last executing test programs: 1m17.630283392s ago: executing program 3 (id=1016): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={0x38, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1}]}]}, 0x38}}, 0x4000000) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="030000000400000004000000280000000e010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000001ec051ae59014484000000"], 0x48) (async, rerun: 32) r1 = socket(0xa, 0x3, 0x3a) (async) r2 = socket(0x40000000015, 0x5, 0x0) connect$l2tp6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5, 0x4}, 0x20) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async, rerun: 32) setsockopt$inet6_int(r1, 0x29, 0xd1, &(0x7f0000000040)=0x20f, 0x4) (rerun: 32) 1m17.214674198s ago: executing program 3 (id=1019): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000000002010400000000000000000200000704000280"], 0x18}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e22, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0x0, 0x400, {{0xa, 0x4, 0x0, 0x1, 0x28, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast1, @multicast2, {[@timestamp={0x44, 0x8, 0x5c, 0x0, 0x1, [0x8]}, @generic={0x11, 0x8, "86ca503b6fd9"}, @end]}}}}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000001c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000000540)={0x5, 0x3, {0x0, @struct={0x4c6}, 0x0, 0x2b5, 0xfffffffffffffffd, 0x1, 0x0, 0x5, 0x16, @struct={0xdd, 0x7}, 0x4, 0x4, [0x6, 0x6, 0x8001, 0x8, 0x100, 0x3]}, {0xfffffffffffffffd, @struct={0x5, 0x2}, 0x0, 0x7, 0x1, 0x4, 0x6e, 0x5, 0x404, @struct={0x6, 0xffffffff}, 0x5bc9, 0x8c, [0x9, 0x8000000000000000, 0x9, 0x3, 0x100, 0x7c2b]}, {0xc45f, @struct={0x7, 0xc}, 0x0, 0x1, 0x40000000000, 0x35, 0x3, 0x100000000, 0x1, @usage=0x6, 0x5, 0x100, [0x1, 0x3, 0x4, 0x3, 0x1, 0x86]}, {0xf2e1, 0x7, 0x8}}) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000980)={r6, 0x0, 0x7}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002300)={0x1c, 0x15, 0x301, 0x70bd2d, 0x0, {0xc}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @multicast1}}}}) 1m16.439395474s ago: executing program 3 (id=1025): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26beeef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f00000001c0)="051a00020000006558", 0x9}], 0x2) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000300)={@mcast1, 0x4, r6}) r7 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4008840) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000440)={0x0, 0x1005}, 0x4) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000040)={'dummy0\x00', 0x1}) 1m15.007001088s ago: executing program 3 (id=1037): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0xc, [@type_tag={0x10, 0x0, 0x0, 0x12, 0x5}, @const={0x6, 0x0, 0x0, 0xa, 0x2}, @enum={0x2, 0x1, 0x0, 0x6, 0x4, [{0x3, 0xffff}]}, @struct={0x8, 0x6, 0x0, 0x4, 0x0, 0x8, [{0xe, 0x5, 0x2}, {0xe, 0x0, 0x401}, {0xd, 0x5, 0x4}, {0xd, 0x5, 0x9}, {0xe, 0x2, 0x9}, {0x0, 0x5, 0xe}]}, @union={0xe, 0x7, 0x0, 0x5, 0x1, 0x6, [{0x1, 0x2, 0x2}, {0xb, 0x1, 0x401}, {0xd, 0x2, 0x3}, {0x4, 0x2, 0x6}, {0x9, 0x0, 0x5}, {0x0, 0x4, 0x44f60837}, {0xf, 0x1, 0x7}]}]}, {0x0, [0x2e, 0x30, 0x5f, 0x61, 0x5f, 0x5f, 0x30, 0x0, 0x61, 0x3e]}}, &(0x7f0000000180)=""/157, 0x104, 0x9d, 0x1, 0x7fff, 0x10000}, 0x28) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = socket$packet(0x11, 0x2, 0x300) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, 0x0, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x3}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x5}, &(0x7f0000000100)=0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x1f1441, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000280)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000014000480080002400000099b08000140000000012c000000030a0104000000024000000000000000010900010073797a30000000001400000011000100b31980000000000000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x8040}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60ff00f500140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32, @ANYRES32=0x41424344, @ANYBLOB="50c2001190780001"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYRES8=r0], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe79}, 0x66) 1m14.450591284s ago: executing program 3 (id=1044): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) unshare(0x8000600) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (rerun: 32) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r1, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000009110a9000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) (async, rerun: 32) r2 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 32) setsockopt$inet_tcp_int(r2, 0x6, 0x9, &(0x7f0000000240)=0xfffffffc, 0x4) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (rerun: 32) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f0000001000)={&(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000140)=[{&(0x7f0000001040)="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", 0x5c9}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d7729d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7187e45a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f00000000", 0xe5}, {&(0x7f0000000cc0)="79dfe4263f037de282e588f3c773eca5f0c383e7425d1573aa90a44223bfeced3ff85afe9d0c0b3b5a7ed7fcdb96a3934fe7af73ee25d5d36ba42e2a858c3d134299abc0393e031db435ae156e55eb2b2b2e2300e0706dfc5c4ec73ba929ffe8a7bb7ce55d95fb6e58560c45d96a58a13aa944b98c481a82927ec071b272b4592616116116527fd2dbc0dfd58c572f714f6852063afc8358fb33ccb8a95460b32b4e26bea604e534d8983790b5e2a180fed88108b0f5a499d5f80b4e4047d9ecc03d21856a4ec0d0d41496d99dddfa9098d327d9559e82fceb2b1b1c", 0xdc}, {&(0x7f00000003c0)="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", 0x14f}, {&(0x7f0000000700)="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", 0xfe}, {&(0x7f0000000800)="3a0846cacd7448e2015cc9a09c5f5608265e1e0fe02aa9077d7ddd960ba112fe1c64f57cba71e7ad8bbdc06a3299398e39498fc459bc1745e3d21a7ca987a4f4b774fe331d20dab2e846a721ff43b0491dc4cb32e16330e0d7d520f4887da0d6f356f8ef230b9b237409", 0x6a}, {&(0x7f0000000300)="77729a", 0x3}], 0x7, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xd}, {0x10, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 1m14.114135274s ago: executing program 3 (id=1049): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x70}}, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x83113193c2d18c9d}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x4008031, 0xffffffffffffffff, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0xe, 0x0, @void}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000000c0)=@int=0x40, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018020000000000000c0000000c01000002000000000000000000000c000000000000"], 0x0, 0x26, 0x0, 0x0, 0x4}, 0x28) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x880b, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r7, 0x6, 0x1a, 0x0, &(0x7f0000000380)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 58.612407069s ago: executing program 32 (id=1049): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x70}}, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x83113193c2d18c9d}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x4008031, 0xffffffffffffffff, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0xe, 0x0, @void}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000000c0)=@int=0x40, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018020000000000000c0000000c01000002000000000000000000000c000000000000"], 0x0, 0x26, 0x0, 0x0, 0x4}, 0x28) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x880b, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r7, 0x6, 0x1a, 0x0, &(0x7f0000000380)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 44.07168681s ago: executing program 2 (id=1300): mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x0, 0x82011, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 43.829294951s ago: executing program 2 (id=1303): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448dc, &(0x7f00000002c0)="79d2e527467735b71bb92d57a6c3a70046140ec0a76d102e8bdf39c79ea403df2f04a5de365049389f887280e48613a67a0f1e249dad990b4c8674e36fc63e700eca508df627dc6c") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000380)="00214717a70700000000030600710a5eeb9d0471200000000500000000000000ffff0342844d50e77d0dc450de49c204a803166580ac899c081cb49f1930e7d07fbdf3d8134e72158357ee37fdae", 0x4e}], 0x1, 0xee, 0x1) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a3200000000140007800500140080ff000008000840000000000500050002000000050001000600000011000300686173683a6970"], 0x60}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58000000100001d16243dc000200000000000000", @ANYRES32=0x0, @ANYBLOB="03010000bcb5f31a24001280110001006272696467655f736c617665000000000c0005800500190002000000140003006272696467655f736c6176655f300000"], 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x80}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f0000000340)="b21d037267554da5cb9ee766846a446eec9271477843e63648e82091528d0ddb94b754bc19b6b1d81da9eac1f9c4d927b29814acc5eaf5a43927a09a8dd161547fbd5a638670a5f5e9e812cc81de5411b66f232679d941fed5b121c23256549257fcc9482cdc8c07379abaa5419caa6083343190ebefe9897798ebc09a8bd873b307dbe38a7c8ab3a7") sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r1, 0x400448dc, &(0x7f00000002c0)="79d2e527467735b71bb92d57a6c3a70046140ec0a76d102e8bdf39c79ea403df2f04a5de365049389f887280e48613a67a0f1e249dad990b4c8674e36fc63e700eca508df627dc6c") (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) (async) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000080)=0x4) (async) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x2000004) (async) pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000380)="00214717a70700000000030600710a5eeb9d0471200000000500000000000000ffff0342844d50e77d0dc450de49c204a803166580ac899c081cb49f1930e7d07fbdf3d8134e72158357ee37fdae", 0x4e}], 0x1, 0xee, 0x1) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a3200000000140007800500140080ff000008000840000000000500050002000000050001000600000011000300686173683a6970"], 0x60}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58000000100001d16243dc000200000000000000", @ANYRES32=0x0, @ANYBLOB="03010000bcb5f31a24001280110001006272696467655f736c617665000000000c0005800500190002000000140003006272696467655f736c6176655f300000"], 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x80}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) (async) ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f0000000340)="b21d037267554da5cb9ee766846a446eec9271477843e63648e82091528d0ddb94b754bc19b6b1d81da9eac1f9c4d927b29814acc5eaf5a43927a09a8dd161547fbd5a638670a5f5e9e812cc81de5411b66f232679d941fed5b121c23256549257fcc9482cdc8c07379abaa5419caa6083343190ebefe9897798ebc09a8bd873b307dbe38a7c8ab3a7") (async) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000000906010200000000030000090900020073797a31000000000500010007000000280007800c0001800809740000000000000014801400024020010000000000000000000000000001abde40f9d29aeddd159ac0c8a8c9896fe666d21028101e0c3e6c2a944186d5730511332bc344aaac60e2a5d8cfeab4b92bd02c49188c1709b5adc118081349ecb57ea5d2c3e358c69607d12246c330a71f949d6d641b2c4729511b90701fc764edca10ea016f990870b30f47afd932d76e6b862f21090204cc7651333fd966a8c8c8edbe90770ff06785f11ed54a8b642143a56f812b1a3dcb0d23107d87c9e6633f7810cbb61c8b036ab24b4d496edd66498a6a60f4468e836778e87f91cee4fc68df6b86a6fdd4108726a4f455965f06fbe8cbb7a6f67b6f49e8c37693b11b297e1931c7f75a666b77d76d90e7c5eaa1669ea9138185760cd5a78c7069850ea89ef71dd59ccf8a424ffb579698e7fb3c3ba6c7af653cc1740c987b9b754970998a5bcc1f4b37ca136e2711859bfc20411e030037c5218aa405b3a4bb25bf54476119326e"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) (async) 42.75955728s ago: executing program 2 (id=1308): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x3c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) bpf$MAP_LOOKUP_ELEM(0x15, 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00i'], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f000001a100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000001a040)=@bridge_delneigh={0x1c, 0x1d, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x12, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000002c0)={0x0, 0x4c178b585de4cb40, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4ca100f7", @ANYRES16=r5, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r6, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080140005"], 0x4c}}, 0x4040000) 42.518760837s ago: executing program 2 (id=1312): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendto$rxrpc(r1, &(0x7f00000003c0)="e3710f00217c24965647c62556fdfd5a1c8fa69473fa99bc3dc851c71da76d5b70edf18e3d94a3c2d0f4fdf0765a30bb", 0x30, 0x4000, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41185, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="12cdde26e7c496e99a9cf8625ec9", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 42.183512316s ago: executing program 2 (id=1315): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r3, &(0x7f0000000140)="529429a0a80efbb99735d7ca333137e13f64f48c80283000b7710f3485c17231643aa9fe0681ec", &(0x7f0000000240)=""/238}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x7, 0x4) listen(r5, 0x3) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000200)=0x1, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={r8, 0x0, 0x2, 0x3}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000400)={r8, 0x5}, &(0x7f0000000440)=0x8) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010021bd7000fedbdf253d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000190000009500000000000000538f149ae9e72c0483dea1359c36c03009db9f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000200000000000fb0400000000000000f17dd221c608dc908341198a5dd62249cc6b8f6d90203cbc53c0cf439db80b26f19903d382b60ce4f283518430c417883bc4645c4398fd1103a744d60e3a85507d7613d2dc0059d6ec8de1e9cf3c6f2b34c71a2dac29ef73ac2b64cdeab1cb38db69624cd7cf2bf1df39499d0adac6274b"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r10, &(0x7f0000000000), &(0x7f00000006c0)=""/73, 0x4}, 0x20) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010802000000030000008ed7000008000300", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 41.655529807s ago: executing program 2 (id=1324): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0xfffffffffffffffc}, 0x18) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) (async) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) (async) setsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xf0}}, 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r5, {0x6, 0xfff2}, {0x5, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DREG={0x8}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fedbdf251c0000000e0001006e6574615e7673696d0000000f0002006e657464657673696d30000064fc0b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x4850) 26.598441687s ago: executing program 33 (id=1324): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0xfffffffffffffffc}, 0x18) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) (async) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) (async) setsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xf0}}, 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r5, {0x6, 0xfff2}, {0x5, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DREG={0x8}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fedbdf251c0000000e0001006e6574615e7673696d0000000f0002006e657464657673696d30000064fc0b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x4850) 5.346283524s ago: executing program 1 (id=1670): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x9, 0x59c, @udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40881}, 0x20004011) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r3, @ANYBLOB="001001000000000014001a80100004800c000a80"], 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x60040050) 5.176405105s ago: executing program 1 (id=1673): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x9, 0x3, 0xc4f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r0, 0x0, 0x200000000000000}, 0x38) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xe07e872420dfefca) r1 = socket$netlink(0x10, 0x3, 0x0) unshare(0x200) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xe}, {0xe, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 4.655657189s ago: executing program 1 (id=1679): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xb, &(0x7f0000000200)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r0, &(0x7f0000000040)={0xfffffffffffffffe, 0x20, 0x4, 0x20, 0x3}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f00000003c0), &(0x7f0000000400)=0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4400}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x48}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000300)={0x1, 0x1, 0x3}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) nanosleep(&(0x7f0000000480)={r3, r4+60000000}, &(0x7f00000004c0)) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x16c, 0x3, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xa00}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x684}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x92}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x601}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xa47}, @CTA_TUPLE_ORIG={0x90, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_MARK_MASK={0x8}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xff}, @CTA_TUPLE_MASTER={0x20, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_SEQ_ADJ_REPLY={0x3c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffffd}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xcb9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1a}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xd}]}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x24, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xf2}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x40}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x1}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x3}]}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x20000190}, 0x881) 4.235334162s ago: executing program 4 (id=1683): r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0080bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) write(r0, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, 0x28, 0x107, 0x8000000, 0x0, {0x5, 0x7c}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@local}]}]}, 0x2c}}, 0x40080c0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x20, 0x3, 0x2, 0x200, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[], 0x32600) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={&(0x7f0000000340)=""/200, 0xc8, 0x0, &(0x7f0000000440)=""/32, 0x20}}, 0x10) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000500)=@raw=[@jmp={0x5, 0x1, 0x0, 0xb, 0x3, 0x100, 0xffffffffffffffff}, @generic={0xb3, 0x3, 0x8, 0x9, 0x6}, @alu={0x4, 0x1, 0xb, 0x2, 0xb, 0x6, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @exit, @map_fd={0x18, 0x4, 0x1, 0x0, 0x1}], &(0x7f0000000580)='GPL\x00', 0x2, 0xb2, &(0x7f00000005c0)=""/178, 0x41000, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0xd, 0x3, 0x8}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000700)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000740)=[{0x1, 0x3, 0x1, 0xc}, {0x3, 0x3, 0xd, 0x1}, {0x1, 0x4, 0x7, 0x2}, {0x1, 0x5, 0x0, 0x7}, {0x2, 0x4, 0xf, 0x9}, {0x3, 0x1, 0x9, 0xc}, {0x0, 0x5, 0x1, 0x3}, {0x4, 0x5, 0x9, 0x4}, {0x4, 0x5, 0x4, 0x8}, {0x4, 0x1, 0x7, 0x9}], 0x10, 0xcf3}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000008c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x16, 0xe, &(0x7f0000000240)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x6d}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0xc, 0x2, 0x1, 0x10, 0xffffffffffffffff}, @ldst={0x0, 0x1, 0x0, 0x9, 0x1, 0x10, 0xffffffffffffffff}, @alu={0x4, 0x1, 0xd, 0x1, 0x4, 0xfffffffffffffffe, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], &(0x7f0000000040)='GPL\x00', 0x8ec, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x2c, r4, 0x8, &(0x7f00000000c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x4, 0x2, 0x8}, 0x10, r5, r6, 0x1, &(0x7f0000000900)=[r7], &(0x7f0000000940)=[{0x4, 0x1, 0x3, 0xc}], 0x10, 0x9}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_vlan={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x7c}}, 0x0) 3.882174812s ago: executing program 4 (id=1685): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x78}}, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r3) bind$rxrpc(r0, &(0x7f0000000180)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x5, @private2}}, 0x24) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x40, r5, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x2c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0xfffffffffffffd7a}]}]}, 0x40}}, 0x0) sendmmsg(r1, &(0x7f00000057c0), 0x40000000000034a, 0x8804) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004084}, 0x10) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000740)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @val={@val={0x88a8, 0x1, 0x1, 0x2}, {0x8100, 0x0, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xa, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @remote, @empty}}}}, &(0x7f0000000180)={0x1, 0x2, [0x792, 0x17e, 0x85e, 0x788]}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000f0ea000000000000007110040000000000d931c208ab6876e7"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_ADD(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 3.583485011s ago: executing program 1 (id=1688): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async, rerun: 32) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000d00)=""/197, 0xc5}, {&(0x7f0000000700)=""/215, 0xd7}, {&(0x7f0000003200)=""/4031, 0xfbf}, {&(0x7f0000000c00)=""/196, 0xc4}, {&(0x7f0000000a00)=""/196, 0xfe85}, {&(0x7f0000002180)=""/100, 0x64}, {&(0x7f0000002200)=""/4066, 0xfe2}, {&(0x7f00000003c0)=""/242, 0xf2}, {&(0x7f0000000300)=""/172, 0xac}, {&(0x7f0000000800)=""/150, 0xa6}, {&(0x7f0000000240)=""/159, 0x9f}], 0xb}, 0x40002002) (async, rerun: 32) recvmmsg(r2, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x7fffffff}], 0x2, 0x12020, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002b80)=@delchain={0x620, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0x0, 0xe}, {0x6, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x5f0, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0x170, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x120, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x68, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x7}, "645809825d93df900fa8fae387fbed6313a639f20b0238ccdd4da9fde2f0be34e659ba729925eff5ebd76dec200e0c6b209649b549944fb335b53ad7e5b0f72af98dbb05ee1778a3e952122289a807cd7b48f87fa52a56b8fa"}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x4}, {0x4, 0x1, 0x6, "eb"}}}, @TCF_EM_CONTAINER={0x88, 0x3, 0x0, 0x0, {{0x4, 0x0, 0xb}, "17b31b88cd50d147badf2a1a38c77df97be64641cc7318b2ce8ccdad6a96b06c832c85fddaca6ed96ea16ef202d71b42b21893487cead96a7ed371addafba26ca026c638c16771ecfe003896b993b75dc4111355a036c11ea5ca4b1fab502e611260caea6dd386e39e886b9878b03b39dc015359b12cc7be6f"}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x4b2a}, {0x8, 0x5, 0x2, "aeb25e3e76"}}}]}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xffd3, 0x8, 0x8}, {0x3, 0x6}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xf0a, 0x3, 0x6c0}, {0x5, 0x0, 0x3, 0x7ff}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xf, 0x7, 0x7f}, {{0x4, 0x1, 0x0, 0x1}, {0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x454, 0x9, 0x0, 0x1, [@m_gact={0x140, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x9d, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2680, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1abe}}]}, {0xed, 0x6, "f2984ea5ae0b0909ca5198b5e56548da1af4efe458d68e8346a5ad6fa8d75b3efbcec03667694b23e57efb5dea177c9fec912eda500f92ad241d4a3e1eb9b05c2461a1e89e99a22f43eb3b64257b78512c9df802c3ea23ede5e978e8db3be47630f9b48cdfcee2130369da2ce7473e6324d4fc0342cb38a9e544eb6f4e0148acb294b877f68eb4b6b13e38196c311c9ebb06d7a5ee9ead5689128fa35472611715963d35fb43d3014ff74e144932866ca97f5c001aab6053dd7ce7d38a407074614c2a21063cc49a687085d3ab9d042fcc913d8377863381be46ad8fade1f71945e9d5053fd5d1123d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0xb4, 0x1b, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010101}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x30}}]}, {0x69, 0x6, "effbbfbb9975b98b391b34602a99202c04f8aff0f475c3649e7f9024793790e685860edfb7d78570905ca6acc9165a1fb42c399f209c0f00a8f4866f081cd17e904ddc3210cc30ec49b70f2b1fb3ead1fe143d5356ac58b602d03fa75b270e66d3b14a3b76"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbmod={0x108, 0x1f, 0x0, 0x0, {{0xb}, {0x4}, {0xd9, 0x6, "364a95306a0125f7c7762d651b8604a6d91ec4567f627089ed8d3453859a3d2c79d3d70f085dca8af621c4a5da976ca910f38151f1a68c0e0730e7273e6af4eab8e2ea5df8cb0f6ab249f7561ea8c0dd3e562e5e6a1db3a546a7f7c5f1d0ae94557d9f43b53f0c2e3edaf804191d2d3a1cbdae068d8e342ed2d4e751b25b639e2536238fb6a4824a50b9c6bb62944110874faeed2eb2a6db4dfa6ff7d67302260dd8c80e3c4c3a3a11f1d204106eec615119eaaa73bd0bb3e2d774039d9c7e0d445019a712cc0c16707a7b8505b7c94133ceccee82"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0x88, 0x3, 0x0, 0x0, {{0xf}, {0x4c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}]}, {0xd, 0x6, "6c73dc20ec0f1f62d7"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_xt={0xcc, 0xe, 0x0, 0x0, {{0x7}, {0x4}, {0xa3, 0x6, "2a0caebad864038ff40a5d287f3088600ceb92031a440f806744f2c29cd762b34d1c3e200652a37a380abee23790e6050e067b4335afeb4ae4a0dfe9fa72cc1df85464324a30272ee56c17d0913025ba5b385f50249552b3d0baa66c6ffc89df47949c8e52874be2547d84a88eaf65c1a57f44be2ac8409dc80a1286dc54b446bceacb288bceeb018feed674cd3991cf602a4e1e2de9b27bb4036b0ac3e4a6"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x620}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) (async) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r3, &(0x7f00000027c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf, 0xa1}}, {{&(0x7f0000000300)=@rc, 0x80, &(0x7f0000000580)=[{&(0x7f0000000000)=""/55, 0x37}, {&(0x7f0000000880)=""/248, 0xf8}, {&(0x7f0000000a00)=""/154, 0x9a}, {&(0x7f0000000100)=""/14, 0xe}], 0x4, &(0x7f00000006c0)=""/87, 0x57}, 0x2}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000003800)=""/4096, 0x1000}], 0x1, &(0x7f0000000ac0)=""/248, 0xf8}, 0x10}, {{&(0x7f0000000bc0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000c40)=""/189, 0xbd}, {&(0x7f0000000780)=""/7, 0x7}, {&(0x7f0000000d00)=""/69, 0x45}], 0x3, &(0x7f0000000dc0)=""/235, 0xeb}}, {{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000000ec0)=""/247, 0xf7}, {&(0x7f0000001fc0)=""/189, 0xbd}, {&(0x7f0000002080)=""/104, 0x68}, {&(0x7f0000002100)=""/93, 0x5d}, {&(0x7f0000002180)=""/146, 0x92}, {&(0x7f0000002240)=""/197, 0xc5}], 0x6, &(0x7f00000023c0)=""/114, 0x72}, 0x800}, {{&(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002740)=[{&(0x7f00000024c0)=""/229, 0xe5}, {&(0x7f00000025c0)=""/187, 0xbb}, {&(0x7f0000002680)=""/188, 0xbc}, {&(0x7f0000004d00)=""/4096, 0x1000}], 0x4}, 0x2b67}], 0x6, 0x2040000, &(0x7f0000003700)={0x77359400}) (async) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) (async, rerun: 32) r4 = socket(0x1e, 0x4, 0x0) (rerun: 32) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3f8, 0x0, 0x0, 0x4b}, 0x10) recvmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000480)=""/217, 0xd9}], 0x1}, 0x10101) (async) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r5, 0x8) (async) r6 = accept4(r5, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0xe}, &(0x7f0000000200)=0x8) (async) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) getsockopt$sock_buf(r0, 0x1, 0x4d, &(0x7f00000014c0)=""/145, &(0x7f0000000080)=0x91) 3.339553676s ago: executing program 4 (id=1691): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x50, 0xd, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000050000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000020c0009800800011e0000f5d90800084000000001"], 0xc4}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x3c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x3c}}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r10, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r11) getsockopt$inet_mreqn(r11, 0x0, 0x23, &(0x7f0000000540)={@rand_addr, @rand_addr, 0x0}, &(0x7f00000005c0)=0xc) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)={0x84, r12, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xede947071ac6807b}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x84}}, 0x48801) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000180)={'ip6erspan0\x00'}) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.21960545s ago: executing program 1 (id=1693): socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2711, @hyper}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc8, r2, 0x8, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x401}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xfff8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x5}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000091}, 0x4008000) 2.691194026s ago: executing program 6 (id=1699): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x111000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_stats={0x1d, 0x1, [0x142b]}}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x4b, 0x0, 0x0) 2.547518485s ago: executing program 1 (id=1700): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES64=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRES8], 0x32600) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) socket$rxrpc(0x21, 0x2, 0x2) (async) r2 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) (async) connect$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) socket(0xa, 0x2400000001, 0x0) (async) r3 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x4e22, 0x0, @mcast1, 0x1000003}}}, 0x88) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x4e22, 0x0, @mcast1, 0x1000003}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, 0x0, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x10000000000030, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffff0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4008800) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffff0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4008800) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32, @ANYBLOB="020000000000800080001200080001007674"], 0xa0}}, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r4, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf253500000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x4000004}, 0x40090) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004300)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0xffffffffffffffff}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20044041}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0x1c8}}, 0x0) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x12, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), r3) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r7, 0x1, 0x0, 0xfffffffe, {0x27}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x51}}]}, 0x50}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400"], 0x14}}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400"], 0x14}}, 0x0) 2.547237303s ago: executing program 5 (id=1701): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0xffffffffffffffff) 2.519383942s ago: executing program 6 (id=1703): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x410000, 0x0) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x9, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000014000780080008400000009808000640200000000500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x5c}}, 0x20000000) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x44084) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000003c0)={{0x0, @rand_addr=0x64010102, 0x4e22, 0x0, 'none\x00', 0x0, 0x3, 0x23}, {@remote, 0x4e21, 0x2000, 0x8, 0x80000001, 0x6}}, 0x44) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f00000001c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @generic={0x1, 0x5, 0x1, 0x4, 0x1000}, @map_fd={0x18, 0x8, 0x1, 0x0, r3}, @generic={0x6, 0xc, 0xf, 0x0, 0x2744}, @map_fd], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb4, &(0x7f000000cf3d)=""/180, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2.419529463s ago: executing program 4 (id=1704): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="28010000000000000100000001", @ANYRES16=r0, @ANYRESDEC=r0, @ANYRES32=r2, @ANYRESDEC=r1], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 2.333316001s ago: executing program 5 (id=1705): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48010}, 0xc0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f0000000000)) 2.23519128s ago: executing program 6 (id=1706): r0 = socket(0x1d, 0x2, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x6a, 0x3, 0x20000000, 0x4) 2.055590466s ago: executing program 5 (id=1707): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendto$rxrpc(r1, &(0x7f00000003c0)="e3710f00217c24965647c62556fdfd5a1c8fa69473fa99bc3dc851c71da76d5b70edf18e3d94a3c2d0f4fdf0765a30bb", 0x30, 0x4000, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback=0xd00, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="12cdde26e7c496e99a9cf8625ec9", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.918863943s ago: executing program 5 (id=1709): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$802154_dgram(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000100)="04", 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000280)) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x2, @loopback, 0x4}, 0x1c) 1.821962511s ago: executing program 6 (id=1710): r0 = socket$nl_route(0x10, 0x3, 0x0) accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5000000010000d04040000005cf5f7edb08900000000000000000c", @ANYRES32=0x0, @ANYBLOB="00000000195000001c0012800c0001006d6163766c616e000c0002800600020001000000140035006d6163766c616e30", @ANYRES64=r0, @ANYRESDEC=r0], 0x50}, 0x1, 0x0, 0x0, 0x804}, 0x0) 1.731267983s ago: executing program 5 (id=1711): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x3, 0xad, 0xfffffff7, 0x8, @remote, @private2, 0x40, 0xaf468d2e9736272, 0x1, 0xfff}}) getuid() (async) r2 = getuid() socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'xfrm0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0xfffffffffffffdf8, 0x81, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@expire={0x34c, 0x18, 0x200, 0x70bd27, 0x25dfdbfd, {{{@in=@multicast2, @in=@broadcast, 0x4e22, 0x0, 0x4e22, 0x5, 0x2, 0x80, 0xa0, 0x3b, r1, r2}, {@in=@multicast1, 0x4d6, 0x2b}, @in6=@private0, {0xa, 0x5, 0x7, 0x90f8, 0x8de4, 0x40, 0x5, 0x9}, {0x3, 0x3, 0x8000, 0x3}, {0xbd6, 0x8ac, 0x2}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x7, 0xc}, 0xf}, [@tfcpad={0x8, 0x16, 0x9}, @encap={0x1c, 0x4, {0x1, 0x4e21, 0x4e22, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}}, @algo_auth={0x139, 0x1, {{'wp384-generic\x00'}, 0x788, "590d440b2bc4be3926021266ab573ef8196785e7d8eca2c46b5c5b0215d2bc7d3512bf7855030732699358fdb197418bb10476f136de55cc8a8bb264da8e7c15336fc64d7662bd124c9a53881d1d9148d7658ebf02ad3ef2dfeeb0162cadc03051e0de52020391c4a50d39f930aae65ead0a8eb602b559f731c42f40298f1a91e58f161cd82a2ce56b23d1cd311fb4c0edc4e009128ddeb723eff3908bebcc993a32bafa9ac05fa5b73490af611462b9b61a612ebcc940e608d024429054ede19f86a1d322c7559f4a4a102cb9f0fe5fb0361b6a1b9804b38b2114e13adc7227e66985e15b0e0f8e0e6074561f757f3b27"}}, @etimer_thresh={0x8, 0xc, 0x5}, @sa={0xe4, 0x6, {{@in=@private=0xa010100, @in=@remote, 0x4e24, 0x0, 0x4c22, 0x8, 0xa, 0x0, 0xa0, 0x0, r4, 0xee01}, {@in6=@local, 0x4d2, 0x2b}, @in6=@mcast1, {0x3, 0xa0, 0xf, 0x1, 0x5, 0x7, 0x5, 0x5}, {0x5, 0x8, 0x3, 0x8}, {0x4c1, 0xf27}, 0x70bd28, 0x3506, 0xa, 0x4, 0x3}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x3e}]}, 0x34c}}, 0x0) 1.606063074s ago: executing program 5 (id=1713): socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x27c, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000200)=ANY=[@ANYRES32=r1]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r3 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x61d8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendto$packet(r7, 0x0, 0x0, 0x4c001, &(0x7f00000002c0)={0x11, 0x86dd, r8, 0x1, 0xd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x4, 0x0, 0x3, 0x27, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x20, 0x18, 0x0, 0x0, 0xf6, "23aa48a3a72d7ef694cebe0711264be814606cdc61ab80284460843885cc1225be9b9170db0e36828bb92c02927ce38a6f81181b924ecca0cbc73606ef4dc3ccf6cebf894100ef95403d5f266f346538f9ce0cf34f6cbbd92e13d2ba63176ea251030789711227f7f23d176ee6777173efb65386be37d62832eb09ba6c8afd6435f32e259d94231de7d4b239ff602cc97e6fae258f6d1a6dd1b4f0b020431a76da6dab5dbadb6b5fa2e7895794f65e1a7747aa635b9e644c5abdf92aa093ae1b440e8fc2e1651aaaf9fcf7a1cd7e688dc6706e2861aeb61b4264bb711d88d7b67b053f0a3a70feff79004e099dec9ad96f1cbb3e17a4"}, @sadb_sa={0x2, 0x1, 0x4d6, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @local}}]}, 0x138}, 0x1, 0x7}, 0x48800) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) connect$inet(r6, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r6, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="e647f8c4dc935c2243790d3b957d276dc04f77fb8ea704f31a85eeb9fcc6976ff8", 0x21}], 0x1}}], 0x1, 0x40408c1) recvmmsg(r6, &(0x7f00000098c0)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000015c0)=""/32, 0x20}, {0x0, 0x3c}], 0x2}, 0x80}], 0x1, 0x10002, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 1.487855486s ago: executing program 0 (id=1714): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000056000100000000000000000007000000", @ANYRES64=r0, @ANYBLOB="100001"], 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000010000000000000000007110b500000000009500000000000000a282cb8ecd0d254d03d44df656abed5011c51ed827438a464f0b0000ea8d4765d847ed7b45e44c2cf1d547595d12d986d5ad7f6f3399a109b3b8e3b287f14844d9231b179588f77bff8932de820630bb62e5f3d2293b3c1745ff4ef48ca55b608a4b303a0ea7e467acf15d3aa394b4d0a007ad46963de72c59651f5e4a34b44f95c9beacd193eac4640ecff86c3267b405d516b4293d20df01c27d9c081a8f04b101e57029ded08052df2ad551884d14b15a99cce8e2fa81f83a"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) 1.445740324s ago: executing program 4 (id=1715): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x1, 0xb7, 0x7, 0x3}, {0x6, 0xb, 0x6, 0xffffffff}]}, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x2, 0x4e21, @broadcast}, 0xd1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffe, 0x9, 0x6}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x84) syz_emit_ethernet(0x3a, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@ra={0x94, 0x4, 0x1}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@multicast, @random="7f0a00034011", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0xf, 0x1c, 0x66, 0x0, 0x80, 0x2, 0x0, @remote, @local}, "156b3485e766b1df"}}}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000640)={0x5}, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0)={0x5}, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), r5) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0xb0, 0x67, 0x0, 0x5, 0x11, 0x0, @private=0xa010101, @local}, {0x4e23, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "e9244fc04a5d0a5861b55cff0be058f92dd99fe94244772f1a3261a4ab6f3147", "884500b0eb3131ec456a044e02e6881290c9693bd22477c82be30f283d636d287e466735805180bfea2717a15f784528", "fcf488347f2d1dd087860b227e14439a37fdb701c157ed71f60f7825", {"a28056b95c337bf5564b2b5e1db09cb2", "6ad47b01d4e7faa74106e6d168638e87"}}}}}}}, 0x0) 1.417682969s ago: executing program 6 (id=1716): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r2, &(0x7f0000000140), 0x18) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000040)={0x0, 0x40, '\x00', 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0903003f0000000000001d000000"], 0x14}}, 0x0) 983.627249ms ago: executing program 0 (id=1717): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r0, 0x8, 0x5, 0x9}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x2, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0x5}, {0xf, 0xb}, {0x8, 0xfff1}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8084}, 0x8040) close(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x100, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xfffffffc, @remote}}]}]}, @IFLA_GROUP={0x8}]}, 0x58}}, 0x0) 899.613475ms ago: executing program 6 (id=1718): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xfffff4f7, 0x0, 0x0, 0x6, 0x8, 0x2}, 0x20) r0 = socket(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) r1 = accept4$ax25(r0, &(0x7f0000000080)={{0x3, @null}, [@bcast, @rose, @rose, @netrom, @rose, @null, @netrom, @rose]}, &(0x7f0000000000)=0x48, 0x80800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}]}}}]}, 0x3c}}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (rerun: 64) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r3, 0x8b32, &(0x7f0000000040)) 795.539832ms ago: executing program 0 (id=1719): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendto$rxrpc(r1, &(0x7f00000003c0)="e3710f00217c24965647c62556fdfd5a1c8fa69473fa99bc3dc851c71da76d5b70edf18e3d94a3c2d0f4fdf0765a30bb", 0x30, 0x4000, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback=0xe00, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="12cdde26e7c496e99a9cf8625ec9", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 471.50667ms ago: executing program 0 (id=1720): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x30, r1, 0x100, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}, 0x1, 0x0, 0x0, 0x4044014}, 0x48000) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(r4, 0x8001, 0x5, &(0x7f0000000180)=""/81, &(0x7f0000000200)=0x51) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000240)={r4, 0x7, 0x0, 0x117a}) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001700)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xffe0}, {}, {0x0, 0xc}}}, 0x24}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r5, 0x4) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @rand_addr=0x64010100}}, 0x0, 0xfffd, 0x0, 0x0, 0x5a1, 0x1}, 0x9c) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000440)) 385.617122ms ago: executing program 4 (id=1721): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000002c0)="9f83d074471e226aecc48d114dc98e95e2599ed911a2c1e20b1fa882", 0x1c) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES64, @ANYRES32=r1, @ANYRESOCT=0x0], 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x48800) recvmmsg$unix(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4090, 0xffa}], 0x1}}], 0x1, 0x10000, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000520099b1000010052d7f2d52297a8a040c89790000000000000000d4"], 0x20}}, 0x1) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, r4, 0x1, 0xf, 0x6, @multicast}, 0x14) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r4}, 0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x767681, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r5) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r9 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r9, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r11}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) r12 = openat$cgroup_int(r7, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r12, &(0x7f0000000a40)=[{&(0x7f00000007c0)='t', 0x1}], 0x1) close(r0) socket$kcm(0x29, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'team_slave_0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 179.113718ms ago: executing program 0 (id=1722): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r2, @ANYBLOB="050001400000fedbdf252e00000008000300", @ANYRES32=r1, @ANYBLOB="050034008b00000008004b"], 0x2c}}, 0x0) 0s ago: executing program 0 (id=1723): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0x401, 0x7b5c, 0x10, 0x3, "430cd1e69c47923091b295d174599f33581332cafa73217a4f429e3550f130208b35a96759d6bf76a8c9d1118f042e920e2791b8497b877e13cea0a5a9f593fba7329552eb3dd5d9bea4661d5d95cd7026d4cfffe6e46d47640c4188503c8c0821cef04c92ee4704b6184ae67ef4c49aaa60dfc6dc30cb483bf7d8c401133664"}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, 0x14, 0x8980}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x28}}, 0x0) kernel console output (not intermixed with test programs): _1) entered disabled state [ 95.176843][ T5871] bridge_slave_1: entered allmulticast mode [ 95.185704][ T5871] bridge_slave_1: entered promiscuous mode [ 95.211412][ T5861] team0: Port device team_slave_0 added [ 95.278082][ T5861] team0: Port device team_slave_1 added [ 95.303445][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.328186][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.335846][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.343496][ T5869] bridge_slave_0: entered allmulticast mode [ 95.352670][ T5869] bridge_slave_0: entered promiscuous mode [ 95.364311][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.377133][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.401103][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.428186][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.435553][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.443288][ T5865] bridge_slave_0: entered allmulticast mode [ 95.450791][ T5865] bridge_slave_0: entered promiscuous mode [ 95.458964][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.468037][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.475787][ T5869] bridge_slave_1: entered allmulticast mode [ 95.483877][ T5869] bridge_slave_1: entered promiscuous mode [ 95.509072][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.516259][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.543799][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.569870][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.578163][ T5875] Bluetooth: hci0: command tx timeout [ 95.583690][ T51] Bluetooth: hci4: command tx timeout [ 95.589749][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.597199][ T5865] bridge_slave_1: entered allmulticast mode [ 95.604632][ T5865] bridge_slave_1: entered promiscuous mode [ 95.641878][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.649156][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.652167][ T5875] Bluetooth: hci2: command tx timeout [ 95.679760][ T51] Bluetooth: hci1: command tx timeout [ 95.682437][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.703233][ T5862] team0: Port device team_slave_0 added [ 95.732225][ T51] Bluetooth: hci3: command tx timeout [ 95.742501][ T5871] team0: Port device team_slave_0 added [ 95.760009][ T5862] team0: Port device team_slave_1 added [ 95.783701][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.795853][ T5871] team0: Port device team_slave_1 added [ 95.821054][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.834887][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.904301][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.941205][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.948615][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.975413][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.987716][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.995013][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.021292][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.034532][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.041598][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.068372][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.109992][ T5869] team0: Port device team_slave_0 added [ 96.132117][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.139197][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.168780][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.197449][ T5865] team0: Port device team_slave_0 added [ 96.205603][ T5869] team0: Port device team_slave_1 added [ 96.218333][ T5861] hsr_slave_0: entered promiscuous mode [ 96.225609][ T5861] hsr_slave_1: entered promiscuous mode [ 96.252496][ T5865] team0: Port device team_slave_1 added [ 96.326202][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.333947][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.360314][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.411131][ T5871] hsr_slave_0: entered promiscuous mode [ 96.417856][ T5871] hsr_slave_1: entered promiscuous mode [ 96.424352][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 96.430546][ T5871] Cannot create hsr debugfs directory [ 96.468282][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.475518][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.501878][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.559481][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.566781][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.594064][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.607500][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.615689][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.643950][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.661342][ T5862] hsr_slave_0: entered promiscuous mode [ 96.668046][ T5862] hsr_slave_1: entered promiscuous mode [ 96.674895][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 96.680662][ T5862] Cannot create hsr debugfs directory [ 96.768110][ T5869] hsr_slave_0: entered promiscuous mode [ 96.776119][ T5869] hsr_slave_1: entered promiscuous mode [ 96.782786][ T5869] debugfs: 'hsr0' already exists in 'hsr' [ 96.788628][ T5869] Cannot create hsr debugfs directory [ 96.931587][ T5865] hsr_slave_0: entered promiscuous mode [ 96.938238][ T5865] hsr_slave_1: entered promiscuous mode [ 96.945531][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 96.951335][ T5865] Cannot create hsr debugfs directory [ 97.429702][ T5861] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.457957][ T5861] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.480611][ T5861] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.493141][ T5861] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.565508][ T5871] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.579411][ T5871] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.600428][ T5871] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.614109][ T5871] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.652309][ T51] Bluetooth: hci0: command tx timeout [ 97.657996][ T51] Bluetooth: hci4: command tx timeout [ 97.729331][ T5869] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.737921][ T5875] Bluetooth: hci1: command tx timeout [ 97.742510][ T51] Bluetooth: hci2: command tx timeout [ 97.768271][ T5869] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.780662][ T5869] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.805972][ T5869] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.822612][ T51] Bluetooth: hci3: command tx timeout [ 97.920041][ T5862] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.947243][ T5862] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.962292][ T5862] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.007025][ T5862] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.108951][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.148407][ T5865] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.159899][ T5865] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.174672][ T5865] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.194676][ T5865] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.233885][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.254993][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.299797][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.307124][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.344227][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.356222][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.363422][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.389930][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.443615][ T3525] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.450879][ T3525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.463955][ T3525] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.471185][ T3525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.528525][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.575622][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.583053][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.624647][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.639196][ T3525] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.646375][ T3525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.745414][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.785795][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.793035][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.818880][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.864992][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.872243][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.976124][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.083834][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.091158][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.136169][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.143492][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.237565][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.501401][ T5871] veth0_vlan: entered promiscuous mode [ 99.547384][ T5871] veth1_vlan: entered promiscuous mode [ 99.611621][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.729416][ T5871] veth0_macvtap: entered promiscuous mode [ 99.739227][ T51] Bluetooth: hci4: command tx timeout [ 99.739238][ T5875] Bluetooth: hci0: command tx timeout [ 99.758706][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.800332][ T5871] veth1_macvtap: entered promiscuous mode [ 99.818240][ T51] Bluetooth: hci2: command tx timeout [ 99.818660][ T5875] Bluetooth: hci1: command tx timeout [ 99.853992][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.895714][ T5875] Bluetooth: hci3: command tx timeout [ 99.914486][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.988468][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.094963][ T78] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.123159][ T78] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.156317][ T5862] veth0_vlan: entered promiscuous mode [ 100.169521][ T5869] veth0_vlan: entered promiscuous mode [ 100.179311][ T78] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.209261][ T5869] veth1_vlan: entered promiscuous mode [ 100.224061][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.238630][ T78] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.307249][ T5862] veth1_vlan: entered promiscuous mode [ 100.427765][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.438322][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.442651][ T5869] veth0_macvtap: entered promiscuous mode [ 100.487096][ T5865] veth0_vlan: entered promiscuous mode [ 100.497704][ T5869] veth1_macvtap: entered promiscuous mode [ 100.507658][ T5861] veth0_vlan: entered promiscuous mode [ 100.546344][ T5958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.563747][ T5958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.573849][ T5861] veth1_vlan: entered promiscuous mode [ 100.587089][ T5865] veth1_vlan: entered promiscuous mode [ 100.597284][ T5862] veth0_macvtap: entered promiscuous mode [ 100.624777][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.663769][ T5862] veth1_macvtap: entered promiscuous mode [ 100.684533][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.685611][ T5871] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.709071][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.745229][ T5861] veth0_macvtap: entered promiscuous mode [ 100.756174][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.796703][ T5861] veth1_macvtap: entered promiscuous mode [ 100.844106][ T1096] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.859896][ T1096] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.902884][ T1096] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.945268][ T1096] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.956965][ T1096] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.974896][ T5865] veth0_macvtap: entered promiscuous mode [ 100.988164][ T5865] veth1_macvtap: entered promiscuous mode [ 101.011067][ T1096] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.027502][ T1096] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.043417][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.068784][ T1096] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.098985][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.124645][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.137851][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.199989][ T1096] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.224922][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.240242][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.249080][ T1096] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.260699][ T1096] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.297819][ T1096] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.314220][ T1096] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.362441][ T1096] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.371542][ T1096] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.404501][ T1096] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.406253][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.414285][ T5958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.426594][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.443573][ T5958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.612078][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.620057][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.679492][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.703488][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.813349][ T5875] Bluetooth: hci0: command tx timeout [ 101.818955][ T5875] Bluetooth: hci4: command tx timeout [ 101.839173][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.840255][ T5987] syzkaller0: entered promiscuous mode [ 101.863574][ T5987] syzkaller0: entered allmulticast mode [ 101.873694][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.893934][ T5875] Bluetooth: hci1: command tx timeout [ 101.895803][ T51] Bluetooth: hci2: command tx timeout [ 101.925315][ T5987] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 101.926459][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.946624][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.981316][ T51] Bluetooth: hci3: command tx timeout [ 102.177569][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.209483][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.316163][ T6001] netlink: 'syz.3.8': attribute type 4 has an invalid length. [ 102.706117][ T6008] syz.1.10 uses obsolete (PF_INET,SOCK_PACKET) [ 102.797982][ T6016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11'. [ 102.839044][ T6008] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.043744][ T6029] xt_socket: unknown flags 0x50 [ 103.244596][ T6034] tipc: Started in network mode [ 103.279155][ T6034] tipc: Node identity 3a8867fedc3b, cluster identity 4711 [ 103.287284][ T6034] tipc: Enabled bearer , priority 0 [ 103.459749][ T6038] syzkaller0: entered promiscuous mode [ 103.470875][ T6038] syzkaller0: entered allmulticast mode [ 103.477789][ T6038] tipc: Resetting bearer [ 103.709662][ T6033] tipc: Resetting bearer [ 104.287591][ T9] tipc: Node number set to 3870517246 [ 105.102662][ T6033] tipc: Disabling bearer [ 105.146297][ T6066] tipc: Enabling of bearer rejected, failed to enable media [ 105.448996][ T6080] netlink: 'syz.4.28': attribute type 1 has an invalid length. [ 105.496958][ T6085] syzkaller1: entered promiscuous mode [ 105.517657][ T6085] syzkaller1: entered allmulticast mode [ 105.586922][ T6083] syzkaller1: left promiscuous mode [ 105.628536][ T6083] syzkaller1: left allmulticast mode [ 106.237957][ T6112] netlink: 36 bytes leftover after parsing attributes in process `syz.2.35'. [ 106.585736][ T6119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.38'. [ 106.749859][ T6104] Zero length message leads to an empty skb [ 107.126947][ T6145] raw_sendmsg: syz.3.45 forgot to set AF_INET. Fix it! [ 107.181430][ T6148] netlink: 244 bytes leftover after parsing attributes in process `syz.4.46'. [ 107.246389][ T6145] netlink: 'syz.3.45': attribute type 1 has an invalid length. [ 107.548316][ T6159] netlink: 28 bytes leftover after parsing attributes in process `syz.4.51'. [ 107.585192][ T6164] warning: `syz.2.54' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 107.764926][ T6170] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 107.795392][ T6170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.52'. [ 107.828366][ T6175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.55'. [ 108.972997][ T6224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.65'. [ 109.018143][ T6224] bridge_slave_1: left allmulticast mode [ 109.027917][ T6224] bridge_slave_1: left promiscuous mode [ 109.038771][ T6224] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.068470][ T6224] bridge_slave_0: left allmulticast mode [ 109.075661][ T6224] bridge_slave_0: left promiscuous mode [ 109.081783][ T6224] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.570404][ T6246] syzkaller1: entered promiscuous mode [ 109.578355][ T6246] syzkaller1: entered allmulticast mode [ 109.664994][ T6255] netlink: 'syz.0.73': attribute type 1 has an invalid length. [ 109.692254][ T6255] netlink: 17 bytes leftover after parsing attributes in process `syz.0.73'. [ 109.783788][ T6255] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 109.799997][ T6255] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.809195][ T6255] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.150791][ T6272] veth0: entered promiscuous mode [ 110.190318][ T6271] veth0: left promiscuous mode [ 110.281981][ T6278] netlink: 'syz.1.81': attribute type 4 has an invalid length. [ 110.308200][ T6278] netlink: 17 bytes leftover after parsing attributes in process `syz.1.81'. [ 110.386150][ T6281] netlink: 'syz.4.82': attribute type 1 has an invalid length. [ 110.406036][ T6281] netlink: 224 bytes leftover after parsing attributes in process `syz.4.82'. [ 111.019825][ T6308] netlink: 'syz.4.88': attribute type 2 has an invalid length. [ 111.092057][ T51] Bluetooth: hci4: command tx timeout [ 111.496369][ T6325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.96'. [ 111.575780][ T6325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.96'. [ 111.583420][ T6328] openvswitch: netlink: Tunnel attr 47 out of range max 16 [ 111.899456][ T6341] sctp: [Deprecated]: syz.2.102 (pid 6341) Use of struct sctp_assoc_value in delayed_ack socket option. [ 111.899456][ T6341] Use struct sctp_sack_info instead [ 112.361948][ T6355] netlink: 'syz.3.106': attribute type 2 has an invalid length. [ 112.391550][ T6355] netlink: 48 bytes leftover after parsing attributes in process `syz.3.106'. [ 112.427829][ T6355] netlink: 48 bytes leftover after parsing attributes in process `syz.3.106'. [ 112.522055][ T6364] netlink: 'syz.1.109': attribute type 2 has an invalid length. [ 112.548621][ T6364] netlink: 1148 bytes leftover after parsing attributes in process `syz.1.109'. [ 112.882177][ T6375] netlink: 36 bytes leftover after parsing attributes in process `syz.3.114'. [ 113.046274][ T6384] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 113.055553][ T850] IPVS: starting estimator thread 0... [ 113.063341][ T6384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.117'. [ 113.076549][ T6384] netlink: 16 bytes leftover after parsing attributes in process `syz.0.117'. [ 113.156657][ T6386] IPVS: using max 22 ests per chain, 52800 per kthread [ 113.218030][ T6379] netlink: 16 bytes leftover after parsing attributes in process `syz.1.113'. [ 113.481909][ T6402] netlink: 'syz.0.121': attribute type 4 has an invalid length. [ 113.510651][ T6402] netlink: 152 bytes leftover after parsing attributes in process `syz.0.121'. [ 113.540818][ T6404] IPv6: sit1: Disabled Multicast RS [ 113.570166][ T6404] sit1: entered allmulticast mode [ 113.643320][ T6402] `: renamed from bond0 (while UP) [ 113.671612][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.311520][ T6442] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.134'. [ 114.819773][ T6461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.845649][ T6459] vlan2: entered promiscuous mode [ 114.851103][ T6459] vlan2: entered allmulticast mode [ 114.871798][ T6459] hsr_slave_1: entered allmulticast mode [ 115.132832][ T6474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.145'. [ 115.347020][ T6484] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.148'. [ 115.664855][ T6497] netlink: 44 bytes leftover after parsing attributes in process `syz.0.151'. [ 116.131939][ T5875] Bluetooth: hci4: command 0x0405 tx timeout [ 116.462283][ T6544] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 116.629831][ T6549] netlink: 'syz.4.157': attribute type 29 has an invalid length. [ 116.669028][ T6549] netlink: 'syz.4.157': attribute type 29 has an invalid length. [ 116.724598][ T6552] netlink: 500 bytes leftover after parsing attributes in process `syz.4.157'. [ 116.876194][ T6561] netlink: 'syz.2.158': attribute type 1 has an invalid length. [ 117.002294][ T6568] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 117.081145][ T6568] tunl0: entered promiscuous mode [ 117.108961][ T6568] netlink: 'syz.0.163': attribute type 3 has an invalid length. [ 117.505435][ T6591] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.528549][ T6587] ip6tnl0: mtu less than device minimum [ 118.000498][ T6612] __nla_validate_parse: 6 callbacks suppressed [ 118.000520][ T6612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.177'. [ 118.340723][ T6612] hsr_slave_1 (unregistering): left promiscuous mode [ 118.373397][ T6621] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 118.586689][ T6640] netlink: 36 bytes leftover after parsing attributes in process `syz.2.185'. [ 118.686119][ T6648] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 118.693653][ T6648] IPv6: NLM_F_CREATE should be set when creating new route [ 118.789307][ T6635] syzkaller0: entered promiscuous mode [ 118.797127][ T6643] nbd0: detected capacity change from 0 to 127 [ 118.818922][ T6635] syzkaller0: entered allmulticast mode [ 118.846825][ T51] block nbd0: Receive control failed (result -104) [ 118.847334][ T6641] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 119.014960][ T6658] netlink: 'syz.2.189': attribute type 1 has an invalid length. [ 119.067268][ T6658] netlink: 228 bytes leftover after parsing attributes in process `syz.2.189'. [ 120.521336][ T6678] netlink: 72 bytes leftover after parsing attributes in process `syz.4.195'. [ 120.620942][ T6681] netlink: 28 bytes leftover after parsing attributes in process `syz.1.196'. [ 120.803305][ T6689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.199'. [ 121.470807][ T6700] netlink: 544 bytes leftover after parsing attributes in process `syz.0.202'. [ 121.616550][ T6704] netlink: 'syz.4.203': attribute type 8 has an invalid length. [ 121.794581][ T6715] netlink: 24 bytes leftover after parsing attributes in process `syz.0.205'. [ 122.161932][ T6730] delete_channel: no stack [ 122.798590][ T6756] netlink: 224 bytes leftover after parsing attributes in process `syz.1.217'. [ 122.853524][ T6757] IPVS: set_ctl: invalid protocol: 46 0.0.0.0:21 [ 122.900214][ T6756] netlink: 'syz.1.217': attribute type 1 has an invalid length. [ 122.909745][ T6761] netlink: 104 bytes leftover after parsing attributes in process `syz.0.218'. [ 123.014665][ T6762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.218'. [ 123.015084][ T6776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.218'. [ 123.168267][ T6779] netlink: 'syz.1.222': attribute type 1 has an invalid length. [ 123.210232][ T6779] netlink: 184 bytes leftover after parsing attributes in process `syz.1.222'. [ 123.254280][ T6779] netlink: 'syz.1.222': attribute type 1 has an invalid length. [ 123.644781][ T6801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.226'. [ 124.011200][ T6817] netlink: 20 bytes leftover after parsing attributes in process `syz.0.231'. [ 124.112056][ T6804] syzkaller1: entered promiscuous mode [ 124.117724][ T6804] syzkaller1: entered allmulticast mode [ 124.507959][ T6841] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.917893][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.241'. [ 124.988875][ T6866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.241'. [ 124.993617][ T6865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.244'. [ 125.066580][ T6865] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 125.121078][ T6865] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 125.162543][ T6865] gretap1: entered promiscuous mode [ 125.185176][ T6865] gretap1: entered allmulticast mode [ 125.522072][ T6886] netlink: 20 bytes leftover after parsing attributes in process `syz.0.248'. [ 126.019632][ T6903] veth3: entered allmulticast mode [ 126.624895][ T6941] netlink: 20 bytes leftover after parsing attributes in process `syz.2.262'. [ 126.874994][ T6957] netlink: 'syz.2.265': attribute type 1 has an invalid length. [ 126.900528][ T6957] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.089890][ T6967] openvswitch: netlink: Flow key attr not present in new flow. [ 127.655463][ T6995] netlink: 'syz.4.272': attribute type 8 has an invalid length. [ 128.123800][ T7011] netlink: 'syz.4.277': attribute type 1 has an invalid length. [ 128.958589][ T7039] netlink: 'syz.1.286': attribute type 9 has an invalid length. [ 129.817723][ T7084] __nla_validate_parse: 5 callbacks suppressed [ 129.817745][ T7084] netlink: 20 bytes leftover after parsing attributes in process `syz.4.299'. [ 129.859786][ T9] IPVS: starting estimator thread 0... [ 129.867689][ T7082] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.991894][ T7085] IPVS: using max 27 ests per chain, 64800 per kthread [ 130.285027][ T7103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.305'. [ 130.461494][ T7111] netlink: 'syz.0.307': attribute type 3 has an invalid length. [ 130.501883][ T7111] netlink: 9 bytes leftover after parsing attributes in process `syz.0.307'. [ 130.601186][ T7118] netlink: 'syz.3.310': attribute type 1 has an invalid length. [ 130.938160][ T7127] vlan2: entered allmulticast mode [ 130.983420][ T7127] veth1: entered allmulticast mode [ 131.355330][ T7147] tipc: Started in network mode [ 131.368997][ T7147] tipc: Node identity ac14142f, cluster identity 4711 [ 131.405818][ T7147] tipc: New replicast peer: 0.0.0.0 [ 131.454762][ T7147] tipc: Enabled bearer , priority 10 [ 131.488893][ T7150] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 131.658790][ T6533] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 131.659766][ T7165] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 131.710625][ T7164] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 132.043999][ T7183] tipc: Started in network mode [ 132.048949][ T7183] tipc: Node identity d29656303092, cluster identity 4711 [ 132.075406][ T7183] tipc: Enabled bearer , priority 0 [ 132.091611][ T7188] netlink: 'syz.4.330': attribute type 4 has an invalid length. [ 132.131960][ T7188] netlink: 17 bytes leftover after parsing attributes in process `syz.4.330'. [ 132.132681][ T7182] syzkaller0: entered promiscuous mode [ 132.197002][ T7182] syzkaller0: entered allmulticast mode [ 132.285878][ T7182] tipc: Resetting bearer [ 132.319227][ T7181] tipc: Resetting bearer [ 132.359223][ T850] IPVS: starting estimator thread 0... [ 132.442488][ T7181] tipc: Disabling bearer [ 132.468449][ T7207] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 132.481415][ T7207] netlink: 'syz.4.335': attribute type 21 has an invalid length. [ 132.491909][ T7202] IPVS: using max 30 ests per chain, 72000 per kthread [ 132.507166][ T7207] netlink: 'syz.4.335': attribute type 22 has an invalid length. [ 132.516021][ T7207] netlink: 'syz.4.335': attribute type 23 has an invalid length. [ 132.526401][ T7207] netlink: 'syz.4.335': attribute type 25 has an invalid length. [ 132.561893][ T7207] netlink: 'syz.4.335': attribute type 26 has an invalid length. [ 132.567900][ T9] tipc: Node number set to 2886997039 [ 132.569847][ T7207] netlink: 16 bytes leftover after parsing attributes in process `syz.4.335'. [ 133.006044][ T7229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.342'. [ 133.082064][ T7233] netlink: 68 bytes leftover after parsing attributes in process `syz.3.344'. [ 133.096637][ T7235] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 133.105603][ T7228] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 133.455993][ T7250] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 133.696407][ T7265] netlink: 20 bytes leftover after parsing attributes in process `syz.0.351'. [ 133.721969][ T7265] netlink: 20 bytes leftover after parsing attributes in process `syz.0.351'. [ 133.808760][ T7276] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.203597][ T7284] validate_nla: 1 callbacks suppressed [ 134.203622][ T7284] netlink: 'syz.0.355': attribute type 1 has an invalid length. [ 134.506304][ T7298] geneve2: entered promiscuous mode [ 134.558144][ T7298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.358'. [ 134.588573][ T7287] pim6reg1: entered promiscuous mode [ 134.599800][ T7287] pim6reg1: entered allmulticast mode [ 134.837193][ T7308] __nla_validate_parse: 1 callbacks suppressed [ 134.837214][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.361'. [ 135.422014][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 135.911865][ T7355] netlink: 'syz.1.374': attribute type 32 has an invalid length. [ 135.920084][ T7355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.374'. [ 135.996921][ T7355] (unnamed net_device) (uninitialized): option coupled_control: invalid value (24) [ 136.165298][ T7362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.376'. [ 136.233291][ T7360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.375'. [ 136.485944][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'. [ 136.867656][ T7386] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 136.982354][ T7377] netlink: 232 bytes leftover after parsing attributes in process `syz.2.378'. [ 136.997002][ T7383] netlink: 20 bytes leftover after parsing attributes in process `syz.4.382'. [ 137.027176][ T7387] netlink: 'syz.0.383': attribute type 3 has an invalid length. [ 137.044279][ T7386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.066208][ T7386] bond0: (slave rose0): Enslaving as an active interface with an up link [ 137.114712][ T7376] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.279701][ T7376] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.702068][ T7376] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.791465][ T7422] netlink: 20 bytes leftover after parsing attributes in process `syz.3.388'. [ 137.824721][ T7422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.388'. [ 137.849170][ T7428] netlink: 68 bytes leftover after parsing attributes in process `syz.4.389'. [ 137.945868][ T7376] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.231857][ T3593] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.276030][ T3593] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.331459][ T78] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.398284][ T3593] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.911102][ T7468] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 139.734927][ T7501] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 139.735000][ T7499] geneve2: entered promiscuous mode [ 139.763031][ T7499] geneve2: entered allmulticast mode [ 139.874000][ T7501] netlink: 'syz.3.408': attribute type 1 has an invalid length. [ 139.909599][ T7501] __nla_validate_parse: 3 callbacks suppressed [ 139.909623][ T7501] netlink: 224 bytes leftover after parsing attributes in process `syz.3.408'. [ 139.992804][ T7501] block nbd1: not configured, cannot reconfigure [ 140.599969][ T7542] netlink: 44 bytes leftover after parsing attributes in process `syz.4.416'. [ 140.789678][ T7543] netlink: 20 bytes leftover after parsing attributes in process `syz.2.415'. [ 141.063445][ T7558] netlink: 'syz.3.419': attribute type 1 has an invalid length. [ 141.121156][ T7558] netlink: 'syz.3.419': attribute type 2 has an invalid length. [ 141.197701][ T7575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.422'. [ 141.690030][ T7595] netlink: 32 bytes leftover after parsing attributes in process `syz.1.426'. [ 141.801118][ T7597] netlink: 28 bytes leftover after parsing attributes in process `syz.2.428'. [ 141.880495][ T7597] netlink: 28 bytes leftover after parsing attributes in process `syz.2.428'. [ 141.920262][ T7607] netlink: 56 bytes leftover after parsing attributes in process `syz.0.430'. [ 142.074105][ T7611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.431'. [ 142.278994][ T7611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.473690][ T7614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.493537][ T7619] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 142.519983][ T7614] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 142.567627][ T7614] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 142.679049][ T7616] netlink: 32 bytes leftover after parsing attributes in process `syz.4.432'. [ 142.931898][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 143.403873][ T7673] trusted_key: syz.3.445 sent an empty control message without MSG_MORE. [ 143.453660][ T7673] tipc: Enabling of bearer rejected, failed to enable media [ 143.718437][ T3593] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.259572][ T7706] tipc: Enabling of bearer rejected, failed to enable media [ 144.865464][ T7732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.231509][ T7746] __nla_validate_parse: 2 callbacks suppressed [ 145.231529][ T7746] netlink: 24 bytes leftover after parsing attributes in process `syz.4.466'. [ 145.669839][ T7761] netlink: 72 bytes leftover after parsing attributes in process `syz.4.472'. [ 145.688160][ T7767] netlink: 28 bytes leftover after parsing attributes in process `syz.2.473'. [ 145.690379][ T7761] netlink: 72 bytes leftover after parsing attributes in process `syz.4.472'. [ 145.949074][ T7776] veth0: entered promiscuous mode [ 146.030372][ T7776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.474'. [ 146.068669][ T7780] Bluetooth: MGMT ver 1.23 [ 146.191089][ T7776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.474'. [ 146.712789][ T7807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.485'. [ 147.365873][ T7834] netlink: 104 bytes leftover after parsing attributes in process `syz.0.495'. [ 147.429364][ T7839] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.497'. [ 147.457052][ T7842] netlink: 104 bytes leftover after parsing attributes in process `syz.0.495'. [ 147.600312][ T7847] netlink: 'syz.2.498': attribute type 4 has an invalid length. [ 147.701875][ T7855] netlink: 'syz.2.498': attribute type 4 has an invalid length. [ 148.054354][ T7871] netlink: 'syz.3.504': attribute type 27 has an invalid length. [ 148.089680][ T7874] netlink: 'syz.3.504': attribute type 27 has an invalid length. [ 149.366253][ T123] block nbd0: Possible stuck request ffff8880250f7000: control (read@0,1024B). Runtime 30 seconds [ 149.378030][ T123] block nbd0: Possible stuck request ffff8880250f71c0: control (read@1024,1024B). Runtime 30 seconds [ 149.389269][ T123] block nbd0: Possible stuck request ffff8880250f7380: control (read@2048,1024B). Runtime 30 seconds [ 149.401946][ T123] block nbd0: Possible stuck request ffff8880250f7540: control (read@3072,1024B). Runtime 30 seconds [ 149.775372][ T7942] vlan0: entered promiscuous mode [ 149.810099][ T7942] vlan0: entered allmulticast mode [ 149.821942][ T7942] veth0_vlan: entered allmulticast mode [ 149.873605][ T7944] netlink: 'syz.3.522': attribute type 4 has an invalid length. [ 150.040870][ T7949] netlink: 'syz.3.524': attribute type 3 has an invalid length. [ 150.066899][ T7949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.186134][ T7954] netlink: 'syz.2.526': attribute type 1 has an invalid length. [ 150.239321][ T7954] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 150.720477][ T7981] tipc: Started in network mode [ 150.759058][ T7981] tipc: Node identity ee8c7bbce97f, cluster identity 4711 [ 150.787573][ T7981] tipc: Enabled bearer , priority 0 [ 150.837086][ T7988] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 150.919449][ T7989] tipc: Disabling bearer [ 151.311925][ T8006] __nla_validate_parse: 10 callbacks suppressed [ 151.311946][ T8006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.538'. [ 151.318018][ T8004] syzkaller0: entered promiscuous mode [ 151.342897][ T8004] syzkaller0: entered allmulticast mode [ 151.363788][ T8007] syzkaller1: entered promiscuous mode [ 151.373383][ T8007] syzkaller1: entered allmulticast mode [ 151.383748][ T8006] bridge_slave_1: left allmulticast mode [ 151.426721][ T8006] bridge_slave_1: left promiscuous mode [ 151.434906][ T8006] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.448261][ T8006] bridge_slave_0: left allmulticast mode [ 151.462261][ T8006] bridge_slave_0: left promiscuous mode [ 151.467875][ T8015] netlink: 72 bytes leftover after parsing attributes in process `syz.4.540'. [ 151.489296][ T8006] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.728767][ T8017] syzkaller0: mtu less than device minimum [ 151.790494][ T8020] tc_dump_action: action bad kind [ 152.001375][ T8035] netlink: 24 bytes leftover after parsing attributes in process `syz.0.544'. [ 152.022252][ T8032] tipc: Started in network mode [ 152.027210][ T8032] tipc: Node identity 221bb26bc21d, cluster identity 4711 [ 152.035418][ T8032] tipc: Enabled bearer , priority 0 [ 152.128900][ T8033] syzkaller0: entered promiscuous mode [ 152.135957][ T8033] syzkaller0: entered allmulticast mode [ 152.198084][ T8032] tipc: Resetting bearer [ 152.240251][ T8032] tipc: Disabling bearer [ 152.550066][ T8063] netlink: 20 bytes leftover after parsing attributes in process `syz.4.551'. [ 152.850248][ T8074] netlink: 284 bytes leftover after parsing attributes in process `syz.1.552'. [ 153.070021][ T8080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.555'. [ 153.121414][ T8078] vlan1: entered promiscuous mode [ 153.147603][ T8078] bridge0: entered promiscuous mode [ 153.350580][ T8094] netlink: 'syz.0.560': attribute type 10 has an invalid length. [ 153.387170][ T8094] bridge_slave_1: left allmulticast mode [ 153.406087][ T8094] bridge_slave_1: left promiscuous mode [ 153.426080][ T8094] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.485228][ T8094] `: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 153.490541][ T8100] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 153.588042][ T8106] delete_channel: no stack [ 153.637303][ T8106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.564'. [ 153.838418][ T8106] macvtap1: entered promiscuous mode [ 153.843868][ T8106] vlan0: entered promiscuous mode [ 153.851115][ T8106] macvtap1: entered allmulticast mode [ 153.857544][ T8106] vlan0: entered allmulticast mode [ 153.867066][ T8106] veth1_macvtap: entered allmulticast mode [ 154.003841][ T8082] delete_channel: no stack [ 154.251160][ T8121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.567'. [ 154.257237][ T8124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.568'. [ 154.277652][ T8123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.567'. [ 154.362208][ T8117] veth0: entered promiscuous mode [ 154.549791][ T8128] tipc: Enabled bearer , priority 0 [ 154.559705][ T8132] syzkaller0: entered promiscuous mode [ 154.568199][ T8132] syzkaller0: entered allmulticast mode [ 154.598546][ T8136] smc: net device bond0 applied user defined pnetid SYZ2 [ 154.609263][ T8114] tipc: Resetting bearer [ 154.693346][ T8114] tipc: Disabling bearer [ 154.956272][ T8136] ` (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.968503][ T8136] ` (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.983405][ T8136] ` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 154.994958][ T8136] ` (unregistering): Released all slaves [ 155.417494][ T8169] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 155.596281][ T8180] Bluetooth: MGMT ver 1.23 [ 155.806408][ T8188] netlink: 'syz.4.586': attribute type 12 has an invalid length. [ 155.928814][ T30] audit: type=1804 audit(1755650714.939:2): pid=8192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.586" name="/newroot/124/cgroup.controllers" dev="tmpfs" ino=648 res=1 errno=0 [ 156.000493][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801c7d4400: rx timeout, send abort [ 156.010442][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801c7d4400: 0x3ff02: (3) A timeout occurred and this is the connection abort to close the session. [ 156.072142][ T30] audit: type=1800 audit(1755650714.939:3): pid=8192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.586" name="cgroup.controllers" dev="tmpfs" ino=648 res=0 errno=0 [ 156.246405][ T8207] netlink: 'syz.2.590': attribute type 11 has an invalid length. [ 156.373557][ T8212] netlink: 'syz.4.592': attribute type 1 has an invalid length. [ 156.426920][ T8212] __nla_validate_parse: 7 callbacks suppressed [ 156.426940][ T8212] netlink: 224 bytes leftover after parsing attributes in process `syz.4.592'. [ 156.629234][ T8213] bond2: entered promiscuous mode [ 156.654251][ T8213] bond2: entered allmulticast mode [ 156.663641][ T8213] 8021q: adding VLAN 0 to HW filter on device bond2 [ 157.011901][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 157.148071][ T8242] netlink: 'syz.3.599': attribute type 4 has an invalid length. [ 157.218676][ T8248] netlink: 16 bytes leftover after parsing attributes in process `syz.4.602'. [ 157.224070][ T8250] netlink: 'syz.3.599': attribute type 4 has an invalid length. [ 157.299552][ T8248] netlink: 12 bytes leftover after parsing attributes in process `syz.4.602'. [ 157.384970][ T8248] netlink: 16 bytes leftover after parsing attributes in process `syz.4.602'. [ 157.441901][ T8256] netlink: 60 bytes leftover after parsing attributes in process `syz.2.604'. [ 158.144047][ T8312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.612'. [ 158.153589][ T8312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.612'. [ 158.546980][ T8317] netlink: 'syz.4.616': attribute type 21 has an invalid length. [ 158.578173][ T8317] IPv6: NLM_F_CREATE should be specified when creating new route [ 158.618843][ T8319] sctp: [Deprecated]: syz.1.617 (pid 8319) Use of int in max_burst socket option. [ 158.618843][ T8319] Use struct sctp_assoc_value instead [ 158.687886][ T8317] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 158.695332][ T8317] IPv6: NLM_F_CREATE should be set when creating new route [ 158.702810][ T8317] IPv6: NLM_F_CREATE should be set when creating new route [ 158.710107][ T8317] IPv6: NLM_F_CREATE should be set when creating new route [ 158.721959][ T8321] nbd: socks must be embedded in a SOCK_ITEM attr [ 158.736035][ T8324] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 159.309221][ T8347] bridge_slave_0: left allmulticast mode [ 159.344137][ T8347] bridge_slave_0: left promiscuous mode [ 159.373218][ T8347] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.460190][ T8352] netlink: 112 bytes leftover after parsing attributes in process `syz.2.628'. [ 159.473525][ T8347] bridge_slave_1: left allmulticast mode [ 159.511837][ T8347] bridge_slave_1: left promiscuous mode [ 159.549100][ T8347] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.614092][ T8362] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 159.638243][ T8347] bond0: (slave bond_slave_0): Releasing backup interface [ 159.670592][ T8347] bond0: (slave bond_slave_1): Releasing backup interface [ 159.711498][ T8347] team0: Port device team_slave_0 removed [ 159.750897][ T8347] team0: Port device team_slave_1 removed [ 159.775705][ T8347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.797391][ T8375] sctp: [Deprecated]: syz.1.631 (pid 8375) Use of struct sctp_assoc_value in delayed_ack socket option. [ 159.797391][ T8375] Use struct sctp_sack_info instead [ 159.824549][ T8347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.856181][ T8347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.869475][ T8347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.964711][ T8366] tipc: Enabled bearer , priority 0 [ 160.045329][ T8358] tipc: Resetting bearer [ 160.081128][ T8368] syzkaller0: entered promiscuous mode [ 160.122694][ T8368] syzkaller0: entered allmulticast mode [ 160.174379][ T8386] netlink: 28 bytes leftover after parsing attributes in process `syz.3.633'. [ 160.242442][ T8387] netlink: 332 bytes leftover after parsing attributes in process `syz.4.634'. [ 160.262317][ T8351] tipc: Resetting bearer [ 160.358823][ T8351] tipc: Disabling bearer [ 160.839277][ T8407] netlink: 'syz.0.638': attribute type 11 has an invalid length. [ 161.060733][ T8420] netlink: 'syz.4.642': attribute type 6 has an invalid length. [ 161.097889][ T8420] netlink: 'syz.4.642': attribute type 4 has an invalid length. [ 161.734631][ T8452] netlink: 'syz.1.649': attribute type 1 has an invalid length. [ 161.752768][ T8452] netlink: 'syz.1.649': attribute type 2 has an invalid length. [ 161.844191][ T8456] netlink: 'syz.3.651': attribute type 1 has an invalid length. [ 161.933190][ T8466] __nla_validate_parse: 4 callbacks suppressed [ 161.933212][ T8466] netlink: 164 bytes leftover after parsing attributes in process `syz.1.653'. [ 161.976551][ T8469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.654'. [ 161.986360][ T8465] netlink: 164 bytes leftover after parsing attributes in process `syz.1.653'. [ 161.992313][ T8456] netlink: 28 bytes leftover after parsing attributes in process `syz.3.651'. [ 162.006967][ T8468] bond2: (slave gretap1): making interface the new active one [ 162.016205][ T8468] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 162.093768][ T8456] 8021q: adding VLAN 0 to HW filter on device bond2 [ 162.185967][ T8474] openvswitch: netlink: Flow actions attr not present in new flow. [ 162.317324][ T8480] netlink: 'syz.3.658': attribute type 1 has an invalid length. [ 162.435044][ T8485] block nbd1: Unsupported socket: shutdown callout must be supported. [ 162.550274][ T8490] netlink: 36 bytes leftover after parsing attributes in process `syz.1.662'. [ 162.620747][ T8490] netlink: 248 bytes leftover after parsing attributes in process `syz.1.662'. [ 162.660243][ T8490] openvswitch: netlink: Flow key attr not present in new flow. [ 162.667630][ T8494] netlink: 1 bytes leftover after parsing attributes in process `syz.4.664'. [ 162.684692][ T8490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.662'. [ 162.700975][ T8492] netlink: 24 bytes leftover after parsing attributes in process `syz.3.663'. [ 162.740232][ T8492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.663'. [ 162.783832][ T78] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.797512][ T78] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.830548][ T78] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.980603][ T8507] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 162.983609][ T8474] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 162.999306][ T8507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.519531][ T8524] sctp: [Deprecated]: syz.1.673 (pid 8524) Use of int in maxseg socket option. [ 163.519531][ T8524] Use struct sctp_assoc_value instead [ 163.718655][ T8542] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 163.946776][ T8548] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.005851][ T8548] team0: Port device bond1 added [ 164.218282][ T51] Bluetooth: hci4: link tx timeout [ 164.224590][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 164.296745][ T5875] Bluetooth: hci0: command 0x080f tx timeout [ 164.718920][ T8580] netlink: 'syz.1.690': attribute type 1 has an invalid length. [ 165.088122][ T8598] netlink: 'syz.3.696': attribute type 30 has an invalid length. [ 165.308085][ T8603] netlink: 'syz.1.699': attribute type 1 has an invalid length. [ 165.452244][ T8614] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 165.880074][ T8630] netlink: 'syz.2.707': attribute type 2 has an invalid length. [ 165.910450][ T8630] netlink: 'syz.2.707': attribute type 8 has an invalid length. [ 165.914930][ T8632] netlink: 'syz.4.710': attribute type 21 has an invalid length. [ 166.190935][ T8647] netlink: 'syz.1.712': attribute type 1 has an invalid length. [ 166.226061][ T8647] netlink: 'syz.1.712': attribute type 2 has an invalid length. [ 166.291820][ T5875] Bluetooth: hci4: command 0x0405 tx timeout [ 166.354266][ T8651] syzkaller1: entered promiscuous mode [ 166.366649][ T8651] syzkaller1: entered allmulticast mode [ 166.894742][ T8679] IPVS: Error connecting to the multicast addr [ 167.299719][ T8694] ip6erspan0: entered promiscuous mode [ 167.676823][ T8711] __nla_validate_parse: 13 callbacks suppressed [ 167.676845][ T8711] netlink: 204 bytes leftover after parsing attributes in process `syz.3.733'. [ 167.976450][ T8722] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 168.307837][ T8739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.742'. [ 168.366743][ T8739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.742'. [ 168.524070][ T8742] bond0: (slave bond_slave_0): Releasing backup interface [ 168.555759][ T8742] bond0: (slave bond_slave_1): Releasing backup interface [ 168.591028][ T8742] team0: Port device team_slave_0 removed [ 168.650431][ T8742] team0: Port device team_slave_1 removed [ 168.669049][ T8742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.687800][ T8742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.727032][ T8742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.772166][ T8742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.999987][ T8755] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.213848][ T8755] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.446262][ T8755] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.545475][ T8781] bridge0: entered allmulticast mode [ 169.572918][ T8781] netlink: 4 bytes leftover after parsing attributes in process `syz.4.761'. [ 169.699998][ T8755] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.822928][ T8781] bridge_slave_1: left allmulticast mode [ 169.836537][ T8781] bridge_slave_1: left promiscuous mode [ 169.847182][ T8781] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.871137][ T8781] bridge_slave_0: left allmulticast mode [ 169.890254][ T8781] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.940556][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.767'. [ 169.956610][ T8781] bridge0 (unregistering): left allmulticast mode [ 170.085281][ T8786] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 170.143390][ T8797] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1500) ! [ 170.325378][ T8800] team0: Port device gre1 added [ 170.432567][ T78] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.476292][ T6519] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.579565][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.680496][ T6519] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.268100][ T8850] netlink: 'syz.3.781': attribute type 12 has an invalid length. [ 171.393346][ T8839] netlink: 40 bytes leftover after parsing attributes in process `syz.3.781'. [ 171.496789][ T8857] netlink: 64 bytes leftover after parsing attributes in process `syz.0.787'. [ 171.518607][ T8859] netlink: 28 bytes leftover after parsing attributes in process `syz.2.786'. [ 171.551560][ T8859] netlink: 'syz.2.786': attribute type 7 has an invalid length. [ 171.564032][ T8859] netlink: 'syz.2.786': attribute type 8 has an invalid length. [ 171.578638][ T8859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.786'. [ 171.760890][ T8863] netlink: 'syz.4.788': attribute type 1 has an invalid length. [ 171.863732][ T8863] 8021q: adding VLAN 0 to HW filter on device bond1 [ 172.067405][ T8880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.792'. [ 172.201423][ T8880] tipc: Enabling of bearer rejected, failed to enable media [ 172.712125][ T8907] __nla_validate_parse: 1 callbacks suppressed [ 172.712143][ T8907] netlink: 5 bytes leftover after parsing attributes in process `syz.2.801'. [ 172.741378][ T8909] netlink: 'syz.1.802': attribute type 29 has an invalid length. [ 172.779678][ T8905] netlink: 44 bytes leftover after parsing attributes in process `syz.1.802'. [ 172.790598][ T8901] gretap0: entered promiscuous mode [ 172.797977][ T8905] netlink: 24 bytes leftover after parsing attributes in process `syz.1.802'. [ 172.835467][ T8907] 0ªî{X¹¦: renamed from gretap0 [ 172.865877][ T8907] 0ªî{X¹¦: left promiscuous mode [ 172.884549][ T8907] 0ªî{X¹¦: entered allmulticast mode [ 172.904075][ T8907] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 173.108328][ T8912] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.161986][ T8912] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.401332][ T8912] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.423499][ T8912] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.455905][ T8929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.808'. [ 173.525228][ T8929] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 173.627939][ T8912] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.640156][ T8912] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.714834][ T8934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.810'. [ 174.068426][ T6531] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.089791][ T6531] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.155485][ T6534] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.201754][ T6534] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.269430][ T6525] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.284062][ T6525] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.380304][ T78] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.412194][ T78] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.757331][ T8976] netlink: 'syz.4.822': attribute type 1 has an invalid length. [ 174.769928][ T8976] netlink: 'syz.4.822': attribute type 2 has an invalid length. [ 174.771624][ T8979] Dead loop on virtual device ip6_vti0, fix it urgently! [ 174.786273][ T8976] netlink: 1172 bytes leftover after parsing attributes in process `syz.4.822'. [ 174.886742][ T8984] xt_limit: Overflow, try lower: 271964/0 [ 175.120223][ T8990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.827'. [ 175.202860][ T8992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.828'. [ 175.289603][ T8999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.828'. [ 175.364394][ T8998] bond0: entered allmulticast mode [ 175.391063][ T8998] bond_slave_0: entered allmulticast mode [ 175.404902][ T8998] bond_slave_1: entered allmulticast mode [ 175.421381][ T8998] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 175.654561][ T9018] tipc: Enabling of bearer rejected, failed to enable media [ 175.703397][ T9019] netlink: 'syz.3.833': attribute type 27 has an invalid length. [ 175.737477][ T9022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.834'. [ 176.840638][ T9071] Illegal XDP return value 4294967274 on prog (id 144) dev N/A, expect packet loss! [ 177.152313][ T6517] tipc: Subscription rejected, illegal request [ 177.297605][ T9095] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.699821][ T9110] kthread_run failed with err -4 [ 178.086976][ T9134] __nla_validate_parse: 6 callbacks suppressed [ 178.086999][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.865'. [ 178.834573][ T9163] netlink: 165 bytes leftover after parsing attributes in process `syz.4.874'. [ 179.360478][ T9189] netlink: 196 bytes leftover after parsing attributes in process `syz.0.882'. [ 179.382565][ T9189] netlink: 196 bytes leftover after parsing attributes in process `syz.0.882'. [ 179.405108][ T9189] netlink: 19 bytes leftover after parsing attributes in process `syz.0.882'. [ 179.485641][ T9198] netlink: 'syz.1.881': attribute type 11 has an invalid length. [ 179.890300][ T123] block nbd0: Possible stuck request ffff8880250f7000: control (read@0,1024B). Runtime 60 seconds [ 179.901213][ T123] block nbd0: Possible stuck request ffff8880250f71c0: control (read@1024,1024B). Runtime 60 seconds [ 179.912268][ T123] block nbd0: Possible stuck request ffff8880250f7380: control (read@2048,1024B). Runtime 60 seconds [ 179.923722][ T123] block nbd0: Possible stuck request ffff8880250f7540: control (read@3072,1024B). Runtime 60 seconds [ 180.313786][ T3593] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x82 [ 180.679522][ T9232] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 180.726193][ T9235] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.890'. [ 180.763047][ T9238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.893'. [ 180.773235][ T9231] netlink: 'syz.0.891': attribute type 21 has an invalid length. [ 181.248459][ T9260] netlink: 24 bytes leftover after parsing attributes in process `syz.3.898'. [ 181.505976][ T9270] tipc: Enabling of bearer rejected, failed to enable media [ 181.950506][ T9289] netlink: 'syz.3.905': attribute type 8 has an invalid length. [ 182.502518][ T9307] nbd1: detected capacity change from 0 to 127 [ 182.510950][ T9316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.912'. [ 183.063523][ T51] block nbd1: Receive control failed (result -104) [ 183.251890][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 183.292586][ T9346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.918'. [ 183.379203][ T9352] netlink: 'syz.2.921': attribute type 1 has an invalid length. [ 183.393188][ T9352] netlink: 244 bytes leftover after parsing attributes in process `syz.2.921'. [ 183.488848][ T9357] netlink: 'syz.4.922': attribute type 5 has an invalid length. [ 183.590261][ T9357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.922'. [ 183.631170][ T9357] netlink: 5 bytes leftover after parsing attributes in process `syz.4.922'. [ 183.774305][ T9361] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.128705][ T9383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.932'. [ 184.153480][ T9387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.929'. [ 184.220704][ T9385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.931'. [ 184.536668][ T9404] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 184.622192][ T9404] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 184.652736][ T9404] gretap2: entered promiscuous mode [ 184.658029][ T9404] gretap2: entered allmulticast mode [ 184.765207][ T9411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.937'. [ 185.062668][ T9420] veth0_virt_wifi: renamed from vlan0 [ 185.218052][ T9425] rose0: entered promiscuous mode [ 185.432905][ T9441] netlink: 44 bytes leftover after parsing attributes in process `syz.0.942'. [ 185.498107][ T9441] netlink: 44 bytes leftover after parsing attributes in process `syz.0.942'. [ 186.435188][ T9476] team0: Device vti0 is of different type [ 187.429452][ T9519] netlink: 'syz.1.964': attribute type 8 has an invalid length. [ 187.785490][ T9535] bond0: entered promiscuous mode [ 188.635721][ T9569] __nla_validate_parse: 9 callbacks suppressed [ 188.635741][ T9569] netlink: 84 bytes leftover after parsing attributes in process `syz.1.978'. [ 189.156726][ T9601] sctp: [Deprecated]: syz.4.984 (pid 9601) Use of int in max_burst socket option deprecated. [ 189.156726][ T9601] Use struct sctp_assoc_value instead [ 189.333158][ T9605] netlink: 172 bytes leftover after parsing attributes in process `syz.4.984'. [ 189.738984][ T9619] netlink: 248 bytes leftover after parsing attributes in process `syz.2.991'. [ 189.787631][ T9619] batman_adv: batadv0: Adding interface: dummy0 [ 189.829912][ T9619] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.937817][ T9619] batman_adv: batadv0: Interface activated: dummy0 [ 189.992885][ T9636] netlink: 'syz.1.993': attribute type 2 has an invalid length. [ 190.063099][ T9636] netlink: 'syz.1.993': attribute type 1 has an invalid length. [ 190.348027][ T9647] netlink: 'syz.2.996': attribute type 29 has an invalid length. [ 190.443509][ T9647] netlink: 'syz.2.996': attribute type 29 has an invalid length. [ 190.629254][ T9663] netlink: 'syz.4.1000': attribute type 1 has an invalid length. [ 190.681177][ T9663] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1000'. [ 190.716591][ T9663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1000'. [ 190.742888][ T9663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1000'. [ 190.799161][ T9676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1000'. [ 190.834418][ T9663] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1000'. [ 191.169465][ T9686] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1006'. [ 191.182679][ T9686] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1006'. [ 192.792825][ T9753] openvswitch: netlink: Unknown nsh attribute 0 [ 192.799354][ T9753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.660082][ T9796] pim6reg1: entered promiscuous mode [ 193.677508][ T9796] pim6reg1: entered allmulticast mode [ 194.037282][ T9811] delete_channel: no stack [ 194.746229][ T9834] __nla_validate_parse: 5 callbacks suppressed [ 194.746249][ T9834] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1037'. [ 194.780972][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 195.717423][ T9882] netlink: 'syz.1.1051': attribute type 21 has an invalid length. [ 195.746905][ T9882] netlink: 'syz.1.1051': attribute type 6 has an invalid length. [ 195.776167][ T9882] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1051'. [ 195.833391][ T9888] netlink: 'syz.1.1051': attribute type 6 has an invalid length. [ 196.574854][ T9899] geneve4: entered promiscuous mode [ 196.611731][ T9899] geneve4: entered allmulticast mode [ 196.660825][ T6532] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 196.681318][ T6532] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 196.797146][ T9905] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.980375][ T9921] syzkaller0: entered promiscuous mode [ 196.994153][ T9921] syzkaller0: entered allmulticast mode [ 197.079842][ T9924] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.415387][ T9934] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5 [ 197.466496][ T9935] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 197.954769][ T9953] sctp: [Deprecated]: syz.1.1070 (pid 9953) Use of int in max_burst socket option deprecated. [ 197.954769][ T9953] Use struct sctp_assoc_value instead [ 198.403864][ T9905] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.414753][ T9905] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 198.509722][ T9905] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.526394][ T9905] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 198.551879][ T9970] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1075'. [ 198.686011][ T9972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1077'. [ 198.878639][ T9863] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 198.913660][ T9863] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 199.004135][ T9863] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 199.080037][ T9863] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 199.121477][ T6529] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 199.138405][ T6529] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 199.183440][ T6529] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 199.202457][ T6529] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 199.612573][T10008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1087'. [ 200.001011][T10015] netlink: 'syz.4.1090': attribute type 27 has an invalid length. [ 200.400416][T10025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1092'. [ 200.999907][T10052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1100'. [ 201.601328][T10077] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1107'. [ 202.044797][T10089] FAULT_INJECTION: forcing a failure. [ 202.044797][T10089] name failslab, interval 1, probability 0, space 0, times 1 [ 202.131938][T10089] CPU: 1 UID: 0 PID: 10089 Comm: syz.2.1111 Not tainted syzkaller #0 PREEMPT(full) [ 202.131968][T10089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 202.131980][T10089] Call Trace: [ 202.131988][T10089] [ 202.131997][T10089] dump_stack_lvl+0x189/0x250 [ 202.132027][T10089] ? __pfx____ratelimit+0x10/0x10 [ 202.132054][T10089] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.132078][T10089] ? __pfx__printk+0x10/0x10 [ 202.132111][T10089] ? __pfx___might_resched+0x10/0x10 [ 202.132137][T10089] should_fail_ex+0x414/0x560 [ 202.132168][T10089] should_failslab+0xa8/0x100 [ 202.132197][T10089] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 202.132224][T10089] ? __alloc_skb+0x112/0x2d0 [ 202.132257][T10089] __alloc_skb+0x112/0x2d0 [ 202.132289][T10089] netlink_sendmsg+0x5c6/0xb30 [ 202.132327][T10089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.132358][T10089] ? aa_sock_msg_perm+0xf1/0x1d0 [ 202.132390][T10089] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 202.132410][T10089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.132438][T10089] __sock_sendmsg+0x219/0x270 [ 202.132467][T10089] ____sys_sendmsg+0x505/0x830 [ 202.132495][T10089] ? __pfx_____sys_sendmsg+0x10/0x10 [ 202.132526][T10089] ? import_iovec+0x74/0xa0 [ 202.132563][T10089] ___sys_sendmsg+0x21f/0x2a0 [ 202.132587][T10089] ? __pfx____sys_sendmsg+0x10/0x10 [ 202.132651][T10089] ? __fget_files+0x2a/0x420 [ 202.132678][T10089] ? __fget_files+0x3a0/0x420 [ 202.132720][T10089] __x64_sys_sendmsg+0x19b/0x260 [ 202.132743][T10089] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 202.132775][T10089] ? __pfx_ksys_write+0x10/0x10 [ 202.132799][T10089] ? rcu_is_watching+0x15/0xb0 [ 202.132826][T10089] ? do_syscall_64+0xbe/0x3b0 [ 202.132859][T10089] do_syscall_64+0xfa/0x3b0 [ 202.132884][T10089] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.132910][T10089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.132929][T10089] ? clear_bhb_loop+0x60/0xb0 [ 202.132954][T10089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.132973][T10089] RIP: 0033:0x7fc10a78ebe9 [ 202.132992][T10089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.133008][T10089] RSP: 002b:00007fc10b59c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.133031][T10089] RAX: ffffffffffffffda RBX: 00007fc10a9b5fa0 RCX: 00007fc10a78ebe9 [ 202.133046][T10089] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 202.133057][T10089] RBP: 00007fc10b59c090 R08: 0000000000000000 R09: 0000000000000000 [ 202.133069][T10089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.133080][T10089] R13: 00007fc10a9b6038 R14: 00007fc10a9b5fa0 R15: 00007ffce39bda38 [ 202.133113][T10089] [ 202.431499][T10092] nbd: must specify a device to reconfigure [ 202.496177][T10093] nbd: must specify a device to reconfigure [ 202.880802][T10105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1116'. [ 203.080569][T10113] netlink: 'syz.4.1118': attribute type 1 has an invalid length. [ 203.152981][T10115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1119'. [ 203.322994][T10125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1121'. [ 203.326196][T10124] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1118'. [ 203.414788][T10117] bond2: (slave gretap1): making interface the new active one [ 203.446389][T10117] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 203.485729][T10115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.565488][T10115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.599777][T10137] netlink: 'syz.1.1121': attribute type 1 has an invalid length. [ 203.691519][T10124] 8021q: adding VLAN 0 to HW filter on device bond2 [ 204.235830][T10156] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1127'. [ 204.266457][T10156] netlink: 4596 bytes leftover after parsing attributes in process `syz.4.1127'. [ 204.300238][T10155] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1126'. [ 204.311789][T10156] openvswitch: netlink: Flow key attr not present in new flow. [ 204.926933][T10181] FAULT_INJECTION: forcing a failure. [ 204.926933][T10181] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 205.013962][T10181] CPU: 0 UID: 0 PID: 10181 Comm: syz.1.1136 Not tainted syzkaller #0 PREEMPT(full) [ 205.013990][T10181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 205.014002][T10181] Call Trace: [ 205.014010][T10181] [ 205.014018][T10181] dump_stack_lvl+0x189/0x250 [ 205.014048][T10181] ? __pfx____ratelimit+0x10/0x10 [ 205.014076][T10181] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.014099][T10181] ? __pfx__printk+0x10/0x10 [ 205.014126][T10181] ? __might_fault+0xb0/0x130 [ 205.014165][T10181] should_fail_ex+0x414/0x560 [ 205.014196][T10181] _copy_from_iter+0x1db/0x16f0 [ 205.014221][T10181] ? rcu_is_watching+0x15/0xb0 [ 205.014243][T10181] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 205.014271][T10181] ? __pfx__copy_from_iter+0x10/0x10 [ 205.014305][T10181] ? __build_skb_around+0x257/0x3e0 [ 205.014338][T10181] ? netlink_sendmsg+0x642/0xb30 [ 205.014363][T10181] ? skb_put+0x11b/0x210 [ 205.014395][T10181] netlink_sendmsg+0x6b2/0xb30 [ 205.014463][T10181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.014494][T10181] ? aa_sock_msg_perm+0xf1/0x1d0 [ 205.014525][T10181] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 205.014546][T10181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.014575][T10181] __sock_sendmsg+0x219/0x270 [ 205.014603][T10181] ____sys_sendmsg+0x505/0x830 [ 205.014631][T10181] ? __pfx_____sys_sendmsg+0x10/0x10 [ 205.014663][T10181] ? import_iovec+0x74/0xa0 [ 205.014689][T10181] ___sys_sendmsg+0x21f/0x2a0 [ 205.014712][T10181] ? __pfx____sys_sendmsg+0x10/0x10 [ 205.014775][T10181] ? __fget_files+0x2a/0x420 [ 205.014803][T10181] ? __fget_files+0x3a0/0x420 [ 205.014844][T10181] __x64_sys_sendmsg+0x19b/0x260 [ 205.014867][T10181] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 205.014900][T10181] ? __pfx_ksys_write+0x10/0x10 [ 205.014923][T10181] ? rcu_is_watching+0x15/0xb0 [ 205.014948][T10181] ? do_syscall_64+0xbe/0x3b0 [ 205.014979][T10181] do_syscall_64+0xfa/0x3b0 [ 205.015004][T10181] ? lockdep_hardirqs_on+0x9c/0x150 [ 205.015030][T10181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.015050][T10181] ? clear_bhb_loop+0x60/0xb0 [ 205.015076][T10181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.015094][T10181] RIP: 0033:0x7fe84058ebe9 [ 205.015113][T10181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.015130][T10181] RSP: 002b:00007fe84139b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.015153][T10181] RAX: ffffffffffffffda RBX: 00007fe8407b5fa0 RCX: 00007fe84058ebe9 [ 205.015167][T10181] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 205.015180][T10181] RBP: 00007fe84139b090 R08: 0000000000000000 R09: 0000000000000000 [ 205.015193][T10181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.015204][T10181] R13: 00007fe8407b6038 R14: 00007fe8407b5fa0 R15: 00007fffedaa7718 [ 205.015239][T10181] [ 205.562898][T10192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1139'. [ 205.619243][T10192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1139'. [ 206.276658][T10211] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1143'. [ 206.439247][T10218] FAULT_INJECTION: forcing a failure. [ 206.439247][T10218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.529263][T10218] CPU: 1 UID: 0 PID: 10218 Comm: syz.0.1146 Not tainted syzkaller #0 PREEMPT(full) [ 206.529293][T10218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 206.529304][T10218] Call Trace: [ 206.529313][T10218] [ 206.529322][T10218] dump_stack_lvl+0x189/0x250 [ 206.529352][T10218] ? __pfx____ratelimit+0x10/0x10 [ 206.529379][T10218] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.529403][T10218] ? __pfx__printk+0x10/0x10 [ 206.529431][T10218] ? __might_fault+0xb0/0x130 [ 206.529471][T10218] should_fail_ex+0x414/0x560 [ 206.529504][T10218] _copy_from_user+0x2d/0xb0 [ 206.529611][T10218] ___sys_sendmsg+0x158/0x2a0 [ 206.529649][T10218] ? __pfx____sys_sendmsg+0x10/0x10 [ 206.529711][T10218] ? __fget_files+0x2a/0x420 [ 206.529756][T10218] ? __fget_files+0x3a0/0x420 [ 206.529797][T10218] __x64_sys_sendmsg+0x19b/0x260 [ 206.529821][T10218] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 206.529851][T10218] ? __pfx_ksys_write+0x10/0x10 [ 206.529874][T10218] ? rcu_is_watching+0x15/0xb0 [ 206.529900][T10218] ? do_syscall_64+0xbe/0x3b0 [ 206.529932][T10218] do_syscall_64+0xfa/0x3b0 [ 206.529958][T10218] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.529984][T10218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.530012][T10218] ? clear_bhb_loop+0x60/0xb0 [ 206.530037][T10218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.530056][T10218] RIP: 0033:0x7f192ff8ebe9 [ 206.530076][T10218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.530093][T10218] RSP: 002b:00007f1930d5b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.530118][T10218] RAX: ffffffffffffffda RBX: 00007f19301b5fa0 RCX: 00007f192ff8ebe9 [ 206.530133][T10218] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 206.530145][T10218] RBP: 00007f1930d5b090 R08: 0000000000000000 R09: 0000000000000000 [ 206.530157][T10218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.530168][T10218] R13: 00007f19301b6038 R14: 00007f19301b5fa0 R15: 00007ffcb6840df8 [ 206.530204][T10218] [ 206.573699][T10226] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1148'. [ 207.195700][T10238] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1152'. [ 207.461905][ T30] audit: type=1800 audit(1755650766.469:4): pid=10233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1150" name="memory.events" dev="tmpfs" ino=1151 res=0 errno=0 [ 207.674805][T10253] netlink: 'syz.4.1156': attribute type 7 has an invalid length. [ 207.743402][T10253] : entered promiscuous mode [ 207.807420][T10256] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1157'. [ 208.161060][T10269] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1160'. [ 208.181890][T10269] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1160'. [ 208.344433][T10275] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1162'. [ 208.492017][T10278] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1163'. [ 210.155502][ T123] block nbd0: Possible stuck request ffff8880250f7000: control (read@0,1024B). Runtime 90 seconds [ 210.170127][ T123] block nbd0: Possible stuck request ffff8880250f71c0: control (read@1024,1024B). Runtime 90 seconds [ 210.181255][ T123] block nbd0: Possible stuck request ffff8880250f7380: control (read@2048,1024B). Runtime 90 seconds [ 210.192525][ T123] block nbd0: Possible stuck request ffff8880250f7540: control (read@3072,1024B). Runtime 90 seconds [ 211.873237][T10400] __nla_validate_parse: 3 callbacks suppressed [ 211.873257][T10400] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1195'. [ 212.069902][T10408] netlink: 'syz.4.1198': attribute type 16 has an invalid length. [ 212.107772][T10408] netlink: 'syz.4.1198': attribute type 17 has an invalid length. [ 212.121483][ T5875] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 212.135236][ T5875] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 212.149653][ T5875] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 212.158893][ T5875] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 212.168664][ T5875] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 212.247649][T10408] bond0: left allmulticast mode [ 212.255069][T10408] bond_slave_0: left allmulticast mode [ 212.267388][T10408] bond_slave_1: left allmulticast mode [ 212.274377][T10408] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 212.288837][T10408] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 212.615202][ T7409] udevd[7409]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 212.681594][ T6713] udevd[6713]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 212.693283][ T55] block nbd1: Possible stuck request ffff888025127000: control (read@0,1024B). Runtime 30 seconds [ 212.704411][ T55] block nbd1: Possible stuck request ffff8880251271c0: control (read@1024,1024B). Runtime 30 seconds [ 212.718065][ T55] block nbd1: Possible stuck request ffff888025127380: control (read@2048,1024B). Runtime 30 seconds [ 212.731008][ T55] block nbd1: Possible stuck request ffff888025127540: control (read@3072,1024B). Runtime 30 seconds [ 212.731133][T10422] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1200'. [ 213.091597][T10435] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1202'. [ 213.296206][T10435] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1202'. [ 213.350290][T10449] netlink: 'syz.0.1206': attribute type 10 has an invalid length. [ 213.394976][T10449] team0: Device ipvlan1 failed to register rx_handler [ 213.624620][T10410] chnl_net:caif_netlink_parms(): no params data found [ 214.211864][ T51] Bluetooth: hci5: command tx timeout [ 214.255593][T10488] IPVS: set_ctl: invalid protocol: 100 224.0.0.2:20004 [ 214.273495][T10410] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.285987][T10410] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.293504][T10410] bridge_slave_0: entered allmulticast mode [ 214.302320][T10410] bridge_slave_0: entered promiscuous mode [ 214.327977][T10488] dvmrp1: entered allmulticast mode [ 214.347731][T10410] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.370604][T10410] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.392661][T10410] bridge_slave_1: entered allmulticast mode [ 214.424416][T10410] bridge_slave_1: entered promiscuous mode [ 214.596181][T10410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.627470][T10410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.855408][T10410] team0: Port device team_slave_0 added [ 214.900275][T10410] team0: Port device team_slave_1 added [ 215.094753][T10510] netlink: 'syz.0.1221': attribute type 7 has an invalid length. [ 215.094753][T10508] netlink: 'syz.0.1221': attribute type 7 has an invalid length. [ 215.320596][T10410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.336482][T10410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.414770][T10410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.532595][T10410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.575775][T10410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.694629][T10410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.076619][T10410] hsr_slave_0: entered promiscuous mode [ 216.118547][T10549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1226'. [ 216.139950][T10410] hsr_slave_1: entered promiscuous mode [ 216.167639][T10410] debugfs: 'hsr0' already exists in 'hsr' [ 216.196420][T10410] Cannot create hsr debugfs directory [ 216.296257][ T5879] Bluetooth: hci5: command tx timeout [ 216.651518][T10566] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1233'. [ 217.338101][ T5879] Bluetooth: hci0: command 0x080f tx timeout [ 217.338124][ T5867] Bluetooth: hci1: command 0x0406 tx timeout [ 217.344585][ T5879] Bluetooth: hci3: command 0x0406 tx timeout [ 217.350585][ T5867] Bluetooth: hci2: command 0x0406 tx timeout [ 217.709562][T10594] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20004 [ 217.849365][T10597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1242'. [ 217.891869][T10595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1242'. [ 217.971080][T10592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1241'. [ 218.017419][T10602] tipc: Enabling of bearer rejected, failed to enable media [ 218.375446][ T5880] Bluetooth: hci5: command tx timeout [ 218.481107][T10613] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1247'. [ 219.334249][T10410] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 219.393005][T10410] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 219.491616][T10410] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 219.543328][T10410] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 219.699354][T10642] syzkaller1: entered promiscuous mode [ 219.705252][T10642] syzkaller1: entered allmulticast mode [ 219.838056][T10658] netlink: 'syz.1.1256': attribute type 1 has an invalid length. [ 219.975569][T10658] 8021q: adding VLAN 0 to HW filter on device bond4 [ 220.452269][ T5880] Bluetooth: hci5: command tx timeout [ 220.613729][T10410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.708298][T10410] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.772888][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.780110][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.916252][T10694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1265'. [ 220.937757][T10694] netlink: 'syz.0.1265': attribute type 5 has an invalid length. [ 220.962248][ T6525] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.969423][ T6525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.993242][T10694] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1265'. [ 221.060812][T10700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1265'. [ 221.097562][T10694] geneve5: entered promiscuous mode [ 221.123345][T10694] geneve5: entered allmulticast mode [ 221.189031][ T6525] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 256 - 0 [ 221.223552][ T6525] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 256 - 0 [ 221.247252][ T6525] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 256 - 0 [ 221.257375][T10705] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1267'. [ 221.335947][ T6529] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 256 - 0 [ 221.398419][T10410] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.587087][T10717] netlink: 'syz.0.1269': attribute type 1 has an invalid length. [ 221.639944][T10717] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1269'. [ 222.368843][T10410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.531888][ T5880] Bluetooth: hci5: command tx timeout [ 223.052625][T10766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1281'. [ 223.078485][T10766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1281'. [ 223.221406][T10766] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1281'. [ 224.222534][T10410] veth0_vlan: entered promiscuous mode [ 224.278629][T10410] veth1_vlan: entered promiscuous mode [ 224.419863][T10410] veth0_macvtap: entered promiscuous mode [ 224.468788][T10410] veth1_macvtap: entered promiscuous mode [ 224.588957][T10410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.674150][T10410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.738380][ T6515] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.772557][ T6515] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.789372][T10834] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1297'. [ 224.853202][T10834] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1297'. [ 224.913908][ T6529] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.963354][ T6529] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.063734][T10834] gretap0: entered promiscuous mode [ 225.129966][T10834] gretap0: left promiscuous mode [ 225.457289][ T6525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.508868][ T6525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.675060][ T6525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.721713][ T6525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.105685][T10859] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 226.651445][T10876] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1306'. [ 226.757492][T10876] vlan2: entered allmulticast mode [ 226.801513][T10876] syz_tun: entered allmulticast mode [ 227.337377][T10899] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1313'. [ 227.502523][T10903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1315'. [ 227.542822][T10905] netlink: 'syz.0.1316': attribute type 7 has an invalid length. [ 227.569775][T10903] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1315'. [ 227.986633][T10929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1324'. [ 228.523300][T10951] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1330'. [ 228.596019][T10956] netlink: 'syz.0.1331': attribute type 1 has an invalid length. [ 228.626224][T10956] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1331'. [ 228.674816][T10956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1331'. [ 228.686986][T10948] IPv6: sit1: Disabled Multicast RS [ 228.694651][T10948] sit1: entered allmulticast mode [ 229.022228][T10963] tipc: Enabled bearer , priority 0 [ 229.046823][T10963] syzkaller0: entered promiscuous mode [ 229.057180][T10963] syzkaller0: entered allmulticast mode [ 229.130827][T10963] tipc: Resetting bearer [ 229.146431][T10970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1336'. [ 229.156574][T10961] tipc: Resetting bearer [ 229.207358][T10961] tipc: Disabling bearer [ 230.813184][T11017] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 230.821257][T11015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1350'. [ 230.916032][T11018] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7 [ 231.241799][T11030] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1355'. [ 231.535556][T11046] FAULT_INJECTION: forcing a failure. [ 231.535556][T11046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.581175][T11046] CPU: 1 UID: 0 PID: 11046 Comm: syz.4.1359 Not tainted syzkaller #0 PREEMPT(full) [ 231.581205][T11046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 231.581216][T11046] Call Trace: [ 231.581224][T11046] [ 231.581233][T11046] dump_stack_lvl+0x189/0x250 [ 231.581263][T11046] ? __pfx____ratelimit+0x10/0x10 [ 231.581299][T11046] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.581323][T11046] ? __pfx__printk+0x10/0x10 [ 231.581350][T11046] ? __might_fault+0xb0/0x130 [ 231.581391][T11046] should_fail_ex+0x414/0x560 [ 231.581423][T11046] _copy_from_user+0x2d/0xb0 [ 231.581447][T11046] ___sys_sendmsg+0x158/0x2a0 [ 231.581472][T11046] ? __pfx____sys_sendmsg+0x10/0x10 [ 231.581536][T11046] ? __fget_files+0x2a/0x420 [ 231.581564][T11046] ? __fget_files+0x3a0/0x420 [ 231.581605][T11046] __x64_sys_sendmsg+0x19b/0x260 [ 231.581633][T11046] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 231.581663][T11046] ? __pfx_ksys_write+0x10/0x10 [ 231.581686][T11046] ? rcu_is_watching+0x15/0xb0 [ 231.581711][T11046] ? do_syscall_64+0xbe/0x3b0 [ 231.581741][T11046] do_syscall_64+0xfa/0x3b0 [ 231.581764][T11046] ? lockdep_hardirqs_on+0x9c/0x150 [ 231.581790][T11046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.581808][T11046] ? clear_bhb_loop+0x60/0xb0 [ 231.581832][T11046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.581849][T11046] RIP: 0033:0x7ff874f8ebe9 [ 231.581866][T11046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.581883][T11046] RSP: 002b:00007ff875e92038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.581903][T11046] RAX: ffffffffffffffda RBX: 00007ff8751b5fa0 RCX: 00007ff874f8ebe9 [ 231.581916][T11046] RDX: 0000000000000010 RSI: 00002000000002c0 RDI: 0000000000000004 [ 231.581928][T11046] RBP: 00007ff875e92090 R08: 0000000000000000 R09: 0000000000000000 [ 231.581939][T11046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.581950][T11046] R13: 00007ff8751b6038 R14: 00007ff8751b5fa0 R15: 00007ffd1e4f8c58 [ 231.581980][T11046] [ 232.626412][T11083] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1369'. [ 232.682235][T11084] tipc: Enabled bearer , priority 0 [ 232.722881][T11084] syzkaller0: entered promiscuous mode [ 232.728414][T11084] syzkaller0: entered allmulticast mode [ 232.869791][T11084] tipc: Resetting bearer [ 232.897617][T11082] tipc: Resetting bearer [ 233.044338][T11095] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1373'. [ 233.052417][T11082] tipc: Disabling bearer [ 233.085146][T11097] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1375'. [ 233.096109][T11095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1373'. [ 234.363760][T11154] __nla_validate_parse: 1 callbacks suppressed [ 234.363781][T11154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1388'. [ 234.394177][T11154] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1388'. [ 234.656777][T11165] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1390'. [ 235.500795][T11193] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 1, id = 0 [ 235.859634][T11198] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 235.915945][T11197] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 236.230863][T11209] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1406'. [ 236.470174][T11214] pimreg: entered allmulticast mode [ 236.617123][T11223] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1411'. [ 236.682005][T11229] netlink: 'syz.5.1411': attribute type 1 has an invalid length. [ 236.717920][T11229] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1411'. [ 237.533738][T11252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1420'. [ 237.582252][T11252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1420'. [ 237.765464][T11257] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1421'. [ 238.154582][T11278] netlink: 'syz.1.1426': attribute type 29 has an invalid length. [ 238.386159][T11291] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1431'. [ 238.412238][T11291] xt_policy: neither incoming nor outgoing policy selected [ 238.908209][T11313] tipc: Enabled bearer , priority 0 [ 238.940076][T11315] vlan1: entered allmulticast mode [ 238.950113][T11315] veth1: entered allmulticast mode [ 238.996778][T11313] syzkaller0: entered promiscuous mode [ 239.028995][T11313] syzkaller0: entered allmulticast mode [ 239.082628][T11316] tipc: Resetting bearer [ 239.681435][T11309] tipc: Resetting bearer [ 239.706092][T11346] __nla_validate_parse: 1 callbacks suppressed [ 239.706112][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1446'. [ 239.734758][T11309] tipc: Disabling bearer [ 239.829006][T11350] tipc: Enabling of bearer rejected, failed to enable media [ 239.938228][T11353] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1448'. [ 239.951018][T11355] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 240.217568][ T123] block nbd0: Possible stuck request ffff8880250f7000: control (read@0,1024B). Runtime 120 seconds [ 240.228526][ T123] block nbd0: Possible stuck request ffff8880250f71c0: control (read@1024,1024B). Runtime 120 seconds [ 240.240510][ T123] block nbd0: Possible stuck request ffff8880250f7380: control (read@2048,1024B). Runtime 120 seconds [ 240.252917][ T123] block nbd0: Possible stuck request ffff8880250f7540: control (read@3072,1024B). Runtime 120 seconds [ 240.367518][T11366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1453'. [ 240.670933][T11376] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1456'. [ 240.768376][T11379] netlink: 'syz.1.1458': attribute type 1 has an invalid length. [ 240.801770][T11379] netlink: 'syz.1.1458': attribute type 2 has an invalid length. [ 240.832576][T11379] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1458'. [ 240.855033][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 241.125211][T11395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1463'. [ 241.148106][T11395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1463'. [ 242.069423][T11415] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1469'. [ 242.183872][T11418] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1471'. [ 242.547769][T11429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1476'. [ 242.777271][ T55] block nbd1: Possible stuck request ffff888025127000: control (read@0,1024B). Runtime 60 seconds [ 242.790727][ T55] block nbd1: Possible stuck request ffff8880251271c0: control (read@1024,1024B). Runtime 60 seconds [ 242.802118][ T55] block nbd1: Possible stuck request ffff888025127380: control (read@2048,1024B). Runtime 60 seconds [ 242.814186][ T55] block nbd1: Possible stuck request ffff888025127540: control (read@3072,1024B). Runtime 60 seconds [ 243.772858][T11468] FAULT_INJECTION: forcing a failure. [ 243.772858][T11468] name failslab, interval 1, probability 0, space 0, times 0 [ 243.814057][T11468] CPU: 0 UID: 0 PID: 11468 Comm: syz.1.1488 Not tainted syzkaller #0 PREEMPT(full) [ 243.814096][T11468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 243.814107][T11468] Call Trace: [ 243.814116][T11468] [ 243.814125][T11468] dump_stack_lvl+0x189/0x250 [ 243.814156][T11468] ? __pfx____ratelimit+0x10/0x10 [ 243.814184][T11468] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.814209][T11468] ? __pfx__printk+0x10/0x10 [ 243.814270][T11468] should_fail_ex+0x414/0x560 [ 243.814303][T11468] should_failslab+0xa8/0x100 [ 243.814335][T11468] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 243.814364][T11468] ? __alloc_skb+0x112/0x2d0 [ 243.814399][T11468] __alloc_skb+0x112/0x2d0 [ 243.814441][T11468] __netdev_alloc_skb+0x108/0x970 [ 243.814475][T11468] ? __pfx___netdev_alloc_skb+0x10/0x10 [ 243.814508][T11468] ? ieee80211_mgmt_tx+0xab0/0x21d0 [ 243.814541][T11468] ieee80211_mgmt_tx+0x12ec/0x21d0 [ 243.814579][T11468] ? ieee80211_mgmt_tx+0xab0/0x21d0 [ 243.814619][T11468] cfg80211_mlme_mgmt_tx+0x7bc/0x1420 [ 243.814659][T11468] nl80211_tx_mgmt+0x9fd/0xd50 [ 243.814696][T11468] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 243.814723][T11468] ? __pfx_netdev_run_todo+0x10/0x10 [ 243.814751][T11468] ? __pfx___cfg80211_wdev_from_attrs+0x10/0x10 [ 243.814787][T11468] ? nl80211_pre_doit+0x4f1/0x930 [ 243.814817][T11468] genl_family_rcv_msg_doit+0x215/0x300 [ 243.814849][T11468] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 243.814888][T11468] ? bpf_lsm_capable+0x9/0x20 [ 243.814914][T11468] ? security_capable+0x7e/0x2e0 [ 243.814951][T11468] genl_rcv_msg+0x60e/0x790 [ 243.814982][T11468] ? __pfx_genl_rcv_msg+0x10/0x10 [ 243.815002][T11468] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 243.815020][T11468] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 243.815043][T11468] ? __pfx_nl80211_post_doit+0x10/0x10 [ 243.815076][T11468] ? __asan_memcpy+0x40/0x70 [ 243.815099][T11468] ? __pfx_ref_tracker_free+0x10/0x10 [ 243.815137][T11468] netlink_rcv_skb+0x205/0x470 [ 243.815162][T11468] ? __lock_acquire+0xab9/0xd20 [ 243.815192][T11468] ? __pfx_genl_rcv_msg+0x10/0x10 [ 243.815216][T11468] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 243.815270][T11468] ? down_read+0x1ad/0x2e0 [ 243.815302][T11468] genl_rcv+0x28/0x40 [ 243.815321][T11468] netlink_unicast+0x82c/0x9e0 [ 243.815357][T11468] ? __pfx_netlink_unicast+0x10/0x10 [ 243.815386][T11468] ? netlink_sendmsg+0x642/0xb30 [ 243.815409][T11468] ? skb_put+0x11b/0x210 [ 243.815444][T11468] netlink_sendmsg+0x805/0xb30 [ 243.815482][T11468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.815512][T11468] ? aa_sock_msg_perm+0xf1/0x1d0 [ 243.815539][T11468] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 243.815559][T11468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.815587][T11468] __sock_sendmsg+0x219/0x270 [ 243.815618][T11468] ____sys_sendmsg+0x505/0x830 [ 243.815646][T11468] ? __pfx_____sys_sendmsg+0x10/0x10 [ 243.815677][T11468] ? import_iovec+0x74/0xa0 [ 243.815705][T11468] ___sys_sendmsg+0x21f/0x2a0 [ 243.815729][T11468] ? __pfx____sys_sendmsg+0x10/0x10 [ 243.815795][T11468] ? __fget_files+0x2a/0x420 [ 243.815822][T11468] ? __fget_files+0x3a0/0x420 [ 243.815865][T11468] __x64_sys_sendmsg+0x19b/0x260 [ 243.815889][T11468] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 243.815920][T11468] ? __pfx_ksys_write+0x10/0x10 [ 243.815943][T11468] ? rcu_is_watching+0x15/0xb0 [ 243.815968][T11468] ? do_syscall_64+0xbe/0x3b0 [ 243.815999][T11468] do_syscall_64+0xfa/0x3b0 [ 243.816023][T11468] ? lockdep_hardirqs_on+0x9c/0x150 [ 243.816048][T11468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.816074][T11468] ? clear_bhb_loop+0x60/0xb0 [ 243.816097][T11468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.816115][T11468] RIP: 0033:0x7fe84058ebe9 [ 243.816133][T11468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.816149][T11468] RSP: 002b:00007fe84139b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.816170][T11468] RAX: ffffffffffffffda RBX: 00007fe8407b5fa0 RCX: 00007fe84058ebe9 [ 243.816183][T11468] RDX: 0000000000000010 RSI: 00002000000002c0 RDI: 0000000000000004 [ 243.816195][T11468] RBP: 00007fe84139b090 R08: 0000000000000000 R09: 0000000000000000 [ 243.816206][T11468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.816217][T11468] R13: 00007fe8407b6038 R14: 00007fe8407b5fa0 R15: 00007fffedaa7718 [ 243.816251][T11468] [ 244.446878][T11486] team0: vlans aren't supported yet for dev_uc|mc_add() [ 244.462870][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 244.474221][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 244.483091][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 244.493796][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 244.503903][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 244.713961][T11496] __nla_validate_parse: 2 callbacks suppressed [ 244.713984][T11496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1496'. [ 245.294334][T11520] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1500'. [ 245.403341][T11479] chnl_net:caif_netlink_parms(): no params data found [ 245.566766][T11528] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1503'. [ 245.581476][T11530] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1504'. [ 245.643322][T11529] netlink: 'syz.4.1502': attribute type 15 has an invalid length. [ 245.670366][T11529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1502'. [ 245.764603][T11529] netlink: 'syz.4.1502': attribute type 15 has an invalid length. [ 245.789402][T11529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1502'. [ 245.809038][ T36] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 245.872459][ T36] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 245.961995][ T36] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 245.979991][ T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 246.057859][T11545] netlink: 'syz.1.1507': attribute type 6 has an invalid length. [ 246.162714][T11553] netlink: 'syz.0.1510': attribute type 6 has an invalid length. [ 246.182304][T11553] netlink: 'syz.0.1510': attribute type 1 has an invalid length. [ 246.190183][T11553] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.1510'. [ 246.238322][T11479] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.253179][T11479] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.277811][T11479] bridge_slave_0: entered allmulticast mode [ 246.295009][T11479] bridge_slave_0: entered promiscuous mode [ 246.364094][ T6529] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.453138][ T6529] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.540082][T11479] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.551119][T11479] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.591965][T11479] bridge_slave_1: entered allmulticast mode [ 246.600259][T11479] bridge_slave_1: entered promiscuous mode [ 246.612806][ T51] Bluetooth: hci1: command tx timeout [ 246.986621][ T6529] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.014635][ T6529] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.086980][T11479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.129283][T11479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.183526][ T6529] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.214356][ T6529] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.501443][T11479] team0: Port device team_slave_0 added [ 247.584575][T11479] team0: Port device team_slave_1 added [ 247.677671][ T6529] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.691571][ T6529] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.935993][T11479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.961970][T11479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.070071][T11479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.208157][T11622] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1523'. [ 248.258100][T11479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.275059][T11479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.306291][T11479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.692068][ T5880] Bluetooth: hci1: command tx timeout [ 248.920068][T11479] hsr_slave_0: entered promiscuous mode [ 248.929124][T11479] hsr_slave_1: entered promiscuous mode [ 248.950286][T11479] debugfs: 'hsr0' already exists in 'hsr' [ 248.970067][T11479] Cannot create hsr debugfs directory [ 249.375627][ T6529] bond2 (unregistering): (slave gretap1): Releasing active interface [ 249.523453][T11657] netlink: 'syz.4.1530': attribute type 15 has an invalid length. [ 249.531440][T11657] netlink: 'syz.4.1530': attribute type 1 has an invalid length. [ 249.635690][ T6529] team0: Port device gre1 removed [ 249.661811][T11660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1532'. [ 250.150851][ T6529] bond0 (unregistering): Released all slaves [ 250.167669][ T6529] bond1 (unregistering): Released all slaves [ 250.281165][ T6529] bond2 (unregistering): Released all slaves [ 250.318757][T11660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1532'. [ 250.339418][T11670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1530'. [ 250.509918][ T6529] tipc: Left network mode [ 250.743471][T11687] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1539'. [ 250.773289][ T5880] Bluetooth: hci1: command 0x040f tx timeout [ 250.775119][T11679] tipc: Enabling of bearer rejected, failed to enable media [ 250.865269][T11695] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1540'. [ 250.928428][T11696] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1540'. [ 251.210275][T11679] syzkaller0: entered promiscuous mode [ 251.234914][T11679] syzkaller0: entered allmulticast mode [ 251.895141][T11736] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1550'. [ 252.175798][ T6529] hsr_slave_0: left promiscuous mode [ 252.206938][ T6529] hsr_slave_1: left promiscuous mode [ 252.316284][ T6529] veth1_macvtap: left promiscuous mode [ 252.326623][ T6529] veth0_macvtap: left promiscuous mode [ 252.477806][T11752] netlink: 'syz.4.1553': attribute type 10 has an invalid length. [ 252.486577][T11752] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1553'. [ 252.853550][ T51] Bluetooth: hci1: command 0x040f tx timeout [ 253.400478][T11752] batadv0: entered promiscuous mode [ 253.423361][T11752] batadv0: entered allmulticast mode [ 253.430042][T11752] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 253.626872][T11756] tipc: Enabled bearer , priority 0 [ 253.654721][T11479] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 253.731057][T11479] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 253.779491][T11479] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 253.821033][T11756] tipc: Disabling bearer [ 253.887514][T11479] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 254.110753][T11786] netlink: 'syz.4.1559': attribute type 5 has an invalid length. [ 254.123170][T11788] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1562'. [ 254.134418][T11788] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1562'. [ 254.144734][T11787] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1560'. [ 254.172529][T11788] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 254.577933][T11479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.658238][ T6529] IPVS: stop unused estimator thread 0... [ 254.911223][T11479] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.933422][ T51] Bluetooth: hci1: command 0x040f tx timeout [ 255.032702][ T6533] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 255.085117][ T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 255.129485][ T6515] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.136769][ T6515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.178162][ T6515] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.185406][ T6515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.203666][ T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 255.250365][ T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 255.393347][T11479] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 255.420073][T11479] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 255.420585][T11835] __nla_validate_parse: 3 callbacks suppressed [ 255.420601][T11835] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1574'. [ 255.990992][T11852] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1580'. [ 256.036087][T11856] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1581'. [ 256.065997][T11856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1581'. [ 256.166052][T11860] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1581'. [ 256.223121][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 256.272442][T11862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1581'. [ 256.363035][T11864] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1582'. [ 256.468149][T11873] netlink: 'syz.5.1585': attribute type 21 has an invalid length. [ 256.492548][T11856] veth5: entered allmulticast mode [ 256.521598][T11873] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1585'. [ 256.693992][T11881] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1587'. [ 256.731243][T11479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.961357][T11887] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1589'. [ 257.007228][T11887] netlink: 'syz.4.1589': attribute type 6 has an invalid length. [ 257.042678][T11887] netlink: 'syz.4.1589': attribute type 5 has an invalid length. [ 257.989015][T11479] veth0_vlan: entered promiscuous mode [ 258.049835][T11479] veth1_vlan: entered promiscuous mode [ 258.139410][T11479] veth0_macvtap: entered promiscuous mode [ 258.170226][T11479] veth1_macvtap: entered promiscuous mode [ 258.299827][T11479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.387996][T11479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.430596][ T6533] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.463827][ T6533] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.515382][ T6533] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.560117][ T6529] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.866477][ T6529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.908449][ T6529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.070025][ T6515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.079464][ T6515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.643271][T11996] netlink: 'syz.0.1616': attribute type 1 has an invalid length. [ 259.712305][T11998] netlink: 'syz.0.1616': attribute type 1 has an invalid length. [ 260.440012][T11989] clip:clip_setentry: non-CLIP VCC [ 260.533703][T12024] __nla_validate_parse: 10 callbacks suppressed [ 260.533727][T12024] netlink: 45 bytes leftover after parsing attributes in process `syz.1.1623'. [ 261.458359][T12059] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1633'. [ 261.786026][T12067] syzkaller1: entered promiscuous mode [ 261.791583][T12067] syzkaller1: entered allmulticast mode [ 261.829360][T12064] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 262.086937][T12085] netlink: 'syz.0.1641': attribute type 1 has an invalid length. [ 262.097264][T12088] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 262.421228][ T51] block nbd2: Receive control failed (result -32) [ 262.536967][T12098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1644'. [ 262.761967][T12113] netlink: 'syz.6.1650': attribute type 10 has an invalid length. [ 262.859589][T12113] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 263.037461][T12123] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1654'. [ 263.138897][T12128] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1655'. [ 263.154997][T12128] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1655'. [ 263.195710][T12130] bridge_slave_0: left allmulticast mode [ 263.216709][T12130] bridge_slave_0: left promiscuous mode [ 263.249864][T12130] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.354306][T12130] team0: Port device team_slave_0 removed [ 263.408855][T12130] team0: Port device team_slave_1 removed [ 263.423958][T12140] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1661'. [ 263.440428][T12130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.449963][T12130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.466209][T12130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.490011][T12130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.916592][T12158] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1665'. [ 264.002878][T12160] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1667'. [ 264.013225][T12160] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1667'. [ 264.055081][T12160] tls_set_device_offload: netdev not found [ 265.209327][T12209] netlink: 'syz.5.1682': attribute type 10 has an invalid length. [ 265.324983][T12209] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 265.386161][T12213] netlink: 'syz.4.1683': attribute type 4 has an invalid length. [ 265.431058][T12213] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 265.791262][T12224] __nla_validate_parse: 2 callbacks suppressed [ 265.791285][T12224] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1685'. [ 266.065525][T12238] netlink: 'syz.1.1688': attribute type 29 has an invalid length. [ 266.413769][T12251] tipc: Enabled bearer , priority 0 [ 266.475075][T12249] syzkaller0: entered promiscuous mode [ 266.480616][T12249] syzkaller0: entered allmulticast mode [ 266.712732][T12251] tipc: Resetting bearer [ 266.754337][T12248] tipc: Resetting bearer [ 266.876926][T12248] tipc: Disabling bearer [ 267.085255][T12280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1702'. [ 267.384355][T12282] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 267.390598][T12282] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 267.522708][T12282] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 267.533579][T12282] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 267.614399][T12282] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 267.620527][T12282] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 267.693463][T12282] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 267.707221][T12282] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 267.795384][T12316] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1710'. [ 268.404640][T12327] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1714'. [ 268.759801][T12282] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 268.781947][T12282] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 269.222527][T12323] mpoa:mpoad_close: () going down [ 269.316540][T12282] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 269.341741][T12282] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 269.456812][T12340] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 269.468773][T12340] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 269.477231][T12340] CPU: 1 UID: 0 PID: 12340 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 269.486816][T12340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 269.496920][T12340] RIP: 0010:klist_del+0x49/0x110 [ 269.501911][T12340] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 09 8f b3 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 eb 8e b3 f6 4d 8b 7e 58 4c 89 f7 e8 5f 74 [ 269.521560][T12340] RSP: 0018:ffffc9000412f768 EFLAGS: 00010202 [ 269.527666][T12340] RAX: 000000000000000b RBX: ffff88805a4ad460 RCX: ffff88807a83bc00 [ 269.535674][T12340] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 269.543674][T12340] RBP: ffffc9000412f890 R08: ffff8880311dfd23 R09: 1ffff1100623bfa4 [ 269.551942][T12340] R10: dffffc0000000000 R11: ffffed100623bfa5 R12: dffffc0000000000 [ 269.560643][T12340] R13: 1ffff1100b495a8c R14: 0000000000000000 R15: ffff888078fcc750 [ 269.568743][T12340] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 269.577682][T12340] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 269.584279][T12340] CR2: 00007effc3e6d286 CR3: 000000002ff9a000 CR4: 00000000003526f0 [ 269.592434][T12340] Call Trace: [ 269.595975][T12340] [ 269.598904][T12340] device_del+0x280/0x8e0 [ 269.603250][T12340] ? _raw_spin_unlock_irq+0x2e/0x50 [ 269.608465][T12340] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 269.614535][T12340] ? __pfx_device_del+0x10/0x10 [ 269.619433][T12340] ? netdev_unregister_kobject+0x344/0x450 [ 269.625287][T12340] unregister_netdevice_many_notify+0x1a6b/0x1ff0 [ 269.631729][T12340] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 269.638504][T12340] ? __mutex_lock+0x5b6/0x1360 [ 269.643276][T12340] ? rtnl_net_dev_lock+0x257/0x2f0 [ 269.648400][T12340] unregister_netdevice_queue+0x33c/0x380 [ 269.654151][T12340] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 269.660407][T12340] ? rtnl_net_dev_lock+0x36/0x2f0 [ 269.665457][T12340] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 269.670672][T12340] unregister_netdev+0x1f/0x60 [ 269.675533][T12340] bnep_session+0x294d/0x2b40 [ 269.680256][T12340] ? rcu_is_watching+0x15/0xb0 [ 269.685044][T12340] ? trace_sched_exit_tp+0x36/0x110 [ 269.690263][T12340] ? __lock_acquire+0xab9/0xd20 [ 269.695229][T12340] ? __pfx_bnep_session+0x10/0x10 [ 269.700351][T12340] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 269.706254][T12340] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 269.712590][T12340] ? __pfx_woken_wake_function+0x10/0x10 [ 269.718228][T12340] ? __kthread_parkme+0x7b/0x200 [ 269.723181][T12340] ? __kthread_parkme+0x1a1/0x200 [ 269.728209][T12340] kthread+0x711/0x8a0 [ 269.732298][T12340] ? __pfx_bnep_session+0x10/0x10 [ 269.737846][T12340] ? __pfx_kthread+0x10/0x10 [ 269.742568][T12340] ? _raw_spin_unlock_irq+0x23/0x50 [ 269.747768][T12340] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.752969][T12340] ? __pfx_kthread+0x10/0x10 [ 269.757572][T12340] ret_from_fork+0x3f9/0x770 [ 269.762168][T12340] ? __pfx_ret_from_fork+0x10/0x10 [ 269.767542][T12340] ? __switch_to_asm+0x39/0x70 [ 269.772326][T12340] ? __switch_to_asm+0x33/0x70 [ 269.777094][T12340] ? __pfx_kthread+0x10/0x10 [ 269.781706][T12340] ret_from_fork_asm+0x1a/0x30 [ 269.786512][T12340] [ 269.789544][T12340] Modules linked in: [ 269.796230][T12340] ---[ end trace 0000000000000000 ]--- [ 269.805411][T12340] RIP: 0010:klist_del+0x49/0x110 [ 269.810620][T12340] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 09 8f b3 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 eb 8e b3 f6 4d 8b 7e 58 4c 89 f7 e8 5f 74 [ 269.830634][T12340] RSP: 0018:ffffc9000412f768 EFLAGS: 00010202 [ 269.836864][T12340] RAX: 000000000000000b RBX: ffff88805a4ad460 RCX: ffff88807a83bc00 [ 269.845105][T12340] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 269.853324][T12340] RBP: ffffc9000412f890 R08: ffff8880311dfd23 R09: 1ffff1100623bfa4 [ 269.861460][T12340] R10: dffffc0000000000 R11: ffffed100623bfa5 R12: dffffc0000000000 [ 269.870589][T12340] R13: 1ffff1100b495a8c R14: 0000000000000000 R15: ffff888078fcc750 [ 269.878808][T12340] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 269.888055][T12340] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 269.894950][T12340] CR2: 00007effc3e6d286 CR3: 0000000074c20000 CR4: 00000000003526f0 [ 269.903168][T12340] Kernel panic - not syncing: Fatal exception [ 269.909610][T12340] Kernel Offset: disabled [ 269.913996][T12340] Rebooting in 86400 seconds..