last executing test programs: 49.83220819s ago: executing program 1 (id=1291): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) (async) r2 = getpid() (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0x2}, 0x6) (async) write(r3, &(0x7f00000000c0)="51000300", 0x4) (async) write$cgroup_pid(r1, &(0x7f0000000880)=r2, 0x12) 49.686142366s ago: executing program 1 (id=1293): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x3, 0x2, 0x49e}) setsockopt$inet_buf(r2, 0x0, 0x2a, &(0x7f0000003080)="28410f027a06a5ec90280f53f23a7f83e89ae02572e77804255d41ae923840199f820b50b7a8200fe36c04a7f9846e98d94c6d400af60a16e7858f350311a523d8f8627a3bf6f76b65a3d9aef34055bccc9ed63f4a635bca3586318901a0a3dcced16905b57d8506273df696dfbee4936517a58c1a1555a17179675619f980e8e434a813b4bb5e41b26f71", 0x8b) write$6lowpan_enable(r1, 0x0, 0x2b) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x48, 0x32, 0x1, 0xfffffffd, 0x25d7dbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x86, 0x6, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x700, 0x8, 0xc, 0x8}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 49.497361145s ago: executing program 1 (id=1299): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000004000000ff0f4255c0cfa5761650a73505b1b49a8b00000600005bd487dd0a3d598bb0699adf3e83755786441dda4a4d1f076ac7cc7398adc512ce5e6f88b726490000000000000084bebfe63490eb5cc7d296b5545560d7741d897dff537de819e4b9996375de469000"/141, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000340)=0x30) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}, @IFLA_ADDRESS={0xa, 0x1, @random="0cc5035c44df"}]}, 0x48}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 49.323705335s ago: executing program 1 (id=1301): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmsg$nl_xfrm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d0000000401050000000000000000000000ffff00000000000000003300000002000000e00000020000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000003c0000000a000000fe8000000000000000000000000000aa0000000001"], 0x254}}, 0x0) r4 = socket(0x18, 0x1, 0x1) getsockopt$inet_int(r4, 0x111, 0x32, 0x0, &(0x7f0000000380)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRESOCT=r1, @ANYRES16=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x13, 0xe, &(0x7f0000000d00)=ANY=[@ANYRES16=0x0], &(0x7f00000001c0)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x8}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="0800080006000000000014000000450b031700670000092f", @ANYRESHEX], 0x325) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000080)=r5) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) 48.818725683s ago: executing program 3 (id=1304): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x2c, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x884) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r1, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xc}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='\f\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdfffffffcdbdf250200000008000300", @ANYRES32=r8, @ANYBLOB="080026005014000008009f0007000000"], 0x2c}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) r10 = accept4(r9, &(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000480)=0x80, 0x0) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x10000, 0xd0bef1302be8cae8}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x29}}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0xf}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0xb}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1d}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xfffffff7, 0x2}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4008000) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) (async) r11 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r11, &(0x7f0000000e40)=[{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000040)="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", 0x1af}, {&(0x7f00000004c0)="e082d76dc099439d6d47cea4c5ab7997fa7cd83baa89da8673f587d5566425633de6da5b9e3ada887be8e46c9c55b6c37088ab305eeabbb6a54e", 0x3a}, {&(0x7f0000000500)="d60c132e93aa7dd63eb296cfa690ed840ef3f01e86854cf0240dec89208018eb12fa89", 0x23}, {&(0x7f0000000f40)="d4482ca6ee1acb52fa97ad29497f649a00a9509a1e0f6596d63c12219151002b960420c6b7858329f60ba24c5b2286b4180cd0d858dab1f59e24440aa485c5552f8814c421bff410e71bba1700d4837216a13b3039036e9c83ad22e4eb00514e9330754043278110607ccb275528aef04846522d67473408cc359acb9e6a22b0eb15609c1fe8661b245c3d7e3e12b3ca37921bdaf42f4416ef99ee9bbb88fc94f0e5f898e8433a2c306b7eb3b9341d25a35eb6997aa52ce824", 0xb9}, {&(0x7f0000000780)="fa72050e55b86e85e0d6bc8574118f1f6fbaf5289bfdc2cc781a20d80d0e57eb61c33ab94fe6575a4d2d49ec836f531aa1add54fc19b0acb5998b25e793eb8be4ffcb02d3feebd66e3589da2580346a242bef6214c5435b175ba05434729afbc4cb20cc5117741e15185089d5d8103a225a78db3a29b1d26eca7021f3bc3f795d4d6dd176e7152d43b0697b1734bc2d4f66e6a8cea7fa9a16cc945a92647b5ba8d54d2a719dcd9cc9e5a30ea709f4d802661ef8622", 0x2e}, {&(0x7f0000000200)="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"/356, 0x164}], 0x6, 0x0, 0x0, 0x8014}], 0x1, 0x0) 47.545290126s ago: executing program 3 (id=1311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010200000000000000000000040014000780050014000700000008001240120500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e6574000000000500050002000000050004"], 0x60}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x880b, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYRESDEC=0x0, @ANYRES32=0x0, @ANYBLOB="400d0000000000002800128008000100687372001c00028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg2\x00'}) 47.361440926s ago: executing program 3 (id=1313): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d0000000014000280080002000000e3b60800010001000000140003"], 0x58}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$kcm(0x2, 0xa, 0x73) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB=' \x00'], 0x50) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdb5}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000d00)=ANY=[@ANYRESDEC=r3], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x62, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x0, 0xd00, 0xf20c0000, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x6e, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaa86dd60001040fff298de44cc0bbeaade00380600fe880000000000000000000000000001fe8000000000000000000000000000aa00004e220000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e4000000907800001312345f8cf949a01b515682f44cecac91ba1d12d243471da14ff23d079da4ca814b7d7b"], 0x0) ioctl$HCIINQUIRY(r9, 0x400448ca, 0x0) bind$bt_hci(r9, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x15, 0x5, 0x0) getsockopt(r11, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000200)={&(0x7f0000000340)=""/114, 0x72, 0x0, &(0x7f0000000400)=""/121, 0x79}}, 0x10) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x275a, 0x0) read(r12, 0x0, 0x0) 43.398137006s ago: executing program 3 (id=1334): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/64, 0x40}], 0x1}}], 0x1, 0x40012040, 0x0) syz_emit_ethernet(0xeb, &(0x7f0000000000)={@remote, @broadcast, @void, {@llc_tr={0x11, {@llc={0x6, 0xb4, "e4", "aa93c1968f79eeea88707763c28e12fb957a7db679c634fe0d3063247f39efb907fcf37635cc55e6813335b80e6038151b1bc77451bce6c88a47cf0231eb5407e0b395fe043bf93975724da716ba287359830a3fd28f0e88a6c00e88472b91d7ba0e1a39dadc5cb689b113d9393b0d843953a2ee8482cb34481ad5c31a76a89a2026ed0913ce2a5d41b0992882b901d2da8b22a8dee7112b4f9ff825a4288a0b25366e45f8788ca6c852e870259b691d2436d00b5f41bc2af8569c869b4f4ff38bc4d8857ef4afd834a94d0c4065be6974cad1696bb0b39f795e"}}}}}, 0x0) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000180)="580000001500c5d427323b470c45b45602067fffffff81004e22030d00ff0028925a01000100eaa57b000900800a0efffeff2ef1020000ffe203f03adcac4b74fffffffffffeffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 43.342264983s ago: executing program 1 (id=1335): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000001f701"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x44800) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=@delchain={0x2c, 0x64, 0xf31, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xe, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0xffff647b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 43.061180022s ago: executing program 3 (id=1337): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r1, &(0x7f0000000200)={@val, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0xe4, 0x0, 0x8, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback}}}}}}, 0x2e) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)=ANY=[@ANYBLOB="3800000040000100fcff070004000000010000000400488014000180100010800400058005000300000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x4008881}, 0x4008094) r4 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xffefffff}, {0x16}]}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x44, r7, 0x615, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x44}, 0x5}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r7, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x6880) r8 = socket(0x840000000002, 0x3, 0x100) setsockopt$sock_int(r8, 0x1, 0x1a, &(0x7f0000000240), 0x4) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r8, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendto$inet6(r4, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r9, 0x40286608, &(0x7f00000001c0)={0x5, 0x5, 0x1, 0xae, 0x1, 0x600}) 42.774013624s ago: executing program 1 (id=1339): unshare(0x62000000) r0 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r0, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80000) recvmsg$qrtr(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000880)=""/29, 0x1d}, {&(0x7f00000008c0)=""/150, 0x96}], 0x2}, 0x38, 0x2100) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x44005) openat$cgroup_ro(r1, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x0, 0x0) 38.027344228s ago: executing program 3 (id=1353): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') epoll_create(0x7) unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x85}]}}}]}, 0x3c}}, 0x40800) ioctl$SIOCAX25DELFWD(r0, 0x618f, 0x0) socket$kcm(0xa, 0x3, 0x87) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r1}) getsockopt$inet_int(r4, 0x0, 0x14, &(0x7f0000000240), &(0x7f00000002c0)=0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c0002"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0x9518, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1fa}, {0xa, 0x4e21, 0x7, @remote, 0xf}, 0xffffffffffffffff, {[0x3, 0x6, 0x3, 0xe, 0x7, 0xb, 0x81, 0x3]}}, 0x5c) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 29.574715591s ago: executing program 2 (id=1373): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x28, r0, 0xe7816804f9787cab, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x240008d0}, 0x40002084) 29.563993916s ago: executing program 2 (id=1374): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x22eb}, @TCA_MPLS_TTL={0x5, 0x7, 0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0xb}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="bc1400002e00090027bd70000000000004000000a51411804b8a9f750c996372b5b14b3a91a3ff88cca5dd0d428ddfdd02a37c0b93bcdade6c5307b79c2d122f"], 0x14bc}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 29.432716549s ago: executing program 2 (id=1375): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r1, 0x6, 0x4, 0xfffffffffffffffd, &(0x7f00000000c0)) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000}, 0x5}], 0x1, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f00000001c0), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080), 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x4}}}]}]}], {0x14}}, 0x6c}}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000500)={0x0}, 0x20) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000040)) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000016000104fdffffff00000000ac1414bb00000000000000000000000020010000000000000000000000000002000400000000000000008020000000003a1ca2d2608a5111508ecef32521a61e626097908149144631298b1e83ccf94cb0d03ac0c6f9d04fc164e9df308a02b63fd8c8ad8ef24934eeb68ea0b793b386f882bd73b2755ccbb7d26af82f3ddca6bbbf2b760694259386efde0b0dce86db46b6bf7e9a8f250df8781435963e57bcbc8bb99c02ee191bb8b545ce692fba5aa71de26254943e65ec846807ac32630ab98df0afa059dacd3eaed9790a14b2e2a92b5fe9b076d1f756fa8d47c5fa736a8ef224b373c4f9bcb1903c4382c70b75dcb170", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x148}}, 0x4808) 29.29947841s ago: executing program 2 (id=1376): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0xa, 0x801, 0x84) r2 = socket(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r5, @ANYRES64=r1, @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@newtclass={0x24, 0x28, 0x4, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xffff}, {0xe, 0xffff}, {0xc, 0xc}}}, 0x24}}, 0x24815) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@newtclass={0x24, 0x28, 0x4, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xffff}, {0xe, 0xffff}, {0xc, 0xc}}}, 0x24}}, 0x24815) unshare(0x20000400) (async) unshare(0x20000400) socket(0xa, 0x3, 0x3a) (async) r7 = socket(0xa, 0x3, 0x3a) setsockopt$IPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x41, 0x0, 0x48) (async) setsockopt$IPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x41, 0x0, 0x48) socket$kcm(0x2, 0x3, 0x2) (async) r8 = socket$kcm(0x2, 0x3, 0x2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES32=r0, @ANYRESHEX=r9, @ANYRES32=r4, @ANYRES64=r9, @ANYRES8=r8, @ANYRES32=r7, @ANYRES8=r0], 0x7c}, 0x1, 0x0, 0x0, 0x20004800}, 0x20000014) (async) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES32=r0, @ANYRESHEX=r9, @ANYRES32=r4, @ANYRES64=r9, @ANYRES8=r8, @ANYRES32=r7, @ANYRES8=r0], 0x7c}, 0x1, 0x0, 0x0, 0x20004800}, 0x20000014) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40c50) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d103"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="0800080200000000000014000000456f001400640000401190780a010102ffffffff4e244e20000c9078a1020000"], 0x2e) (async) write$tun(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="0800080200000000000014000000456f001400640000401190780a010102ffffffff4e244e20000c9078a1020000"], 0x2e) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) vmsplice(r1, &(0x7f00000000c0), 0x0, 0x1) (async) vmsplice(r1, &(0x7f00000000c0), 0x0, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x25a5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0_macvtap\x00'}) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bind$alg(0xffffffffffffffff, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) 27.414086192s ago: executing program 32 (id=1339): unshare(0x62000000) r0 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r0, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80000) recvmsg$qrtr(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000880)=""/29, 0x1d}, {&(0x7f00000008c0)=""/150, 0x96}], 0x2}, 0x38, 0x2100) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x44005) openat$cgroup_ro(r1, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x0, 0x0) 27.274853342s ago: executing program 0 (id=1387): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000005b80)='tasks\x00', 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x5, 0x3, '\x00'}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) listen(r1, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000dde3845e88c491566acd32bc482a6bdb00"/32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x4c, r7, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x84}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7fff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x180}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xb}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}]}, 0x4c}}, 0x0) 27.049463154s ago: executing program 0 (id=1389): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820f1b3ff1f215ef304fc707000013be8500bb1602005704cafd81ef915d374090c200", 0x27) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x1f0, 0x1170, 0x1170, 0x1f0, 0x1170, 0x2e0, 0x1398, 0x1398, 0x2e0, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0x188, 0x1f0, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xff000000, 0xffffff00, 0xff], @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00], @ipv4=@local, [0xff, 0xffffff00, 0x0, 0xffff00], 0x0, 0x8, 0x8, 0x4e22, 0x4e21, 0x4e23, 0x4e20, 0x100, 0x1240}, 0x81, 0x41}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0xf5, 0x23, 0x7, '\x00', 'syz0\x00', {0xc}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="040044800800c800e00000027a01f380a2b4c1dbd4f221c0a1fd468ca63ae97de147e5bc2d0313377dc17591b491acf18312bee324decf810970090c77ec4ca173b12577aeb13c354245be77050365697b3b4707060c00045e46d612b09c487d7c9c94f778c0a015ecfa70d229085252956142772f9ff5a61a9b7fbc6712f8e64566b7ade87d293b81bd3cd1b2ad2852dc1dbb07d54f5544759f0eb23131b5780de6354f0714b2c5b86323969d0b4f5bd8c4489e0e7471c6a84feb9dead9d156d060a9373c7f80f4f1ec2a87efdeceec8d99c9664ee184f112929fe92da18f26929f98233f18dcbe0c638c040061800400058012fc33716331943112df1a6d89852782e376609e4a38717148d34e9d36191fe607748ad822c89800b204bd5831c55511fc4e85d09c44ef3be8ce710d034d394057d88e12db87eb032cd30fdcb489cd5ac92a44f96b6e463971c730796efaab04ce1b42faea757fc0a50c4feef468c80d7cac7db3bfd67140c04f88892b1d19a91ac5d2bef2af704fed3f92e84f78f98e97b8460000602ca31cc4edb57168863fe0e930a6030e47048c91da29a2c691894cd27b28480642302c6816b308d3eaceb9c1404c696e8a2deb97c278ca9d9b1ea4aa17255b400acdda233dde73b32098f837494e43a67bbb722f105f5ae23d8e4c9586ac0ff8c1c6c330601a9c007659ce63c0387d6692d791abdb14b8b66d6b30e5556865a6e97922f3fddcfd1a7e2cbf30b30479b4f7b824b49b1a8e5cd1ec171c8fd41bc3b14ced446eadedd90178f121d6e4d3ae3031231f39fcad0501455538f57fc305f449144d0e4f1f642ff19c53dea5322d30d680f6efdce4f7310225fa8e8a3035d925f51090e4fa74346825d16d400b9cea013e88ea47db2efbbbe73c3ae0059974efa840d4ee88ae1f85d6ba36caa8df64cbf4c1716de586b6fce1424c8bc3a0218953ea42dc7e83bda5a4319b59d7926fe04553fe79056a397ea85f6255d093a345aaf5f3d91cdce17cc9d38493e7eb952b132dc8f7953706ea7b7ff81e88a2a87f18730ca7f6f16f2c23b85f549a8b0cce6f8f0ec61fa8ba01aa114fbd63373ae3189338aa5f585a6d454733937712eb5a4cbd810c91bf5f19e0a508db8a57bdd8000000960203"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) sendmmsg$alg(r1, &(0x7f0000002440)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0xc000}], 0x1, 0x48840) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a000000000000000000000000000000000000000000000100000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73797a3000000000"], 0x6c}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) r6 = socket$inet6(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x13, 0x2}, @TCA_FQ_FLOW_PLIMIT]}}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x401, 0x1000004, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0x20000}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x1}, @IFLA_GROUP={0x8, 0x1b, 0x3ff}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e5, &(0x7f0000000100)={0x75, "aef8867558d7538643519d18316b18e4934b04ac807be3358861aa1b2de88a3001541df6467db03593c991253fe30b722d3cd7b4118a3e6fe8e1a9d71b1d838039f3fd5c5530f55a28c123fe584b98200b61b71d6ad92925b80e77f8bbf8522147ad71147d7a385cb728cc7092e7cdac6a5a15129767aedaefac49e25b3c7226"}) 26.305993475s ago: executing program 0 (id=1391): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sk_skb=0x69a0b70c073a8ecf, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r2, @ANYRESHEX=r0, @ANYRES16=r1, @ANYRES32, @ANYRES64=r0, @ANYRES16=r1, @ANYRES64=r2, @ANYBLOB="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", @ANYRESHEX=r1, @ANYRESOCT], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) r3 = socket(0x40000000015, 0x5, 0x0) socket$rds(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0x10000}], 0x1, 0x120, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000003040)) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYBLOB="c22ade6403d3ba1525bbe4fc62b1868354064b9f4587f8facdab2c94d6096b6981d714874d6885ec26fd78bd54dd44a142e3cac49c645bdbc33fdfc43b5284ae5bbfda0aca35bff43be3cc7db921c7a530e5d6c8b153ee01c5ae114cbb6a433fe183799ae26d07015acc4b3e55cbf3"], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$alg(0x26, 0x5, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bind$alg(r9, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) accept(r9, 0x0, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) accept4(r10, 0x0, 0x0, 0x80800) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r12 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r5, &(0x7f0000000000)={0x1000000c}) epoll_ctl$EPOLL_CTL_MOD(r12, 0x3, r8, &(0x7f0000000140)) bind$unix(r8, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 26.305619743s ago: executing program 4 (id=1392): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000040)) r1 = socket$nl_crypto(0x10, 0x3, 0x15) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) 26.124110527s ago: executing program 0 (id=1393): r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x10, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x2c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x14, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @private=0xa010100}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x99d}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x200400c5}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x140, 0x3f, 0x1, 0x70bd25, 0x25dfdbfc, {0x1a}, [@typed={0x8, 0x2a, 0x0, 0x0, @u32=0x8}, @nested={0x124, 0x149, 0x0, 0x1, [@typed={0x4, 0x147}, @nested={0x4, 0x2e}, @nested={0x4, 0x110}, @generic="4c381009ad7745fc37b0572118ea3276fbbbced55f187147518089357d3daf68b880ca7051e307c287b0683d3f19c77ba80d9a770456d221702726ecf2025e1d0ee0c4ea6165e018aef8d53f142948a1d0582775677915aada6ce272be7f5ac838dd874953941e4d54d85d4b03d66a409d52d779176d5094e52b5d6ed329f204a012a0fb780c52732205948de6cd369d9e6fbfa9f8835c6e", @typed={0x8, 0x10, 0x0, 0x0, @fd=r1}, @generic="6fc4d8bba791c0c65de2bbfb52960984e415d82d8776892b26158f9890bd64f7ec67d05134f5ac0d7c30022c7413c6434a7292b086708d5766a6036cf7d6c67b79f60df2df464de63df1a54648368c2a6d1f89f0aad4e41ee7c39b199d9e3e1a31610072fe156286ddc69882456a68b53ac5fdf4"]}]}, 0x140}, 0x1, 0x0, 0x0, 0x40448c5}, 0x4000) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x820}, 0x4) syz_genetlink_get_family_id$team(&(0x7f0000000480), 0xffffffffffffffff) r2 = socket(0x24, 0xa, 0xfffffa4b) ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, &(0x7f00000004c0)={0x10, 0x0, "9cbbb29f8c9ac6ba0230765d6c8c115c"}) connect$inet6(r2, &(0x7f0000000500)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xd}, 0x1c) r3 = socket$igmp6(0xa, 0x3, 0x2) bind(r3, &(0x7f0000000540)=@pptp={0x18, 0x2, {0x0, @rand_addr=0x64010101}}, 0x80) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f00000005c0), 0x4) r4 = accept4$bt_l2cap(r2, &(0x7f0000000600), &(0x7f0000000640)=0xe, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000000680)={0xff, "044b6d"}, 0x6) connect$tipc(r2, &(0x7f00000006c0)=@id={0x1e, 0x3, 0x2, {0x4e24}}, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), r2) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x84, r5, 0x600, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe2c2}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xf}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x4004010) r6 = accept4(r3, &(0x7f00000008c0)=@in={0x2, 0x0, @remote}, &(0x7f0000000940)=0x80, 0x0) socketpair(0x35, 0x2, 0x8d, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r6) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000a40)={'wlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x50, r9, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x7f}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x401}, @ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x9}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x4010) recvfrom$inet6(r7, &(0x7f0000000b80)=""/67, 0x43, 0x0, &(0x7f0000000c00)={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9f9}, 0x1c) recvfrom(r8, &(0x7f0000000c40)=""/230, 0xe6, 0x100, &(0x7f0000000d40)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x10000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x74}}, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0x9, 0x3, 0x2b0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, &(0x7f0000000dc0), {[{{@ipv6={@mcast2, @private2, [0xffffffff, 0x0, 0xff], [0xffffffff, 0xff], 'wg2\x00', 'wlan0\x00', {0xff}, {}, 0x2e, 0x5, 0x0, 0x1a}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x29da, 0x8}}}, {{@uncond, 0x0, 0xf0, 0x110, 0x0, {}, [@common=@dst={{0x48}, {0x100, 0x5, 0x0, [0xffff, 0x1, 0x48c1, 0xfff4, 0x2c2, 0x9b, 0x400, 0x4a24, 0x4, 0xe33d, 0xe48, 0x2, 0x1, 0x4, 0xffff, 0x5], 0x7}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001180), r7) sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f00000012c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20190}, 0xc, &(0x7f0000001280)={&(0x7f00000011c0)={0x94, r11, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x19}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2f5d}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x51}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4048041}, 0x40) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x70, r12, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x57}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "217729cbd72093dacca3d8825c518c11"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "69007973a7730d7aba9fe39fe33ba113"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a7e59f7868b2"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x23c5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x4000) ioctl$BTRFS_IOC_INO_PATHS(r6, 0xc0389423, &(0x7f00000014c0)={0x8, 0x18, [0xb5d, 0x36a, 0xd, 0x9], &(0x7f0000001480)=[0x0, 0x0, 0x0]}) 26.000875013s ago: executing program 4 (id=1394): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711065000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) (async) sendmsg$inet(r0, &(0x7f0000000ac0)={&(0x7f0000000080)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f00000009c0)=[{&(0x7f00000000c0)="37685dd849d9adc1773c639ab624fb3b883977626ad63ea26e0adb4c81a2901be4", 0x21}, {&(0x7f0000000140)="83e51d1f4fadc20e4e6dc32e6df5b398377b7acfc4616e6bfcc2f05365fab72d6591674cea6d6b92ecb49a5b9a2883a9b91675977c999af2cb", 0x39}, {&(0x7f0000000300)="ff1b1a2b51ec49bfaab858548f976cc75f955c12586ca44189fbdd9db86bc4274c7380b8f0ade36870bb3a701a2513f9d14630c12912a0023acbfde708b7b45868097604173ebd9087fe51dda48970e42b78b4524c916c2a7c6f8b3db010722add4150ade658c3a27f8da4f6095b4a4256208d127dd645cff1c6afff1f69c2065b820dd60c6a4e869bf521debfffc0987b19a34bc9ddeed7cd92030f861cf7b2e3e879f1647104d975af00c41f0ffe30cca67d4933f01cfd8cdd6591ecfeadaca73bd47d5edd5431160cf22a3597e2a6955f0977406916cd371bb5f897111ba4328975cfce33deba4b74edb1bfa7c8", 0xef}, {&(0x7f00000004c0)="eae30bf95be3b66885d890d5aa442965a358a1ae49ffb442db2f19ad92b9a2028db84c8e32997c2101ec8cab0eb19865cdcdc14d5f901eb91dcef67d4515325f4b6dfcb4adce5207cf3a1a13edd39029a32233aa5c8f3799be62bee1c5d9fb053df2e44204a1789c7a7d0342d84f8d9e9308b1e0cbb6df97de111e3749f56021d1929da9ed7b41218529d34b5b19c86aadef7d6c1153a2db8ee95b5c39ba366c95b79c6b41dfd550db", 0xa9}, {&(0x7f0000000400)="4f79eeaeaa9f0a455779c32d20a516f037640f15d28ba9badeefe7c367f154a3f4108d492405e09d5f62fa36228fa6012e06552be23b7755ffb15cfea4c6889bf55bcef4c86c7033dec4975ad90b9da530a88e436bd2e8889241288b1f09bd2fc800901e8134bdb9bad32019033bfc8c1033", 0x72}, {&(0x7f00000006c0)="0e2fe050b70a908e5cd2aac97688c03c119e6aae82463e2f505950d97ca64cfd04483b1d23f18d251a90e6d1aa10ea8cb0ff6400983bbe99bceeb56e88fb14d25d39a941d828d28b8a4b7bd0c5f416308edf2e01ae59d1f00914700937e5eab0eb75562155b1bd35967ce25e9669e0dac13f81115e367b92a04fe6442d60f82cd7021e6e4b1ea0c396a010b4a1c3ac70adf559fcc8de262e8049a7567bf1a301f630766fd3e94f6ad0b5881a15a65fc2b9e36d5c5d7d8cba714d9fe54b311a5ba2dc256d5128aa36", 0xc8}, {&(0x7f0000000580)="088a886201eea6c5dc9ba77ddc63c649337175723f92495e0bab569b696028945813900734cf44ec6108f028503e19bc5f94a60e68b424d9b646b086abef3aaa38b86f521f26eb841166c4fcbbc3f3b4505ed692387d7bb538e69dfb37c76174f50c051b1bcc3827", 0x68}, {&(0x7f00000007c0)="df3ee4c1580e9353fbce98a95b48b700c1962a9199f998ed9f6c740b83a9f61b0302a537dd3473c882cf7d1c12c77dd05bbd7db42321a29db2b87138d4e7400fcf8b2b14c1f891f5b44dd676ed4f646506b5adb33dbad556031b60815eada6e4dd03817865e9b0a6009f55eff9fb756558a332c322f7e41984abb2d6fc2c4f6bc7608908fe7e7a3677f16063d0e89e7f02b68dbca9b9adb6", 0x98}, {&(0x7f0000000880)="0eed78102db793929e33223ff61e1a9d5ae7a5b1eb833d13d516c322201f1149d7a1d8cfd977407f505ff867296393dd8922dc49cc581aa5e10dcdeddecb134852843cb07dd31651f169b18de4528d967bea356e6469c3445fe9101e529fffa9b15979d0407607d46c911d834f71ee0354ca681ff4b8e8fc138a599eb2d52f8b51642e68d003fd93b6a2cc7739b5ad9b545b3ab487a960d44f0054bd3404936de8cb940dbc00ab17ce8e9fc8ef9ab700ad56f8d8ce34ea1b11e66b087b82654d3b77868b22fec2a46221c5b6e92961540ac237d57870674e", 0xd8}, {&(0x7f0000000980)="dec7d78f7f83f1a855475662b8a2cd59ddcec9702009f852de0ca05edd6c6694e75b103931e1742e1f1a12", 0x2b}], 0xa, &(0x7f0000000a80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x18}, 0x8000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async, rerun: 64) socket$alg(0x26, 0x5, 0x0) (async, rerun: 64) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b05, &(0x7f00000000c0)={'wlan0\x00'}) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 25.885613319s ago: executing program 0 (id=1395): r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80800) close(r0) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f00000000c0)=0x2, 0x4) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000100)={0x40, 'syz1\x00'}) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000140)={'ip6gre0\x00'}) r2 = socket$inet6_sctp(0xa, 0x3, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xbb17}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1d4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044848}, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r4, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x80}, @val={0x8}, @val={0xc, 0x99, {0x3, 0x3d}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4840) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x200000, 0x0}, 0x8) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x6, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r6, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8000, 0x62}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000015) ioctl$int_out(r0, 0x0, &(0x7f00000006c0)) r8 = epoll_create(0x9) epoll_wait(r8, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0xc4) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x41, &(0x7f0000000780)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000a40)={'sit0\x00', &(0x7f0000000980)={'ip_vti0\x00', 0x0, 0x20, 0x700, 0x7f, 0x3, {{0x27, 0x4, 0x0, 0x3, 0x9c, 0x64, 0x0, 0xb, 0x2f, 0x0, @remote, @multicast1, {[@timestamp={0x44, 0x8, 0x5b, 0x0, 0x9, [0x401]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x8, [{@multicast1, 0x7}, {@multicast1, 0x2}, {@private=0xa010102, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@loopback, 0x10000}, {@local, 0x5d90847b}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}, @cipso={0x86, 0x3d, 0x3, [{0x0, 0x7, "4792a9e9b6"}, {0x2, 0x4, "a571"}, {0x6, 0x7, "c98553b6d8"}, {0x4, 0xf, "e28576e5c31bd4a46877142098"}, {0x7, 0x8, "7aa151f4c92f"}, {0x6, 0xe, "4015901616578636cc6400f2"}]}, @noop]}}}}}) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x21, &(0x7f0000000b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9d7, 0x0, 0x0, 0x0, 0x4}, [@tail_call, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x7}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffe}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x5, 0x8, 0x0, 0x0, 0xfffffffffffffff0}, @generic={0xfb, 0x3, 0xb, 0xe63f, 0x7}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x1}]}, &(0x7f0000000c40)='GPL\x00', 0x401, 0xf3, &(0x7f0000000c80)=""/243, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000d80)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000dc0)={0x3, 0x0, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000e00)=[0x1, 0xffffffffffffffff, r8, 0xffffffffffffffff, r3], &(0x7f0000000e40)=[{0x5, 0x2, 0x6, 0xc}, {0x1, 0x1, 0x9, 0xc}, {0x1, 0x4, 0xd, 0xb}], 0x10, 0x100}, 0x94) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000f80)=@o_path={&(0x7f0000000f40)='./file0\x00', 0x0, 0x10, r1}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000fc0)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001080)={{0x1, 0xffffffffffffffff}, &(0x7f0000001000), &(0x7f0000001040)='%ps \x00'}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000010c0)={r1, 0x5, 0x4b5, 0xb730}) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=@bloom_filter={0x1e, 0x0, 0x0, 0x7fff, 0x400, r9, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x4, 0xd, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7001, 0x0, 0x0, 0x0, 0xa70}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x3, 0xffffffffffffffe0, 0x4}, @jmp={0x5, 0x0, 0x2, 0x2, 0xb, 0x6, 0x1}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000880)='syzkaller\x00', 0x7ff, 0x91, &(0x7f00000008c0)=""/145, 0x41000, 0x0, '\x00', r10, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xc, 0x1, 0x7f}, 0x10, r5, r11, 0x0, &(0x7f0000001180)=[r12, r13, r14, r15, r16]}, 0x94) 25.739176724s ago: executing program 2 (id=1396): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, 0x0}, 0x20) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4}, 0x6) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) (fail_nth: 2) 25.726817089s ago: executing program 4 (id=1397): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000940)={0x50, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\b\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="14002c8008000000020000000800000001000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffd45, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018006000600800a000008000100", @ANYRES32=0x0, @ANYRESHEX=r4], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 25.157237932s ago: executing program 0 (id=1398): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@multicast2, @dev}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x4, 0x0, 0x0, @fd}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c00000019000500000000000000000080200000000400050000000008000f"], 0x2c}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r4, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r5, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}]}, 0x28}, 0x1, 0x0, 0x0, 0x40081}, 0x24008000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040800) socket$kcm(0x11, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7800000010000104000000000300000000004000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a44001280110001006272696467655f736c617665000000002c0005800500190003000000050009000100000006001f00d500000005000800000000000500090001000000140003006272696467655f736c6176655f30"], 0x78}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D@\x00\x00', @ANYRES16=r3, @ANYBLOB="080026bd7000fbdbdf250200000005003d0005000000080062000101000008006900030000000500590003000000080040000900000005003e0007000000"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40041) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) close(r8) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0), r1) sendmsg$SEG6_CMD_DUMPHMAC(r9, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r10, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x800]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000005}, 0x4801) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, 0x0, &(0x7f0000000080)) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x3, 0x7801, "af79f1", 0x8, 0x8}) getsockopt$packet_int(r11, 0x107, 0xb, &(0x7f0000000340), &(0x7f0000000380)=0x4) 25.156466485s ago: executing program 4 (id=1399): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x10008004}, 0x20000000) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffffc}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20020040}, 0x0) syz_extract_tcp_res(&(0x7f00000002c0)={0x41424344, 0x41424344}, 0x5, 0x8) syz_extract_tcp_res(&(0x7f0000000300)={0x41424344, 0x41424344}, 0x1, 0xf) syz_emit_ethernet(0xb6, &(0x7f0000000340)={@empty, @link_local, @val={@void, {0x8100, 0x4}}, {@mpls_uc={0x8847, {[{0xff}, {0xc0aa, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x7}, {0x1}, {0xffff}, {0x81}], @ipv4=@tcp={{0x16, 0x4, 0x2, 0x5, 0x84, 0x65, 0x0, 0xdc, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp={0x44, 0x10, 0xcb, 0x0, 0x5, [0x0, 0x7fff, 0x7b]}, @timestamp_prespec={0x44, 0xc, 0xd9, 0x3, 0xf, [{@multicast2, 0x7}]}, @cipso={0x86, 0x27, 0x1, [{0x6, 0xb, "38ef42cf2d86cf85fd"}, {0x0, 0x9, "e5ff0e2e03ac84"}, {0x0, 0xd, "119465ad4c1a5cc65f54ce"}]}, @end]}}, {{0x4e20, 0x4e23, r3, r4, 0x0, 0x0, 0x7, 0xc2, 0x1, 0x0, 0xfff5, {[@fastopen={0x22, 0x2}, @mss={0x2, 0x4, 0x6}]}}, {"d69425a10d9641360b4ad201f6f2a3ac"}}}}}}}, 0x0) r5 = accept$alg(r0, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x8010, r5, 0x633e4000) syz_extract_tcp_res$synack(&(0x7f0000000400), 0x1, 0x0) r6 = accept4$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000480)=0x14, 0x80800) sendto$packet(r6, &(0x7f00000004c0)="872aa9e1c3e41ad8332beefeaa251546ba9f80515519e5dee879affb685da0d87771930f0b362dbcfa982dc849b479ceec140266eab0086e36fef90087", 0x3d, 0x10, &(0x7f0000000500)={0x11, 0x8, r2, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, 0x14) syz_emit_ethernet(0x7c, &(0x7f0000000540)={@multicast, @random="240803b28c6c", @void, {@mpls_mc={0x8848, {[{0x7, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x40, 0x0, 0x1}, {0x9b, 0x0, 0x1}, {0x6}, {0x7}, {}, {0xcb, 0x0, 0x1}, {0x106}], @llc={@snap={0xaa, 0x0, "b4", "a56d60", 0x22eb, "65bc2380efd242ff68d6a46be7073579af1c455efac695b8619282f0d55f8d6794208eb5f8169e92d7c843d1bfc76e7260d5ef83b6027ca55c92173ddc28b350b66a"}}}}}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@ipv6_getnetconf={0x1c, 0x52, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) poll(&(0x7f00000006c0)=[{r6, 0x10}], 0x1, 0x8) sendmsg$nl_route(r7, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@getroute={0x14, 0x1a, 0x100, 0x70bd2a, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x10) write$tun(r7, &(0x7f0000000800)={@void, @val={0x0, 0x0, 0x7, 0xb8, 0xaa6e, 0xd107}, @ipv4=@generic={{0x38, 0x4, 0x1, 0xc, 0x10e0, 0x65, 0x0, 0x2, 0x7a04f1e766a56b06, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, {[@ssrr={0x89, 0x17, 0xee, [@multicast1, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x17}, @rand_addr=0x64010102, @loopback]}, @cipso={0x86, 0x71, 0xffffffffffffffff, [{0x6, 0xd, "084990b318578e6d5e0fe0"}, {0x2, 0x5, "ab335a"}, {0x0, 0x5, "b81bb8"}, {0x5, 0x7, "a8d2087cc1"}, {0x5, 0xd, "c013de522ffe6a76e588bf"}, {0x7, 0x12, "41c2d1b276c6b27a7c07eff74b830eea"}, {0x2, 0x10, "12b068befabb561dd7061bf8599e"}, {0x1, 0x10, "c3fdf82769230d3cd511577afa61"}, {0x6, 0xe, "060cb9e48c29eafff453dc32"}]}, @rr={0x7, 0xf, 0xc4, [@dev={0xac, 0x14, 0x14, 0x23}, @loopback, @multicast2]}, @generic={0x94, 0x5, "8c15c1"}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x2b, 0x3, [{0x2, 0x8, "3ad368d0ae74"}, {0x5, 0xb, "3e184f6c9b2777020c"}, {0x1, 0x12, "5776d6659c2765d74379f6fcc0ea9557"}]}]}}, "73fdb93799d64fb16f791428839c2384d08d6172dfc600ce33fe6433b27bc015788ce80f830e6b60d42b43296bde1aac6117a1ef3cba99fba4e169975a9380d51f556466a4aa58204ba65cefc398af7f3a4b3aebc121366edc2ff6f5b49b0d8999ff818c935bd3b0f1d67d591650128fab283ae7ab5b2b6644c4015f0e1c422c512c56a2b2e7c46033d0e00e257fcbe9113e2e433dbdf33c3aafe14e34803bb41505333a3770914831652ce163098bf5d3f6b82b945c353037fc0f24c17ea348a18eabc2610bcbe973fa646937230bf52b80e5f81249c557bd4ad0a8c982fb07c1ec21fbe90ce40b9ff9d11299a4210eb80f8feb9821bef0a052bbd0d5777857d59faeb412d7943251a5575452aa3e46909e4a179f16731fa24b60ed13339051c5989fd0d3bba98a11a57897cb5d69a07106ee54d94b519ef9bfb3658179dedbdda07442b80694505d94b12cc4c774fa9e808fad4dc1f8437f7a135a8070a1f80fee63917a2e7f464f58dff4106c818134cd59dca73dc5b7c41e8f99110f47705bc8b751907e63a8276344ab5c4e2ee6ed650ba9d1b1513b46bc905137f821d7009a7ff015f033baeeb52be93e2cccbfc2009e209131d588224415949f5dc5e213aafcd323edfb4974adcd80aedcc45f83133b2996eef28ee66b22ce8d455fe10783fae05923b90a43ddf180afd63cdf93ebd621ef3de9177c6e8a7625e6c41aaf9dd6b9cf00fcf9b324830100bfef5fa1779e3bcad4386196bab479f6a34db7d8a8378b54b3c64448195ab808605e378c9801707e47f0f8c409ef08790a75b80d0c2d6557e57851f5139a0ec9d8f0b4417ac7d91afb7f8b4c1e7e4783ab96e7f858b828849d7368bc94a397f7a3f47286716043577bfdb344b38c9270d082f90e1dddddeb139d9ae30848fa772cbba888fcb8f30b2979078a91fa9f3fdc234e3b51cbb0532ad19de1a3ac53eae6785c233a8540124b5e10eae5abdf854bb565be448c327c65e2c65fa09d2be4b1ed710b4d92a82e4f533f0e760ddb9df108168cd9b5ed115b4f255fc77a474d582e711f35c6389d4d5ff4b9242c2601eb8a52e4c7250d9181861b7ca84fed80b0dc971067c96a15053034f6c349447fa30890ed4c39ff4695beab5cfb24eb9d01997837bda049d4190a838e18c2243b03671f24ad94ea7d63538ff2961c89ac9b182ec89cf8c58716d619a3b0e370864230c654ef2edab1ae2ed131a472d1f2c1f12686426f583ff7bc15b41c82b6ca88f5ba0b254233fe01060e59bd4a57efda70f3fffc72b6283db2975a976ec97455079949fc3f70f9a07ad79c3bbdbf66b4d7c2cfcbfe19724c6d5118f4fe2cc38bdf874a86cb006f9291ad69c9dabb4c06cdea331821336f421ca6e5ee39ae3b2c22483ac39f222792f77ba352216929ccd7f57b9883879e639696e2ef18b1406f2f2e0b9f26dc28d1084ea9e50e6a52cdaa4d5283e8b73f6709a95f913dee4a4693ef420d3bec58104ea4e1c344f72044038ba32976d0ed3824a5177ec9b131fde3a0fb329efa6c8e244e61809971fa77e3fb0bfacf8328667acffe7c0c416f71b6c7cc9e55c7c684108a3e26b1e32f75a2d13df22af9afe910c48be51e68743f78c9cebdcec40b053c052f0ed48a1628c081530c95c17beffaca1848c5c46165937d002d62c99ca18fa7aaf4a537a2640a491311d6596c792bc7f51b82406afd9ccf1a87f483b6e5b529e6bb8bf5d0b8fe65f9abc9237b6c46d660f55c4a8bce00db0810f50d470cdc00af2de8b0dbf7d4aa45f2b6ab4ca099810c9df161464d1a13474648d7b2700078398e420298b8cb536991df382886e1f23354c493b608336891deb5641c212d6849fdbd22a038b79e3dd5b66a3cac505c1aee9ee1e9295b90655916872b3d5e836c91c61609606e02d6c26a3b48cc82dd738da79b5c85cac8c231076104ae82f6784d698df24b09c62f95096bccf6b8064d876b31873705901e77f2718e6d946cbfafd1bb6a0db8b0876f07a3de1689cb1df1330f8e7d48e42fe7f61224cf7fec6034d172607a935b19f8f3e9df72bb32578d642b7ad22a5e3842eb87089a4a5c6b68ec74025c2422128adf337a72fb69466871567ec572098b3bdec824817b9f94ab4d4b24fcc200d77ac61e4af9a337971df75c06e2901ea78462b04bc67835bcca5d58161d0fe9df465fba241fc1186d38bb058e784015d934914fcbba344bbc0d10119a83f26780b21225a639c8135782abf84ec380f162ddf7ddfc3327f3af3c58c7aec11fd628e8e1b5eac2d3417285430685398f79a1fc9f930c501b2bc381f8f96906d21c4caae846c80e57e288b53cb4d3853b4bd46b82627b1a9b9ac9917e8c758bc2a8b99447e0aab312abeb886002b84daeb4e3256974310264ea4cb7632d87727954dffe6b1f799e9e7d686d7541e416425ff96fbfb96df0fdf959097193a11ca36851633b9b71185fd64289d161b47b25f3e0e04eeb39b6772a781af3887f3e47c51520fc5ab71e4c93e85a6fafb1b779c32e3a4363bfd9a04e2b3d5599c1102ba42f7eddce2a778e6e513f0bc755b2ec2971d3c915a0d949a7d3f82e8bbe8cdd39c0a3570dbc1190944119589be09a5ffa7775bf593283397740403386ef236ec5e31888447e96b53490a09e9e14c8d4661d71c09325ea3a0dcfb588dbbf518cf80a8135c71aee434f808814ae019c6f63fb010f0468f577a1df46d7ddec8b2479218ad6be0ecc77b689677368b5d01c2702d01c721d08367f3cb19f6a63265085774e61b140b3e0d778f352c0b2513b3b85e65f70cefc9517cad2fb688deddd72f403da8cb025f64a80c53af9caa6acc2df43d4ca0805841e8513443c6f6d2cad62e7832c01c282951cab2a8206c82377ad0c332129360badc8bacdd029441393bb212323d67b0cf7db9068cf6bec6f64e61b05e66974d4f9d63db40e247ad5ffb3500643889c438f10454fac51309668759f6b7c8f37b1253f8e647c97a29b36753e940a52d6bad094379d3a698041154a46c9d40bf6cc72feedf8b4bb23b2b3ac7d2ce5b2e703a7458abb1653ff67662d9cd001814e3a005c9199ae32f403ef160d27b63d3008ce248b3e26a06d7c86561868d3f236bf26f3e12f2129d5a74410e3850635f149a90480b825a3f2a0f28116e16e025bdfa35971edbbc6846e87e66d2d277e25de1ecc0787cfedc839b1dd776556a74bbfbfdcff51b0848d4f655726237e7d1bb170a7e615fd891d210fd2cc5cb52e65adce4c80d8b2f47f1c0276182badbfc8b4741b3efbb1e66ca40d037bdb9013d37466014c2309ec0f55c1c721b677fec84a1682a79e6889496db6df013c3ffa00c7bbaa03cdceeb98f6ab8972fa239bdccb997faf3e15341166c970b8a154e4f224e60dead15e4b952470932815f34b99641db109b54e67a84d24877593cdbefb8fd7a0731679a33139280985aa8c1212e27b19b52c794991ef7b65d667593977a7490e58122e490e33609fdf5de669a76a50c7917f44eafe3bc4b6d176abf170fe195f8d5b777730ebab73b7defb5c45ab602b6d20ef5836e86989f672961df5c7bd64a4e4745a12425a3cb43574221e0248274f670780a0b5513573994187b49aee2147507924daa2995d337e9c680e3d26c19f408b032fbba1e9d588f9a955df7e4616a6889ec3de9910dd078bb6091df42b3b45eeb098d234059cebbf7c83e7d029c7e40dd5b6f7cf9e632e3d027c95e366d485d3960e0fa3b8bc93245aa68a93534c80675a47a521eb94dc77cff1eaff7676b93d4bbaf90b8b990e7e6720933b5b6517d9c83ca701748eb91b69028ba01cf01f67aa3999aec7750139c4c337220a7e31c41ce4c865b9f9e0ba2ff4473c80ab927baf8a237da768b368dc3619683dc0463b689db2e842e3b62993f41744a41aa3af77de96184844b85f49974607f1c51c52e35c25ff77b0acb0c626c4eb48a3ca84e2d7989973a48728aae145f52a567091dc28e5c634bb79cf32d15d9f6eda6df46bc4cc24af3fa180f848b29698ae5a071072b7a20e17fd061f8873ac85cee59451d875bc107634afd776c9f9f47debca7cfffe295b291b69da2df38eb73fc46d2bf7c5c99cfa185ca3b04ae2643f867a52b31085bbe36a53ed0e1aa5d14efd66d4fe55a89dc625ef4b4358eb4c9a80a64da07bc12c41100c46b23615e3facea12336f38703b1ceb31c30bd35a4eabe0b00a0e52321c2999d168f5db7d2489366d682ae391d5b4dc5ad53da5526520add11d4fbb7a6bc5bfe024154cb72f30eade4b6c1395dd5b0752522ccb8b7ba9347e1b006a09df2d1cb722c135fbd1e3f66e3d3d88ad5de09e6276e6fd2435bd2139215383878d08af1cf14310c86aa9b5b8f18ed9c97ab676b3f30eabc2cca52e425566f3fdc8e3afec6a3a9de04b89db33df9db409881ad1bfce645d750694340a69332b27146ea56ced9bff0495c846c6b3151349cf56aa31d751c15d608b8e848ce9023fd1a96816be1d60c81a4cb8aaa0e54f95b44dd13a8cc8d61bc78d79c2ab3976585a552dcf9683883279288303e1fd4815e18008d8f2d8360ddc707a3571a0591eb31eed030b114240929be551910439ddfb4e6f343a023b00352b0eeae7ba499cdfad31db6975351cbe08f55980adf8650b43bc31e957cb0308acdd7ea8cb736c717f11a77b0c3e9a8d7213d817b5fce169f2c958faa4e1dddeee35b4bab389184b69838db6fabf07ed5d6819eb693dfa02b396728e97d6fcccde503f842002f7f4ed4fa6057748fd7d07ac9c2bb6fb78494ed84960cab9aa3210a811063f853f144317342c0d28e7b1aee25173f2ca656f86e953813cee947baed619551f785f016c49c747b148aef43fd24ad14f240629f9b8fca1d776fbbdcacdbfc61b06310594bfd9c1c78132fa20c2874a070a7dcb9542a52c3622c01125d04303d4830aa7982dbbb83bc3aa0a135339b1de4a28b048d92817b94786490a411082a96ff814a07d4025d45f4ff01b984ec03234160f2e91e600e839feb4c87dcf514cc0cc861c1817655ab5faaff2bf00ddd14bae795cb0d4a35e567d367e221de669e8090af3c4224ec6121657155b9def9e456ecd27b468cb5c4d14388b3e755996d399bfc293ca87cb5ef63db7bcab9ba7b5e042fc3f91d2c0f2c496b185b7ac85c0daa556060b0a96c68b9e387ee55e8eecd32fa2b58e2b29315e94d2e813b5077a477e1e93ea969205594e2157d7a82ed8f31578204cd5f3841544227227b1c54cece9d9e613373fc7c275890e9d5d8a148e4be7547e4e2f4c97c73e2b2bca752e1eec710220312b4ac89867fc8368171e525141c9f50d7989242598a7d012c41e2bc2286f9735887151d301b4e1f5d23f1435f5eb0a08fbf016dd69ee3388469a9e7b2cfe3879992aa32737cc5fbca952a25c9ee51aff9b68826b2a3830b136effebd666fbbf5e5aef9191bcfc3222047e3577a380e2489c6573165f03348393b250c0ef32dddf0790b2d2de4bf2351fbeeed6bf48d2252ce67930b3655671f04376f6493baae015b8036ba999d6d99672add6eaef0affc649579c3fd29a8e7a7283cb3306c88da212ebc0cecc37cf2f18d0b048112827d9ec227ae60ebf7bb16cdd0551e25b42ee0f12cf0be9ddead4d863bc21346ede0e9f9d32daa04ccd2b928d1531b708b6706fe36b98faf1e84da9d95c5c4836d2fcfb6676e714192e0761fceab0911b656188d5407d3792f46da38157b15016ebc742f2c90b18afcfc0344b8e5cfacd19a2efa379fe1284a82b45"}}, 0x10ea) syz_genetlink_get_family_id$tipc(&(0x7f0000001900), r0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001980), r0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000001b80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001b40)={&(0x7f00000019c0)={0x154, r8, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff9}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9cd0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6a96edcb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x39}]}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x8080}, 0x20000800) getsockname$packet(r6, &(0x7f0000001bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001c00)=0x14) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000001c80), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x1c, r9, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) close(r7) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000001e40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x71}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20044805}, 0x40846) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001e80)={'team_slave_0\x00'}) syz_extract_tcp_res(&(0x7f0000001ec0), 0x0, 0xfffffff9) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000020c0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002080)={&(0x7f0000001fc0)={0x94, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}]}, 0x94}, 0x1, 0x0, 0x0, 0x8005}, 0x40000) 25.110435722s ago: executing program 4 (id=1400): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000090601080000000000000000050000000900020073797a3100000000050001000700000020000780060004404e21050005000700ff0000000c000180080001400a"], 0x48}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan3\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x74, r4, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1ff}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x9}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x446f}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x74}, 0x1, 0x0, 0x0, 0x8081}, 0x20000800) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, r1, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f00000000c0)="5f74f06b2a95827f", &(0x7f0000000100)=@tcp, 0x4}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6332}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x44}}, 0x40d0) sendmsg$IPSET_CMD_DEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48084) sendmsg$NFT_MSG_GETFLOWTABLE(r7, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f00000005c0)={0x1fc, 0x17, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x94, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0xfc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'wg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'vlan0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x55e}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x14}, 0x4040) 24.884022121s ago: executing program 4 (id=1401): r0 = socket(0x2b, 0x1, 0x0) listen(r0, 0x0) recvfrom(r0, 0x0, 0x0, 0x40000060, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000900010000000c000100000000000000000008000500", @ANYRES32=r1], 0x50}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1085f}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x4, 0x7f, 0x10, 0x8, 0x2, @loopback, @loopback, 0x8, 0x7, 0x3, 0x9}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x1}]}}]}, 0x44}}, 0x24004000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket(0x2b, 0x1, 0x0) (async) listen(r0, 0x0) (async) recvfrom(r0, 0x0, 0x0, 0x40000060, 0x0, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000900010000000c000100000000000000000008000500", @ANYRES32=r1], 0x50}}, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1085f}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x4, 0x7f, 0x10, 0x8, 0x2, @loopback, @loopback, 0x8, 0x7, 0x3, 0x9}}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x1}]}}]}, 0x44}}, 0x24004000) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 22.495781016s ago: executing program 2 (id=1402): syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x2, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x3}]}}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x64, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x4}]}}}]}, 0x64}}, 0x0) 0s ago: executing program 33 (id=1353): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') epoll_create(0x7) unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x85}]}}}]}, 0x3c}}, 0x40800) ioctl$SIOCAX25DELFWD(r0, 0x618f, 0x0) socket$kcm(0xa, 0x3, 0x87) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r1}) getsockopt$inet_int(r4, 0x0, 0x14, &(0x7f0000000240), &(0x7f00000002c0)=0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c0002"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0x9518, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1fa}, {0xa, 0x4e21, 0x7, @remote, 0xf}, 0xffffffffffffffff, {[0x3, 0x6, 0x3, 0xe, 0x7, 0xb, 0x81, 0x3]}}, 0x5c) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.144' (ED25519) to the list of known hosts. [ 64.789087][ T5808] cgroup: Unknown subsys name 'net' [ 64.918422][ T5808] cgroup: Unknown subsys name 'cpuset' [ 64.927078][ T5808] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.345641][ T5808] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.846179][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.860239][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.875879][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.884329][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.891990][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.899345][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.906974][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.911941][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.915093][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.922089][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.929528][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.936915][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.942710][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.950524][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.957372][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.963806][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.972117][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.978750][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.985017][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.992074][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.998644][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.014995][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.036019][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.044426][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.046096][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.542919][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 70.572269][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 70.742407][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 70.757187][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 70.865670][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.873536][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.880991][ T5829] bridge_slave_0: entered allmulticast mode [ 70.887903][ T5829] bridge_slave_0: entered promiscuous mode [ 70.900664][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.908010][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.915150][ T5829] bridge_slave_1: entered allmulticast mode [ 70.922796][ T5829] bridge_slave_1: entered promiscuous mode [ 70.934572][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.941988][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.949227][ T5828] bridge_slave_0: entered allmulticast mode [ 70.956444][ T5828] bridge_slave_0: entered promiscuous mode [ 70.972846][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 71.002999][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.010267][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.017589][ T5828] bridge_slave_1: entered allmulticast mode [ 71.024411][ T5828] bridge_slave_1: entered promiscuous mode [ 71.092304][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.112438][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.130866][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.139230][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.146628][ T5821] bridge_slave_0: entered allmulticast mode [ 71.153526][ T5821] bridge_slave_0: entered promiscuous mode [ 71.162897][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.191422][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.210900][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.218152][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.225487][ T5821] bridge_slave_1: entered allmulticast mode [ 71.232327][ T5821] bridge_slave_1: entered promiscuous mode [ 71.248520][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.255696][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.262854][ T5820] bridge_slave_0: entered allmulticast mode [ 71.270295][ T5820] bridge_slave_0: entered promiscuous mode [ 71.281371][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.283330][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.287961][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.295251][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.308398][ T5820] bridge_slave_1: entered allmulticast mode [ 71.315257][ T5820] bridge_slave_1: entered promiscuous mode [ 71.353089][ T5829] team0: Port device team_slave_0 added [ 71.369075][ T5828] team0: Port device team_slave_0 added [ 71.401257][ T5829] team0: Port device team_slave_1 added [ 71.408300][ T5828] team0: Port device team_slave_1 added [ 71.416249][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.437373][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.465910][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.475420][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.482761][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.490302][ T5831] bridge_slave_0: entered allmulticast mode [ 71.497225][ T5831] bridge_slave_0: entered promiscuous mode [ 71.506754][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.543837][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.551046][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.577440][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.589718][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.597346][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.604805][ T5831] bridge_slave_1: entered allmulticast mode [ 71.612641][ T5831] bridge_slave_1: entered promiscuous mode [ 71.633260][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.640331][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.666672][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.691153][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.698171][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.724377][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.753817][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.760959][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.786962][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.799407][ T5820] team0: Port device team_slave_0 added [ 71.828119][ T5821] team0: Port device team_slave_0 added [ 71.836408][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.848352][ T5820] team0: Port device team_slave_1 added [ 71.857371][ T5821] team0: Port device team_slave_1 added [ 71.865099][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.956540][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.963512][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.989717][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.006583][ T5829] hsr_slave_0: entered promiscuous mode [ 72.012877][ T5829] hsr_slave_1: entered promiscuous mode [ 72.024718][ T5828] hsr_slave_0: entered promiscuous mode [ 72.031226][ T5828] hsr_slave_1: entered promiscuous mode [ 72.037472][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 72.043276][ T5828] Cannot create hsr debugfs directory [ 72.049830][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.057082][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.083744][ T5825] Bluetooth: hci2: command tx timeout [ 72.083987][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.089913][ T5825] Bluetooth: hci1: command tx timeout [ 72.100146][ T5834] Bluetooth: hci3: command tx timeout [ 72.105625][ T5146] Bluetooth: hci4: command tx timeout [ 72.116300][ T5834] Bluetooth: hci0: command tx timeout [ 72.124753][ T5831] team0: Port device team_slave_0 added [ 72.131164][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.138388][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.164733][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.177555][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.184512][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.210627][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.223383][ T5831] team0: Port device team_slave_1 added [ 72.273957][ T5820] hsr_slave_0: entered promiscuous mode [ 72.280324][ T5820] hsr_slave_1: entered promiscuous mode [ 72.286695][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 72.292510][ T5820] Cannot create hsr debugfs directory [ 72.351456][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.358578][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.384664][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.419939][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.427064][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.453526][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.492603][ T5821] hsr_slave_0: entered promiscuous mode [ 72.498818][ T5821] hsr_slave_1: entered promiscuous mode [ 72.504817][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 72.510634][ T5821] Cannot create hsr debugfs directory [ 72.677068][ T5831] hsr_slave_0: entered promiscuous mode [ 72.683505][ T5831] hsr_slave_1: entered promiscuous mode [ 72.689903][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 72.695673][ T5831] Cannot create hsr debugfs directory [ 72.992384][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.004637][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.025656][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.044596][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.093400][ T5821] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.109920][ T5821] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.120737][ T5821] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.131184][ T5821] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.219025][ T5829] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.230699][ T5829] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.242938][ T5829] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.253027][ T5829] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.352226][ T5820] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.362500][ T5820] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.372551][ T5820] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.389319][ T5820] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.439083][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.483182][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.506454][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.518165][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.530124][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.560157][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.583218][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.611825][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.619058][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.640869][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.648014][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.693236][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.730852][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.738036][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.747637][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.754709][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.769165][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.842327][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.871155][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.878305][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.919245][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.929389][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.936588][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.969198][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.983410][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.990598][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.047632][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.061904][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.069117][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.156486][ T5834] Bluetooth: hci0: command tx timeout [ 74.165511][ T5834] Bluetooth: hci4: command tx timeout [ 74.166656][ T5146] Bluetooth: hci1: command tx timeout [ 74.170914][ T5834] Bluetooth: hci3: command tx timeout [ 74.176337][ T5825] Bluetooth: hci2: command tx timeout [ 74.218708][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.243829][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.277851][ T5820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.319773][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.329900][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.337343][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.349741][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.356978][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.523579][ T5828] veth0_vlan: entered promiscuous mode [ 74.535721][ T5821] veth0_vlan: entered promiscuous mode [ 74.564361][ T5821] veth1_vlan: entered promiscuous mode [ 74.598834][ T5828] veth1_vlan: entered promiscuous mode [ 74.691523][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.753965][ T5821] veth0_macvtap: entered promiscuous mode [ 74.784863][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.794840][ T5828] veth0_macvtap: entered promiscuous mode [ 74.843427][ T5828] veth1_macvtap: entered promiscuous mode [ 74.852697][ T5821] veth1_macvtap: entered promiscuous mode [ 74.909357][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.942234][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.973255][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.999421][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.018910][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.038187][ T5820] veth0_vlan: entered promiscuous mode [ 75.059204][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.070868][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.101411][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.110942][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.121936][ T5820] veth1_vlan: entered promiscuous mode [ 75.138782][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.149416][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.159283][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.181399][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.241321][ T5831] veth0_vlan: entered promiscuous mode [ 75.270601][ T5829] veth0_vlan: entered promiscuous mode [ 75.298464][ T5820] veth0_macvtap: entered promiscuous mode [ 75.316186][ T5831] veth1_vlan: entered promiscuous mode [ 75.327545][ T5829] veth1_vlan: entered promiscuous mode [ 75.342105][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.347336][ T5820] veth1_macvtap: entered promiscuous mode [ 75.361310][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.422424][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.432072][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.462506][ T5831] veth0_macvtap: entered promiscuous mode [ 75.496786][ T5821] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.501174][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.531008][ T5831] veth1_macvtap: entered promiscuous mode [ 75.531948][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.546935][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.553309][ T5829] veth0_macvtap: entered promiscuous mode [ 75.570359][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.609594][ T5829] veth1_macvtap: entered promiscuous mode [ 75.622453][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.662355][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.671978][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.693995][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.716109][ T5936] geneve2: entered promiscuous mode [ 75.724733][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.727578][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 75.740764][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.749604][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.751124][ T5936] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 75.775174][ T3507] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 46425 - 0 [ 75.793565][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.807464][ T3507] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 46425 - 0 [ 75.817082][ T3507] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 46425 - 0 [ 75.874144][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.882525][ T3507] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 46425 - 0 [ 75.898478][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.962008][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.973320][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.993107][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.011362][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.021397][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.089495][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.109765][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.142611][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.224416][ T3507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.236037][ T5834] Bluetooth: hci3: command tx timeout [ 76.236959][ T5827] Bluetooth: hci1: command tx timeout [ 76.241446][ T5834] Bluetooth: hci2: command tx timeout [ 76.241468][ T5834] Bluetooth: hci4: command tx timeout [ 76.250260][ T5146] Bluetooth: hci0: command tx timeout [ 76.264948][ T3507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.305798][ T5948] geneve3: entered promiscuous mode [ 76.340546][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.350163][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.393763][ T3507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.436801][ T3507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.462215][ T5955] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8'. [ 76.469882][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.482552][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.593281][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.622652][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.704710][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.721345][ T5957] Cannot find add_set index 0 as target [ 76.751445][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.769880][ T5966] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4'. [ 76.962957][ T5971] netlink: 288 bytes leftover after parsing attributes in process `syz.2.3'. [ 77.118595][ T5977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 77.265229][ T5973] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.273450][ T5973] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.502257][ T5973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.510145][ T6000] netlink: 'syz.2.17': attribute type 64 has an invalid length. [ 77.538525][ T5973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.685738][ T6001] warning: `syz.1.16' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 77.701360][ T6003] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 77.733539][ T6003] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 77.747382][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.777268][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.797488][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.811965][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.821304][ T6013] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.887182][ T6012] netlink: 'syz.3.19': attribute type 11 has an invalid length. [ 77.978181][ T6025] netlink: 'syz.4.21': attribute type 1 has an invalid length. [ 78.315710][ T5146] Bluetooth: hci4: command tx timeout [ 78.316446][ T5827] Bluetooth: hci0: command tx timeout [ 78.321232][ T5834] Bluetooth: hci1: command tx timeout [ 78.326962][ T5830] Bluetooth: hci2: command tx timeout [ 78.332161][ T5834] Bluetooth: hci3: command tx timeout [ 78.389754][ T6056] netlink: 44 bytes leftover after parsing attributes in process `syz.2.27'. [ 78.412685][ T6059] netlink: 44 bytes leftover after parsing attributes in process `syz.2.27'. [ 78.436376][ T6057] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.463369][ T6062] Bluetooth: MGMT ver 1.23 [ 78.531320][ T6066] netlink: 40 bytes leftover after parsing attributes in process `syz.2.30'. [ 78.568654][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29'. [ 78.607216][ T6070] netlink: 20 bytes leftover after parsing attributes in process `syz.2.31'. [ 78.822079][ T6081] netlink: 'syz.1.34': attribute type 12 has an invalid length. [ 78.832529][ T6081] netlink: 'syz.1.34': attribute type 29 has an invalid length. [ 78.840888][ T6081] netlink: 'syz.1.34': attribute type 2 has an invalid length. [ 78.920596][ T6084] netlink: 'syz.1.35': attribute type 2 has an invalid length. [ 78.928482][ T6084] netlink: 'syz.1.35': attribute type 2 has an invalid length. [ 80.793172][ T6012] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 81.077844][ T6111] netlink: 'syz.1.41': attribute type 5 has an invalid length. [ 81.304942][ T6118] syz.4.45 uses obsolete (PF_INET,SOCK_PACKET) [ 81.417771][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.443029][ T6137] __nla_validate_parse: 4 callbacks suppressed [ 81.443045][ T6137] netlink: 36 bytes leftover after parsing attributes in process `syz.3.52'. [ 81.459865][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.495268][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.539013][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.697097][ T6149] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 81.792218][ T6152] netlink: 'syz.4.54': attribute type 1 has an invalid length. [ 81.878486][ T6159] netlink: 'syz.4.54': attribute type 1 has an invalid length. [ 82.293994][ T6133] Zero length message leads to an empty skb [ 82.766783][ T6180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.60'. [ 82.863994][ T6186] netlink: 'syz.0.61': attribute type 1 has an invalid length. [ 82.885972][ T6186] netlink: 224 bytes leftover after parsing attributes in process `syz.0.61'. [ 83.401651][ T6205] syzkaller0: entered promiscuous mode [ 83.421326][ T6205] syzkaller0: entered allmulticast mode [ 83.620713][ T6235] netlink: 'syz.3.75': attribute type 13 has an invalid length. [ 84.431583][ T6217] syzkaller0: entered promiscuous mode [ 84.437340][ T6217] syzkaller0: entered allmulticast mode [ 84.456032][ T6235] macvtap0: entered allmulticast mode [ 84.461739][ T6235] macvtap0: refused to change device tx_queue_len [ 84.641701][ T6254] netlink: 2 bytes leftover after parsing attributes in process `syz.4.80'. [ 84.737223][ T6262] syzkaller0: entered promiscuous mode [ 84.776233][ T6262] syzkaller0: entered allmulticast mode [ 85.019656][ T6282] netlink: 'syz.3.87': attribute type 3 has an invalid length. [ 85.107425][ T6290] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.108560][ T6289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.182758][ T6276] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.252345][ T6300] netlink: 'syz.4.94': attribute type 22 has an invalid length. [ 85.257414][ T6284] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 85.261908][ T6300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.94'. [ 86.044398][ T6296] netlink: 'syz.1.92': attribute type 4 has an invalid length. [ 86.208162][ T6311] xt_l2tp: invalid flags combination: 0 [ 86.225586][ T6307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.97'. [ 86.234499][ T6307] netlink: 16 bytes leftover after parsing attributes in process `syz.0.97'. [ 86.334241][ T6314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.363498][ T6314] trusted_key: syz.1.99 sent an empty control message without MSG_MORE. [ 86.640543][ T9] cfg80211: failed to load regulatory.db [ 86.959569][ T6352] netlink: 24 bytes leftover after parsing attributes in process `syz.0.108'. [ 87.434414][ T6375] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 87.967461][ T6409] netlink: 'syz.2.126': attribute type 29 has an invalid length. [ 88.059267][ T6409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.126'. [ 88.068995][ T6409] netlink: 20 bytes leftover after parsing attributes in process `syz.2.126'. [ 88.092437][ T6409] geneve2: entered promiscuous mode [ 88.135451][ T6409] geneve2: entered allmulticast mode [ 88.176167][ T6415] syzkaller0: entered promiscuous mode [ 88.181672][ T6415] syzkaller0: entered allmulticast mode [ 88.284811][ T6417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.129'. [ 88.533539][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.134'. [ 88.607583][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.135'. [ 88.671451][ T6444] netlink: get zone limit has 4 unknown bytes [ 88.679623][ T6446] netlink: 64 bytes leftover after parsing attributes in process `syz.1.138'. [ 88.686156][ T6444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.137'. [ 88.740486][ T6444] netlink: 36 bytes leftover after parsing attributes in process `syz.4.137'. [ 88.793132][ T6449] netlink: 'syz.0.139': attribute type 32 has an invalid length. [ 88.803431][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.139'. [ 88.857417][ T6449] bond1: Setting coupled_control to off (0) [ 89.080158][ T6473] 8021q: VLANs not supported on wg2 [ 89.328383][ T6489] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 89.393347][ T6493] netlink: 'syz.3.147': attribute type 3 has an invalid length. [ 89.553355][ T6495] netlink: 'syz.0.150': attribute type 21 has an invalid length. [ 89.966879][ T6531] netlink: 'syz.4.159': attribute type 17 has an invalid length. [ 90.213120][ T6553] Unsupported ieee802154 address type: 0 [ 90.381204][ T6560] block nbd0: Unsupported socket: should be TCP or UNIX. [ 90.469653][ T6569] netlink: 'syz.3.169': attribute type 142 has an invalid length. [ 90.699888][ T6581] netlink: 'syz.1.173': attribute type 21 has an invalid length. [ 91.091761][ T6605] syzkaller0: entered promiscuous mode [ 91.108303][ T6605] syzkaller0: entered allmulticast mode [ 91.120092][ T6605] tipc: Started in network mode [ 91.125367][ T6605] tipc: Node identity 4226d356abec, cluster identity 4711 [ 91.140579][ T6605] tipc: Enabled bearer , priority 0 [ 91.218467][ T6608] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.261875][ T6605] tipc: Resetting bearer [ 91.317687][ T6605] tipc: Disabling bearer [ 91.578627][ T6635] netlink: 'syz.1.182': attribute type 25 has an invalid length. [ 91.587683][ T6638] netlink: 'syz.1.182': attribute type 25 has an invalid length. [ 91.819501][ T6653] vlan2: entered allmulticast mode [ 92.311521][ T5899] IPVS: starting estimator thread 0... [ 92.349407][ T6689] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 92.415477][ T6688] IPVS: using max 41 ests per chain, 98400 per kthread [ 92.537132][ T6703] __nla_validate_parse: 19 callbacks suppressed [ 92.537151][ T6703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.196'. [ 92.722679][ T6714] lo speed is unknown, defaulting to 1000 [ 92.731740][ T6714] lo speed is unknown, defaulting to 1000 [ 92.750476][ T6714] lo speed is unknown, defaulting to 1000 [ 93.149748][ T6743] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 93.346827][ T5906] lo speed is unknown, defaulting to 1000 [ 93.369193][ T6714] infiniband syz2: set down [ 93.387879][ T6714] infiniband syz2: added lo [ 93.406763][ T6714] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 93.419160][ T6714] infiniband syz2: Couldn't open port 1 [ 93.464809][ T6753] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 93.502846][ T6753] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.512152][ T6753] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.516191][ T6714] RDS/IB: syz2: added [ 93.529126][ T6758] netlink: 232 bytes leftover after parsing attributes in process `syz.0.207'. [ 93.536376][ T6714] smc: adding ib device syz2 with port count 1 [ 93.548002][ T6714] smc: ib device syz2 port 1 has no pnetid [ 93.580025][ T6754] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 93.649648][ T5899] lo speed is unknown, defaulting to 1000 [ 93.691846][ T6714] lo speed is unknown, defaulting to 1000 [ 93.731047][ T6767] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 93.746829][ T6766] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 93.763254][ T6767] Cannot find add_set index 0 as target [ 94.010757][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.214'. [ 94.200734][ T6787] tipc: Enabling of bearer rejected, failed to enable media [ 94.227003][ T6790] netlink: 116 bytes leftover after parsing attributes in process `syz.3.217'. [ 94.248637][ T6790] nbd: must specify a device to reconfigure [ 94.285057][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.215'. [ 94.570630][ T6800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.219'. [ 94.604767][ T6714] lo speed is unknown, defaulting to 1000 [ 94.724642][ T6802] syzkaller0: entered promiscuous mode [ 94.730507][ T6802] syzkaller0: entered allmulticast mode [ 95.028299][ T6821] netlink: 12 bytes leftover after parsing attributes in process `syz.0.221'. [ 95.054618][ T6821] netlink: 'syz.0.221': attribute type 1 has an invalid length. [ 95.071544][ T6821] netlink: 'syz.0.221': attribute type 1 has an invalid length. [ 95.088075][ T6821] netlink: 'syz.0.221': attribute type 2 has an invalid length. [ 95.128495][ T6821] netlink: 68 bytes leftover after parsing attributes in process `syz.0.221'. [ 96.464625][ T6714] lo speed is unknown, defaulting to 1000 [ 96.677291][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.225'. [ 97.138104][ T6858] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.225620][ T6714] lo speed is unknown, defaulting to 1000 [ 97.349530][ T6858] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.393736][ T6885] netlink: 165 bytes leftover after parsing attributes in process `syz.1.236'. [ 97.514480][ T6858] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.760354][ T6858] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.888013][ T6902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.242'. [ 97.934534][ T6714] lo speed is unknown, defaulting to 1000 [ 98.040505][ T60] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.060612][ T6913] netlink: 16 bytes leftover after parsing attributes in process `syz.0.244'. [ 98.091162][ T6913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.244'. [ 98.101934][ T60] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.142553][ T60] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.200082][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.371102][ T6928] netlink: 'syz.4.247': attribute type 5 has an invalid length. [ 98.474337][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.248'. [ 98.776486][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.253'. [ 98.954089][ T6966] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 98.994940][ T6967] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.258'. [ 99.173988][ T6975] netlink: 'syz.2.260': attribute type 1 has an invalid length. [ 99.196997][ T6975] 8021q: adding VLAN 0 to HW filter on device bond2 [ 99.259488][ T6981] netlink: 60 bytes leftover after parsing attributes in process `syz.2.261'. [ 99.468588][ T6985] syz_tun: entered allmulticast mode [ 100.500628][ T6993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.265'. [ 100.556671][ T6996] netlink: 16 bytes leftover after parsing attributes in process `syz.4.266'. [ 100.659687][ T7000] netlink: 33 bytes leftover after parsing attributes in process `syz.4.268'. [ 101.827823][ T6957] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 102.070085][ T7013] netlink: 'syz.1.272': attribute type 1 has an invalid length. [ 102.259145][ T7013] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.687426][ T7056] netlink: 'syz.3.282': attribute type 16 has an invalid length. [ 102.963779][ T7074] __nla_validate_parse: 7 callbacks suppressed [ 102.963796][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.286'. [ 103.015750][ T7074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.209437][ T7074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.224611][ T7087] netlink: 20 bytes leftover after parsing attributes in process `syz.3.290'. [ 103.248685][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.291'. [ 103.423874][ T7096] bond3: Removing last arp target with arp_interval on [ 103.653389][ T5822] udevd[5822]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 104.228506][ T7153] netlink: 84 bytes leftover after parsing attributes in process `syz.2.304'. [ 104.255157][ T7153] openvswitch: netlink: Flow actions attr not present in new flow. [ 104.423796][ T7162] team0: Device ip6gre1 is of different type [ 104.434077][ T7167] netlink: 164 bytes leftover after parsing attributes in process `syz.4.306'. [ 104.475044][ T7169] ref_ctr_offset mismatch. inode: 0x28 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 104.609726][ T7173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.311'. [ 104.929538][ T7192] netlink: 80 bytes leftover after parsing attributes in process `syz.2.315'. [ 105.146892][ T7199] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.319'. [ 105.428520][ T7211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.322'. [ 105.633365][ T7226] netlink: 'syz.1.326': attribute type 1 has an invalid length. [ 105.652136][ T7226] netlink: 'syz.1.326': attribute type 2 has an invalid length. [ 105.782498][ T7227] bond1: option miimon: invalid value (18446744073709551585) [ 105.835156][ T7227] bond1: option miimon: allowed values 0 - 2147483647 [ 105.909697][ T7227] bond1 (unregistering): Released all slaves [ 106.521481][ T7270] netlink: 348 bytes leftover after parsing attributes in process `syz.0.339'. [ 106.540351][ T7267] ipvlan2: entered allmulticast mode [ 106.555100][ T7267] batadv_slave_1: entered allmulticast mode [ 106.571878][ T7267] batman_adv: batadv0: Adding interface: ipvlan2 [ 106.585909][ T7267] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.612909][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.624551][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.635160][ T7267] batman_adv: batadv0: Interface activated: ipvlan2 [ 106.902276][ T7286] sctp: [Deprecated]: syz.2.342 (pid 7286) Use of int in max_burst socket option. [ 106.902276][ T7286] Use struct sctp_assoc_value instead [ 106.924379][ T7278] unsupported nlmsg_type 40 [ 106.933031][ T7288] IPVS: length: 239 != 24 [ 107.178065][ T7298] netlink: 'syz.0.349': attribute type 13 has an invalid length. [ 107.207821][ T7298] syz_tun: refused to change device tx_queue_len [ 107.221814][ T7300] tun0: tun_chr_ioctl cmd 1074025675 [ 107.235047][ T7300] tun0: persist disabled [ 107.249020][ T7298] sctp: [Deprecated]: syz.0.349 (pid 7298) Use of struct sctp_assoc_value in delayed_ack socket option. [ 107.249020][ T7298] Use struct sctp_sack_info instead [ 107.270171][ T7309] netlink: 'syz.1.353': attribute type 19 has an invalid length. [ 107.316046][ T3507] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.326335][ T7309] netlink: 'syz.1.353': attribute type 19 has an invalid length. [ 107.339986][ T3507] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.353487][ T3507] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.384023][ T3507] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.487120][ T7315] veth1_to_bond: mtu less than device minimum [ 107.576471][ T7321] netlink: 'syz.4.359': attribute type 1 has an invalid length. [ 107.690090][ T7327] x_tables: duplicate underflow at hook 2 [ 107.749876][ T7329] syz_tun: left allmulticast mode [ 107.951612][ T7346] bond_slave_0: entered promiscuous mode [ 107.957489][ T7346] bond_slave_1: entered promiscuous mode [ 107.977562][ T7346] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 107.988430][ T7352] __nla_validate_parse: 7 callbacks suppressed [ 107.988446][ T7352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.366'. [ 108.006276][ T7346] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 108.038841][ T7343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.366'. [ 108.212512][ T7363] ip6gre1: entered promiscuous mode [ 108.227033][ T7363] ip6gre1: entered allmulticast mode [ 108.268550][ T7371] netlink: 1 bytes leftover after parsing attributes in process `syz.1.373'. [ 108.491797][ T7389] netlink: 'syz.3.376': attribute type 3 has an invalid length. [ 108.508438][ T7389] netlink: 'syz.3.376': attribute type 1 has an invalid length. [ 108.601003][ T7400] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 108.633948][ T7400] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 108.865475][ T7422] netlink: 12 bytes leftover after parsing attributes in process `syz.3.384'. [ 108.878134][ T7414] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 108.887413][ T7422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.384'. [ 108.940195][ T7421] can: request_module (can-proto-3) failed. [ 109.078884][ T7430] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.453417][ T7461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.393'. [ 109.589125][ T7472] netlink: 16 bytes leftover after parsing attributes in process `syz.1.398'. [ 109.649047][ T7478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.400'. [ 109.653961][ T7480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.400'. [ 109.718987][ T7480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.727281][ T7485] netlink: 'syz.4.402': attribute type 32 has an invalid length. [ 109.735025][ T7485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.402'. [ 109.807373][ T7485] bond2: Setting coupled_control to off (0) [ 110.209512][ T7519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.392666][ T7531] x_tables: duplicate underflow at hook 1 [ 110.403865][ T7530] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.456508][ T7534] netlink: 'syz.1.420': attribute type 11 has an invalid length. [ 110.544856][ T7530] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.642680][ T7534] veth1_macvtap: left promiscuous mode [ 110.710005][ T7546] lec:lec_atm_send: lec0: Unknown message type 13 [ 110.742002][ T7534] v+hKt_wif: renamed from macsec0 [ 110.772220][ T7530] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.783648][ T7526] lec:lec_atm_send: lec0: Unknown message type 320 [ 110.844033][ T7551] syzkaller0: entered promiscuous mode [ 110.849806][ T7551] syzkaller0: entered allmulticast mode [ 110.927272][ T7530] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.956717][ T7544] tipc: Started in network mode [ 110.961682][ T7544] tipc: Node identity 5673fd310fdd, cluster identity 4711 [ 110.970817][ T7544] tipc: Enabled bearer , priority 0 [ 110.982229][ T7517] lec:lec_atm_close: lec0: Shut down! [ 111.001124][ T7544] tipc: Resetting bearer [ 111.035814][ T7544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.052094][ T7543] tipc: Resetting bearer [ 111.124601][ T7543] tipc: Disabling bearer [ 111.433982][ T3507] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.470466][ T3507] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.508762][ T7576] ip6gre2: entered promiscuous mode [ 111.605047][ T3507] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.616723][ T3507] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.722546][ T7600] netlink: 'syz.2.436': attribute type 2 has an invalid length. [ 111.798650][ T7603] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 112.009390][ T7614] ipt_REJECT: TCP_RESET invalid for non-tcp [ 112.049627][ T7618] veth1_macvtap: left promiscuous mode [ 112.761419][ T7664] ipip0: entered promiscuous mode [ 112.778410][ T7664] ipip0: entered allmulticast mode [ 112.929084][ T7678] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 112.940375][ T7678] .: renamed from bridge_slave_1 [ 113.009456][ T7678] __nla_validate_parse: 14 callbacks suppressed [ 113.009474][ T7678] netlink: 24 bytes leftover after parsing attributes in process `syz.3.455'. [ 113.116974][ T5490] veth1_macvtap: entered promiscuous mode [ 113.492712][ T7716] siw: device registration error -23 [ 113.650913][ T7729] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.465'. [ 113.669084][ T7729] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 114.016791][ T7748] syzkaller0: entered allmulticast mode [ 114.089627][ T7748] syzkaller0 (unregistering): left allmulticast mode [ 114.282708][ T7771] IPv6: NLM_F_CREATE should be specified when creating new route [ 114.301396][ T7773] netlink: 40 bytes leftover after parsing attributes in process `syz.0.476'. [ 114.384615][ T5490] lec:lec_start_xmit: lec0:No lecd attached [ 114.921483][ T7815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.067812][ T7828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.493'. [ 115.099197][ T7828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.493'. [ 115.148774][ T7828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.493'. [ 115.194368][ T7828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.493'. [ 115.235461][ T7834] netlink: 'syz.1.491': attribute type 1 has an invalid length. [ 115.266276][ T7826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.291168][ T7826] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 115.322866][ T7826] bond0: (slave gre0): Error -95 calling set_mac_address [ 115.383933][ T7834] bond3: entered promiscuous mode [ 115.390181][ T7834] 8021q: adding VLAN 0 to HW filter on device bond3 [ 115.416687][ T7842] bond3: (slave bridge4): making interface the new active one [ 115.424915][ T7842] bridge4: entered promiscuous mode [ 115.433367][ T7842] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 115.477898][ T7847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.497'. [ 115.486975][ T7847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.497'. [ 115.496121][ T7847] netlink: 36 bytes leftover after parsing attributes in process `syz.2.497'. [ 115.969437][ T7879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.032798][ T7879] xfrm1: entered allmulticast mode [ 116.063382][ T7879] netlink: 'syz.1.506': attribute type 21 has an invalid length. [ 116.093911][ T7879] bond4: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 116.108837][ T7879] bond4 (unregistering): Released all slaves [ 116.138913][ T7886] netlink: 'syz.4.509': attribute type 5 has an invalid length. [ 116.228436][ T7898] IPv6: NLM_F_CREATE should be specified when creating new route [ 116.346881][ T7907] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.637748][ T7930] veth0: entered promiscuous mode [ 116.662734][ T7930] veth0: left promiscuous mode [ 117.620929][ T7995] netlink: 'syz.0.531': attribute type 1 has an invalid length. [ 117.729944][ T8011] netlink: 'syz.4.538': attribute type 11 has an invalid length. [ 117.748606][ T8012] netlink: 'syz.4.538': attribute type 11 has an invalid length. [ 118.001240][ T8029] IPVS: set_ctl: invalid protocol: 0 172.30.1.5:20001 [ 118.118274][ T8036] __nla_validate_parse: 14 callbacks suppressed [ 118.118293][ T8036] netlink: 24 bytes leftover after parsing attributes in process `syz.3.543'. [ 118.135051][ T8039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.544'. [ 118.305904][ T8052] netlink: 44 bytes leftover after parsing attributes in process `syz.4.548'. [ 118.370561][ T8052] netlink: 28 bytes leftover after parsing attributes in process `syz.4.548'. [ 118.759751][ T8081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.553'. [ 118.812432][ T8085] netlink: 'syz.1.555': attribute type 1 has an invalid length. [ 119.045269][ T30] audit: type=1804 audit(1770438233.008:2): pid=8097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.558" name="/newroot/110/cgroup.controllers" dev="tmpfs" ino=574 res=1 errno=0 [ 119.077076][ T30] audit: type=1800 audit(1770438233.008:3): pid=8097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.558" name="cgroup.controllers" dev="tmpfs" ino=574 res=0 errno=0 [ 119.119712][ T8110] netlink: 'syz.3.559': attribute type 10 has an invalid length. [ 119.124214][ T8113] netlink: 'syz.1.560': attribute type 10 has an invalid length. [ 119.218216][ T8113] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 119.251796][ T8100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.258086][ T8110] team0: Port device dummy0 added [ 119.449945][ T8130] netlink: 28 bytes leftover after parsing attributes in process `syz.2.564'. [ 119.505509][ T8130] netlink: 28 bytes leftover after parsing attributes in process `syz.2.564'. [ 119.539124][ T30] audit: type=1107 audit(1770438233.508:4): pid=8131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 119.580680][ T8130] netlink: 'syz.2.564': attribute type 2 has an invalid length. [ 119.622531][ T8142] nft_compat: unsupported protocol 0 [ 119.755219][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5370 ms [ 119.763618][ C1] lec:lec_tx_timeout: lec0 [ 119.768693][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 119.829398][ T8154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.570'. [ 119.961961][ T8160] netlink: 256 bytes leftover after parsing attributes in process `syz.1.572'. [ 120.122579][ T8173] netlink: 16 bytes leftover after parsing attributes in process `syz.2.576'. [ 120.174409][ T8171] ipt_REJECT: ECHOREPLY no longer supported. [ 120.247116][ T8176] IPVS: set_ctl: invalid protocol: 143 172.20.20.37:20002 [ 120.570145][ T8199] syz_tun: entered allmulticast mode [ 120.585407][ T8199] ieee802154 phy1 wpan1: encryption failed: -22 [ 120.657704][ T8199] dvmrp8: entered allmulticast mode [ 120.672662][ T8206] dvmrp8: left allmulticast mode [ 120.858810][ T8198] syz_tun: left allmulticast mode [ 121.141026][ T8225] veth3: entered allmulticast mode [ 121.406756][ T8251] siw: device registration error -23 [ 121.670621][ T8264] netlink: 'syz.2.603': attribute type 1 has an invalid length. [ 121.690239][ T8264] netlink: 'syz.2.603': attribute type 1 has an invalid length. [ 122.580011][ T8331] netlink: 'syz.1.626': attribute type 1 has an invalid length. [ 122.888942][ T8350] sctp: [Deprecated]: syz.1.632 (pid 8350) Use of struct sctp_assoc_value in delayed_ack socket option. [ 122.888942][ T8350] Use struct sctp_sack_info instead [ 122.930314][ T8348] syzkaller0: entered promiscuous mode [ 122.935922][ T8348] syzkaller0: entered allmulticast mode [ 123.143574][ T8357] pim6reg527: entered allmulticast mode [ 123.292615][ T8375] __nla_validate_parse: 8 callbacks suppressed [ 123.292637][ T8375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.638'. [ 123.336681][ T8377] netlink: 324 bytes leftover after parsing attributes in process `syz.2.641'. [ 123.434720][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.642'. [ 123.476339][ T8383] netlink: 24 bytes leftover after parsing attributes in process `syz.1.642'. [ 123.486502][ T8388] netlink: 'syz.0.644': attribute type 24 has an invalid length. [ 123.572450][ T8395] netlink: 16 bytes leftover after parsing attributes in process `syz.4.645'. [ 123.657020][ T8386] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 123.834242][ T8409] dummy0: entered promiscuous mode [ 123.842796][ T8409] macsec1: entered promiscuous mode [ 123.852965][ T8409] macsec1: entered allmulticast mode [ 123.861245][ T8409] dummy0: entered allmulticast mode [ 123.873242][ T8410] netlink: 164 bytes leftover after parsing attributes in process `syz.0.652'. [ 124.477768][ T8448] ip6t_srh: unknown srh invflags 4000 [ 124.513472][ T8452] netlink: 32 bytes leftover after parsing attributes in process `syz.3.662'. [ 124.730261][ T8468] netlink: 'syz.3.666': attribute type 11 has an invalid length. [ 124.738652][ T8468] netlink: 'syz.3.666': attribute type 11 has an invalid length. [ 124.747450][ T8468] netlink: 224 bytes leftover after parsing attributes in process `syz.3.666'. [ 124.775202][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 124.783286][ C1] lec:lec_tx_timeout: lec0 [ 124.788182][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 124.878806][ T8470] veth5: entered allmulticast mode [ 124.889687][ T8473] openvswitch: netlink: IPv4 tunnel dst address is zero [ 124.901239][ T8470] netlink: 'syz.1.668': attribute type 1 has an invalid length. [ 125.147275][ T8489] tipc: Started in network mode [ 125.176403][ T8489] tipc: Node identity 9acdaec91dd9, cluster identity 4711 [ 125.213669][ T8489] tipc: Enabled bearer , priority 0 [ 125.338957][ T8489] syzkaller0: entered promiscuous mode [ 125.351331][ T8489] syzkaller0: entered allmulticast mode [ 125.368922][ T8489] tipc: Resetting bearer [ 125.389610][ T8509] pim6reg: entered allmulticast mode [ 125.456444][ T8489] tipc: Resetting bearer [ 125.771633][ T8526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.680'. [ 126.052610][ T8533] openvswitch: netlink: Tunnel attr 32 out of range max 16 [ 126.947368][ T8489] tipc: Disabling bearer [ 126.956893][ T8521] tipc: Started in network mode [ 126.961829][ T8521] tipc: Node identity ea256dcde46a, cluster identity 4711 [ 126.969657][ T8521] tipc: Enabled bearer , priority 0 [ 127.112056][ T43] tipc: Node number set to 2266279625 [ 127.123239][ T8543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.684'. [ 127.282486][ T8555] openvswitch: netlink: Message has 8 unknown bytes. [ 127.309831][ T8555] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.344377][ T8556] netlink: 'syz.1.684': attribute type 1 has an invalid length. [ 127.386918][ T8551] openvswitch: netlink: Unknown key attributes 2 [ 127.631322][ T8579] sctp: [Deprecated]: syz.3.695 (pid 8579) Use of struct sctp_assoc_value in delayed_ack socket option. [ 127.631322][ T8579] Use struct sctp_sack_info instead [ 127.632566][ T8577] netlink: 'syz.4.694': attribute type 1 has an invalid length. [ 127.676736][ T8579] sctp: [Deprecated]: syz.3.695 (pid 8579) Use of int in max_burst socket option deprecated. [ 127.676736][ T8579] Use struct sctp_assoc_value instead [ 127.911895][ T8601] netlink: 'syz.0.699': attribute type 1 has an invalid length. [ 127.936736][ T8595] GUP no longer grows the stack in syz.3.698 (8595): 200000003000-20000000a000 (200000001000) [ 127.975256][ T8595] CPU: 1 UID: 0 PID: 8595 Comm: syz.3.698 Not tainted syzkaller #0 PREEMPT(full) [ 127.975284][ T8595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 127.975303][ T8595] Call Trace: [ 127.975311][ T8595] [ 127.975324][ T8595] dump_stack_lvl+0xe8/0x150 [ 127.975362][ T8595] __get_user_pages+0x2453/0x29d0 [ 127.975412][ T8595] ? __gup_longterm_locked+0xc4e/0x1630 [ 127.975438][ T8595] ? down_read_killable+0x1bb/0x340 [ 127.975461][ T8595] ? try_get_folio+0xec/0x650 [ 127.975491][ T8595] __gup_longterm_locked+0xdcf/0x1630 [ 127.975543][ T8595] gup_fast_fallback+0x1d82/0x22e0 [ 127.975601][ T8595] ? __pfx_gup_fast_fallback+0x10/0x10 [ 127.975629][ T8595] ? is_valid_gup_args+0x11f/0x200 [ 127.975656][ T8595] ? get_user_pages_fast+0x4d/0xb0 [ 127.975683][ T8595] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 127.975719][ T8595] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 127.975747][ T8595] iov_iter_get_pages2+0x5e/0xa0 [ 127.975777][ T8595] __se_sys_vmsplice+0x7b3/0x1490 [ 127.975817][ T8595] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 127.975841][ T8595] ? __pfx_futex_wake+0x10/0x10 [ 127.975866][ T8595] ? lockdep_hardirqs_on+0x7a/0x110 [ 127.975944][ T8595] do_syscall_64+0xe2/0xf80 [ 127.975964][ T8595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.975981][ T8595] ? trace_irq_disable+0x37/0x100 [ 127.975998][ T8595] ? clear_bhb_loop+0x60/0xb0 [ 127.976020][ T8595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.976038][ T8595] RIP: 0033:0x7f195139aeb9 [ 127.976067][ T8595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.976083][ T8595] RSP: 002b:00007f1952199028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 127.976111][ T8595] RAX: ffffffffffffffda RBX: 00007f1951615fa0 RCX: 00007f195139aeb9 [ 127.976126][ T8595] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 127.976138][ T8595] RBP: 00007f1951408c1f R08: 0000000000000000 R09: 0000000000000000 [ 127.976149][ T8595] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 127.976160][ T8595] R13: 00007f1951616038 R14: 00007f1951615fa0 R15: 00007ffcd11ae7f8 [ 127.976189][ T8595] [ 128.031502][ T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 128.221953][ T5876] tipc: Node number set to 240086477 [ 128.270350][ T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x6c [ 128.339049][ T8631] __nla_validate_parse: 6 callbacks suppressed [ 128.339067][ T8631] netlink: 44 bytes leftover after parsing attributes in process `syz.2.706'. [ 128.376687][ T8625] 8021q: adding VLAN 0 to HW filter on device bond4 [ 128.397401][ T8602] netlink: 20 bytes leftover after parsing attributes in process `syz.1.701'. [ 128.788493][ T8651] policy can only be matched on NF_INET_PRE_ROUTING [ 128.788517][ T8651] unable to load match [ 128.843683][ T8650] netlink: 'syz.3.709': attribute type 1 has an invalid length. [ 128.867182][ T8650] netlink: 'syz.3.709': attribute type 3 has an invalid length. [ 128.874853][ T8650] netlink: 224 bytes leftover after parsing attributes in process `syz.3.709'. [ 128.910147][ T8663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.713'. [ 128.962200][ T8667] netlink: 'syz.4.714': attribute type 9 has an invalid length. [ 128.992221][ T8667] netlink: 188 bytes leftover after parsing attributes in process `syz.4.714'. [ 129.018178][ T8671] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 129.026354][ T8667] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 129.064055][ T8667] netlink: 'syz.4.714': attribute type 24 has an invalid length. [ 129.192792][ T8680] netlink: 6 bytes leftover after parsing attributes in process `syz.2.716'. [ 129.646453][ T8700] Driver unsupported XDP return value 0 on prog (id 140) dev N/A, expect packet loss! [ 129.795462][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 129.803531][ C1] lec:lec_tx_timeout: lec0 [ 129.808591][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 129.952263][ T8734] netlink: 44 bytes leftover after parsing attributes in process `syz.0.729'. [ 130.035831][ T8740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.729'. [ 130.080906][ T8744] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 130.088852][ T8743] netlink: 40 bytes leftover after parsing attributes in process `syz.4.730'. [ 130.103722][ T8740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.729'. [ 130.247501][ T8754] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 130.279409][ T8759] netlink: 'syz.4.735': attribute type 20 has an invalid length. [ 130.296737][ T8759] IPv6: NLM_F_CREATE should be specified when creating new route [ 130.720222][ T8771] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.737386][ T8771] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.763559][ T8771] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 46425 - 0 [ 130.837672][ T8781] netlink: 'syz.0.738': attribute type 7 has an invalid length. [ 130.920126][ T8771] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.941482][ T8771] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.952475][ T8771] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 46425 - 0 [ 131.060119][ T8771] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.073948][ T8771] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.087075][ T8771] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 46425 - 0 [ 131.168139][ T8771] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.179723][ T8771] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.190457][ T8771] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 46425 - 0 [ 131.271517][ T7148] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.280471][ T7148] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 46425 - 0 [ 131.289040][ T7148] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 131.304309][ T7148] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.313103][ T7148] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 46425 - 0 [ 131.321669][ T7148] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 131.360915][ T7148] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.369521][ T7148] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 46425 - 0 [ 131.379228][ T7148] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 131.387946][ T7148] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.396333][ T7148] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 46425 - 0 [ 131.404907][ T7148] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 132.303940][ T8828] : renamed from hsr0 (while UP) [ 132.729576][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.654913][ T8789] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 133.787765][ T8831] __nla_validate_parse: 2 callbacks suppressed [ 133.787783][ T8831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.755'. [ 133.837672][ T8837] netlink: 'syz.3.752': attribute type 9 has an invalid length. [ 133.848253][ T8831] netlink: 56 bytes leftover after parsing attributes in process `syz.1.755'. [ 133.866091][ T8831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.755'. [ 133.923074][ T8832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.755'. [ 133.948273][ T8832] netlink: 56 bytes leftover after parsing attributes in process `syz.1.755'. [ 133.959589][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.755'. [ 133.969156][ T8831] lo: entered promiscuous mode [ 133.986204][ T8831] netlink: 'syz.1.755': attribute type 2 has an invalid length. [ 134.005067][ T8831] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 134.042472][ T8850] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 134.351438][ T8873] netlink: 84 bytes leftover after parsing attributes in process `syz.1.761'. [ 134.398223][ T8872] netlink: 44 bytes leftover after parsing attributes in process `syz.2.762'. [ 134.493235][ T8881] Unsupported ieee802154 address type: 0 [ 134.815256][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 134.823281][ C1] lec:lec_tx_timeout: lec0 [ 134.827951][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 134.844747][ T8901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.769'. [ 134.908386][ T8907] netlink: 'syz.3.772': attribute type 1 has an invalid length. [ 134.999922][ T8907] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 135.047384][ T8921] netlink: 64 bytes leftover after parsing attributes in process `syz.0.771'. [ 135.191800][ T8918] bond5: option arp_validate: invalid value (16776704) [ 135.250924][ T8918] bond5 (unregistering): Released all slaves [ 135.298445][ T8937] team_slave_1: mtu less than device minimum [ 135.359766][ T8935] raw_sendmsg: syz.3.775 forgot to set AF_INET. Fix it! [ 135.363992][ T8913] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 135.394596][ T8913] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 135.520258][ T8949] netlink: 'syz.3.778': attribute type 11 has an invalid length. [ 135.527195][ T8950] xt_policy: neither incoming nor outgoing policy selected [ 136.170145][ T8989] xt_hashlimit: max too large, truncated to 1048576 [ 136.181380][ T8994] netlink: 'syz.2.789': attribute type 39 has an invalid length. [ 136.695881][ T9024] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.953385][ T9040] x_tables: duplicate underflow at hook 3 [ 137.399451][ T9069] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 137.500129][ T9071] tipc: Trying to set illegal importance in message [ 137.557184][ T9074] syzkaller0: entered promiscuous mode [ 137.568499][ T9074] syzkaller0: entered allmulticast mode [ 137.654597][ T9074] veth7: entered allmulticast mode [ 137.953164][ T9104] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 138.077697][ T9089] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.085590][ T9089] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.121827][ T9089] bond_slave_0: left promiscuous mode [ 138.128114][ T9089] bond_slave_1: left promiscuous mode [ 138.359072][ T9089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.395495][ T9089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.751183][ T9089] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 138.878242][ T36] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.890489][ T36] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.910447][ T36] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.929662][ T36] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.973695][ T36] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.010047][ T36] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.025337][ T36] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.055263][ T36] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.102201][ T9127] netlink: 'syz.1.831': attribute type 9 has an invalid length. [ 139.145556][ T9124] __nla_validate_parse: 12 callbacks suppressed [ 139.145574][ T9124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.830'. [ 139.184755][ T9127] netlink: 'syz.1.831': attribute type 11 has an invalid length. [ 139.214841][ T9127] netlink: 'syz.1.831': attribute type 12 has an invalid length. [ 139.223447][ T9127] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.831'. [ 139.233756][ T9127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.831'. [ 139.329699][ T9144] xt_CONNSECMARK: invalid mode: 0 [ 139.459064][ T9157] netlink: 'syz.2.841': attribute type 16 has an invalid length. [ 139.467528][ T9157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.841'. [ 139.551947][ T9164] netlink: 16 bytes leftover after parsing attributes in process `syz.4.842'. [ 139.583106][ T9169] netlink: 56 bytes leftover after parsing attributes in process `syz.2.844'. [ 139.661806][ T9175] netlink: 24 bytes leftover after parsing attributes in process `syz.2.844'. [ 139.672222][ T9175] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 139.685401][ T9175] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 139.779064][ T9185] netlink: 24 bytes leftover after parsing attributes in process `syz.4.848'. [ 139.822078][ T9182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.847'. [ 139.835282][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 139.843326][ C1] lec:lec_tx_timeout: lec0 [ 139.848166][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 139.873402][ T9191] netlink: 20 bytes leftover after parsing attributes in process `syz.4.849'. [ 139.943313][ T9182] team0: Port device team_slave_0 removed [ 139.980738][ T9195] gre1: entered promiscuous mode [ 139.987396][ T9195] gre1: entered allmulticast mode [ 140.603790][ T9227] sctp: [Deprecated]: syz.3.857 (pid 9227) Use of int in max_burst socket option deprecated. [ 140.603790][ T9227] Use struct sctp_assoc_value instead [ 140.671255][ T9233] lo: left promiscuous mode [ 141.103708][ T9233] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.423324][ T9233] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 141.498778][ T9243] erspan0: entered promiscuous mode [ 141.514374][ T9243] erspan0: entered allmulticast mode [ 141.556408][ T9271] x9: renamed from bridge_slave_0 [ 141.596881][ T5834] Bluetooth: hci3: command tx timeout [ 141.668743][ T9277] sctp: [Deprecated]: syz.2.866 (pid 9277) Use of struct sctp_assoc_value in delayed_ack socket option. [ 141.668743][ T9277] Use struct sctp_sack_info instead [ 141.711489][ T9282] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 141.732382][ T9276] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 142.015300][ T9286] team0: Port device team_slave_0 removed [ 142.182854][ T9309] netlink: 'syz.2.876': attribute type 1 has an invalid length. [ 142.192996][ T9312] netlink: 'syz.2.876': attribute type 1 has an invalid length. [ 142.233963][ T9312] netlink: 'syz.2.876': attribute type 1 has an invalid length. [ 142.266130][ T9309] netlink: 'syz.2.876': attribute type 1 has an invalid length. [ 142.489715][ T9332] netlink: 'syz.4.883': attribute type 21 has an invalid length. [ 142.502811][ T9332] netlink: 'syz.4.883': attribute type 22 has an invalid length. [ 142.651617][ T9337] lo speed is unknown, defaulting to 1000 [ 143.094526][ T9365] netlink: zone id is out of range [ 143.110085][ T9365] netlink: zone id is out of range [ 143.130714][ T9365] netlink: zone id is out of range [ 143.151296][ T9365] netlink: zone id is out of range [ 143.199908][ T9365] netlink: zone id is out of range [ 143.221084][ T9365] netlink: zone id is out of range [ 143.233633][ T9365] netlink: zone id is out of range [ 143.247019][ T9365] netlink: set zone limit has 4 unknown bytes [ 144.172284][ T9405] syzkaller1: entered promiscuous mode [ 144.186084][ T9405] syzkaller1: entered allmulticast mode [ 144.260831][ T9427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.272459][ T9427] __nla_validate_parse: 17 callbacks suppressed [ 144.272475][ T9427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'. [ 144.298482][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'. [ 144.367802][ T9436] tipc: Enabling of bearer rejected, already enabled [ 144.407857][ T9436] +: renamed from syzkaller0 [ 144.420541][ T9436] tipc: Disabling bearer [ 144.788957][ T9468] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 144.855223][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 144.863279][ C1] lec:lec_tx_timeout: lec0 [ 144.869570][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 145.142095][ T9497] validate_nla: 2 callbacks suppressed [ 145.142113][ T9497] netlink: 'syz.2.932': attribute type 1 has an invalid length. [ 145.168053][ T9499] netlink: 56 bytes leftover after parsing attributes in process `syz.1.933'. [ 145.226919][ T9501] netlink: 'syz.4.934': attribute type 3 has an invalid length. [ 145.251765][ T9501] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 145.273448][ T9506] netlink: 'syz.2.936': attribute type 10 has an invalid length. [ 145.301391][ T9506] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 145.312748][ T9506] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 145.328349][ T9504] bond0: entered promiscuous mode [ 145.333514][ T9504] bond_slave_0: entered promiscuous mode [ 145.346629][ T9504] bond_slave_1: entered promiscuous mode [ 145.380253][ T9506] netlink: 'syz.2.936': attribute type 1 has an invalid length. [ 145.399601][ T9515] netlink: 'syz.4.938': attribute type 6 has an invalid length. [ 145.661752][ T9531] netlink: 16 bytes leftover after parsing attributes in process `syz.0.942'. [ 145.672718][ T9531] netlink: 32 bytes leftover after parsing attributes in process `syz.0.942'. [ 145.691655][ T9531] gretap1: entered promiscuous mode [ 145.697300][ T9531] gretap1: entered allmulticast mode [ 145.707685][ T9534] netlink: 16 bytes leftover after parsing attributes in process `syz.0.942'. [ 145.717958][ T9534] netlink: 32 bytes leftover after parsing attributes in process `syz.0.942'. [ 145.863240][ T9541] ipt_rpfilter: unknown options [ 145.964684][ T9550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.946'. [ 146.099005][ T9560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.144190][ T9562] netlink: 'syz.3.948': attribute type 5 has an invalid length. [ 146.168602][ T9560] netlink: 'syz.1.945': attribute type 2 has an invalid length. [ 146.185524][ T9560] netlink: 244 bytes leftover after parsing attributes in process `syz.1.945'. [ 146.427303][ T9578] net_ratelimit: 1 callbacks suppressed [ 146.427319][ T9578] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.453580][ T9581] netlink: 'syz.2.952': attribute type 1 has an invalid length. [ 146.469994][ T9574] netlink: 224 bytes leftover after parsing attributes in process `syz.3.951'. [ 147.830108][ T9657] siw: device registration error -23 [ 148.758287][ T9650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.947588][ T9672] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 148.997084][ T9684] siw: device registration error -23 [ 149.201595][ T9705] syzkaller1: entered promiscuous mode [ 149.207229][ T9705] syzkaller1: entered allmulticast mode [ 149.224231][ T9705] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 149.237579][ T9705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.248070][ T9705] hsr0: entered allmulticast mode [ 149.253100][ T9705] hsr_slave_0: entered allmulticast mode [ 149.259574][ T9705] hsr_slave_1: entered allmulticast mode [ 149.269428][ T9705] tipc: Enabled bearer , priority 0 [ 149.531766][ T9728] __nla_validate_parse: 12 callbacks suppressed [ 149.531783][ T9728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.993'. [ 149.549731][ T9728] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 149.578658][ T9734] netlink: 32 bytes leftover after parsing attributes in process `syz.4.994'. [ 149.647719][ T9738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.995'. [ 149.743430][ T9744] netlink: 'syz.4.997': attribute type 2 has an invalid length. [ 149.751883][ T9744] netlink: 'syz.4.997': attribute type 1 has an invalid length. [ 149.784856][ T9744] ipt_ECN: cannot use operation on non-tcp rule [ 149.885191][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 149.893257][ C1] lec:lec_tx_timeout: lec0 [ 149.900926][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 149.991930][ T9699] tipc: Disabling bearer [ 150.310332][ T9784] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 150.399126][ T9788] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1010'. [ 150.485498][ T9797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1014'. [ 150.519134][ T9797] 8021q: adding VLAN 0 to HW filter on device bond4 [ 150.611783][ T9807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1016'. [ 153.158797][ T9772] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 153.480550][ T9826] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 153.506117][ T9828] x_tables: duplicate underflow at hook 2 [ 153.506662][ T9822] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1019'. [ 153.556703][ T9826] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 153.754719][ T9849] validate_nla: 1 callbacks suppressed [ 153.754734][ T9849] netlink: 'syz.1.1026': attribute type 2 has an invalid length. [ 153.770193][ T9847] IPv6: NLM_F_REPLACE set, but no existing node found! [ 153.802987][ T9853] IPv6: NLM_F_REPLACE set, but no existing node found! [ 153.837585][ T9849] netlink: 'syz.1.1026': attribute type 1 has an invalid length. [ 154.008273][ T9861] virt_wifi0 speed is unknown, defaulting to 1000 [ 154.020440][ T9861] virt_wifi0 speed is unknown, defaulting to 1000 [ 154.047200][ T9861] virt_wifi0 speed is unknown, defaulting to 1000 [ 154.047320][ T9865] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 154.084613][ T9861] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 154.106860][ T9874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1036'. [ 154.120544][ T9865] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 154.153856][ T9874] tipc: Enabled bearer , priority 0 [ 154.170772][ T9871] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 154.203616][ T9874] syzkaller0: entered promiscuous mode [ 154.225415][ T9874] syzkaller0: entered allmulticast mode [ 154.235446][ T9861] virt_wifi0 speed is unknown, defaulting to 1000 [ 154.260606][ T9867] tipc: Resetting bearer [ 154.271164][ T9861] virt_wifi0 speed is unknown, defaulting to 1000 [ 154.278063][ T9866] tipc: Resetting bearer [ 154.286821][ T9883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1040'. [ 154.305493][ T9866] tipc: Disabling bearer [ 154.315090][ T9861] virt_wifi0 speed is unknown, defaulting to 1000 [ 154.321879][ T9883] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 154.334410][ T9883] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 154.343129][ T9883] gretap1: entered promiscuous mode [ 154.356392][ T9883] gretap1: entered allmulticast mode [ 154.365898][ T9861] virt_wifi0 speed is unknown, defaulting to 1000 [ 154.374193][ T9861] virt_wifi0 speed is unknown, defaulting to 1000 [ 154.665075][ T9907] netlink: 'syz.4.1048': attribute type 11 has an invalid length. [ 154.700100][ T9907] netlink: 'syz.4.1048': attribute type 11 has an invalid length. [ 154.714670][ T9907] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1048'. [ 154.716882][ T9912] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1052'. [ 154.913175][ T9925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1053'. [ 154.915199][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 154.930114][ C1] lec:lec_tx_timeout: lec0 [ 154.935341][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 154.959815][ T9925] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 155.130528][ T9929] can: request_module (can-proto-4) failed. [ 155.200039][ T9946] netlink: 'syz.1.1058': attribute type 1 has an invalid length. [ 155.248178][ T9943] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1057'. [ 155.570807][ T9973] netlink: 'syz.1.1065': attribute type 1 has an invalid length. [ 155.658159][ T9973] 8021q: adding VLAN 0 to HW filter on device bond7 [ 155.716438][ T9982] netlink: 'syz.4.1066': attribute type 1 has an invalid length. [ 155.724203][ T9982] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1066'. [ 155.982695][ T9998] openvswitch: netlink: IP tunnel dst address not specified [ 156.022422][T10000] netlink: 'syz.2.1070': attribute type 1 has an invalid length. [ 156.114800][T10008] PKCS7: Unknown OID: [4] (bad) [ 156.132682][T10008] PKCS7: Only support pkcs7_signedData type [ 156.146830][T10000] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 156.173766][T10012] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 156.328393][T10023] netlink: 'syz.2.1074': attribute type 21 has an invalid length. [ 156.396390][T10023] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1074'. [ 156.458720][T10023] netlink: 'syz.2.1074': attribute type 5 has an invalid length. [ 156.472860][T10023] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1074'. [ 156.496865][T10030] netlink: 'syz.2.1074': attribute type 21 has an invalid length. [ 156.520331][T10030] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1074'. [ 156.554819][T10033] team0: Device gtp0 is up. Set it down before adding it as a team port [ 156.642904][T10030] netlink: 'syz.2.1074': attribute type 5 has an invalid length. [ 156.647170][T10041] netlink: 408 bytes leftover after parsing attributes in process `syz.3.1077'. [ 156.662674][T10030] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1074'. [ 156.827580][T10036] syzkaller1: entered promiscuous mode [ 157.342242][T10087] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 158.329767][T10106] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 158.571119][T10124] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 158.947578][T10171] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 158.994483][T10170] ipvlan2: entered promiscuous mode [ 159.194364][T10185] team0 (unregistering): Port device team_slave_0 removed [ 159.196876][T10189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.238553][T10185] team0 (unregistering): Port device team_slave_1 removed [ 159.282507][T10189] validate_nla: 4 callbacks suppressed [ 159.282522][T10189] netlink: 'syz.4.1121': attribute type 2 has an invalid length. [ 159.357749][T10202] netlink: 'syz.2.1126': attribute type 1 has an invalid length. [ 159.384741][T10200] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 159.396226][T10200] bond8 (unregistering): Released all slaves [ 159.427838][T10202] bond7: entered promiscuous mode [ 159.433266][T10202] 8021q: adding VLAN 0 to HW filter on device bond7 [ 159.462200][T10202] bond7: (slave bridge2): making interface the new active one [ 159.487801][T10202] bridge2: entered promiscuous mode [ 159.509191][T10202] bridge2: left promiscuous mode [ 159.596057][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 159.818537][T10233] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 159.855510][T10233] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 160.266316][T10251] nbd0: detected capacity change from 0 to 127 [ 160.282207][T10272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.293924][ T5834] block nbd0: Receive control failed (result -104) [ 160.506412][T10282] netlink: 'syz.3.1144': attribute type 1 has an invalid length. [ 160.539050][T10284] __nla_validate_parse: 7 callbacks suppressed [ 160.539069][T10284] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1143'. [ 160.715337][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 160.723426][ C1] lec:lec_tx_timeout: lec0 [ 160.728507][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 160.831852][T10300] syzkaller0: entered promiscuous mode [ 160.838682][T10300] syzkaller0: entered allmulticast mode [ 160.844447][T10304] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 160.893911][T10307] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1150'. [ 161.082526][T10319] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1151'. [ 161.335895][T10333] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1156'. [ 161.678382][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 162.321654][T10333] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.364109][T10345] Cannot find del_set index 4 as target [ 162.460271][T10349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1160'. [ 162.500016][T10349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1160'. [ 162.524461][T10352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1160'. [ 162.554682][T10352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1160'. [ 162.665030][T10363] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1164'. [ 162.672862][T10365] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1165'. [ 162.686074][T10363] netlink: 'syz.2.1164': attribute type 6 has an invalid length. [ 162.697271][T10363] netlink: 'syz.2.1164': attribute type 5 has an invalid length. [ 162.700489][T10365] netlink: 'syz.4.1165': attribute type 1 has an invalid length. [ 162.785648][T10365] 8021q: adding VLAN 0 to HW filter on device bond4 [ 162.811528][T10369] bond4: (slave geneve2): making interface the new active one [ 162.823298][T10369] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 163.034435][T10386] bond_slave_0: Device is already in use. [ 163.962476][T10433] netlink: 'syz.0.1186': attribute type 1 has an invalid length. [ 164.065674][T10433] 8021q: adding VLAN 0 to HW filter on device bond5 [ 164.242081][T10435] 8021q: adding VLAN 0 to HW filter on device bond5 [ 164.264837][T10435] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 164.287275][T10435] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 164.402024][T10433] veth5: entered promiscuous mode [ 164.412532][T10433] bond5: (slave veth5): Enslaving as an active interface with a down link [ 164.718182][T10438] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 165.512472][T10506] xt_hashlimit: size too large, truncated to 1048576 [ 165.531611][T10511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.697323][T10521] __nla_validate_parse: 107 callbacks suppressed [ 165.697342][T10521] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1209'. [ 165.725601][T10520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1208'. [ 165.755358][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 165.763432][ C1] lec:lec_tx_timeout: lec0 [ 165.768906][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 165.866486][T10531] netlink: 'syz.4.1212': attribute type 83 has an invalid length. [ 165.910317][T10531] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1212'. [ 165.964962][T10535] netlink: 59 bytes leftover after parsing attributes in process `syz.4.1212'. [ 166.084167][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 166.133853][T10536] bridge0: port 3(veth0_to_bridge) entered blocking state [ 166.174856][T10536] bridge0: port 3(veth0_to_bridge) entered disabled state [ 166.213056][T10536] veth0_to_bridge: entered allmulticast mode [ 166.233491][T10536] veth0_to_bridge: entered promiscuous mode [ 166.273429][T10536] bridge0: port 3(veth0_to_bridge) entered blocking state [ 166.281110][T10536] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 166.541477][T10575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1223'. [ 166.872835][T10600] netlink: 'syz.3.1233': attribute type 2 has an invalid length. [ 166.882799][T10600] netlink: 'syz.3.1233': attribute type 1 has an invalid length. [ 166.891165][T10601] netlink: 'syz.0.1232': attribute type 1 has an invalid length. [ 166.899722][T10601] netlink: 'syz.0.1232': attribute type 2 has an invalid length. [ 166.957416][T10601] team0 (unregistering): Port device team_slave_0 removed [ 166.984047][T10601] team0 (unregistering): Port device team_slave_1 removed [ 167.197273][T10609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1236'. [ 167.206303][T10609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1236'. [ 167.230800][T10609] IPVS: set_ctl: invalid protocol: 9767 10.1.1.2:20001 [ 167.399077][T10634] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1242'. [ 167.661034][T10650] netlink: 'syz.4.1246': attribute type 7 has an invalid length. [ 167.670241][T10649] netlink: 'syz.0.1247': attribute type 1 has an invalid length. [ 167.685419][T10649] netlink: 'syz.0.1247': attribute type 2 has an invalid length. [ 167.716121][T10650] lo: entered promiscuous mode [ 167.717371][T10649] netlink: 'syz.0.1247': attribute type 1 has an invalid length. [ 167.721131][T10650] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.838239][T10663] netlink: 'syz.0.1251': attribute type 21 has an invalid length. [ 167.922621][T10663] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1251'. [ 168.006004][T10663] netlink: 452 bytes leftover after parsing attributes in process `syz.0.1251'. [ 168.236506][ T5834] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 168.242851][ T5146] Bluetooth: hci0: command 0x0c1a tx timeout [ 169.073730][T10676] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 169.087429][T10676] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 169.327395][T10691] --map-set only usable from mangle table [ 170.785231][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 170.793303][ C1] lec:lec_tx_timeout: lec0 [ 170.798663][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 171.367853][T10785] syzkaller1: entered promiscuous mode [ 171.378913][T10785] syzkaller1: entered allmulticast mode [ 171.700257][T10811] x_tables: unsorted entry at hook 3 [ 171.886279][T10826] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1290'. [ 171.953386][T10832] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1292'. [ 171.996590][T10834] validate_nla: 1 callbacks suppressed [ 171.996606][T10834] netlink: 'syz.1.1293': attribute type 3 has an invalid length. [ 172.042805][T10838] netlink: 'syz.0.1294': attribute type 10 has an invalid length. [ 172.044900][T10834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1293'. [ 172.108137][T10837] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1295'. [ 172.141761][T10843] xt_SECMARK: invalid mode: 9 [ 172.191749][T10845] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1295'. [ 172.218577][T10837] team0 (unregistering): Port device team_slave_0 removed [ 172.239932][T10837] team0 (unregistering): Port device team_slave_1 removed [ 172.368115][T10856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1300'. [ 172.723618][T10874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1301'. [ 172.736238][T10868] netlink: 'syz.3.1300': attribute type 1 has an invalid length. [ 173.357270][ T6017] page_pool_release_retry() stalled pool shutdown: id 28, 1 inflight 60 sec [ 173.450713][T10870] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 174.207500][T10910] tipc: Enabling of bearer rejected, failed to enable media [ 174.444904][T10909] bond0: entered promiscuous mode [ 174.458182][T10909] bond_slave_0: entered promiscuous mode [ 174.464395][T10909] bond_slave_1: entered promiscuous mode [ 174.471340][T10909] bond0: entered allmulticast mode [ 174.477266][T10909] bond_slave_0: entered allmulticast mode [ 174.483080][T10909] bond_slave_1: entered allmulticast mode [ 174.511351][T10919] pimreg: entered allmulticast mode [ 175.292198][T10939] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1318'. [ 175.664731][T10948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1320'. [ 175.805221][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 175.813302][ C1] lec:lec_tx_timeout: lec0 [ 175.818860][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 177.107457][T10962] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1325'. [ 177.361530][T10971] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1328'. [ 177.372988][T10971] 8021q: VLANs not supported on ip_vti0 [ 177.587734][T10977] netlink: 211664 bytes leftover after parsing attributes in process `syz.0.1330'. [ 177.599139][T10977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1330'. [ 177.875996][T10982] syzkaller1: entered promiscuous mode [ 177.881504][T10982] syzkaller1: entered allmulticast mode [ 178.415385][T10986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1332'. [ 178.502382][T10992] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1335'. [ 178.837158][T11006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1337'. [ 178.937903][T11008] openvswitch: netlink: IP tunnel dst address not specified [ 179.580770][T11029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1344'. [ 180.523903][T11033] x_tables: duplicate underflow at hook 3 [ 180.583751][T11034] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1345'. [ 180.632592][T11010] lo speed is unknown, defaulting to 1000 [ 180.825250][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 180.833334][ C1] lec:lec_tx_timeout: lec0 [ 180.838204][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 181.084802][T11040] 8021q: adding VLAN 0 to HW filter on device bond5 [ 181.112040][T11010] virt_wifi0 speed is unknown, defaulting to 1000 [ 181.801373][T11060] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 183.225216][ C0] sched: DL replenish lagged too much [ 185.845473][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 185.853541][ C1] lec:lec_tx_timeout: lec0 [ 185.858479][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 186.085778][T11093] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1357'. [ 186.767386][T11076] veth0_to_bond: entered allmulticast mode [ 186.830165][T11077] lo speed is unknown, defaulting to 1000 [ 187.013902][T11103] geneve2: entered promiscuous mode [ 187.035893][T11103] geneve2: entered allmulticast mode [ 187.391401][ T60] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 187.429700][ T60] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 187.466211][ T60] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 187.516107][ T60] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 187.524973][T11077] virt_wifi0 speed is unknown, defaulting to 1000 [ 187.709286][T11113] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1362'. [ 187.909435][T11118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1363'. [ 187.986670][T11121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1363'. [ 188.017479][T11121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1363'. [ 188.162140][T11118] bond8: entered promiscuous mode [ 188.170465][T11118] 8021q: adding VLAN 0 to HW filter on device bond8 [ 188.227809][T11125] bond8: (slave xfrm1): refused to change device type [ 189.138666][T11134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1366'. [ 189.522131][T11148] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1369'. [ 189.600016][T11152] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1370'. [ 189.609533][T11152] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1370'. [ 189.993901][T11152] gretap0: entered promiscuous mode [ 190.019083][T11152] gretap0: left promiscuous mode [ 190.865427][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 190.873508][ C1] lec:lec_tx_timeout: lec0 [ 190.879439][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 190.941770][ T1077] block nbd0: Possible stuck request ffff888025848000: control (read@0,1024B). Runtime 30 seconds [ 190.968148][ T1077] block nbd0: Possible stuck request ffff888025848200: control (read@1024,1024B). Runtime 30 seconds [ 190.993568][ T1077] block nbd0: Possible stuck request ffff888025848400: control (read@2048,1024B). Runtime 30 seconds [ 191.020649][ T1077] block nbd0: Possible stuck request ffff888025848600: control (read@3072,1024B). Runtime 30 seconds [ 191.439863][T11155] netlink: 'syz.2.1371': attribute type 10 has an invalid length. [ 191.457662][T11155] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 191.473703][T11155] xt_l2tp: v2 tid > 0xffff: 1114244 [ 191.490463][T11154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.178620][T11162] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 192.307655][T11164] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1375'. [ 192.377406][T11167] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1376'. [ 192.390535][ T6017] lo speed is unknown, defaulting to 1000 [ 192.404520][ T6017] syz2: Port: 1 Link ACTIVE [ 192.417387][T11167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1376'. [ 192.427284][ T6017] lo speed is unknown, defaulting to 1000 [ 192.440682][T11167] syzkaller1: entered promiscuous mode [ 192.446661][T11167] syzkaller1: entered allmulticast mode [ 193.404194][T11173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.173931][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.385788][T11200] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20000 [ 194.608810][T11204] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 194.741912][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 194.751902][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 194.760395][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 194.769946][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 194.779120][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 194.830404][T11207] xt_CT: You must specify a L4 protocol and not use inversions on it [ 194.859825][T11207] netlink: 'syz.0.1389': attribute type 1 has an invalid length. [ 194.904087][T11206] lo speed is unknown, defaulting to 1000 [ 194.911325][T11210] netlink: 'syz.4.1390': attribute type 1 has an invalid length. [ 194.919301][T11207] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1389'. [ 194.945354][T11207] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1389'. [ 194.987613][T11207] netlink: 658 bytes leftover after parsing attributes in process `syz.0.1389'. [ 195.015995][T11210] 8021q: adding VLAN 0 to HW filter on device bond6 [ 195.076678][T11213] vlan2: entered promiscuous mode [ 195.082859][T11207] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1389'. [ 195.096414][T11213] bond6: entered promiscuous mode [ 195.101615][T11213] vlan2: entered allmulticast mode [ 195.126561][T11213] bond6: entered allmulticast mode [ 195.220375][T11210] bond6: (slave bridge5): making interface the new active one [ 195.236741][T11210] bridge5: entered promiscuous mode [ 195.248620][T11210] bridge5: entered allmulticast mode [ 195.263585][T11210] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 195.403734][T11206] virt_wifi0 speed is unknown, defaulting to 1000 [ 195.474444][T11217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1391'. [ 195.583898][T11219] 8021q: adding VLAN 0 to HW filter on device bond7 [ 195.895235][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 195.903263][ C1] lec:lec_tx_timeout: lec0 [ 195.907871][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 196.023076][T11236] FAULT_INJECTION: forcing a failure. [ 196.023076][T11236] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 196.065774][T11238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1397'. [ 196.075068][T11236] CPU: 1 UID: 0 PID: 11236 Comm: syz.2.1396 Not tainted syzkaller #0 PREEMPT(full) [ 196.075092][T11236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 196.075102][T11236] Call Trace: [ 196.075109][T11236] [ 196.075116][T11236] dump_stack_lvl+0xe8/0x150 [ 196.075145][T11236] should_fail_ex+0x412/0x560 [ 196.075177][T11236] _copy_from_iter+0x1d3/0x1670 [ 196.075216][T11236] ? __pfx__copy_from_iter+0x10/0x10 [ 196.075238][T11236] ? aa_sk_perm+0x15a/0x960 [ 196.075259][T11236] ? aa_sk_perm+0x82d/0x960 [ 196.075275][T11236] ? skb_put+0x11b/0x210 [ 196.075298][T11236] hci_sock_sendmsg+0x426/0xf40 [ 196.075317][T11236] ? __pfx_aa_sk_perm+0x10/0x10 [ 196.075338][T11236] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 196.075356][T11236] ? aa_sock_msg_perm+0xf1/0x1b0 [ 196.075377][T11236] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 196.075398][T11236] sock_write_iter+0x503/0x550 [ 196.075423][T11236] ? __pfx_sock_write_iter+0x10/0x10 [ 196.075454][T11236] ? bpf_lsm_file_permission+0x9/0x20 [ 196.075472][T11236] ? security_file_permission+0x75/0x260 [ 196.075494][T11236] vfs_write+0x61d/0xb90 [ 196.075525][T11236] ? __pfx_vfs_write+0x10/0x10 [ 196.075555][T11236] ? __fget_files+0x2a/0x420 [ 196.075581][T11236] ksys_write+0x150/0x270 [ 196.075605][T11236] ? __pfx_ksys_write+0x10/0x10 [ 196.075637][T11236] do_syscall_64+0xe2/0xf80 [ 196.075655][T11236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.075670][T11236] ? trace_irq_disable+0x37/0x100 [ 196.075685][T11236] ? clear_bhb_loop+0x60/0xb0 [ 196.075705][T11236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.075721][T11236] RIP: 0033:0x7fef3bb9aeb9 [ 196.075737][T11236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.075751][T11236] RSP: 002b:00007fef3ca7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 196.075769][T11236] RAX: ffffffffffffffda RBX: 00007fef3be15fa0 RCX: 00007fef3bb9aeb9 [ 196.075782][T11236] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000005 [ 196.075792][T11236] RBP: 00007fef3ca7e090 R08: 0000000000000000 R09: 0000000000000000 [ 196.075802][T11236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.075812][T11236] R13: 00007fef3be16038 R14: 00007fef3be15fa0 R15: 00007ffcc77f9e18 [ 196.075839][T11236] [ 196.307606][T11238] openvswitch: netlink: Flow actions attr not present in new flow. [ 196.416622][T11206] chnl_net:caif_netlink_parms(): no params data found [ 196.586781][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 196.595277][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 196.601355][ T5825] Bluetooth: hci4: command 0x0406 tx timeout [ 196.693076][T11243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1398'. [ 196.804982][T11206] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.834251][T11206] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.864792][T11206] bridge_slave_0: entered allmulticast mode [ 196.875793][ T5830] Bluetooth: hci5: command tx timeout [ 196.887865][T11206] bridge_slave_0: entered promiscuous mode [ 196.926225][T11206] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.500346][T11206] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.334053][ T5830] Bluetooth: hci5: command tx timeout [ 200.922769][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 200.930819][ C1] lec:lec_tx_timeout: lec0 [ 200.955517][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 201.068113][T11206] bridge_slave_1: entered allmulticast mode [ 201.921208][ T5830] Bluetooth: hci5: command tx timeout [ 204.352995][ T5830] Bluetooth: hci5: command tx timeout [ 206.728637][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms [ 206.736684][ C1] lec:lec_tx_timeout: lec0 [ 206.764409][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 211.001152][T11206] bridge_slave_1: entered promiscuous mode [ 211.783362][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 211.791412][ C1] lec:lec_tx_timeout: lec0 [ 211.816366][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 216.838211][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 216.846276][ C1] lec:lec_tx_timeout: lec0 [ 216.871133][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 221.895193][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 221.903217][ C1] lec:lec_tx_timeout: lec0 [ 221.945703][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 227.765455][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 227.773484][ C1] lec:lec_tx_timeout: lec0 [ 227.799939][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 232.828518][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 232.836574][ C1] lec:lec_tx_timeout: lec0 [ 232.859364][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 236.268000][ T1077] block nbd0: Possible stuck request ffff888025848000: control (read@0,1024B). Runtime 60 seconds [ 236.480634][ T1077] block nbd0: Possible stuck request ffff888025848200: control (read@1024,1024B). Runtime 60 seconds [ 237.217275][ T1077] block nbd0: Possible stuck request ffff888025848400: control (read@2048,1024B). Runtime 60 seconds [ 237.255077][ T1077] block nbd0: Possible stuck request ffff888025848600: control (read@3072,1024B). Runtime 60 seconds [ 237.880822][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 237.888885][ C1] lec:lec_tx_timeout: lec0 [ 237.913383][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 242.940329][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 242.948417][ C1] lec:lec_tx_timeout: lec0 [ 242.976350][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 249.204612][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6220 ms [ 249.212667][ C1] lec:lec_tx_timeout: lec0 [ 249.236291][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 254.965214][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5730 ms [ 254.973239][ C1] lec:lec_tx_timeout: lec0 [ 255.015516][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 259.904417][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.735574][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5720 ms [ 260.743597][ C1] lec:lec_tx_timeout: lec0 [ 260.770167][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 265.798057][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 265.806103][ C1] lec:lec_tx_timeout: lec0 [ 265.834021][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 270.859609][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 270.867664][ C1] lec:lec_tx_timeout: lec0 [ 270.892303][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 271.435653][ T1077] block nbd0: Possible stuck request ffff888025848000: control (read@0,1024B). Runtime 90 seconds [ 271.494238][ T1077] block nbd0: Possible stuck request ffff888025848200: control (read@1024,1024B). Runtime 90 seconds [ 271.820389][ T1077] block nbd0: Possible stuck request ffff888025848400: control (read@2048,1024B). Runtime 90 seconds [ 271.856657][ T1077] block nbd0: Possible stuck request ffff888025848600: control (read@3072,1024B). Runtime 90 seconds [ 275.918172][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 275.926229][ C1] lec:lec_tx_timeout: lec0 [ 275.951483][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 281.755883][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5800 ms [ 281.763906][ C1] lec:lec_tx_timeout: lec0 [ 281.789769][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 286.825143][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 286.833164][ C1] lec:lec_tx_timeout: lec0 [ 286.858914][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 291.868118][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 291.876172][ C1] lec:lec_tx_timeout: lec0 [ 291.900553][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 296.932457][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 296.940521][ C1] lec:lec_tx_timeout: lec0 [ 296.966861][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 302.733621][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5760 ms [ 302.741685][ C1] lec:lec_tx_timeout: lec0 [ 302.772387][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 305.203436][ T5146] Bluetooth: hci3: command 0x0406 tx timeout [ 307.804490][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 307.812550][ C1] lec:lec_tx_timeout: lec0 [ 307.838103][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 312.851934][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 312.859988][ C1] lec:lec_tx_timeout: lec0 [ 312.885943][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 317.545122][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.915163][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 317.923190][ C1] lec:lec_tx_timeout: lec0 [ 317.948802][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 319.820409][ T5146] Bluetooth: hci5: command 0x0406 tx timeout [ 323.776486][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5830 ms [ 323.784512][ C1] lec:lec_tx_timeout: lec0 [ 323.810844][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 328.832540][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 328.840586][ C1] lec:lec_tx_timeout: lec0 [ 328.863298][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 333.878951][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 333.886995][ C1] lec:lec_tx_timeout: lec0 [ 333.909994][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 338.936968][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 338.944995][ C1] lec:lec_tx_timeout: lec0 [ 338.968032][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 345.200084][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6230 ms [ 345.208140][ C1] lec:lec_tx_timeout: lec0 [ 347.031392][ T1077] block nbd0: Possible stuck request ffff888025848000: control (read@0,1024B). Runtime 120 seconds [ 348.149610][ T1077] block nbd0: Possible stuck request ffff888025848200: control (read@1024,1024B). Runtime 120 seconds [ 348.183252][ T1077] block nbd0: Possible stuck request ffff888025848400: control (read@2048,1024B). Runtime 120 seconds [ 352.260547][ T31] INFO: task syz.3.1353:11077 blocked for more than 143 seconds. [ 352.265828][ T1077] block nbd0: Possible stuck request ffff888025848600: control (read@3072,1024B). Runtime 120 seconds [ 352.287224][ T31] Not tainted syzkaller #0 [ 352.287243][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 352.287252][ T31] task:syz.3.1353 state:D stack:25400 pid:11077 tgid:11072 ppid:5820 task_flags:0x400140 flags:0x00080002 [ 352.287320][ T31] Call Trace: [ 352.287329][ T31] [ 352.287343][ T31] __schedule+0x14ea/0x5050 [ 352.287396][ T31] ? __pfx___schedule+0x10/0x10 [ 352.287424][ T31] ? schedule+0x90/0x360 [ 352.287445][ T31] schedule+0x164/0x360 [ 352.287465][ T31] schedule_preempt_disabled+0x13/0x30 [ 352.287483][ T31] __mutex_lock+0x7fe/0x1300 [ 352.287508][ T31] ? __mutex_lock+0x5ac/0x1300 [ 352.287531][ T31] ? caif_exit_net+0x6a/0x4a0 [ 352.287557][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 352.287584][ T31] ? net_generic+0x1e/0x240 [ 352.287606][ T31] ? net_generic+0x1e/0x240 [ 352.287631][ T31] caif_exit_net+0x6a/0x4a0 [ 352.287663][ T31] ops_undo_list+0x49f/0x940 [ 352.287691][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 352.287710][ T31] ? ops_init+0x469/0x5c0 [ 352.287738][ T31] setup_net+0x2f0/0x340 [ 352.287761][ T31] ? __pfx_setup_net+0x10/0x10 [ 352.287784][ T31] ? preinit_net+0x47d/0x780 [ 352.287806][ T31] copy_net_ns+0x50e/0x730 [ 352.287830][ T31] create_new_namespaces+0x3e7/0x6a0 [ 352.287858][ T31] ? security_capable+0x7e/0x2c0 [ 352.287886][ T31] unshare_nsproxy_namespaces+0x11a/0x160 [ 352.287913][ T31] ksys_unshare+0x4f4/0x900 [ 352.287943][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 352.287964][ T31] ? rcu_is_watching+0x15/0xb0 [ 352.287992][ T31] __x64_sys_unshare+0x38/0x50 [ 352.288012][ T31] do_syscall_64+0xe2/0xf80 [ 352.288032][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.288049][ T31] ? trace_irq_disable+0x37/0x100 [ 352.288067][ T31] ? clear_bhb_loop+0x60/0xb0 [ 352.288088][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.288106][ T31] RIP: 0033:0x7f195139aeb9 [ 352.288123][ T31] RSP: 002b:00007f1952178028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 352.288143][ T31] RAX: ffffffffffffffda RBX: 00007f1951616090 RCX: 00007f195139aeb9 [ 352.288157][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 352.288170][ T31] RBP: 00007f1951408c1f R08: 0000000000000000 R09: 0000000000000000 [ 352.288181][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.288193][ T31] R13: 00007f1951616128 R14: 00007f1951616090 R15: 00007ffcd11ae7f8 [ 352.288224][ T31] [ 352.288247][ T31] [ 352.288247][ T31] Showing all locks held in the system: [ 352.288256][ T31] 1 lock held by kthreadd/2: [ 352.288270][ T31] 3 locks held by kworker/0:0/9: [ 352.288280][ T31] #0: ffff88813fe55948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 352.288342][ T31] #1: ffffc900000e7bc0 (reg_work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 352.288395][ T31] #2: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: reg_todo+0x1c/0xa50 [ 352.288443][ T31] 3 locks held by kworker/u8:0/12: [ 352.288455][ T31] 3 locks held by kworker/u8:1/13: [ 352.288468][ T31] 1 lock held by khungtaskd/31: [ 352.288478][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 352.288530][ T31] 2 locks held by kworker/u8:2/36: [ 352.288541][ T31] 3 locks held by kworker/1:1/43: [ 352.288552][ T31] 2 locks held by kworker/u8:3/44: [ 352.288564][ T31] 3 locks held by kworker/u8:4/60: [ 352.288579][ T31] 2 locks held by kworker/0:3/983: [ 352.288592][ T31] 8 locks held by kworker/0:1H/1077: [ 352.288603][ T31] 4 locks held by kworker/u8:5/1106: [ 352.288614][ T31] 6 locks held by kworker/u8:6/1158: [ 352.288639][ T31] 2 locks held by kworker/R-bat_e/3409: [ 352.288651][ T31] 2 locks held by klogd/5184: [ 352.288661][ T31] 2 locks held by udevd/5195: [ 352.288672][ T31] 2 locks held by dhcpcd/5489: [ 352.288682][ T31] 1 lock held by dhcpcd/5490: [ 352.288694][ T31] 2 locks held by crond/5564: [ 352.288704][ T31] 2 locks held by getty/5582: [ 352.288715][ T31] #0: ffff88814d54f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 352.288765][ T31] #1: ffffc9000362b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 352.288817][ T31] 2 locks held by syz-executor/5808: [ 352.288829][ T31] 1 lock held by udevd/5822: [ 352.288839][ T31] #0: ffff888142781358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 352.288887][ T31] 1 lock held by syz-executor/5828: [ 352.288898][ T31] #0: ffff888030230308 (&xt[i].mutex){+.+.}-{4:4}, at: xt_find_table_lock+0x54/0x3e0 [ 352.288949][ T31] 2 locks held by syz-executor/5831: [ 352.288961][ T31] 7 locks held by kworker/u9:6/5834: [ 352.288971][ T31] #0: ffff88802e094948 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 352.289023][ T31] #1: ffffc9000438fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 352.289076][ T31] #2: ffff888059510ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 352.289127][ T31] #3: ffff8880595100c0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 352.289174][ T31] #4: ffffffff8fb38968 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340 [ 352.289222][ T31] #5: ffff888059f90338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5b0 [ 352.289276][ T31] #6: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 352.289335][ T31] 3 locks held by kworker/1:4/5877: [ 352.289348][ T31] 2 locks held by kworker/0:4/5891: [ 352.289360][ T31] 3 locks held by kworker/0:6/5906: [ 352.289370][ T31] #0: ffff88813fe56948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 352.289423][ T31] #1: ffffc90004f7fbc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 352.289475][ T31] #2: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xa5/0xf40 [ 352.289525][ T31] 4 locks held by kworker/u8:8/7148: [ 352.289538][ T31] 3 locks held by syz.1.1339/11010: [ 352.289549][ T31] #0: ffff88804ada4ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 352.289600][ T31] #1: ffff88804ada40c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 352.289646][ T31] #2: ffffffff8fb38968 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 352.289695][ T31] 2 locks held by syz.3.1353/11077: [ 352.289706][ T31] #0: ffffffff8f99d890 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 352.289759][ T31] #1: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: caif_exit_net+0x6a/0x4a0 [ 352.289810][ T31] 1 lock held by syz-executor/11206: [ 352.289821][ T31] 1 lock held by syz.4.1401/11252: [ 352.289832][ T31] #0: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 352.289881][ T31] 5 locks held by kworker/u8:9/11255: [ 352.289892][ T31] 5 locks held by kworker/u8:10/11256: [ 352.289903][ T31] 4 locks held by kworker/u8:11/11257: [ 352.289914][ T31] [ 352.289920][ T31] ============================================= [ 352.289920][ T31] [ 352.289938][ T31] NMI backtrace for cpu 1 [ 352.289954][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 352.289994][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 352.290013][ T31] Call Trace: [ 352.290027][ T31] [ 352.290041][ T31] dump_stack_lvl+0xe8/0x150 [ 352.290089][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 352.290137][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 352.290161][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 352.290185][ T31] sys_info+0x135/0x170 [ 352.290203][ T31] watchdog+0xf90/0xfe0 [ 352.290225][ T31] ? watchdog+0x209/0xfe0 [ 352.290248][ T31] kthread+0x726/0x8b0 [ 352.290281][ T31] ? __pfx_watchdog+0x10/0x10 [ 352.290299][ T31] ? __pfx_kthread+0x10/0x10 [ 352.290335][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 352.290350][ T31] ? __pfx_kthread+0x10/0x10 [ 352.290368][ T31] ret_from_fork+0x51b/0xa40 [ 352.290388][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 352.290402][ T31] ? __switch_to+0xc82/0x1410 [ 352.290427][ T31] ? __pfx_kthread+0x10/0x10 [ 352.290446][ T31] ret_from_fork_asm+0x1a/0x30 [ 352.290481][ T31] [ 352.290488][ T31] Sending NMI from CPU 1 to CPUs 0: [ 352.290526][ C0] NMI backtrace for cpu 0 [ 352.290540][ C0] CPU: 0 UID: 0 PID: 1077 Comm: kworker/0:1H Not tainted syzkaller #0 PREEMPT(full) [ 352.290567][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 352.290578][ C0] Workqueue: kblockd blk_mq_timeout_work [ 352.290596][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 352.290611][ C0] Code: 8b 3d c4 3e 33 0c 48 89 de 5b e9 63 c5 5c 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d a8 38 2e 11 65 8b 15 c9 38 2e 11 81 e2 00 01 ff 00 74 [ 352.290624][ C0] RSP: 0018:ffffc90000006d98 EFLAGS: 00000297 [ 352.290636][ C0] RAX: ffffffff8a647969 RBX: 0000000000000000 RCX: 0000000000000100 [ 352.290646][ C0] RDX: ffff8880272b0000 RSI: 0000000000000000 RDI: 0000000000000001 [ 352.290656][ C0] RBP: ffffc90000006eb0 R08: ffff8880272b0000 R09: 0000000000000004 [ 352.290666][ C0] R10: 0000000000000003 R11: 0000000000000100 R12: 1ffff92000000dbc [ 352.290675][ C0] R13: ffffffff8a646c00 R14: 0000000000000001 R15: dffffc0000000000 [ 352.290686][ C0] FS: 0000000000000000(0000) GS:ffff8881256f5000(0000) knlGS:0000000000000000 [ 352.290698][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 352.290708][ C0] CR2: 0000555579a094e8 CR3: 0000000067b32000 CR4: 00000000003526f0 [ 352.290721][ C0] Call Trace: [ 352.290727][ C0] [ 352.290731][ C0] NF_HOOK+0x369/0x3f0 [ 352.290753][ C0] ? NF_HOOK+0xa2/0x3f0 [ 352.290769][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 352.290785][ C0] ? net_generic+0x1e/0x240 [ 352.290799][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 352.290819][ C0] ? net_generic+0x1e/0x240 [ 352.290833][ C0] br_forward_finish+0xd3/0x130 [ 352.290850][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 352.290869][ C0] br_nf_forward_finish+0xa5e/0xe90 [ 352.290887][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 352.290903][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 352.290922][ C0] ? NF_HOOK+0xa2/0x6e0 [ 352.290935][ C0] ? NF_HOOK+0xa2/0x6e0 [ 352.290947][ C0] NF_HOOK+0x64e/0x6e0 [ 352.290961][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 352.290975][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 352.290989][ C0] ? net_generic+0x1e/0x240 [ 352.291005][ C0] br_nf_forward_ip+0x7ef/0xa30 [ 352.291018][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 352.291033][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 352.291047][ C0] nf_hook_slow+0xc5/0x220 [ 352.291063][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 352.291081][ C0] NF_HOOK+0x23e/0x3f0 [ 352.291100][ C0] ? NF_HOOK+0xa2/0x3f0 [ 352.291116][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 352.291135][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 352.291153][ C0] ? br_flood+0x8e0/0xb80 [ 352.291171][ C0] ? br_handle_vlan+0x61/0x530 [ 352.291189][ C0] __br_forward+0x397/0x540 [ 352.291206][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 352.291225][ C0] br_handle_frame_finish+0x1492/0x1b40 [ 352.291245][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 352.291268][ C0] ? nf_hook_slow+0x176/0x220 [ 352.291283][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 352.291298][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 352.291315][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 352.291327][ C0] ? nft_do_chain_inet+0x29d/0x380 [ 352.291344][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 352.291360][ C0] ? ila_nf_input+0xa43/0xb30 [ 352.291378][ C0] br_nf_pre_routing_finish_ipv6+0xa3a/0xd70 [ 352.291392][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 352.291411][ C0] br_nf_pre_routing_ipv6+0x374/0x6f0 [ 352.291426][ C0] ? br_nf_pre_routing_ipv6+0x421/0x6f0 [ 352.291440][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 352.291456][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 352.291470][ C0] ? br_nf_pre_routing+0x720/0x1470 [ 352.291487][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 352.291500][ C0] br_handle_frame+0x1277/0x1510 [ 352.291518][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 352.291533][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 352.291551][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 352.291570][ C0] __netif_receive_skb_core+0x98f/0x30a0 [ 352.291586][ C0] ? ip6_mc_input+0x8de/0xbd0 [ 352.291612][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 352.291627][ C0] ? ip6_rcv_finish+0x29e/0x2e0 [ 352.291644][ C0] ? NF_HOOK+0x336/0x3c0 [ 352.291664][ C0] ? process_backlog+0x3eb/0x1950 [ 352.291682][ C0] ? process_backlog+0x3eb/0x1950 [ 352.291696][ C0] ? process_backlog+0x3eb/0x1950 [ 352.291711][ C0] ? process_backlog+0x3eb/0x1950 [ 352.291726][ C0] process_backlog+0x76d/0x1950 [ 352.291749][ C0] __napi_poll+0xae/0x340 [ 352.291762][ C0] ? skb_defer_free_flush+0x233/0x260 [ 352.291778][ C0] net_rx_action+0x627/0xf70 [ 352.291792][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 352.291811][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 352.291839][ C0] handle_softirqs+0x22a/0x7c0 [ 352.291853][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 352.291870][ C0] __irq_exit_rcu+0x5f/0x150 [ 352.291883][ C0] irq_exit_rcu+0x9/0x30 [ 352.291894][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 352.291909][ C0] [ 352.291914][ C0] [ 352.291920][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 352.291934][ C0] RIP: 0010:console_flush_all+0x801/0xb20 [ 352.291950][ C0] Code: ff ff e8 b2 08 21 00 90 0f 0b 90 e9 85 fc ff ff e8 a4 08 21 00 e8 6f a0 f3 09 48 85 db 74 c0 e8 95 08 21 00 fb 48 8b 5c 24 08 <48> 8b 44 24 20 42 80 3c 20 00 4c 8b 74 24 18 74 08 4c 89 f7 e8 36 [ 352.291963][ C0] RSP: 0018:ffffc900039feee0 EFLAGS: 00000293 [ 352.291974][ C0] RAX: ffffffff81a36ebb RBX: ffffc900039ff040 RCX: ffff8880272b0000 [ 352.291985][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 352.291993][ C0] RBP: ffffc900039feff0 R08: ffffffff8fef1b77 R09: 1ffffffff1fde36e [ 352.292004][ C0] R10: dffffc0000000000 R11: fffffbfff1fde36f R12: dffffc0000000000 [ 352.292014][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8edeea00 [ 352.292027][ C0] ? console_flush_all+0x7fb/0xb20 [ 352.292047][ C0] ? console_flush_all+0x123/0xb20 [ 352.292064][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 352.292081][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 352.292099][ C0] console_unlock+0xd1/0x1c0 [ 352.292113][ C0] ? vprintk_emit+0x2cf/0x560 [ 352.292126][ C0] ? __pfx_console_unlock+0x10/0x10 [ 352.292142][ C0] ? vprintk_emit+0x2cf/0x560 [ 352.292154][ C0] ? vprintk_emit+0x2cf/0x560 [ 352.292169][ C0] vprintk_emit+0x485/0x560 [ 352.292183][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 352.292197][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 352.292217][ C0] dev_vprintk_emit+0x355/0x420 [ 352.292235][ C0] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 352.292258][ C0] dev_printk_emit+0xee/0x140 [ 352.292275][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 352.292293][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 352.292313][ C0] ? __dev_printk+0x131/0x190 [ 352.292329][ C0] _dev_info+0x11e/0x180 [ 352.292347][ C0] ? __pfx__dev_info+0x10/0x10 [ 352.292365][ C0] ? nbd_config_put+0x153/0x580 [ 352.292386][ C0] nbd_xmit_timeout+0x928/0xc70 [ 352.292405][ C0] ? __mod_timer+0xb37/0xf30 [ 352.292420][ C0] ? __pfx_nbd_xmit_timeout+0x10/0x10 [ 352.292440][ C0] ? blk_add_timer+0x1a5/0x2e0 [ 352.292457][ C0] blk_mq_handle_expired+0x172/0x2c0 [ 352.292475][ C0] ? __pfx_blk_mq_handle_expired+0x10/0x10 [ 352.292491][ C0] bt_iter+0x2c9/0x390 [ 352.292510][ C0] sbitmap_for_each_set+0x30e/0x5f0 [ 352.292532][ C0] ? __pfx_bt_iter+0x10/0x10 [ 352.292549][ C0] ? __pfx_sbitmap_for_each_set+0x10/0x10 [ 352.292572][ C0] ? blk_mq_queue_tag_busy_iter+0xe1/0xbf0 [ 352.292592][ C0] blk_mq_queue_tag_busy_iter+0x74b/0xbf0 [ 352.292612][ C0] ? __pfx_blk_mq_handle_expired+0x10/0x10 [ 352.292628][ C0] ? blk_mq_queue_tag_busy_iter+0xe1/0xbf0 [ 352.292647][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 352.292662][ C0] ? __pfx_blk_mq_queue_tag_busy_iter+0x10/0x10 [ 352.292680][ C0] ? __pfx_blk_mq_handle_expired+0x10/0x10 [ 352.292699][ C0] ? __synchronize_srcu+0x331/0x3e0 [ 352.292718][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 352.292732][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 352.292750][ C0] ? __pfx_wakeme_after_rcu+0x10/0x10 [ 352.292768][ C0] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 352.292786][ C0] ? synchronize_srcu+0x295/0x2c0 [ 352.292804][ C0] blk_mq_timeout_work+0x1bd/0x3f0 [ 352.292821][ C0] ? __pfx_blk_mq_timeout_work+0x10/0x10 [ 352.292839][ C0] ? process_scheduled_works+0xa0f/0x17a0 [ 352.292856][ C0] ? process_scheduled_works+0xa0f/0x17a0 [ 352.292874][ C0] process_scheduled_works+0xaec/0x17a0 [ 352.292904][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 352.292921][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 352.292937][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 352.292950][ C0] ? schedule+0x90/0x360 [ 352.292967][ C0] worker_thread+0xda6/0x1360 [ 352.292993][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 352.293009][ C0] kthread+0x726/0x8b0 [ 352.293024][ C0] ? __pfx_worker_thread+0x10/0x10 [ 352.293042][ C0] ? __pfx_kthread+0x10/0x10 [ 352.293058][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 352.293070][ C0] ? __pfx_kthread+0x10/0x10 [ 352.293084][ C0] ret_from_fork+0x51b/0xa40 [ 352.293098][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 352.293110][ C0] ? __switch_to+0xc82/0x1410 [ 352.293128][ C0] ? __pfx_kthread+0x10/0x10 [ 352.293142][ C0] ret_from_fork_asm+0x1a/0x30 [ 352.293166][ C0] [ 352.293525][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 352.293539][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 352.293558][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 352.293568][ T31] Call Trace: [ 352.293576][ T31] [ 352.293583][ T31] vpanic+0x1e0/0x670 [ 352.293607][ T31] panic+0xc5/0xd0 [ 352.293625][ T31] ? __pfx_panic+0x10/0x10 [ 352.293654][ T31] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 352.293681][ T31] watchdog+0xfda/0xfe0 [ 352.293703][ T31] ? watchdog+0x209/0xfe0 [ 352.293728][ T31] kthread+0x726/0x8b0 [ 352.293749][ T31] ? __pfx_watchdog+0x10/0x10 [ 352.293767][ T31] ? __pfx_kthread+0x10/0x10 [ 352.293790][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 352.293806][ T31] ? __pfx_kthread+0x10/0x10 [ 352.293825][ T31] ret_from_fork+0x51b/0xa40 [ 352.293850][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 352.293865][ T31] ? __switch_to+0xc82/0x1410 [ 352.293890][ T31] ? __pfx_kthread+0x10/0x10 [ 352.293910][ T31] ret_from_fork_asm+0x1a/0x30 [ 352.293945][ T31] [ 352.294308][ T31] Kernel Offset: disabled