0214f6fffffffffff807000000000000000000000008a609000d000000", 0x24) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="ef0000000c000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000140)={0x3, 'ip6tnl0\x00', {0x3ff}, 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x61780, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711220000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r9 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback={0x0, 0xffff888101827518}, 0x0, 0x20, 0x10000, 0x10000}}) 719.303715ms ago: executing program 0 (id=483): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)=@newsa={0x144, 0x10, 0x713, 0x80ff, 0x0, {{@in=@empty, @in6=@local, 0x2000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {@in6=@private1, 0x0, 0x33}, @in6=@local, {0x7, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x49}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x180}}, @tfcpad={0x8, 0x16, 0x80}]}, 0x144}}, 0x0) 633.168702ms ago: executing program 2 (id=484): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r0, 0x29, 0x38, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) r2 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x16, r3, 0x8}, 0xc) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x0, 0x0, r3, 0x267a4e37}, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0xc, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x24008050}, 0x20008000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000034000000030a010100000000000000000100000009000b0073797a31000000000900010073797a300000000008000a400000000414000000020a05"], 0x90}}, 0x0) recvmsg(r0, 0x0, 0x5a8) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000"], 0x80}}, 0x0) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0) sendto$inet6(r1, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) 620.297535ms ago: executing program 0 (id=485): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x388, 0xffffffff, 0x1e8, 0xd0, 0x1e8, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x3c, 0x0, 0x1, 0x46}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [], [], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f65318776d8001e770b667f173dfa40b58c10327e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) 536.397312ms ago: executing program 3 (id=486): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) socket$inet6(0xa, 0x80001, 0x0) (async) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x3, [{{0xa, 0x4e22, 0x5, @mcast2, 0x200}}, {{0xa, 0x4e22, 0x6, @remote, 0x35}}, {{0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x9}}]}, 0x210) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x6bd14d2bc29e41b6}]}}}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x884) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x6bd14d2bc29e41b6}]}}}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x884) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000280)={r4, r6}) ioctl$SIOCRSGCAUSE(r0, 0x89e0, 0xffffffffffffffff) 487.272901ms ago: executing program 0 (id=487): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x5, 0x0) (async) r1 = socket$inet6(0xa, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}], 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000c90000007b8af8ff00000000b7080000000008007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000c90000007b8af8ff00000000b7080000000008007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0xfa9, @private1, 0x9}], 0x2c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0xfa9, @private1, 0x9}], 0x2c) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000008c0)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004000000000000000100000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000fafffeffffffffff00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000004"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000100000000000000001000084060000000000000001"], 0x0, 0x42, 0x0, 0x8}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000100000000000000001000084060000000000000001"], 0x0, 0x42, 0x0, 0x8}, 0x20) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000004c0)={r7, 0x3, 0x6, @remote}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000004000000010"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) recvmsg(r4, &(0x7f0000000300)={&(0x7f0000000280)=@alg, 0x80, &(0x7f0000000800)=[{&(0x7f0000000500)=""/179, 0xb3}, {&(0x7f0000000380)=""/118, 0x76}, {&(0x7f00000005c0)=""/140, 0x8c}, {&(0x7f0000000680)=""/83, 0x53}, {&(0x7f0000000740)=""/164, 0xa4}, {&(0x7f0000000900)=""/251, 0xfb}, {&(0x7f0000000a00)=""/197, 0xc5}], 0x7, &(0x7f0000000b00)=""/133, 0x85}, 0x40) r9 = socket(0x15, 0x5, 0x0) connect$netrom(r9, &(0x7f00000000c0)={{0xa, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) getsockname$tipc(r9, 0x0, &(0x7f0000000080)) (async) getsockname$tipc(r9, 0x0, &(0x7f0000000080)) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000000)={r7, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) (async) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000000)={r7, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r7, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000240)='wg1\x00', 0x4) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000c80)={@empty, 0x0}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000d40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d00)={&(0x7f00000012c0)={0x394, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9b}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x96}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r7}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r10}}}]}}]}, 0x394}, 0x1, 0x0, 0x0, 0x40890}, 0x20000000) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) 425.080735ms ago: executing program 3 (id=488): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, 0x7}, 0x80, 0x0}, 0x200ce0c0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, 0x0, 0xfe33) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x4}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x2f, 0x3, 0x1, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x7, 0x4, 0x1, 0x15d3, 0x8, 0x5, 0x0, [0x8000000a, 0x40ff]}}) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014000000000340005800c0001007061796c6f61640024000280080004cbab00005608000340000000b9080001400000000a08000240000000020900010073797a30000000000900020073797a3200000000140000001100010000000000000000000300000a"], 0xc0}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=ANY=[], 0x100}}, 0x0) socket(0x840000000002, 0x3, 0xff) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r8}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r11, 0x0, 0x1, 0x0) vmsplice(r10, &(0x7f0000001280)=[{&(0x7f0000001180)="830d", 0x2}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) 279.703447ms ago: executing program 4 (id=489): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) unshare(0x24060400) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000100)={0x2, 0xfffe, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000010c0)={{{@in6=@remote, @in=@loopback, 0x4e21, 0x0, 0x4e24, 0x2, 0xa, 0x0, 0x0, 0x3c, 0x0, 0xee00}, {0x0, 0xfc73, 0xffffffffffffffff, 0x1, 0x8, 0x1000, 0x7f, 0x4}, {0x4, 0x8, 0xdf95, 0x81}, 0x3, 0x0, 0x0, 0x0, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d6, 0x33}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3506, 0x0, 0x3, 0xb, 0x3, 0xa58, 0x10000}}, 0xe8) close(r3) bind$unix(r2, &(0x7f0000000180)=@file={0x1}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in6=@private0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xfffffffffffffffc}}, [@offload={0xc, 0x1c, {0x0, 0x4}}]}, 0xc4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000004000000711076000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x40, 0x11, 0x0, @empty, @empty}, {0x0, 0x4ea0, 0xf9, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x3}, 0x94) recvmmsg(r5, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000003580)=""/82, 0x52}, {0x0}], 0x2}, 0xac1}], 0x1, 0x2, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1}, 0x6e) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfc, 0x40000000}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000280)=@newtaction={0x178, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x164, 0x1, [@m_tunnel_key={0x0, 0x13, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x0, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x0, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, {0x0, 0x6, "e091c5a5003bc23762398f99d4b170e5bbdec857e2e1ac521847052e264378b5db25f3df545f6fcef951ccb79807ed4e95ffb98e9d9ec60807487f8b6aae10261eddf3cd06a761dc2b89ed596f3b7e915c44f27fdaefd67684b874c50253655057f8dfff2c7d04"}, {}, {0x0, 0x8, {0x1}}}}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x400081c}, 0x0) 279.077553ms ago: executing program 3 (id=490): close(0xffffffffffffffff) r0 = socket(0x28, 0x800, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x1e) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x1, @private2, 0x41e3}}, 0x0, 0x6f5, 0xffff, 0x8001, 0xfffffff4}, &(0x7f00000002c0)=0x98) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r5, 0x122}, &(0x7f0000000480)=0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000200), &(0x7f0000000240)=0xc) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) accept4$inet(r7, 0x0, 0x0, 0x80000) shutdown(r7, 0x0) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r8, 0x104, 0x7, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 21.622038ms ago: executing program 2 (id=491): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x458, 0x218, 0xf0, 0xfeffffff, 0x218, 0x218, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000a00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x891}, 0x800) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000000ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002800800020011000000040001000800", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x44, 0x2, [@TCA_PIE_ALPHA={0x8, 0x4, 0x8}, @TCA_PIE_ECN={0x8}, @TCA_PIE_TARGET={0x8, 0x1, 0x8001}, @TCA_PIE_BYTEMODE={0x8}, @TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}, @TCA_PIE_ALPHA={0x8, 0x4, 0xfff}, @TCA_PIE_LIMIT={0x8, 0x2, 0x4}, @TCA_PIE_TUPDATE={0x8, 0x3, 0xd271}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x1}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}]}}]}, 0x48}}, 0x4008000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001700000044000680"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x21}) r11 = socket$isdn_base(0x22, 0x3, 0x0) ioctl(r11, 0x8b32, &(0x7f0000000040)) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 0 (id=492): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000000000007000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) ioctl$SIOCAX25GETINFO(r2, 0x89ed, &(0x7f0000000000)) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x10}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x30}}, 0x20008010) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xb4, 0x2, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x3}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x26}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xe85}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x4}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x6}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xf6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xa7}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x10}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x20}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x8011) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.112' (ED25519) to the list of known hosts. [ 80.643493][ T5838] cgroup: Unknown subsys name 'net' [ 80.736121][ T5838] cgroup: Unknown subsys name 'cpuset' [ 80.745334][ T5838] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.422096][ T5838] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.022256][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.030628][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.038252][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.046471][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.054429][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.064487][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.072452][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.080094][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.088436][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.097353][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.119689][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.129721][ T5170] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.139320][ T5170] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.147010][ T5170] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.154764][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.163938][ T5170] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.173630][ T5856] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.174475][ T5865] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.181276][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.190022][ T5865] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.196333][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.203251][ T5865] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.217470][ T5865] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.229051][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.237718][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.832552][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 85.953456][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 86.030701][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 86.107603][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 86.124553][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 86.251975][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.259868][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.267298][ T5863] bridge_slave_0: entered allmulticast mode [ 86.275393][ T5863] bridge_slave_0: entered promiscuous mode [ 86.348400][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.356798][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.364458][ T5863] bridge_slave_1: entered allmulticast mode [ 86.371983][ T5863] bridge_slave_1: entered promiscuous mode [ 86.407650][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.414900][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.422262][ T5861] bridge_slave_0: entered allmulticast mode [ 86.429652][ T5861] bridge_slave_0: entered promiscuous mode [ 86.467184][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.474396][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.481782][ T5848] bridge_slave_0: entered allmulticast mode [ 86.489966][ T5848] bridge_slave_0: entered promiscuous mode [ 86.497640][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.505047][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.512237][ T5861] bridge_slave_1: entered allmulticast mode [ 86.519749][ T5861] bridge_slave_1: entered promiscuous mode [ 86.547593][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.557723][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.564984][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.572451][ T5848] bridge_slave_1: entered allmulticast mode [ 86.580496][ T5848] bridge_slave_1: entered promiscuous mode [ 86.628554][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.680663][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.687905][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.695176][ T5857] bridge_slave_0: entered allmulticast mode [ 86.703162][ T5857] bridge_slave_0: entered promiscuous mode [ 86.712705][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.719853][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.726959][ T5849] bridge_slave_0: entered allmulticast mode [ 86.735163][ T5849] bridge_slave_0: entered promiscuous mode [ 86.774131][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.787152][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.803748][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.813800][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.822904][ T5857] bridge_slave_1: entered allmulticast mode [ 86.830756][ T5857] bridge_slave_1: entered promiscuous mode [ 86.854921][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.862436][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.870038][ T5849] bridge_slave_1: entered allmulticast mode [ 86.877833][ T5849] bridge_slave_1: entered promiscuous mode [ 86.920946][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.935112][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.014845][ T5863] team0: Port device team_slave_0 added [ 87.061525][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.073764][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.086961][ T5863] team0: Port device team_slave_1 added [ 87.093407][ T5851] Bluetooth: hci0: command tx timeout [ 87.126300][ T5861] team0: Port device team_slave_0 added [ 87.137008][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.149770][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.169385][ T5851] Bluetooth: hci1: command tx timeout [ 87.181869][ T5848] team0: Port device team_slave_0 added [ 87.190505][ T5861] team0: Port device team_slave_1 added [ 87.237700][ T5848] team0: Port device team_slave_1 added [ 87.249377][ T51] Bluetooth: hci3: command tx timeout [ 87.255255][ T5851] Bluetooth: hci2: command tx timeout [ 87.283264][ T5857] team0: Port device team_slave_0 added [ 87.304229][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.311598][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.338324][ T5851] Bluetooth: hci4: command tx timeout [ 87.344261][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.357295][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.364345][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.390398][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.429438][ T5857] team0: Port device team_slave_1 added [ 87.438322][ T5849] team0: Port device team_slave_0 added [ 87.465300][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.472484][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.499734][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.538190][ T5849] team0: Port device team_slave_1 added [ 87.560797][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.567835][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.594600][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.606589][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.614081][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.640333][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.652204][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.659235][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.685915][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.711670][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.718749][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.745174][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.757152][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.764510][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.790862][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.816433][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.823585][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.849552][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.874167][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.881716][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.908070][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.994032][ T5863] hsr_slave_0: entered promiscuous mode [ 88.001657][ T5863] hsr_slave_1: entered promiscuous mode [ 88.087487][ T5848] hsr_slave_0: entered promiscuous mode [ 88.094030][ T5848] hsr_slave_1: entered promiscuous mode [ 88.101000][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.108774][ T5848] Cannot create hsr debugfs directory [ 88.120279][ T5861] hsr_slave_0: entered promiscuous mode [ 88.126724][ T5861] hsr_slave_1: entered promiscuous mode [ 88.133451][ T5861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.141108][ T5861] Cannot create hsr debugfs directory [ 88.153216][ T5857] hsr_slave_0: entered promiscuous mode [ 88.159867][ T5857] hsr_slave_1: entered promiscuous mode [ 88.165981][ T5857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.173649][ T5857] Cannot create hsr debugfs directory [ 88.261001][ T5849] hsr_slave_0: entered promiscuous mode [ 88.267317][ T5849] hsr_slave_1: entered promiscuous mode [ 88.273811][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.281991][ T5849] Cannot create hsr debugfs directory [ 88.856907][ T5863] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.870912][ T5863] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.891962][ T5863] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.904261][ T5863] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.968596][ T5861] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.979418][ T5861] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.007572][ T5861] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.018911][ T5861] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.086429][ T5857] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.112664][ T5857] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.133997][ T5857] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.145609][ T5857] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.169447][ T5851] Bluetooth: hci0: command tx timeout [ 89.232573][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.249803][ T5851] Bluetooth: hci1: command tx timeout [ 89.279382][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.291560][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.324057][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.331017][ T5851] Bluetooth: hci2: command tx timeout [ 89.331063][ T5851] Bluetooth: hci3: command tx timeout [ 89.409921][ T51] Bluetooth: hci4: command tx timeout [ 89.412886][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.461881][ T5848] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.485054][ T5848] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.496597][ T5848] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.508825][ T5848] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.527133][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.585365][ T2976] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.592649][ T2976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.604476][ T2976] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.611624][ T2976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.658126][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.743589][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.764136][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.795870][ T2954] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.803115][ T2954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.831066][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.844653][ T3471] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.851917][ T3471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.900472][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.956897][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.003115][ T3446] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.010405][ T3446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.041781][ T3446] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.049059][ T3446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.075666][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.082986][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.122660][ T2976] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.129963][ T2976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.264025][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.298790][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.486115][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.526181][ T3482] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.533390][ T3482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.621853][ T3482] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.629098][ T3482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.685187][ T5863] veth0_vlan: entered promiscuous mode [ 90.758025][ T5863] veth1_vlan: entered promiscuous mode [ 90.794825][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.857005][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.954516][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.976187][ T5861] veth0_vlan: entered promiscuous mode [ 91.004682][ T5863] veth0_macvtap: entered promiscuous mode [ 91.053440][ T5863] veth1_macvtap: entered promiscuous mode [ 91.068394][ T5861] veth1_vlan: entered promiscuous mode [ 91.141892][ T5849] veth0_vlan: entered promiscuous mode [ 91.168542][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.185578][ T5849] veth1_vlan: entered promiscuous mode [ 91.212507][ T5861] veth0_macvtap: entered promiscuous mode [ 91.221695][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.254069][ T5857] veth0_vlan: entered promiscuous mode [ 91.259017][ T51] Bluetooth: hci0: command tx timeout [ 91.265446][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.277107][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.288779][ T5861] veth1_macvtap: entered promiscuous mode [ 91.311956][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.319948][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.331250][ T51] Bluetooth: hci1: command tx timeout [ 91.360145][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.376455][ T5857] veth1_vlan: entered promiscuous mode [ 91.411779][ T51] Bluetooth: hci3: command tx timeout [ 91.417236][ T51] Bluetooth: hci2: command tx timeout [ 91.427283][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.476625][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.490686][ T51] Bluetooth: hci4: command tx timeout [ 91.501758][ T5849] veth0_macvtap: entered promiscuous mode [ 91.515823][ T2954] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.547333][ T5849] veth1_macvtap: entered promiscuous mode [ 91.584717][ T2954] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.606579][ T2954] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.625567][ T5857] veth0_macvtap: entered promiscuous mode [ 91.636164][ T5857] veth1_macvtap: entered promiscuous mode [ 91.644259][ T2954] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.734822][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.773981][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.789492][ T2954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.798244][ T2954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.817790][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.832543][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.852525][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.861721][ T2976] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.875108][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.894118][ T979] cfg80211: failed to load regulatory.db [ 91.937797][ T2976] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.957695][ T2954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.971556][ T2954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.988020][ T2976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.002883][ T2976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.024342][ T3446] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.033529][ T3446] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.069134][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.105391][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.143957][ T5863] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.144236][ T3482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.172518][ T3482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.213711][ T5848] veth0_vlan: entered promiscuous mode [ 92.296246][ T5848] veth1_vlan: entered promiscuous mode [ 92.335444][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.365565][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.444648][ T3471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.462019][ T3471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.505948][ T5848] veth0_macvtap: entered promiscuous mode [ 92.517116][ T5972] Driver unsupported XDP return value 0 on prog (id 2) dev N/A, expect packet loss! [ 92.615581][ T5848] veth1_macvtap: entered promiscuous mode [ 92.627246][ T3482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.649771][ T3482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.665839][ T2976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.677015][ T2976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.723062][ T5978] netlink: 'syz.2.7': attribute type 4 has an invalid length. [ 92.755618][ T5978] netlink: 'syz.2.7': attribute type 4 has an invalid length. [ 92.757278][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.837869][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.875007][ T3471] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.952851][ T3471] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.016586][ T3471] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.045981][ T3471] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.104409][ T5990] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.1'. [ 93.108130][ T5985] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9'. [ 93.167495][ T5993] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.302254][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.337681][ T51] Bluetooth: hci0: command tx timeout [ 93.366353][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.410446][ T51] Bluetooth: hci1: command tx timeout [ 93.491563][ T51] Bluetooth: hci2: command tx timeout [ 93.497025][ T5851] Bluetooth: hci3: command tx timeout [ 93.506707][ T6000] trusted_key: syz.2.12 sent an empty control message without MSG_MORE. [ 93.545275][ T6004] macvlan0: entered allmulticast mode [ 93.551285][ T6004] veth1_vlan: entered allmulticast mode [ 93.567661][ T3482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.576886][ T5851] Bluetooth: hci4: command tx timeout [ 93.587959][ T3482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.611720][ T6004] veth1_vlan: left allmulticast mode [ 93.665027][ T6004] macvlan0 (unregistering): left allmulticast mode [ 93.695338][ T6012] netlink: 'syz.1.14': attribute type 11 has an invalid length. [ 93.733974][ T6011] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12'. [ 93.898244][ T6004] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14'. [ 94.309369][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16'. [ 95.710039][ T6036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16'. [ 95.721553][ T6048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.746844][ T6048] batadv_slave_1: entered promiscuous mode [ 96.022564][ T6058] netlink: 'syz.1.24': attribute type 1 has an invalid length. [ 96.047083][ T6059] netlink: 'syz.4.25': attribute type 10 has an invalid length. [ 96.068077][ T6064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27'. [ 96.080345][ T6059] netlink: 40 bytes leftover after parsing attributes in process `syz.4.25'. [ 96.151183][ T6070] netlink: 'syz.2.26': attribute type 1 has an invalid length. [ 96.200409][ T6059] bridge0: port 3(dummy0) entered blocking state [ 96.207669][ T6059] bridge0: port 3(dummy0) entered disabled state [ 96.249244][ T6059] dummy0: entered allmulticast mode [ 96.258139][ T6059] dummy0: entered promiscuous mode [ 96.265612][ T6059] bridge0: port 3(dummy0) entered blocking state [ 96.272193][ T6059] bridge0: port 3(dummy0) entered forwarding state [ 96.328683][ T6074] netlink: 'syz.3.28': attribute type 1 has an invalid length. [ 96.485352][ T6071] 8021q: VLANs not supported on ip6tnl0 [ 96.802930][ T6075] Zero length message leads to an empty skb [ 96.830117][ T6094] FAULT_INJECTION: forcing a failure. [ 96.830117][ T6094] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 96.899588][ T6094] CPU: 1 UID: 0 PID: 6094 Comm: syz.0.31 Not tainted 6.16.0-rc4-syzkaller-01139-gea988b450690 #0 PREEMPT(full) [ 96.899616][ T6094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 96.899636][ T6094] Call Trace: [ 96.899644][ T6094] [ 96.899652][ T6094] dump_stack_lvl+0x189/0x250 [ 96.899689][ T6094] ? __pfx____ratelimit+0x10/0x10 [ 96.899716][ T6094] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.899740][ T6094] ? __pfx__printk+0x10/0x10 [ 96.899778][ T6094] should_fail_ex+0x414/0x560 [ 96.899812][ T6094] _copy_to_user+0x31/0xb0 [ 96.899839][ T6094] simple_read_from_buffer+0xe1/0x170 [ 96.899878][ T6094] proc_fail_nth_read+0x1df/0x250 [ 96.899910][ T6094] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 96.899943][ T6094] ? rw_verify_area+0x258/0x650 [ 96.899965][ T6094] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 96.899996][ T6094] vfs_read+0x200/0x980 [ 96.900024][ T6094] ? __pfx___mutex_lock+0x10/0x10 [ 96.900052][ T6094] ? __pfx_vfs_read+0x10/0x10 [ 96.900077][ T6094] ? __fget_files+0x2a/0x420 [ 96.900109][ T6094] ? __fget_files+0x3a0/0x420 [ 96.900135][ T6094] ? __fget_files+0x2a/0x420 [ 96.900171][ T6094] ksys_read+0x145/0x250 [ 96.900192][ T6094] ? __fget_files+0x2a/0x420 [ 96.900221][ T6094] ? __pfx_ksys_read+0x10/0x10 [ 96.900250][ T6094] ? do_syscall_64+0xbe/0x3b0 [ 96.900281][ T6094] do_syscall_64+0xfa/0x3b0 [ 96.900307][ T6094] ? lockdep_hardirqs_on+0x9c/0x150 [ 96.900332][ T6094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.900352][ T6094] ? clear_bhb_loop+0x60/0xb0 [ 96.900376][ T6094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.900394][ T6094] RIP: 0033:0x7f0a4798d33c [ 96.900417][ T6094] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 96.900432][ T6094] RSP: 002b:00007f0a4876b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 96.900452][ T6094] RAX: ffffffffffffffda RBX: 00007f0a47bb5fa0 RCX: 00007f0a4798d33c [ 96.900466][ T6094] RDX: 000000000000000f RSI: 00007f0a4876b0a0 RDI: 0000000000000007 [ 96.900478][ T6094] RBP: 00007f0a4876b090 R08: 0000000000000000 R09: 0000000000000000 [ 96.900490][ T6094] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 96.900502][ T6094] R13: 0000000000000000 R14: 00007f0a47bb5fa0 R15: 00007ffc36320cc8 [ 96.900532][ T6094] [ 97.713639][ T6119] netlink: 48 bytes leftover after parsing attributes in process `syz.4.37'. [ 97.861053][ T6123] netlink: 36 bytes leftover after parsing attributes in process `syz.4.37'. [ 98.030195][ T6124] netlink: 'syz.3.39': attribute type 1 has an invalid length. [ 98.055248][ T6124] NCSI netlink: No device for ifindex 0 [ 98.202257][ T6132] __nla_validate_parse: 1 callbacks suppressed [ 98.202278][ T6132] netlink: 248 bytes leftover after parsing attributes in process `syz.0.40'. [ 98.313380][ T6136] netlink: 'syz.3.44': attribute type 21 has an invalid length. [ 98.338618][ T6136] netlink: 'syz.3.44': attribute type 1 has an invalid length. [ 98.447577][ T6146] syz.3.44 uses obsolete (PF_INET,SOCK_PACKET) [ 98.479647][ T6147] netlink: 24 bytes leftover after parsing attributes in process `syz.4.45'. [ 98.627092][ T6144] warning: `syz.4.45' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.641607][ T6156] netlink: 24 bytes leftover after parsing attributes in process `syz.2.47'. [ 98.738473][ T6162] tipc: Enabling of bearer rejected, failed to enable media [ 98.766461][ T6159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.47'. [ 98.802343][ T6159] nbd: must specify at least one socket [ 99.172213][ T6176] tipc: Started in network mode [ 99.201861][ T6184] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.217918][ T6176] tipc: Node identity 5a29f76d190a, cluster identity 4711 [ 99.245994][ T6176] tipc: Enabled bearer , priority 0 [ 99.289594][ T6186] syzkaller0: entered promiscuous mode [ 99.314936][ T6186] syzkaller0: entered allmulticast mode [ 99.458377][ T6186] tipc: Resetting bearer [ 99.505357][ T6174] tipc: Resetting bearer [ 99.548776][ T6174] tipc: Disabling bearer [ 99.953812][ T6216] netlink: 'syz.0.61': attribute type 2 has an invalid length. [ 100.285994][ T6232] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 100.387553][ T5913] IPVS: starting estimator thread 0... [ 100.509124][ T6235] IPVS: using max 27 ests per chain, 64800 per kthread [ 100.555014][ T6244] netlink: 32 bytes leftover after parsing attributes in process `syz.2.69'. [ 100.564751][ T6244] netlink: 24 bytes leftover after parsing attributes in process `syz.2.69'. [ 100.825831][ T6249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.70'. [ 101.214745][ T6262] netlink: 'syz.2.73': attribute type 10 has an invalid length. [ 101.292962][ T6262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.316848][ T6262] team0: Port device bond0 added [ 101.389622][ T6269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.77'. [ 101.429202][ T6269] netlink: 24 bytes leftover after parsing attributes in process `syz.3.77'. [ 101.562498][ T6276] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 101.827946][ T6294] netlink: 68 bytes leftover after parsing attributes in process `syz.4.84'. [ 101.901553][ T6285] netlink: zone id is out of range [ 102.021852][ T6301] FAULT_INJECTION: forcing a failure. [ 102.021852][ T6301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.097400][ T6301] CPU: 0 UID: 0 PID: 6301 Comm: syz.3.85 Not tainted 6.16.0-rc4-syzkaller-01139-gea988b450690 #0 PREEMPT(full) [ 102.097431][ T6301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 102.097443][ T6301] Call Trace: [ 102.097452][ T6301] [ 102.097461][ T6301] dump_stack_lvl+0x189/0x250 [ 102.097493][ T6301] ? __pfx____ratelimit+0x10/0x10 [ 102.097523][ T6301] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.097549][ T6301] ? __pfx__printk+0x10/0x10 [ 102.097579][ T6301] ? __might_fault+0xb0/0x130 [ 102.097619][ T6301] should_fail_ex+0x414/0x560 [ 102.097656][ T6301] _copy_from_user+0x2d/0xb0 [ 102.097684][ T6301] ___sys_sendmsg+0x158/0x2a0 [ 102.097720][ T6301] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.097779][ T6301] ? __fget_files+0x2a/0x420 [ 102.097807][ T6301] ? __fget_files+0x3a0/0x420 [ 102.097846][ T6301] __x64_sys_sendmsg+0x19b/0x260 [ 102.097870][ T6301] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 102.097900][ T6301] ? __pfx_ksys_write+0x10/0x10 [ 102.097923][ T6301] ? rcu_is_watching+0x15/0xb0 [ 102.097953][ T6301] ? do_syscall_64+0xbe/0x3b0 [ 102.097986][ T6301] do_syscall_64+0xfa/0x3b0 [ 102.098013][ T6301] ? lockdep_hardirqs_on+0x9c/0x150 [ 102.098041][ T6301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.098061][ T6301] ? clear_bhb_loop+0x60/0xb0 [ 102.098087][ T6301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.098107][ T6301] RIP: 0033:0x7f48a3d8e929 [ 102.098126][ T6301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.098143][ T6301] RSP: 002b:00007f48a4b8b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.098164][ T6301] RAX: ffffffffffffffda RBX: 00007f48a3fb5fa0 RCX: 00007f48a3d8e929 [ 102.098179][ T6301] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003 [ 102.098192][ T6301] RBP: 00007f48a4b8b090 R08: 0000000000000000 R09: 0000000000000000 [ 102.098205][ T6301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.098217][ T6301] R13: 0000000000000000 R14: 00007f48a3fb5fa0 R15: 00007ffd3dc7bbb8 [ 102.098248][ T6301] [ 102.664288][ T6326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.696103][ T6326] batadv_slave_0: entered promiscuous mode [ 103.050457][ T6335] netlink: 'syz.0.94': attribute type 10 has an invalid length. [ 103.058243][ T6336] netlink: 'syz.0.94': attribute type 10 has an invalid length. [ 103.139189][ T6335] dummy0: entered promiscuous mode [ 103.144377][ T6335] dummy0: entered allmulticast mode [ 103.213820][ T6335] bridge0: port 3(dummy0) entered blocking state [ 103.243321][ T6335] bridge0: port 3(dummy0) entered disabled state [ 103.268301][ T6335] bridge0: port 3(dummy0) entered blocking state [ 103.274878][ T6335] bridge0: port 3(dummy0) entered forwarding state [ 103.823378][ T6364] syz_tun: entered promiscuous mode [ 103.835590][ T6364] vlan2: entered promiscuous mode [ 104.057740][ T6379] __nla_validate_parse: 7 callbacks suppressed [ 104.057758][ T6379] netlink: 68 bytes leftover after parsing attributes in process `syz.2.105'. [ 104.517859][ T6394] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 104.550114][ T6390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.109'. [ 104.558231][ T6391] tipc: Started in network mode [ 104.563944][ T6391] tipc: Node identity a2496b3f8159, cluster identity 4711 [ 104.579353][ T6394] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 104.609510][ T6391] tipc: Enabled bearer , priority 0 [ 104.638851][ T6396] syzkaller0: entered promiscuous mode [ 104.644781][ T6396] syzkaller0: entered allmulticast mode [ 104.652989][ T6394] netlink: 156 bytes leftover after parsing attributes in process `syz.2.110'. [ 104.748078][ T6396] netlink: 52 bytes leftover after parsing attributes in process `syz.3.111'. [ 104.947442][ T6415] sctp: [Deprecated]: syz.0.116 (pid 6415) Use of int in max_burst socket option. [ 104.947442][ T6415] Use struct sctp_assoc_value instead [ 104.986718][ T6391] tipc: Resetting bearer [ 104.997795][ T6417] netlink: 'syz.0.116': attribute type 2 has an invalid length. [ 105.268761][ T6426] netlink: 36 bytes leftover after parsing attributes in process `syz.4.119'. [ 105.300742][ T6427] netlink: 92 bytes leftover after parsing attributes in process `syz.0.120'. [ 105.371618][ T6410] tipc: Resetting bearer [ 105.540090][ T6410] tipc: Disabling bearer [ 105.580902][ T6432] netlink: 68 bytes leftover after parsing attributes in process `syz.0.121'. [ 105.617711][ T6430] netlink: 140 bytes leftover after parsing attributes in process `syz.0.121'. [ 105.663647][ T6431] netlink: 'syz.1.118': attribute type 5 has an invalid length. [ 105.671559][ T6431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.118'. [ 105.916862][ T6436] openvswitch: netlink: Tunnel attr 226 out of range max 16 [ 106.113765][ T6443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.196863][ T6443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.281799][ T6445] Cannot find add_set index 0 as target [ 106.289206][ T6441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.684195][ T6457] FAULT_INJECTION: forcing a failure. [ 106.684195][ T6457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.704940][ T6457] CPU: 1 UID: 0 PID: 6457 Comm: syz.1.129 Not tainted 6.16.0-rc4-syzkaller-01139-gea988b450690 #0 PREEMPT(full) [ 106.704969][ T6457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 106.704982][ T6457] Call Trace: [ 106.704990][ T6457] [ 106.704999][ T6457] dump_stack_lvl+0x189/0x250 [ 106.705029][ T6457] ? __pfx____ratelimit+0x10/0x10 [ 106.705059][ T6457] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.705085][ T6457] ? __pfx__printk+0x10/0x10 [ 106.705115][ T6457] ? __might_fault+0xb0/0x130 [ 106.705156][ T6457] should_fail_ex+0x414/0x560 [ 106.705193][ T6457] _copy_from_iter+0x1db/0x16f0 [ 106.705222][ T6457] ? rcu_is_watching+0x15/0xb0 [ 106.705248][ T6457] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 106.705277][ T6457] ? __pfx__copy_from_iter+0x10/0x10 [ 106.705306][ T6457] ? __build_skb_around+0x257/0x3e0 [ 106.705341][ T6457] ? netlink_sendmsg+0x642/0xb30 [ 106.705369][ T6457] ? skb_put+0x11b/0x210 [ 106.705405][ T6457] netlink_sendmsg+0x6b2/0xb30 [ 106.705445][ T6457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.705479][ T6457] ? aa_sock_msg_perm+0x94/0x160 [ 106.705513][ T6457] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 106.705532][ T6457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.705563][ T6457] __sock_sendmsg+0x219/0x270 [ 106.705592][ T6457] ____sys_sendmsg+0x505/0x830 [ 106.705633][ T6457] ? __pfx_____sys_sendmsg+0x10/0x10 [ 106.705677][ T6457] ? import_iovec+0x74/0xa0 [ 106.705710][ T6457] ___sys_sendmsg+0x21f/0x2a0 [ 106.705733][ T6457] ? __pfx____sys_sendmsg+0x10/0x10 [ 106.705797][ T6457] ? __fget_files+0x2a/0x420 [ 106.705825][ T6457] ? __fget_files+0x3a0/0x420 [ 106.705878][ T6457] __x64_sys_sendmsg+0x19b/0x260 [ 106.705900][ T6457] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 106.705937][ T6457] ? __pfx_ksys_write+0x10/0x10 [ 106.705959][ T6457] ? rcu_is_watching+0x15/0xb0 [ 106.705988][ T6457] ? do_syscall_64+0xbe/0x3b0 [ 106.706020][ T6457] do_syscall_64+0xfa/0x3b0 [ 106.706046][ T6457] ? lockdep_hardirqs_on+0x9c/0x150 [ 106.706072][ T6457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.706092][ T6457] ? clear_bhb_loop+0x60/0xb0 [ 106.706135][ T6457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.706155][ T6457] RIP: 0033:0x7f46e478e929 [ 106.706173][ T6457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.706190][ T6457] RSP: 002b:00007f46e56d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.706212][ T6457] RAX: ffffffffffffffda RBX: 00007f46e49b5fa0 RCX: 00007f46e478e929 [ 106.706227][ T6457] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003 [ 106.706240][ T6457] RBP: 00007f46e56d1090 R08: 0000000000000000 R09: 0000000000000000 [ 106.706253][ T6457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.706265][ T6457] R13: 0000000000000000 R14: 00007f46e49b5fa0 R15: 00007fffca17bc98 [ 106.706299][ T6457] [ 107.283775][ T6471] 8021q: VLANs not supported on wg0 [ 107.600727][ T6490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.135'. [ 107.634974][ T6486] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 107.639416][ T3446] bond0: (slave bond_slave_0): interface is now down [ 107.686228][ T3446] bond0: (slave bond_slave_1): interface is now down [ 107.719993][ T49] bond0: (slave bond_slave_0): interface is now down [ 107.726801][ T49] bond0: (slave bond_slave_1): interface is now down [ 107.760297][ T49] bond0: (slave bond_slave_0): interface is now down [ 107.768314][ T49] bond0: (slave bond_slave_1): interface is now down [ 107.806639][ T49] bond0: now running without any active interface! [ 108.123366][ T6506] FAULT_INJECTION: forcing a failure. [ 108.123366][ T6506] name failslab, interval 1, probability 0, space 0, times 0 [ 108.137050][ T6506] CPU: 1 UID: 0 PID: 6506 Comm: syz.0.142 Not tainted 6.16.0-rc4-syzkaller-01139-gea988b450690 #0 PREEMPT(full) [ 108.137077][ T6506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 108.137089][ T6506] Call Trace: [ 108.137097][ T6506] [ 108.137105][ T6506] dump_stack_lvl+0x189/0x250 [ 108.137134][ T6506] ? __pfx____ratelimit+0x10/0x10 [ 108.137161][ T6506] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.137184][ T6506] ? __pfx__printk+0x10/0x10 [ 108.137219][ T6506] ? ref_tracker_alloc+0x318/0x460 [ 108.137241][ T6506] should_fail_ex+0x414/0x560 [ 108.137274][ T6506] should_failslab+0xa8/0x100 [ 108.137302][ T6506] kmem_cache_alloc_noprof+0x73/0x3c0 [ 108.137343][ T6506] ? skb_clone+0x212/0x3a0 [ 108.137364][ T6506] skb_clone+0x212/0x3a0 [ 108.137383][ T6506] __netlink_deliver_tap+0x404/0x850 [ 108.137417][ T6506] ? netlink_deliver_tap+0x2e/0x1b0 [ 108.137440][ T6506] netlink_deliver_tap+0x19c/0x1b0 [ 108.137463][ T6506] netlink_unicast+0x72f/0x8d0 [ 108.137492][ T6506] netlink_sendmsg+0x805/0xb30 [ 108.137522][ T6506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.137548][ T6506] ? aa_sock_msg_perm+0x94/0x160 [ 108.137581][ T6506] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 108.137596][ T6506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.137620][ T6506] __sock_sendmsg+0x219/0x270 [ 108.137642][ T6506] ____sys_sendmsg+0x505/0x830 [ 108.137673][ T6506] ? __pfx_____sys_sendmsg+0x10/0x10 [ 108.137706][ T6506] ? import_iovec+0x74/0xa0 [ 108.137729][ T6506] ___sys_sendmsg+0x21f/0x2a0 [ 108.137757][ T6506] ? __pfx____sys_sendmsg+0x10/0x10 [ 108.137804][ T6506] ? __fget_files+0x2a/0x420 [ 108.137825][ T6506] ? __fget_files+0x3a0/0x420 [ 108.137854][ T6506] __x64_sys_sendmsg+0x19b/0x260 [ 108.137871][ T6506] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 108.137893][ T6506] ? __pfx_ksys_write+0x10/0x10 [ 108.137909][ T6506] ? rcu_is_watching+0x15/0xb0 [ 108.137931][ T6506] ? do_syscall_64+0xbe/0x3b0 [ 108.137956][ T6506] do_syscall_64+0xfa/0x3b0 [ 108.137978][ T6506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.137992][ T6506] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 108.138008][ T6506] ? clear_bhb_loop+0x60/0xb0 [ 108.138026][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.138040][ T6506] RIP: 0033:0x7f0a4798e929 [ 108.138054][ T6506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.138066][ T6506] RSP: 002b:00007f0a4876b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.138083][ T6506] RAX: ffffffffffffffda RBX: 00007f0a47bb5fa0 RCX: 00007f0a4798e929 [ 108.138094][ T6506] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003 [ 108.138103][ T6506] RBP: 00007f0a4876b090 R08: 0000000000000000 R09: 0000000000000000 [ 108.138112][ T6506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.138121][ T6506] R13: 0000000000000000 R14: 00007f0a47bb5fa0 R15: 00007ffc36320cc8 [ 108.138144][ T6506] [ 109.114382][ T6538] __nla_validate_parse: 2 callbacks suppressed [ 109.114402][ T6538] netlink: 68 bytes leftover after parsing attributes in process `syz.2.153'. [ 109.390509][ T6554] netlink: 68 bytes leftover after parsing attributes in process `syz.0.157'. [ 109.419385][ T6554] FAULT_INJECTION: forcing a failure. [ 109.419385][ T6554] name failslab, interval 1, probability 0, space 0, times 0 [ 109.435084][ T6558] netlink: 'syz.1.159': attribute type 11 has an invalid length. [ 109.466665][ T6554] CPU: 1 UID: 0 PID: 6554 Comm: syz.0.157 Not tainted 6.16.0-rc4-syzkaller-01139-gea988b450690 #0 PREEMPT(full) [ 109.466696][ T6554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 109.466709][ T6554] Call Trace: [ 109.466718][ T6554] [ 109.466727][ T6554] dump_stack_lvl+0x189/0x250 [ 109.466758][ T6554] ? __pfx____ratelimit+0x10/0x10 [ 109.466786][ T6554] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.466812][ T6554] ? __pfx__printk+0x10/0x10 [ 109.466847][ T6554] ? __pfx___might_resched+0x10/0x10 [ 109.466872][ T6554] ? fs_reclaim_acquire+0x7d/0x100 [ 109.466907][ T6554] should_fail_ex+0x414/0x560 [ 109.466944][ T6554] should_failslab+0xa8/0x100 [ 109.466974][ T6554] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 109.467001][ T6554] ? __alloc_skb+0x112/0x2d0 [ 109.467035][ T6554] __alloc_skb+0x112/0x2d0 [ 109.467070][ T6554] netlink_ack+0x146/0xa50 [ 109.467095][ T6554] ? __pfx___mutex_trylock_common+0x10/0x10 [ 109.467128][ T6554] ? rcu_is_watching+0x15/0xb0 [ 109.467164][ T6554] netlink_rcv_skb+0x28c/0x470 [ 109.467193][ T6554] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 109.467226][ T6554] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 109.467273][ T6554] ? netlink_deliver_tap+0x2e/0x1b0 [ 109.467300][ T6554] ? netlink_deliver_tap+0x2e/0x1b0 [ 109.467331][ T6554] xfrm_netlink_rcv+0x79/0x90 [ 109.467361][ T6554] netlink_unicast+0x758/0x8d0 [ 109.467399][ T6554] netlink_sendmsg+0x805/0xb30 [ 109.467438][ T6554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.467470][ T6554] ? aa_sock_msg_perm+0x94/0x160 [ 109.467504][ T6554] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 109.467534][ T6554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.467563][ T6554] __sock_sendmsg+0x219/0x270 [ 109.467591][ T6554] ____sys_sendmsg+0x505/0x830 [ 109.467632][ T6554] ? __pfx_____sys_sendmsg+0x10/0x10 [ 109.467680][ T6554] ? import_iovec+0x74/0xa0 [ 109.467708][ T6554] ___sys_sendmsg+0x21f/0x2a0 [ 109.467730][ T6554] ? __pfx____sys_sendmsg+0x10/0x10 [ 109.467786][ T6554] ? __fget_files+0x2a/0x420 [ 109.467813][ T6554] ? __fget_files+0x3a0/0x420 [ 109.467852][ T6554] __x64_sys_sendmsg+0x19b/0x260 [ 109.467874][ T6554] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 109.467903][ T6554] ? __pfx_ksys_write+0x10/0x10 [ 109.467925][ T6554] ? rcu_is_watching+0x15/0xb0 [ 109.467954][ T6554] ? do_syscall_64+0xbe/0x3b0 [ 109.467986][ T6554] do_syscall_64+0xfa/0x3b0 [ 109.468013][ T6554] ? lockdep_hardirqs_on+0x9c/0x150 [ 109.468039][ T6554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.468059][ T6554] ? clear_bhb_loop+0x60/0xb0 [ 109.468083][ T6554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.468103][ T6554] RIP: 0033:0x7f0a4798e929 [ 109.468120][ T6554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.468137][ T6554] RSP: 002b:00007f0a4876b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.468157][ T6554] RAX: ffffffffffffffda RBX: 00007f0a47bb5fa0 RCX: 00007f0a4798e929 [ 109.468171][ T6554] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003 [ 109.468184][ T6554] RBP: 00007f0a4876b090 R08: 0000000000000000 R09: 0000000000000000 [ 109.468196][ T6554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.468207][ T6554] R13: 0000000000000000 R14: 00007f0a47bb5fa0 R15: 00007ffc36320cc8 [ 109.468238][ T6554] [ 110.580726][ T6592] rdma_op ffff8880555f11f0 conn xmit_rdma 0000000000000000 [ 110.612650][ T6593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.169'. [ 110.659905][ T6590] netlink: 68 bytes leftover after parsing attributes in process `syz.4.167'. [ 110.715512][ T6593] bridge_slave_1: left allmulticast mode [ 110.722825][ T6593] bridge_slave_1: left promiscuous mode [ 110.739428][ T6593] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.762963][ T6599] netlink: 'syz.0.170': attribute type 1 has an invalid length. [ 110.778911][ T6599] netlink: 224 bytes leftover after parsing attributes in process `syz.0.170'. [ 110.807018][ T6599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'. [ 110.874372][ T6593] bridge_slave_0: left allmulticast mode [ 110.881437][ T6593] bridge_slave_0: left promiscuous mode [ 110.887266][ T6593] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.936305][ T6599] netlink: 48 bytes leftover after parsing attributes in process `syz.0.170'. [ 111.213405][ T6608] FAULT_INJECTION: forcing a failure. [ 111.213405][ T6608] name failslab, interval 1, probability 0, space 0, times 0 [ 111.231361][ T6608] CPU: 1 UID: 0 PID: 6608 Comm: syz.0.173 Not tainted 6.16.0-rc4-syzkaller-01139-gea988b450690 #0 PREEMPT(full) [ 111.231390][ T6608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 111.231403][ T6608] Call Trace: [ 111.231411][ T6608] [ 111.231420][ T6608] dump_stack_lvl+0x189/0x250 [ 111.231452][ T6608] ? __pfx____ratelimit+0x10/0x10 [ 111.231481][ T6608] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.231515][ T6608] ? __pfx__printk+0x10/0x10 [ 111.231549][ T6608] ? __pfx___might_resched+0x10/0x10 [ 111.231575][ T6608] ? fs_reclaim_acquire+0x7d/0x100 [ 111.231612][ T6608] should_fail_ex+0x414/0x560 [ 111.231650][ T6608] should_failslab+0xa8/0x100 [ 111.231682][ T6608] __kmalloc_noprof+0xcb/0x4f0 [ 111.231708][ T6608] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 111.231730][ T6608] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 111.231762][ T6608] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 111.231794][ T6608] genl_family_rcv_msg_doit+0xb8/0x300 [ 111.231824][ T6608] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 111.231849][ T6608] ? rcu_is_watching+0x15/0xb0 [ 111.231879][ T6608] ? apparmor_capable+0x137/0x1b0 [ 111.231907][ T6608] ? bpf_lsm_capable+0x9/0x20 [ 111.231933][ T6608] ? security_capable+0x7e/0x2e0 [ 111.231973][ T6608] genl_rcv_msg+0x60e/0x790 [ 111.232003][ T6608] ? __pfx_genl_rcv_msg+0x10/0x10 [ 111.232022][ T6608] ? ref_tracker_free+0x63a/0x7d0 [ 111.232039][ T6608] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 111.232059][ T6608] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 111.232078][ T6608] ? __pfx_nl80211_post_doit+0x10/0x10 [ 111.232102][ T6608] ? __pfx_ref_tracker_free+0x10/0x10 [ 111.232134][ T6608] netlink_rcv_skb+0x205/0x470 [ 111.232164][ T6608] ? __pfx_genl_rcv_msg+0x10/0x10 [ 111.232187][ T6608] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 111.232265][ T6608] ? down_read+0x1ad/0x2e0 [ 111.232301][ T6608] genl_rcv+0x28/0x40 [ 111.232324][ T6608] netlink_unicast+0x758/0x8d0 [ 111.232364][ T6608] netlink_sendmsg+0x805/0xb30 [ 111.232404][ T6608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.232438][ T6608] ? aa_sock_msg_perm+0x94/0x160 [ 111.232473][ T6608] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 111.232499][ T6608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.232528][ T6608] __sock_sendmsg+0x219/0x270 [ 111.232557][ T6608] ____sys_sendmsg+0x505/0x830 [ 111.232594][ T6608] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.232641][ T6608] ? import_iovec+0x74/0xa0 [ 111.232672][ T6608] ___sys_sendmsg+0x21f/0x2a0 [ 111.232696][ T6608] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.232750][ T6608] ? __fget_files+0x2a/0x420 [ 111.232774][ T6608] ? __fget_files+0x3a0/0x420 [ 111.232810][ T6608] __x64_sys_sendmsg+0x19b/0x260 [ 111.232833][ T6608] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 111.232863][ T6608] ? __pfx_ksys_write+0x10/0x10 [ 111.232886][ T6608] ? rcu_is_watching+0x15/0xb0 [ 111.232918][ T6608] ? do_syscall_64+0xbe/0x3b0 [ 111.232947][ T6608] do_syscall_64+0xfa/0x3b0 [ 111.232971][ T6608] ? lockdep_hardirqs_on+0x9c/0x150 [ 111.232998][ T6608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.233017][ T6608] ? clear_bhb_loop+0x60/0xb0 [ 111.233039][ T6608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.233055][ T6608] RIP: 0033:0x7f0a4798e929 [ 111.233071][ T6608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.233085][ T6608] RSP: 002b:00007f0a4876b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.233103][ T6608] RAX: ffffffffffffffda RBX: 00007f0a47bb5fa0 RCX: 00007f0a4798e929 [ 111.233115][ T6608] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 111.233125][ T6608] RBP: 00007f0a4876b090 R08: 0000000000000000 R09: 0000000000000000 [ 111.233135][ T6608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.233144][ T6608] R13: 0000000000000000 R14: 00007f0a47bb5fa0 R15: 00007ffc36320cc8 [ 111.233171][ T6608] [ 112.053402][ T6618] macvlan0: entered allmulticast mode [ 112.059543][ T6618] veth1_vlan: entered allmulticast mode [ 112.092227][ T6618] veth1_vlan: left allmulticast mode [ 112.163280][ T6622] netlink: 'syz.4.176': attribute type 11 has an invalid length. [ 112.215439][ T6618] macvlan0 (unregistering): left allmulticast mode [ 112.260457][ T6626] netlink: 'syz.0.179': attribute type 15 has an invalid length. [ 112.293708][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.180'. [ 112.303738][ T6628] netlink: 48 bytes leftover after parsing attributes in process `syz.1.180'. [ 112.758031][ T6645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.183'. [ 112.765442][ T6642] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 112.776036][ T6644] FAULT_INJECTION: forcing a failure. [ 112.776036][ T6644] name failslab, interval 1, probability 0, space 0, times 0 [ 112.778295][ T2954] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 112.848711][ T6648] netlink: 'syz.3.187': attribute type 10 has an invalid length. [ 112.881209][ T6644] CPU: 0 UID: 0 PID: 6644 Comm: syz.0.185 Not tainted 6.16.0-rc4-syzkaller-01139-gea988b450690 #0 PREEMPT(full) [ 112.881240][ T6644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 112.881252][ T6644] Call Trace: [ 112.881260][ T6644] [ 112.881269][ T6644] dump_stack_lvl+0x189/0x250 [ 112.881299][ T6644] ? __pfx____ratelimit+0x10/0x10 [ 112.881328][ T6644] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.881353][ T6644] ? __pfx__printk+0x10/0x10 [ 112.881388][ T6644] ? __pfx___might_resched+0x10/0x10 [ 112.881413][ T6644] ? fs_reclaim_acquire+0x7d/0x100 [ 112.881449][ T6644] should_fail_ex+0x414/0x560 [ 112.881486][ T6644] should_failslab+0xa8/0x100 [ 112.881515][ T6644] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 112.881542][ T6644] ? __alloc_skb+0x112/0x2d0 [ 112.881577][ T6644] __alloc_skb+0x112/0x2d0 [ 112.881612][ T6644] netlink_ack+0x146/0xa50 [ 112.881637][ T6644] ? __pfx_genl_rcv_msg+0x10/0x10 [ 112.881668][ T6644] ? ref_tracker_free+0x63a/0x7d0 [ 112.881685][ T6644] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 112.881722][ T6644] ? __pfx_nl80211_post_doit+0x10/0x10 [ 112.881745][ T6644] ? __pfx_ref_tracker_free+0x10/0x10 [ 112.881775][ T6644] netlink_rcv_skb+0x28c/0x470 [ 112.881803][ T6644] ? __pfx_genl_rcv_msg+0x10/0x10 [ 112.881843][ T6644] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 112.881889][ T6644] ? down_read+0x1ad/0x2e0 [ 112.881924][ T6644] genl_rcv+0x28/0x40 [ 112.881942][ T6644] netlink_unicast+0x758/0x8d0 [ 112.881980][ T6644] netlink_sendmsg+0x805/0xb30 [ 112.882021][ T6644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.882055][ T6644] ? aa_sock_msg_perm+0x94/0x160 [ 112.882098][ T6644] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 112.882118][ T6644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.882148][ T6644] __sock_sendmsg+0x219/0x270 [ 112.882177][ T6644] ____sys_sendmsg+0x505/0x830 [ 112.882218][ T6644] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.882262][ T6644] ? import_iovec+0x74/0xa0 [ 112.882292][ T6644] ___sys_sendmsg+0x21f/0x2a0 [ 112.882316][ T6644] ? __pfx____sys_sendmsg+0x10/0x10 [ 112.882376][ T6644] ? __fget_files+0x2a/0x420 [ 112.882405][ T6644] ? __fget_files+0x3a0/0x420 [ 112.882446][ T6644] __x64_sys_sendmsg+0x19b/0x260 [ 112.882470][ T6644] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 112.882502][ T6644] ? __pfx_ksys_write+0x10/0x10 [ 112.882535][ T6644] ? do_syscall_64+0xbe/0x3b0 [ 112.882569][ T6644] do_syscall_64+0xfa/0x3b0 [ 112.882597][ T6644] ? lockdep_hardirqs_on+0x9c/0x150 [ 112.882625][ T6644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.882646][ T6644] ? clear_bhb_loop+0x60/0xb0 [ 112.882672][ T6644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.882693][ T6644] RIP: 0033:0x7f0a4798e929 [ 112.882712][ T6644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.882730][ T6644] RSP: 002b:00007f0a4876b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.882753][ T6644] RAX: ffffffffffffffda RBX: 00007f0a47bb5fa0 RCX: 00007f0a4798e929 [ 112.882767][ T6644] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 112.882780][ T6644] RBP: 00007f0a4876b090 R08: 0000000000000000 R09: 0000000000000000 [ 112.882792][ T6644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.882803][ T6644] R13: 0000000000000000 R14: 00007f0a47bb5fa0 R15: 00007ffc36320cc8 [ 112.882834][ T6644] [ 113.222802][ T6652] netlink: 'syz.3.187': attribute type 10 has an invalid length. [ 113.253324][ T6648] batman_adv: batadv0: Adding interface: team0 [ 113.259679][ T6648] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.284976][ T6648] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 113.296242][ T6652] team0: entered promiscuous mode [ 113.314675][ T6652] team_slave_0: entered promiscuous mode [ 113.358005][ T6652] team_slave_1: entered promiscuous mode [ 113.407808][ T6652] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.421685][ T6652] batman_adv: batadv0: Interface activated: team0 [ 113.428247][ T6652] batman_adv: batadv0: Interface deactivated: team0 [ 113.435442][ T6652] batman_adv: batadv0: Removing interface: team0 [ 113.452702][ T6652] bridge0: port 3(team0) entered blocking state [ 113.459567][ T6652] bridge0: port 3(team0) entered disabled state [ 113.466097][ T6652] team0: entered allmulticast mode [ 113.471305][ T6652] team_slave_0: entered allmulticast mode [ 113.489072][ T6652] team_slave_1: entered allmulticast mode [ 113.506858][ T6652] bridge0: port 3(team0) entered blocking state [ 113.514107][ T6652] bridge0: port 3(team0) entered forwarding state [ 113.647625][ T6665] netlink: 'syz.2.191': attribute type 2 has an invalid length. [ 113.679283][ T6665] netlink: 'syz.2.191': attribute type 1 has an invalid length. [ 113.706814][ T6667] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 113.811362][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 113.872520][ T6670] dummy0: left allmulticast mode [ 113.877624][ T6670] dummy0: left promiscuous mode [ 113.882895][ T6670] bridge0: port 3(dummy0) entered disabled state [ 113.970624][ T6670] bridge_slave_0: left allmulticast mode [ 114.030851][ T6670] bridge_slave_0: left promiscuous mode [ 114.036766][ T6670] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.138716][ T6670] bridge_slave_1: left allmulticast mode [ 114.153923][ T6683] __nla_validate_parse: 5 callbacks suppressed [ 114.153943][ T6683] netlink: 16 bytes leftover after parsing attributes in process `syz.3.196'. [ 114.176654][ T6670] bridge_slave_1: left promiscuous mode [ 114.199452][ T6670] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.283536][ T6670] bond0: (slave bond_slave_0): Releasing backup interface [ 114.358085][ T6670] bond0: (slave bond_slave_1): Releasing backup interface [ 114.428050][ T6691] netlink: 32 bytes leftover after parsing attributes in process `syz.3.196'. [ 114.460210][ T6670] team0: Port device team_slave_0 removed [ 114.528307][ T6670] team0: Port device team_slave_1 removed [ 114.535653][ T6670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.550967][ T6670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.579371][ T6670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.602343][ T6670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.602586][ T6731] netlink: 788 bytes leftover after parsing attributes in process `syz.0.204'. [ 115.604846][ T6730] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 116.045998][ T6745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.210'. [ 116.863519][ T6793] netlink: 'syz.1.222': attribute type 11 has an invalid length. [ 116.966824][ T6797] pimreg: tun_chr_ioctl cmd 2147767506 [ 117.067946][ T6808] netlink: 'syz.4.225': attribute type 11 has an invalid length. [ 117.249170][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 117.358400][ T6821] netlink: 20 bytes leftover after parsing attributes in process `syz.0.228'. [ 117.377014][ T6820] netlink: 20 bytes leftover after parsing attributes in process `syz.0.228'. [ 117.606029][ T6827] syzkaller0: entered promiscuous mode [ 117.639133][ T6827] syzkaller0: entered allmulticast mode [ 117.764718][ T6840] hsr0: entered allmulticast mode [ 117.770024][ T6840] hsr_slave_0: entered allmulticast mode [ 117.775863][ T6840] hsr_slave_1: entered allmulticast mode [ 118.059806][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'. [ 118.144649][ T6846] pim6reg1: entered promiscuous mode [ 118.152961][ T6851] x_tables: duplicate underflow at hook 2 [ 118.159467][ T6846] pim6reg1: entered allmulticast mode [ 118.175864][ T6856] netlink: 32 bytes leftover after parsing attributes in process `syz.3.238'. [ 118.397473][ T6858] macvlan0: entered allmulticast mode [ 118.426686][ T6865] netlink: 60 bytes leftover after parsing attributes in process `syz.2.241'. [ 118.437208][ T6858] veth1_vlan: entered allmulticast mode [ 118.480335][ T6858] netlink: 'syz.3.239': attribute type 11 has an invalid length. [ 118.492239][ T6865] unsupported nlmsg_type 40 [ 118.510309][ T6863] veth1_vlan: left allmulticast mode [ 118.601559][ T6863] macvlan0 (unregistering): left allmulticast mode [ 118.622069][ T6873] xt_TPROXY: Can be used only with -p tcp or -p udp [ 119.605150][ T6905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.249'. [ 119.962633][ T6907] netlink: 'syz.3.246': attribute type 10 has an invalid length. [ 120.474583][ T6907] veth0_vlan: left promiscuous mode [ 120.483482][ T6907] veth0_vlan: entered promiscuous mode [ 120.546988][ T6907] team0: Device veth0_vlan failed to register rx_handler [ 120.650343][ T6918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.250'. [ 120.924069][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.254'. [ 121.059496][ T6933] geneve2: entered promiscuous mode [ 121.081978][ T6933] geneve2: entered allmulticast mode [ 121.512469][ T6955] netlink: 'syz.1.257': attribute type 11 has an invalid length. [ 122.083612][ T6969] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 122.149288][ T6971] veth0: entered promiscuous mode [ 122.165014][ T6971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.261'. [ 122.355378][ T6984] netlink: 28 bytes leftover after parsing attributes in process `syz.3.264'. [ 122.395886][ T6984] netlink: 28 bytes leftover after parsing attributes in process `syz.3.264'. [ 122.460884][ T6976] netlink: 40 bytes leftover after parsing attributes in process `syz.0.263'. [ 122.482187][ T6976] netlink: 40 bytes leftover after parsing attributes in process `syz.0.263'. [ 122.492343][ T6976] netlink: 11 bytes leftover after parsing attributes in process `syz.0.263'. [ 122.538102][ T6984] dummy0: entered promiscuous mode [ 122.629129][ T6984] dummy0: left promiscuous mode [ 122.753713][ T6996] bond0: entered promiscuous mode [ 122.786127][ T6996] macvlan1: entered promiscuous mode [ 122.798002][ T7005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.266'. [ 122.800330][ T6996] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 122.861135][ T6996] hsr1: entered promiscuous mode [ 123.003481][ T7005] gretap1: entered promiscuous mode [ 123.042827][ T7017] netlink: 'syz.3.271': attribute type 11 has an invalid length. [ 123.306780][ T7023] netlink: 'syz.0.273': attribute type 1 has an invalid length. [ 123.320970][ T7026] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 123.582101][ T7029] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 123.626317][ T5979] IPVS: starting estimator thread 0... [ 123.653687][ T7029] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 123.693294][ T7039] syz.4.279 (7039) used obsolete PPPIOCDETACH ioctl [ 123.729199][ T7037] IPVS: using max 27 ests per chain, 64800 per kthread [ 123.872475][ T7048] Cannot find set identified by id 0 to match [ 124.036765][ T7041] netlink: 'syz.3.277': attribute type 13 has an invalid length. [ 124.061537][ T7041] netlink: 'syz.3.277': attribute type 17 has an invalid length. [ 124.233372][ T7046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.240752][ T7061] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 124.365712][ T7065] macvlan0: entered allmulticast mode [ 124.366706][ T7067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.375674][ T7065] veth1_vlan: entered allmulticast mode [ 124.453800][ T7065] veth1_vlan: left allmulticast mode [ 124.489487][ T7073] netlink: 'syz.0.287': attribute type 11 has an invalid length. [ 124.501826][ T7046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.535265][ T7065] macvlan0 (unregistering): left allmulticast mode [ 124.963481][ T7080] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 125.165450][ T7092] netlink: 'syz.2.292': attribute type 39 has an invalid length. [ 125.273453][ T7095] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32) [ 125.540628][ T7106] __nla_validate_parse: 4 callbacks suppressed [ 125.540647][ T7106] netlink: 16 bytes leftover after parsing attributes in process `syz.3.294'. [ 125.621774][ T7106] netlink: 32 bytes leftover after parsing attributes in process `syz.3.294'. [ 125.695144][ T7111] netlink: 12 bytes leftover after parsing attributes in process `syz.4.297'. [ 125.708458][ T7108] geneve2: entered promiscuous mode [ 125.714157][ T7112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.297'. [ 126.449176][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 126.608805][ T7149] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 126.766819][ T7143] bridge0: port 3(dummy0) entered disabled state [ 126.841385][ T7143] bridge_slave_0: left allmulticast mode [ 126.847215][ T7143] bridge_slave_0: left promiscuous mode [ 126.875979][ T7143] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.919660][ T7143] bridge_slave_1: left allmulticast mode [ 126.935626][ T7143] bridge_slave_1: left promiscuous mode [ 126.958690][ T7143] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.975991][ T7162] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.305'. [ 126.997626][ T7143] bond0: (slave bond_slave_0): Releasing backup interface [ 127.070396][ T7143] bond0: (slave bond_slave_1): Releasing backup interface [ 127.104735][ T7143] team0: Port device team_slave_0 removed [ 127.151103][ T7143] team0: Port device team_slave_1 removed [ 127.170414][ T7143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.201872][ T7143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.228102][ T7143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.279432][ T7143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.417568][ T7174] syz_tun: entered promiscuous mode [ 127.435076][ T7174] syz_tun: entered allmulticast mode [ 127.623367][ T7178] netlink: 'syz.2.312': attribute type 1 has an invalid length. [ 127.639554][ T7151] syz.0.303 (7151) used greatest stack depth: 17992 bytes left [ 127.678374][ T7178] netlink: 224 bytes leftover after parsing attributes in process `syz.2.312'. [ 127.801289][ T7179] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 127.847670][ T7179] macsec1: entered allmulticast mode [ 127.877147][ T7179] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 127.925543][ T7179] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 127.972003][ T7179] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 128.157408][ T7184] tipc: Started in network mode [ 128.163686][ T7184] tipc: Node identity f6567c186a49, cluster identity 4711 [ 128.181781][ T7184] tipc: Enabled bearer , priority 0 [ 128.212377][ T7186] syzkaller0: entered promiscuous mode [ 128.241552][ T7186] syzkaller0: entered allmulticast mode [ 128.382844][ T7183] tipc: Resetting bearer [ 128.450161][ T7183] tipc: Disabling bearer [ 129.380907][ T7219] netlink: 12 bytes leftover after parsing attributes in process `syz.4.324'. [ 129.647103][ T7219] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 129.765695][ T7219] bond2: (slave vcan1): Error -95 calling set_mac_address [ 129.832840][ T7237] tipc: Started in network mode [ 129.837861][ T7237] tipc: Node identity 12ecd8131e3f, cluster identity 4711 [ 129.868361][ T7237] tipc: Enabled bearer , priority 0 [ 129.901866][ T7237] syzkaller0: entered promiscuous mode [ 129.939142][ T7237] syzkaller0: entered allmulticast mode [ 129.996983][ T7248] netlink: 24 bytes leftover after parsing attributes in process `syz.2.330'. [ 130.110377][ T7235] tipc: Resetting bearer [ 130.239923][ T7235] tipc: Disabling bearer [ 130.389215][ T7255] netlink: 'syz.1.332': attribute type 12 has an invalid length. [ 130.756464][ T7263] netlink: 'syz.0.333': attribute type 1 has an invalid length. [ 131.718120][ T7281] xt_hashlimit: size too large, truncated to 1048576 [ 131.931446][ T7287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.337'. [ 132.021289][ T7297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.820880][ T7315] tipc: Started in network mode [ 132.869528][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.884953][ T7315] tipc: Node identity 2205abf28a9a, cluster identity 4711 [ 132.954919][ T7315] tipc: Enabled bearer , priority 0 [ 133.020282][ T7320] syzkaller0: entered promiscuous mode [ 133.047269][ T7320] syzkaller0: entered allmulticast mode [ 133.107888][ T5851] Bluetooth: hci4: link tx timeout [ 133.114104][ T5851] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.124355][ T51] Bluetooth: hci4: link tx timeout [ 133.132901][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.142097][ T51] Bluetooth: hci4: link tx timeout [ 133.147308][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.159226][ T51] Bluetooth: hci4: link tx timeout [ 133.164379][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.174586][ T51] Bluetooth: hci4: link tx timeout [ 133.179931][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.187972][ T51] Bluetooth: hci4: link tx timeout [ 133.193548][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.201602][ T51] Bluetooth: hci4: link tx timeout [ 133.208275][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.219363][ T51] Bluetooth: hci4: link tx timeout [ 133.223260][ T7308] tipc: Resetting bearer [ 133.224508][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.239811][ T51] Bluetooth: hci4: link tx timeout [ 133.244957][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.253039][ T51] Bluetooth: hci4: link tx timeout [ 133.258175][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.345998][ T7308] tipc: Disabling bearer [ 133.593600][ T7347] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 133.679584][ T7354] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.693246][ T7354] netlink: 'syz.1.355': attribute type 2 has an invalid length. [ 133.705536][ T7354] netlink: 119 bytes leftover after parsing attributes in process `syz.1.355'. [ 133.738301][ T7355] netlink: 20 bytes leftover after parsing attributes in process `syz.4.354'. [ 134.874676][ T7382] netlink: 16 bytes leftover after parsing attributes in process `syz.3.363'. [ 134.996765][ T7388] tipc: Enabled bearer , priority 0 [ 135.049463][ T7388] syzkaller0: entered promiscuous mode [ 135.082938][ T7388] syzkaller0: entered allmulticast mode [ 135.155231][ T7390] tipc: Enabled bearer , priority 0 [ 135.169472][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 135.220468][ T7388] tipc: Resetting bearer [ 135.229667][ T7390] syzkaller0: entered promiscuous mode [ 135.235194][ T7390] syzkaller0: entered allmulticast mode [ 135.281034][ T7387] tipc: Resetting bearer [ 135.313817][ T7387] tipc: Disabling bearer [ 135.388329][ T7400] tipc: Resetting bearer [ 135.414076][ T7389] tipc: Resetting bearer [ 135.521336][ T7389] tipc: Disabling bearer [ 135.583909][ T7404] delete_channel: no stack [ 135.674673][ T7410] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 136.340685][ T7435] netlink: 'syz.3.376': attribute type 7 has an invalid length. [ 136.384029][ T7435] netlink: 'syz.3.376': attribute type 7 has an invalid length. [ 136.421419][ T7435] netlink: 'syz.3.376': attribute type 7 has an invalid length. [ 136.508075][ T7437] team0: Mode changed to "loadbalance" [ 136.976103][ T7465] netlink: 'syz.3.382': attribute type 11 has an invalid length. [ 137.006220][ T7465] netlink: 36 bytes leftover after parsing attributes in process `syz.3.382'. [ 137.036911][ T7465] netlink: 12 bytes leftover after parsing attributes in process `syz.3.382'. [ 137.255283][ T7477] netlink: 68 bytes leftover after parsing attributes in process `syz.1.384'. [ 137.404098][ T7482] IPv6: sit1: Disabled Multicast RS [ 137.426246][ T7482] sit1: entered allmulticast mode [ 137.591003][ T7483] block nbd0: server does not support multiple connections per device. [ 137.641112][ T7483] block nbd0: shutting down sockets [ 137.748349][ T7498] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.389'. [ 138.085144][ T7508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.393'. [ 138.153920][ T7508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.254493][ T7517] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 138.353323][ T7511] tipc: Enabled bearer , priority 0 [ 138.390729][ T7522] netlink: 124 bytes leftover after parsing attributes in process `syz.2.397'. [ 138.408594][ T7518] syzkaller0: entered promiscuous mode [ 138.410524][ T7522] netlink: 68 bytes leftover after parsing attributes in process `syz.2.397'. [ 138.429859][ T7518] syzkaller0: entered allmulticast mode [ 138.591770][ T7518] tipc: Resetting bearer [ 138.702957][ T7518] tipc: Disabling bearer [ 138.795815][ T7527] netlink: 'syz.3.399': attribute type 11 has an invalid length. [ 138.812012][ T7547] x_tables: duplicate underflow at hook 1 [ 138.826695][ T7527] netlink: 36 bytes leftover after parsing attributes in process `syz.3.399'. [ 138.838466][ T7527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.399'. [ 138.872941][ T7548] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 139.317834][ T7583] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 139.818128][ T7601] netlink: 68 bytes leftover after parsing attributes in process `syz.1.412'. [ 140.244932][ T7608] tipc: Enabled bearer , priority 0 [ 140.275978][ T7608] syzkaller0: entered promiscuous mode [ 140.288765][ T7608] syzkaller0: entered allmulticast mode [ 140.374087][ T7608] tipc: Resetting bearer [ 140.416614][ T7607] tipc: Resetting bearer [ 140.483902][ T7607] tipc: Disabling bearer [ 140.653131][ T7616] netlink: 'syz.1.418': attribute type 13 has an invalid length. [ 140.723676][ T7626] netlink: 'syz.2.421': attribute type 21 has an invalid length. [ 140.827808][ T7620] tipc: Enabled bearer , priority 0 [ 140.924992][ T7618] tipc: Resetting bearer [ 140.964892][ T7616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.983972][ T7614] tipc: Disabling bearer [ 141.298705][ T7642] ip6gre1: entered promiscuous mode [ 141.627942][ T5220] udevd[5220]: worker [5997] terminated by signal 33 (Unknown signal 33) [ 141.642155][ T5220] udevd[5220]: worker [5997] failed while handling '/devices/virtual/block/loop4' [ 141.697599][ T7658] openvswitch: netlink: Message has 4 unknown bytes. [ 141.741933][ T7658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.027469][ T7665] Bluetooth: MGMT ver 1.23 [ 142.061884][ T7666] __nla_validate_parse: 4 callbacks suppressed [ 142.061902][ T7666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.435'. [ 142.121947][ T7671] tipc: Enabled bearer , priority 0 [ 142.135973][ T7671] syzkaller0: entered promiscuous mode [ 142.149233][ T7671] syzkaller0: entered allmulticast mode [ 142.249742][ T7679] tipc: Resetting bearer [ 142.292622][ T7683] netlink: 72 bytes leftover after parsing attributes in process `syz.4.438'. [ 142.514193][ T7691] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 142.582281][ T7698] netlink: 24 bytes leftover after parsing attributes in process `syz.1.441'. [ 142.896270][ T7669] tipc: Resetting bearer [ 142.934212][ T7669] tipc: Disabling bearer [ 143.306307][ T7719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.446'. [ 143.324984][ T7718] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 143.419216][ T7722] geneve3: entered promiscuous mode [ 143.529665][ T7725] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.718777][ T7729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.730847][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 143.831858][ T7725] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.938149][ T7740] tipc: Enabled bearer , priority 0 [ 143.962711][ T7739] tipc: Enabled bearer , priority 0 [ 143.975642][ T7740] syzkaller0: entered promiscuous mode [ 143.981922][ T7740] syzkaller0: entered allmulticast mode [ 144.053194][ T7725] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.084514][ T7739] syzkaller0: entered promiscuous mode [ 144.090436][ T7739] syzkaller0: entered allmulticast mode [ 144.169521][ T7725] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.205396][ T7740] tipc: Resetting bearer [ 144.214133][ T7744] tipc: Resetting bearer [ 144.230697][ T7737] tipc: Resetting bearer [ 144.267570][ T7737] tipc: Disabling bearer [ 144.277337][ T7738] tipc: Resetting bearer [ 144.325137][ T7738] tipc: Disabling bearer [ 144.545978][ T7755] ieee802154 phy0 wpan0: encryption failed: -22 [ 144.552501][ T7754] ieee802154 phy0 wpan0: encryption failed: -22 [ 144.604386][ T7763] netlink: 300 bytes leftover after parsing attributes in process `syz.4.462'. [ 144.714042][ T737] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.718452][ T7766] netlink: 216 bytes leftover after parsing attributes in process `syz.3.463'. [ 144.740157][ T7768] netlink: 14 bytes leftover after parsing attributes in process `syz.4.464'. [ 144.749978][ T7766] netlink: 24 bytes leftover after parsing attributes in process `syz.3.463'. [ 144.764461][ T7766] netlink: 16 bytes leftover after parsing attributes in process `syz.3.463'. [ 144.779624][ T737] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.788143][ T737] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.831129][ T7771] block nbd4: not configured, cannot reconfigure [ 144.898186][ T7768] bond0 (unregistering): left promiscuous mode [ 144.910082][ T7768] bond0 (unregistering): Released all slaves [ 144.994192][ T3482] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.134850][ T7776] tipc: Enabled bearer , priority 0 [ 145.163335][ T7776] syzkaller0: entered promiscuous mode [ 145.168868][ T7776] syzkaller0: entered allmulticast mode [ 145.222631][ T7782] netlink: 'syz.0.467': attribute type 11 has an invalid length. [ 145.241514][ T7776] syzkaller0: mtu less than device minimum [ 145.248910][ T7774] tipc: Resetting bearer [ 145.257586][ T7782] netlink: 28 bytes leftover after parsing attributes in process `syz.0.467'. [ 145.353376][ T7774] tipc: Disabling bearer [ 145.392080][ T7785] tipc: Enabled bearer , priority 0 [ 145.416349][ T7791] syzkaller0: entered promiscuous mode [ 145.437871][ T7791] syzkaller0: entered allmulticast mode [ 145.520680][ T7780] tipc: Resetting bearer [ 145.562946][ T7772] tipc: Resetting bearer [ 145.578544][ T7795] FAULT_INJECTION: forcing a failure. [ 145.578544][ T7795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.598580][ T7795] CPU: 1 UID: 0 PID: 7795 Comm: syz.3.470 Not tainted 6.16.0-rc4-syzkaller-01139-gea988b450690 #0 PREEMPT(full) [ 145.598611][ T7795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 145.598624][ T7795] Call Trace: [ 145.598633][ T7795] [ 145.598642][ T7795] dump_stack_lvl+0x189/0x250 [ 145.598686][ T7795] ? __pfx____ratelimit+0x10/0x10 [ 145.598715][ T7795] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.598742][ T7795] ? __pfx__printk+0x10/0x10 [ 145.598773][ T7795] ? __might_fault+0xb0/0x130 [ 145.598813][ T7795] should_fail_ex+0x414/0x560 [ 145.598851][ T7795] _copy_from_iter+0x1db/0x16f0 [ 145.598879][ T7795] ? rcu_is_watching+0x15/0xb0 [ 145.598907][ T7795] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 145.598940][ T7795] ? __pfx__copy_from_iter+0x10/0x10 [ 145.598964][ T7795] ? __build_skb_around+0x257/0x3e0 [ 145.599000][ T7795] ? netlink_sendmsg+0x642/0xb30 [ 145.599028][ T7795] ? skb_put+0x11b/0x210 [ 145.599064][ T7795] netlink_sendmsg+0x6b2/0xb30 [ 145.599105][ T7795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.599138][ T7795] ? aa_sock_msg_perm+0x94/0x160 [ 145.599173][ T7795] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 145.599193][ T7795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.599223][ T7795] __sock_sendmsg+0x219/0x270 [ 145.599253][ T7795] ____sys_sendmsg+0x505/0x830 [ 145.599294][ T7795] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.599338][ T7795] ? import_iovec+0x74/0xa0 [ 145.599366][ T7795] ___sys_sendmsg+0x21f/0x2a0 [ 145.599389][ T7795] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.599458][ T7795] ? __fget_files+0x2a/0x420 [ 145.599487][ T7795] ? __fget_files+0x3a0/0x420 [ 145.599529][ T7795] __x64_sys_sendmsg+0x19b/0x260 [ 145.599553][ T7795] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 145.599585][ T7795] ? __pfx_ksys_write+0x10/0x10 [ 145.599608][ T7795] ? rcu_is_watching+0x15/0xb0 [ 145.599639][ T7795] ? do_syscall_64+0xbe/0x3b0 [ 145.599673][ T7795] do_syscall_64+0xfa/0x3b0 [ 145.599701][ T7795] ? lockdep_hardirqs_on+0x9c/0x150 [ 145.599729][ T7795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.599750][ T7795] ? clear_bhb_loop+0x60/0xb0 [ 145.599777][ T7795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.599798][ T7795] RIP: 0033:0x7f48a3d8e929 [ 145.599822][ T7795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.599840][ T7795] RSP: 002b:00007f48a4b8b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.599867][ T7795] RAX: ffffffffffffffda RBX: 00007f48a3fb5fa0 RCX: 00007f48a3d8e929 [ 145.599883][ T7795] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 145.599896][ T7795] RBP: 00007f48a4b8b090 R08: 0000000000000000 R09: 0000000000000000 [ 145.599909][ T7795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.599922][ T7795] R13: 0000000000000000 R14: 00007f48a3fb5fa0 R15: 00007ffd3dc7bbb8 [ 145.599955][ T7795] [ 145.897578][ T7772] tipc: Disabling bearer [ 145.936672][ T7797] tipc: Enabled bearer , priority 0 [ 145.944352][ T7797] syzkaller0: entered promiscuous mode [ 145.949960][ T7797] syzkaller0: entered allmulticast mode [ 146.036418][ T7802] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 146.037812][ T7797] tipc: Resetting bearer [ 146.117177][ T7796] tipc: Resetting bearer [ 146.214839][ T7807] netlink: 'syz.0.475': attribute type 8 has an invalid length. [ 146.259237][ T7812] netlink: 'syz.4.477': attribute type 1 has an invalid length. [ 146.291684][ T7796] tipc: Disabling bearer [ 146.324792][ T7817] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 146.365149][ T7817] netlink: 'syz.3.478': attribute type 1 has an invalid length. [ 146.374902][ T7817] netlink: 'syz.3.478': attribute type 11 has an invalid length. [ 146.392516][ T7810] netlink: 'syz.1.476': attribute type 21 has an invalid length. [ 146.488263][ T7821] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 146.520603][ T7823] netlink: 'syz.1.476': attribute type 13 has an invalid length. [ 146.539130][ T7823] netlink: 'syz.1.476': attribute type 17 has an invalid length. [ 146.642664][ T7827] netlink: 'syz.2.480': attribute type 11 has an invalid length. [ 146.841853][ T7841] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 146.916238][ T7831] batadv1: entered allmulticast mode [ 146.932125][ T7831] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 146.950067][ T7848] veth0: entered promiscuous mode [ 146.960660][ T7839] macvlan0: entered allmulticast mode [ 146.966075][ T7839] veth1_vlan: entered allmulticast mode [ 146.984870][ T7852] netlink: 'syz.2.484': attribute type 11 has an invalid length. [ 147.018415][ T7849] veth1_vlan: left allmulticast mode [ 147.095577][ T7849] macvlan0 (unregistering): left allmulticast mode [ 147.293351][ T7861] __nla_validate_parse: 5 callbacks suppressed [ 147.293371][ T7861] netlink: 352 bytes leftover after parsing attributes in process `syz.4.489'. [ 147.408131][ T7863] xt_TCPMSS: Only works on TCP SYN packets [ 147.425110][ T7863] syzkaller0: entered promiscuous mode [ 147.431080][ T7863] syzkaller0: entered allmulticast mode [ 147.474723][ T7863] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN PTI [ 147.486683][ T7863] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 147.495126][ T7863] CPU: 0 UID: 0 PID: 7863 Comm: syz.2.491 Not tainted 6.16.0-rc4-syzkaller-01139-gea988b450690 #0 PREEMPT(full) [ 147.507236][ T7863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 147.517329][ T7863] RIP: 0010:qdisc_tree_reduce_backlog+0x223/0x480 [ 147.523860][ T7863] Code: 89 ef e8 e0 0d ab f8 4d 89 ef 85 db 74 0d e8 64 8d 47 f8 4c 89 f5 e9 88 00 00 00 48 8b 6d 00 48 8d 45 20 48 89 c3 48 c1 eb 03 <42> 80 3c 33 00 48 89 04 24 74 0d 48 8b 3c 24 e8 a9 0d ab f8 48 8b [ 147.543663][ T7863] RSP: 0018:ffffc9000b536fe8 EFLAGS: 00010202 [ 147.549745][ T7863] RAX: 0000000000000020 RBX: 0000000000000004 RCX: 0000000000000002 [ 147.557721][ T7863] RDX: ffff88802cdbda00 RSI: 0000000000000000 RDI: 0000000000000000 [ 147.565694][ T7863] RBP: 0000000000000000 R08: ffff88802cdbda00 R09: 0000000000000002 [ 147.573665][ T7863] R10: 00000000ffffffff R11: 0000000000000002 R12: 00000000000b0002 [ 147.581643][ T7863] R13: ffff88807c622000 R14: dffffc0000000000 R15: ffff88807c622000 [ 147.589624][ T7863] FS: 00007f70ab85a6c0(0000) GS:ffff888125c14000(0000) knlGS:0000000000000000 [ 147.598587][ T7863] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.605179][ T7863] CR2: 0000200000001000 CR3: 0000000029994000 CR4: 00000000003526f0 [ 147.613157][ T7863] Call Trace: [ 147.616436][ T7863] [ 147.619364][ T7863] ? qdisc_tree_reduce_backlog+0x3c/0x480 [ 147.625361][ T7863] fq_change+0x1519/0x1f50 [ 147.629794][ T7863] ? __pfx_fq_change+0x10/0x10 [ 147.634571][ T7863] ? __hrtimer_setup+0x187/0x210 [ 147.639516][ T7863] fq_init+0x699/0x960 [ 147.643591][ T7863] ? __pfx_fq_init+0x10/0x10 [ 147.648201][ T7863] ? lockdep_rtnl_is_held+0x26/0x40 [ 147.653405][ T7863] ? qdisc_lookup+0x36d/0x6d0 [ 147.658097][ T7863] ? __pfx_fq_init+0x10/0x10 [ 147.662696][ T7863] qdisc_create+0x7a9/0xea0 [ 147.667307][ T7863] tc_modify_qdisc+0x1426/0x2010 [ 147.672255][ T7863] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 147.677573][ T7863] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 147.682864][ T7863] rtnetlink_rcv_msg+0x779/0xb70 [ 147.687813][ T7863] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 147.692930][ T7863] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 147.698406][ T7863] ? ref_tracker_free+0x63a/0x7d0 [ 147.703430][ T7863] ? __copy_skb_header+0xa7/0x550 [ 147.708458][ T7863] ? __pfx_ref_tracker_free+0x10/0x10 [ 147.713853][ T7863] ? __skb_clone+0x63/0x7a0 [ 147.718367][ T7863] netlink_rcv_skb+0x205/0x470 [ 147.723145][ T7863] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 147.728613][ T7863] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 147.733910][ T7863] ? netlink_deliver_tap+0x2e/0x1b0 [ 147.739116][ T7863] ? netlink_deliver_tap+0x2e/0x1b0 [ 147.744328][ T7863] netlink_unicast+0x758/0x8d0 [ 147.749111][ T7863] netlink_sendmsg+0x805/0xb30 [ 147.753922][ T7863] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.759256][ T7863] ? aa_sock_msg_perm+0x94/0x160 [ 147.764215][ T7863] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 147.769510][ T7863] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.774809][ T7863] __sock_sendmsg+0x219/0x270 [ 147.779501][ T7863] ____sys_sendmsg+0x505/0x830 [ 147.784298][ T7863] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.789602][ T7863] ? import_iovec+0x74/0xa0 [ 147.794119][ T7863] ___sys_sendmsg+0x21f/0x2a0 [ 147.798801][ T7863] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.804018][ T7863] ? __fget_files+0x2a/0x420 [ 147.808623][ T7863] ? __fget_files+0x3a0/0x420 [ 147.813314][ T7863] __x64_sys_sendmsg+0x19b/0x260 [ 147.818261][ T7863] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 147.823813][ T7863] ? rcu_is_watching+0x15/0xb0 [ 147.828588][ T7863] ? do_syscall_64+0xbe/0x3b0 [ 147.833279][ T7863] do_syscall_64+0xfa/0x3b0 [ 147.837801][ T7863] ? lockdep_hardirqs_on+0x9c/0x150 [ 147.843016][ T7863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.849178][ T7863] ? clear_bhb_loop+0x60/0xb0 [ 147.853881][ T7863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.859867][ T7863] RIP: 0033:0x7f70aa98e929 [ 147.864298][ T7863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.883994][ T7863] RSP: 002b:00007f70ab85a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.892590][ T7863] RAX: ffffffffffffffda RBX: 00007f70aabb5fa0 RCX: 00007f70aa98e929 [ 147.900582][ T7863] RDX: 0000000004008000 RSI: 0000200000000200 RDI: 000000000000000a [ 147.908553][ T7863] RBP: 00007f70aaa10b39 R08: 0000000000000000 R09: 0000000000000000 [ 147.916542][ T7863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.924515][ T7863] R13: 0000000000000000 R14: 00007f70aabb5fa0 R15: 00007ffd092c9cf8 [ 147.932584][ T7863] [ 147.935604][ T7863] Modules linked in: [ 147.939707][ T7863] ---[ end trace 0000000000000000 ]--- [ 147.945191][ T7863] RIP: 0010:qdisc_tree_reduce_backlog+0x223/0x480 [ 147.951688][ T7863] Code: 89 ef e8 e0 0d ab f8 4d 89 ef 85 db 74 0d e8 64 8d 47 f8 4c 89 f5 e9 88 00 00 00 48 8b 6d 00 48 8d 45 20 48 89 c3 48 c1 eb 03 <42> 80 3c 33 00 48 89 04 24 74 0d 48 8b 3c 24 e8 a9 0d ab f8 48 8b [ 147.971356][ T7863] RSP: 0018:ffffc9000b536fe8 EFLAGS: 00010202 [ 147.977456][ T7863] RAX: 0000000000000020 RBX: 0000000000000004 RCX: 0000000000000002 [ 147.985500][ T7863] RDX: ffff88802cdbda00 RSI: 0000000000000000 RDI: 0000000000000000 [ 147.993535][ T7863] RBP: 0000000000000000 R08: ffff88802cdbda00 R09: 0000000000000002 [ 148.001676][ T7863] R10: 00000000ffffffff R11: 0000000000000002 R12: 00000000000b0002 [ 148.009801][ T7863] R13: ffff88807c622000 R14: dffffc0000000000 R15: ffff88807c622000 [ 148.017808][ T7863] FS: 00007f70ab85a6c0(0000) GS:ffff888125c14000(0000) knlGS:0000000000000000 [ 148.026812][ T7863] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 148.033459][ T7863] CR2: 0000200000001000 CR3: 0000000029994000 CR4: 00000000003526f0 [ 148.041504][ T7863] Kernel panic - not syncing: Fatal exception in interrupt [ 148.049022][ T7863] Kernel Offset: disabled [ 148.053351][ T7863] Rebooting in 86400 seconds..