last executing test programs: 6m0.676574946s ago: executing program 4 (id=317): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @random="d976f308c05c"}) (async) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="08000800070303000200140007004518002800000000082f907800000000ffffffff810022eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5020000990780000e70ecb2b11b6135af1dd2b08a1111e52cffe69741b66b07ec45c068a8b211c42603e7151568199c956c082764250225c587919edba38c0d5d83089ed517d38ec31aa4f429852d1f2c9d8da7fd214a1e071a808061d57c3277bdc1486424f8786d881ee5123025bf55b8883e26253"], 0x36) 6m0.035810995s ago: executing program 4 (id=325): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0xe, 0x0, &(0x7f0000000000)="bc0a4703c8b57f000000d03a36f2", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r5, 0x0, {0x2, 0xf0, 0x3}, 0xfe}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x7a}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}, @IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xfffffffc}]}}}]}, 0x44}}, 0x0) 5m59.482755104s ago: executing program 4 (id=330): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd8638317ebd8fe07629852200010000002500000008000300", @ANYRES32=r3, @ANYBLOB="08003500000000000a00060008021100000100000a0034000202020202020000"], 0x3c}, 0x1, 0x0, 0x0, 0x6404c801}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) write(r4, &(0x7f0000002c80)="e027", 0x2) (async, rerun: 64) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2f, 0x4c}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24004000}, 0x8044) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711219000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) 5m59.01471945s ago: executing program 4 (id=334): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x25dfdbfe, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x40, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}, [@tmpl={0x144, 0x5, [{{@in=@broadcast, 0x4d4, 0x3c}, 0x2, @in=@multicast2, 0x3507, 0x4, 0x0, 0x0, 0x7, 0x0, 0x2}, {{@in=@local, 0x4d3, 0x6c}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4, 0x1, 0xc, 0x7, 0xf, 0x8}, {{@in=@local, 0x4d4, 0x2b}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3502, 0x1, 0x2, 0x2, 0x1a7, 0x81, 0x4}, {{@in6=@private1, 0x4d5, 0x33}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3502, 0x0, 0x3, 0x7, 0x4}, {{@in6=@empty, 0x4d5, 0x33}, 0xa, @in=@rand_addr=0x64010100, 0x3501, 0x7, 0x2, 0x40, 0x9, 0x4, 0x1}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4000015}, 0x400000000000000) 5m58.842388309s ago: executing program 4 (id=337): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a00"/84], 0x48) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073756200"], 0x0, 0x5a}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000608)="0900000004000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async, rerun: 32) r2 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x8, 0x7}, {0x0, 0x0, 0x400000000}, 0x2, 0x6e6bc0, 0x1, 0x0, 0x107e3242293c71d6, 0x3}, {{@in6=@empty, 0x8, 0x33}, 0x2, @in=@loopback, 0x3504, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe, 0xc00}}, 0xe8) (async) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 5m57.64502558s ago: executing program 4 (id=344): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, 0x0, &(0x7f0000000200)=""/255}, 0x20) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2e}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000810) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x6, 0x2, 0x80000a, 0x0, 0x1, 0xe94}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20fc}, [@call={0x85, 0x0, 0x0, 0xd6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4, r3}, 0xc) socket$inet6(0xa, 0x3, 0x76) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x50, &(0x7f00000a2000)={0x0, 0x0}, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x18, 0x1404, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x2000000, 0x0, 0x40000}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$XFS_IOC_GETPARENTS(r7, 0xc028583e, &(0x7f0000000440)={{[0x4, 0x7, 0x6, 0xf043]}, 0x0, 0x1, 0x5, 0x0, &(0x7f00000002c0)=[{{@align=0x7, {0xffff, 0x585, 0x5, 0x3}}, 0xe2, 0x0, '[+\x00'}, {{@align=0x5, {0x2, 0x8000, 0x5, 0x3fb}}, 0x3, 0x0, '\'!\xd8\x00'}]}) write(r8, &(0x7f0000000680)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027400089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fcab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f", 0xdd) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x0, 0x4, 0x800}, 0x50) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x6c, r7, 0x0, 0x6c}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000feffffff000000ec95ffffff85000000aa000000950000fa2f0000ae9800"], &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="500100001a0001000000000000000000020000000000000b002f000005001b001100000006001d004e21000008000200e0"], 0x150}}, 0x4) socket(0x2, 0x80805, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x7a, &(0x7f0000000340)={r11, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000080)=0x84) 5m42.421047683s ago: executing program 32 (id=344): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, 0x0, &(0x7f0000000200)=""/255}, 0x20) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2e}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000810) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x6, 0x2, 0x80000a, 0x0, 0x1, 0xe94}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20fc}, [@call={0x85, 0x0, 0x0, 0xd6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4, r3}, 0xc) socket$inet6(0xa, 0x3, 0x76) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x50, &(0x7f00000a2000)={0x0, 0x0}, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x18, 0x1404, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x2000000, 0x0, 0x40000}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$XFS_IOC_GETPARENTS(r7, 0xc028583e, &(0x7f0000000440)={{[0x4, 0x7, 0x6, 0xf043]}, 0x0, 0x1, 0x5, 0x0, &(0x7f00000002c0)=[{{@align=0x7, {0xffff, 0x585, 0x5, 0x3}}, 0xe2, 0x0, '[+\x00'}, {{@align=0x5, {0x2, 0x8000, 0x5, 0x3fb}}, 0x3, 0x0, '\'!\xd8\x00'}]}) write(r8, &(0x7f0000000680)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027400089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fcab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f", 0xdd) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x0, 0x4, 0x800}, 0x50) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x6c, r7, 0x0, 0x6c}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000feffffff000000ec95ffffff85000000aa000000950000fa2f0000ae9800"], &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="500100001a0001000000000000000000020000000000000b002f000005001b001100000006001d004e21000008000200e0"], 0x150}}, 0x4) socket(0x2, 0x80805, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x7a, &(0x7f0000000340)={r11, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000080)=0x84) 1m39.627231143s ago: executing program 5 (id=1894): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}, {&(0x7f0000000780)="5b06c70461fab92b3d952a0a0b5eca7d6b21f62c4f56ea9109a00b742eab4a7fdac90ab7c51a813cc4d693127d10c4e7234944e9410ad19c43ca9751c1b97aca344e5bf77fde23184af0b7e160e7a9a681f6391270dedc2978f7d1b9a913801beaa52e1eedf0ae71021e0d40864fc63603f1d6d94f55d23fb15eebc780292ee4be48a9036dcb83345a4285e043439e95b3f23b6edf199cea092725d6f7fab0f975cc42bd279f5de21d08a38091edbb34b32c6cd53373651fd3343aa6b228a996d957c556694dc3a26b68b38093a92eb192aa973bda1b51c61b6cc2b49a54550085e8d8270d889cefe65f62c975815b1b1208ed"}], 0x3f}], 0x1, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x20, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x72}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20040080}, 0x8004) accept4$llc(r2, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x20004095}, 0x400c0) r3 = socket$alg(0x26, 0x5, 0x0) accept4(r3, 0x0, 0x0, 0x800) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x200448d0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448dd, &(0x7f0000000700)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0xd0, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_USERDATA={0xb9, 0x6, "0e9bfa1556a24f961058a1032e4ff11bc166cd26fd1a6be9fce7be07424c07ff563c2d107451b28c0aaec8a2e602cc3b54bb2be110918fc1e199e22d73bb928c2c91330551f93b4384d9f539489704af0d5adc644da9828bd4c18f1ee4f22efe5f8432239ceb9368d61f9fb321083fbe013dd8d097a9cf54d07f0a66d0f7792e04e4c179a1bfc2ea834ac9cabcab39faf5e7f5927b9a5e71b5f6b2c8e27a0edf67b0798eae0196b039e3e282da24d4faf592a6e921"}]}, @NFT_MSG_NEWFLOWTABLE={0xa8, 0x16, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x401}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'ip6gre0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x1c0}}, 0x0) 1m38.769984777s ago: executing program 5 (id=1896): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a300000000040000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000014000480080001400000000008000240521deb0b54000000060a010400000000000000000500000008000b40000000002c0004802800018008000100666962001c0002800800024000000002080001400000000308000340000000020900010073797a3000000000140000001100010000000000000000000000000adea983df76c1a7b747aa4f73173de68daa1193dd100144d00a8462"], 0xdc}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0x1}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f0000000200)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x6, 0x26, &(0x7f0000000340)=""/38, 0x41100, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x9, 0x678eba39, 0x9}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000480)=[{0x5, 0x1, 0xf, 0x4}, {0x4, 0x1, 0xc, 0x5}], 0x10, 0x4}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r9], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r12], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x5, 0x10, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001140), r14) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r15, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8800) r16 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r16, 0x107, 0xf, &(0x7f00000000c0)=0x207, 0x4) 1m38.565770769s ago: executing program 1 (id=1898): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x1, 0x0, &(0x7f0000000300)) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffefbfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0}}, 0x10) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={r3}, 0x4) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x26, &(0x7f0000000680)=ANY=[], &(0x7f0000000680)='syzkaller\x00', 0xaa, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x27, r6}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000600)=ANY=[@ANYRES32=r7, @ANYRES32=r7, @ANYBLOB="2f0000000000000000000000b03a899e05e595c8f9a99703000000ab2dd3694856051eb67ea53035545e993557846117cc3f1770287fb69e785b", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r7, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYBLOB="9a2afa9b0816f85200000000", @ANYRES32=r8, @ANYRES16=r6, @ANYRES64=r9], 0x20) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000128000000000a030000000000000000000a00000708000240000000020900010073797a31000000c7b36d0e00030a010100000000000000000a0000070900010073797a320000000014000000110001", @ANYRESHEX=r3, @ANYRES32=r9, @ANYRESOCT=r6], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000010900020073797a310000000008000a40fffffffc400000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180050001"], 0xa4}, 0x1, 0x0, 0x0, 0x8881}, 0x40) (async) r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r10, 0x12, 0x3, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000001b00), r11) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r12) (async) sendmsg$TIPC_NL_BEARER_SET(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r13 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="680000001000ffff25bdaba5950f2dba06118e008adeea961a1ecac3871aadfbc31ed923509c197d49bc42e2566e9e898451927739809cd87c2b692b6cebbd425683d91da1c1", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000009000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed1000008000500"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) accept4$nfc_llcp(r10, &(0x7f0000000540), &(0x7f0000000440)=0x60, 0x800) (async) sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) (async) recvmmsg(r14, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/33, 0x21}, {&(0x7f0000003740)=""/195, 0xc3}, {&(0x7f0000003840)=""/157, 0x9d}, {&(0x7f00000001c0)=""/154, 0x9a}, {&(0x7f0000000280)=""/101, 0x65}], 0x6}, 0x9}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x0, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0x2000000000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000032073797a6b616c6c65723000001800128008000100767266000c000280080001"], 0x48}}, 0x0) sendmmsg(r13, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 1m36.272807646s ago: executing program 5 (id=1901): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$pppoe(0x18, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x10000000) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x2000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) 1m36.251545776s ago: executing program 2 (id=1902): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb0000000000000000000000004e210000f7fb20020a00800008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x4080) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff"], 0x0, 0x8}, 0x94) (async, rerun: 32) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x18638000) (async, rerun: 32) shutdown(r0, 0x2) (rerun: 32) 1m36.058123699s ago: executing program 1 (id=1903): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = epoll_create1(0x0) (async) r2 = socket$unix(0x1, 0x2, 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f0000000040)=0x10009, 0x4) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000002c0)={0xa002a014}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0x7, 0x8, '\x00', 0x1, &(0x7f0000000180)=[0x0]}) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x20010, r0, 0x1776b000) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x64, 0x30, 0x1, 0x70bd25, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x200000}}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xeb756673eed151e1}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r3) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x4c, r5, 0x201, 0x70bd26, 0x2, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x31}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x4c}, 0x8, 0x3000000000002, 0x0, 0x4000020}, 0x804) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a010400000000000000000a0000010900010073797a3100000000200004801c0001800b000100736f636b657400000c000280080002400062f9cba02b547636797a3200000000140000001100010000000000000000000200000a"], 0x74}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000084) 1m35.964700861s ago: executing program 2 (id=1905): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) socketpair(0x29, 0x2, 0x0, &(0x7f0000000140)) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async) listen(r0, 0xfffffffc) (async) socketpair(0x29, 0x2, 0x0, &(0x7f0000000140)) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async) sendto$inet(r1, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) (async) 1m35.8680294s ago: executing program 0 (id=1906): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x1c02, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x23, &(0x7f0000000000), 0x4) listen(r0, 0x3841b273) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e7c23fc8", @ANYRES16=r4, @ANYBLOB="0100000000000080000034000000080003000100000008007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x44}}, 0x0) 1m35.750572497s ago: executing program 5 (id=1907): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1100000000f336, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x46, &(0x7f0000000140)=0x2, 0x4) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1m35.738377893s ago: executing program 1 (id=1908): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x40}}, 0x0) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r0, 0x3) unshare(0x20000400) accept4(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) socket$packet(0x11, 0x2, 0x300) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f00000002c0)) 1m35.543449588s ago: executing program 0 (id=1910): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'nicvf0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x46, r1}) r2 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000040)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1m35.427048301s ago: executing program 0 (id=1911): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x5}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x4}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20000850) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000080)=0x1e0, 0x0) unshare(0x6a060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) listen(r0, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000068001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 1m35.218246156s ago: executing program 3 (id=1913): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x8050) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)={0x20, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xf0}, @ETHTOOL_A_LINKINFO_HEADER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008040}, 0x24040884) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="640000000206010200000000000000000000000005000100070000000500050002000000120003006269746d61703a69702c6d61630000000900020073797a31000000000500040000000000180007800c00018008000140ac1414aa050003"], 0x64}}, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a010400000000000000000100000024000480200001800700010072740000140002800800014000000010080002400000001908000b40000000000900010073797a30"], 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x2d, 0x0, 0x1, 0xfffff038}, {0x28, 0x0, 0xfd, 0x1}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = socket(0x2b, 0x80801, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000540)={@dev={0xfe, 0x80, '\x00', 0x2c}, @rand_addr=' \x01\x00', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0) socket(0x10, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x0, 0x80) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) setsockopt$inet6_tcp_int(r6, 0x11e, 0x1, &(0x7f0000000280)=0x400, 0x4) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f00000004c0)={{0x2, 0x4e20, @broadcast}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x30, {0x2, 0x4e22, @broadcast}, 'veth0_to_team\x00'}) recvmsg$can_j1939(r6, &(0x7f0000000680)={&(0x7f0000000340)=@l2, 0x80, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/188, 0xbc}, {&(0x7f0000000480)=""/1, 0x1}, {&(0x7f0000000540)=""/168, 0xa8}], 0x3, &(0x7f0000000640)=""/9, 0x9}, 0x0) 1m34.985223465s ago: executing program 3 (id=1914): r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480ef400c587b6463d34292652abaa000a000d000012010000000000000000020000", 0x33}], 0x1}, 0x24000040) 1m34.893668115s ago: executing program 3 (id=1915): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @remote, 0x4}, 0x80, 0x0, 0x42}, 0xe07e872420dfefca) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x5, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xd632}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xc3}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3f, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$tipc(0x1e, 0x5, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x14, 0x30, 0x871a15abc695f91d, 0x0, 0x80000}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (async) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000180), 0x2ae, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[@ANYRES8=r0], 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x44004) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0xfffffffc}}, 0x2f) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r2, r7}, 0xc) (async) r8 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000080)=0x9, 0x4) (async) bind$inet(r8, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) (async) r9 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r9, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r9, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async) setsockopt$inet6_IPV6_DSTOPTS(r9, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x8) connect$inet6(r9, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) (async) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x3, 0x2, 0x0, 0x0, 0x0, {0x7, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8050) sendmmsg$inet6(r9, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)="d3f04bb4604aed32226e529c8812223fc4797c733f8176720c3ad91b943b1ad6f8027b3cc582e5502433b313659a57fa991300b16a4529482443b67e8a41483837b5f9f422cb9d69b64f69b4bb9d3fdc2907e8201322498ed0448ce67f43a68a92938a420012241f6712e9dc52e38a6aed925779287435d8441c3f33760552e488dc42bcadd66a5e1643c45095a0aaae13af", 0x92}], 0x1}, 0x7101}], 0x1, 0x4001c00) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x2, 0x1}, 0x10) (async) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r6) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, r10, 0x1, 0x1d, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_int(r8, 0x0, 0x3, &(0x7f00000001c0)=0x9000000, 0x4) (async) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x18, 0x24, 0x107, 0x70bd2e, 0x25dfdbf9, {0x2, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 1m34.866391152s ago: executing program 3 (id=1916): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="50000000030101040000000000000000020000003c0001800c00028005000100010000002c0001"], 0x50}, 0x1, 0x0, 0x0, 0x30}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000480)={r0, &(0x7f00000002c0)='$\x00', 0x4000, &(0x7f0000000300)={@align=0x8, {0x8, 0x0, 0x0, 0x202}}, 0x81, &(0x7f0000000400)={@_ha_fsid}, &(0x7f0000000440)=0x8}) sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x90900}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c000000010701030000000000000001020000040c299c4000000000000000090900010073797a3000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8091}, 0x4000) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000100)={r6, 0x4, 0x7, 0xfffffff7}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x2542, 0x9, 0x201, 0x5, 0x8, 0xab31, 0x1, 0xb6, r7}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000900)=@security={'security\x00', 0xe, 0x4, 0x3f0, 0xffffffff, 0x238, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x4, &(0x7f00000005c0), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0x0, 0xff, 0xff], [0x0, 0xffffffff, 0xff], 'netpci0\x00', 'macvtap0\x00', {0xff}, {0xff}, 0x29, 0x6, 0x2, 0x6c}, 0x0, 0x100, 0x140, 0x0, {}, [@common=@ipv6header={{0x28}, {0x2, 0x81}}, @common=@ah={{0x30}, {[0x4d3, 0x4d3], 0x8000, 0x6, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "1bb41424fdf4c9782e1d1f789f7eacffcf503f160b84ec1929aa23cf7c7a"}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0xd, "b7f2", 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xa, 0x3, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x1, 0xbe88, 0x1, 0x401, 0x8, 0x0, 0x7fffffff, 0x1]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) connect$l2tp(r8, &(0x7f00000001c0)={0x2, 0x0, @multicast2, 0x1}, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000180)={0x0, 'bond_slave_0\x00', {}, 0x5}) getsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000200)={@dev, @dev}, &(0x7f0000000280)=0xc) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20004081}, 0x4000000) setsockopt$RDS_FREE_MR(r8, 0x114, 0x3, &(0x7f0000000140)={{0x9, 0x6}, 0x33}, 0x10) 1m34.858077318s ago: executing program 2 (id=1917): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) ioctl$FIONCLEX(r1, 0x5450) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000540)={0x0, 0x7, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=r2, @ANYRESOCT=r0, @ANYBLOB="30002d8004000000040000000a00000002020202020200000a00000001010101010100000a0000000101010101010000"], 0x4c}}, 0x10) 1m34.667180491s ago: executing program 5 (id=1918): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c0000000f0605000000000000000000010000030500010007000000050001"], 0x4c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="ffc4438e5c3081d0e133e812196ec0ed923733aa8b5aba32c8650e7a66d6136853773dfbc6226be13039e230d511f1ac50cc7811aac0400e4c833fedf842ae2918e6fddb550729246fcf4c0a01bc64989ea3985fb362751a83991bd56e761379caa64f6148893ff25f38d5cd6dd695bbf9ca709a9960e0e6b054d5e2239bcb7c0fb2ac66dc4c8f534e439ff20ccaf0d48a98c19c92a3b437a699350f49606d21a403f8c112c46fea5486bf367a854b0f6c1e563b656e4794f6793a08bb3656c391643f6df71d0255054368a938d38503d064da82d5dbf395ad47ed3932669168d324ed0f6de8360d499042ddc7d02b6c0772128257702bfe6d0971f00fea85da062cdc", &(0x7f00000007c0)="4c87fe555ceb79157b1e507ff4d3cc053321e42ae89f596427188b4877ab8f1776c0685784f1174c6401ecc1dd6e2a77bc79238f87ad9215a92ff203a30099e77c543e702b4a4438d358616381745f24f74e585498af129c4b173b242f445b08135f7fa40eb7ba78160ff4f0c80e1b324d0c234cb7f43a3ff9e9535dc16000c797113a039f4508a09144090000009f38a90a24f173b3e68377e4272950a80cfcd3aa6850e917bc7e57370060f5e6db941d67fc98a1e98103830b821657438325578d2af822dd4fc13ea7a7eef8d9be4e715aec8fd6cadc41c8da5ce9da2b9e1559d92a1936fc2b3a00000000000000000072200e10ba6269b634f10f7098c65ba67ba65c0e2687637e131fb8d5ba6c12c09c8356853c434a44ff0878e496dcf9a4f5ca02c293279948f37ebb28843f92c87c057a3b410e04418557d5deda7ddd3bd1d384d64ec980187e8b64a0696571a49e847db79349c9b3c3fab5f1f977bde4d802d9026ae0c11744eb1525c5195fd215d7a432497f35c2f2cfcd2b6336b26dfef0cb968c910ea2af5cdd4d58cc08535d5514", 0x2, 0x0, 0x10000}, 0x24) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008080}, 0x44080) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000300), r2) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000001100)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000bc0)={0x4f4, r5, 0x400, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x80, 0x2, 0x0, 0x1, [{0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x8, 0x3, 0x8}, {0x401, 0x6, 0x8, 0x9}, {0xe, 0xae, 0xff, 0xe}, {0x3, 0x81, 0xe0, 0xff}, {0x5, 0x3, 0x2, 0x1}, {0x7, 0xeb, 0x0, 0xb8}, {0x3, 0xaa, 0xfd, 0x9}, {0x8, 0x40, 0x23, 0x3}, {0x7, 0x4, 0x6, 0x3564}]}}}]}}, {{0x8, 0x1, r4}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8c}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xbdf0}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8, 0x1, r4}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r8}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0xc0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x800, 0x1, 0x3, 0x2}, {0xb, 0x0, 0x9, 0x4}, {0x6, 0xff, 0x8, 0x9788}]}}}]}}]}, 0x4f4}, 0x1, 0x0, 0x0, 0x40000}, 0x40090) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0xa5, "960763dccbca4e0df05e2bd7a23f93db0956e7cf19619661b0c3851f148f94c7ff76070f9087c71916e237530d5f3f6778b2fc49849bedc850761621bb0473fcf73292a930a9f79d564e8595bbcae4a4725d57151c8fd60bc2cb8cec42bdd84e4aa48926cb660eb3679ede5720cd7507dc2b48413ef07963fb920ef6251332ef89e4beb6f8d9efaf1ff7abfbaaf3c195cc68eac20399b74d6ae91760d39bb00c50dc60eef8"}, &(0x7f0000000280)=0xad) 1m34.647326392s ago: executing program 1 (id=1919): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000004c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000170069103c0000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1m34.61369161s ago: executing program 2 (id=1920): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES8=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x88c5}, 0x20040014) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000080a05000000000000000000020000040c00034000000000000000010900020073797a32000000190900010073797a3000000000140000001100010000000000000000000a10000a"], 0x60}}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ad752be0a0c9", @ANYRES32=r1], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3}, 0x20) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002f00090027bd9f0000000000040000000c00180002ac0f0001ac"], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x4) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000340000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020f0000120000000000000000000000030005000000000002000000ffffffff00000000000000000a0018000f0e420070ff8be9ca728b7708acbd9b3d7559bae2f456618af6697b59e15a92b61297c9e2604bbb971e7a6e11a821108ad271578dce7eae64968a000000000000030006000000000002000000e000000100"/144], 0x90}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a0000000000006111800000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x20) r6 = socket$inet6(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r11, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r9, {0x10, 0x7}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x80}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x9, 0x0, 0xff, 0x9, 0x0, 0x4}, 0x20) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCBRADDBR(r12, 0x89a0, &(0x7f0000000000)='wg2\x00') 1m34.235868899s ago: executing program 1 (id=1921): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000021000100000000000000000002000000000000000000000005001e"], 0x24}, 0x1, 0x0, 0x0, 0x48084}, 0x40448d0) 1m34.235275351s ago: executing program 0 (id=1922): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001f40)={&(0x7f00000020c0)=ANY=[@ANYBLOB="88010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0x40}, 0x40) (async) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="48000000090603000000000000000000050000000900020073797a3100000000050001000700000020000780060004404e21000005000700ff0000000c000180080001400a01010107e24eef21b016a3d14b9913d9f1f7601732d31824829f06948e7d32b3a23fd9407100ea6c8648ca351367610b1c63d27804644728158437f2d36dd11712329f7848a9f823c7e3f626d752bc009b8ad23d2a372595b2e7471a1c76551133e122ba1ca530ba10c7ddcef354a35f2f25b7e7e9c211ffba17dae31826e88c3a624883ea6503d4c9377b518f9e5742e98f080c57a82e59b4882a139811f86f9f641d5021189c6a4f7c266f200f"], 0x48}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) (async) r1 = socket$inet6(0x10, 0x3, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000c00)={'batadv0\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r5, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001940)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000ffdbdf250900000020000180140002007465616d5f736c6176655f310000000008000100", @ANYRES32=r4, @ANYBLOB="fff882522de939306ce617171b55770efc0e0c714fcff9a0c00a82f11a9f25b2e4b1fa44bbc2a3a87b69b0b306aa2b2561023660cbdf813231e61dd2bf62de9f1d18f1f4165cc74097323abda20213989989a57764667716ede4316b8d3d4dd2baa6a4fbbac5b2059d80e5c5525d742e5c4a3714efd916ae48247289784dd06857d4026f666e91ed5bb88141d1318e99ea2e69a8cf2c71"], 0x34}, 0x1, 0x0, 0x0, 0x2820142b6b7ef621}, 0x40000) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b76b6e000000000050001100fc000000000000000000000000000001e0000001000000000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c040000000000000a000a000c001c00", @ANYRES32=0x0, @ANYBLOB="0400000008001f0001000000"], 0xb4}, 0x1, 0x0, 0x0, 0x44004}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000a479df"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000300000000000000000000008500000041000000a60000000e00080095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xf3, 0x0, &(0x7f0000001fc0)="2edf1061e98137c3723dc153867aec73614acc1c4fe56244fa704008fc99c08b1d16f0f3681e51ba2102b77c12310b81313e0d95c2033f14d34a5af6a80df8302b0afcf50fba7c19d8dfb9f95f220615f7ee1969cfcea3b812669c77bc92590fc049ac8c01e74f64407a05244e8beda5918af9c82eb3d74960838d89917c630deab531b365d47cfa601ac389ad40b76b80607b80e699ead121438afdea0268ca44dade44c54343d930f0e3b4a09bdeba289b66814596971490dd39944c0f1cd8850ff66f8162841107ca9d816bbd42aba6ca8758c61632c09044528e5739790cd1133f7f597168a6fb64239217abc517b1eac8", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x3}, 0x50) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r9}, 0x14) (async) syz_emit_ethernet(0x2596, &(0x7f0000000100)=ANY=[@ANYRESOCT=r7], 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001c00)=ANY=[@ANYBLOB="c80000006800000229bd7000fddbdf2500000100200000003c000c800600010009000000080002004b060000060001000700000006000100060000000800030004000000060001000700000008000300ffffffff040004002c000c8008000200010000000600010000000000080003000400000008000200575d0000080002000200000014000600e00000010000000000000000000000000c000880080004007f0000010c0002000100000000000000060007000400000008000500", @ANYRES32=r4, @ANYBLOB="df3c6956174de49f9ee9ceded847a3ce78c68c438773ee5e15e4d562175d5bca20b1d89bbd20cbf3dd24658562a337425bb5c19cdfde89f84ad706e0dbb116337b6404e90b95ccfa978b5fe99e2df6579959f571f0a23c30ada632b63fd4666c7455632efbf94bdf60d627ba32a603ae14c11ca239ef5491747c6f377076f854fb6af903d4da21058a26653bde419025e0ed360d19e0dcef282ecd980159c8"], 0xc8}, 0x1, 0x0, 0x0, 0x90}, 0x20000800) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000000000000000000100000a3c000000090a010100000000000000000a0000080900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000003c140000fcffffffffffffff00000000000a00000a000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x48090) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 1m34.211015619s ago: executing program 3 (id=1923): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x160, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x126, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x40}, @device_b, @device_a, @initial, {0x1, 0x827}, @value=@ver_80211n={0x0, 0x4, 0x2, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1}}, 0x600, 0x67, @default, @void, @val={0x2d, 0x1a, {0x4000, 0x2, 0x1, 0x0, {0x0, 0x6, 0x0, 0x3, 0x0, 0x1, 0x1, 0x2}, 0x6, 0x0, 0x1c}}, [{0xdd, 0xe2, "4c09a640fc460e5e279b73f5ea99d99327e91f48074a6fd3faf5d5c0a2660406d195ae206a9172c4d7a5d74c75e239bc2be998f9717cc3cc88633590b07395086b12f6761c507458e2d2d319ba8022651c8e1f9f7aa895d9ebd98c0b24902a06f29ea7a8aaf185a59ec8e558e47455734dfc2d401a43ce58d3ca7a452f170a196d956176da250ddc2772ac1a24413c46107573e983540a15c00b84a18c0e4a052ef9117d1a6ed8b6b40266b36398b57212a7ac28c5338cad49a9d386900b39f0492e80416e635b7652320bf7853f98431bccf83ac2e062759e25a04ba891e98cd5ff"}]}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x3]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1110}]}, 0x160}}, 0x4) 1m33.904152529s ago: executing program 1 (id=1924): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, 0x0, 0x6) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, 0x0, 0x44) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x90, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x6d, 0x3, "fd02b21edf8b721e23f25f47a7af48fbb07c400f2ffd8d27130601205b56f46dc2de1fa3d7afb2f185d0371736af66032ae4eed98dbb95537f4f247aa2bc4978345407669db4999bf4d277be1203e812a25bea54f1839749e2fcf0c6c1bb457b5bfa52e41edd07d452"}]}], {0x14}}, 0xd8}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030000000000000003000c000240000000000000000114000000110001"], 0x60}}, 0x0) write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x11}, 0x14) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000300)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xc2}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) write$nci(r0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x4000000) sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 1m33.847329611s ago: executing program 3 (id=1925): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="14010400150001030000000d0000000001000000"], 0x14}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa902}}, 0x0, 0x80a}, &(0x7f0000000080)=0x90) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r3) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xd) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000"/19], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r2, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="100000000000000029000000070000001c00"/28], 0x30}}], 0x1, 0xc0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x9c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x5c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0xca}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x25be}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x3}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x6}}]}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x4}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040041) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x200000000000, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x2, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1m33.794118314s ago: executing program 2 (id=1926): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f00000000c0)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095", @ANYBLOB="50b2b31ebb5c8ebbaeb2eb88db038ca92746a99e723343b57519e8fda39387833635b3c76b1dd4011d8613920f125969336cc0f6dceb671bcab3cb8c779c17e345957bb52ba494a6b48746529ddd584fdf145bae86f757c4441d312ce90391c5eff6dd5997e05d516d5388416351", @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES8=r0, @ANYRES16=0x0, @ANYRES16=r1, @ANYRESDEC=r0, @ANYRES16=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfc79, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac00200325000000a4000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4500000000", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x8100, 0xe, 0x0, &(0x7f00000002c0)="c8e8a1aee95e10e19e01399da26f", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m33.655406122s ago: executing program 0 (id=1927): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000004000071103c00000000001e000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x304, 0x3a}, "56db7a2700f91000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0xffffffffffffff9b) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000080)={0x0, 0x64, &(0x7f0000000000)={&(0x7f0000000100)={0x38, r5, 0x701, 0x0, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_DATA={0x0, 0xc5, "490f168d06c2f77807b2c0d0615667806683cd7c6732f935"}]}, 0x38}}, 0x2404c010) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4c015}, 0x20000804) sendmsg$nl_generic(r4, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xec, 0x3c, 0x10, 0x70bd2b, 0x25dfdbfc, {0x1e}, [@nested={0xd5, 0x16, 0x0, 0x1, [@generic="b37867a8d0ed0e7b6858154ccd8b8e0a2b3b743416c0a3987ddb4d92471e3d34b6cca90590cc53d9db8ec63ad0948dd9de097975ed915feac56d694df28da11cd1cb557195b019c5714031bbe36e10106ac462ea067478667be735a1fd5e5d85dbca739fe13caafd76194f2e90c5b588203a386e267c6ad3b3533f22cff24ffb8784880b4e7a55dbb7d6be2d83d65d63fad53ddb29a7f5c3fb9cdc53d16c9e0deaefd42e84751df0a5818de35f668bfe05d6b4a6d815e462453f347d318b619e93494b41913a520651eb889287", @nested={0x4, 0x12e}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4004000}, 0x8001) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@setlink={0x28, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000013000500"/20, @ANYRES32=r8, @ANYBLOB="000000000000001708000a00", @ANYRES32=r2, @ANYBLOB], 0x28}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 1m33.650017145s ago: executing program 5 (id=1928): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x100, 0x1, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, ',^:{!\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c080}, 0x40000c0) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x100, 0x1, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, ',^:{!\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c080}, 0x40000c0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) (async) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x30, r2, 0x19770000) r5 = openat$cgroup_ro(r2, &(0x7f0000000340)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000380)={0xf, 0x2, 0x4}) (async) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000380)={0xf, 0x2, 0x4}) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x88, r6, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVKEY={0x60, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x5c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x88}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000880) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x88, r6, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVKEY={0x60, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x5c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x88}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000880) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x58, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000040}, 0x40011) openat$cgroup_type(r5, &(0x7f0000000700), 0x2, 0x0) (async) openat$cgroup_type(r5, &(0x7f0000000700), 0x2, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r5) sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r8, 0xd9306449fa2264d4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffffb, 0xd}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x10) epoll_create(0x7) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000880), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r9, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r6, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x2000c000) ioctl$TUNSETCARRIER(r5, 0x400454e2, &(0x7f00000009c0)=0x1) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(r9, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r10, 0x2, 0x70bd25, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc814}, 0x1) (async) sendmsg$IEEE802154_LLSEC_LIST_KEY(r9, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r10, 0x2, 0x70bd25, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc814}, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000dc0)={r5, 0x0, 0x88, 0x53, &(0x7f0000000b40)="27bc1dc773f5b0215c63869da2fbbf537930db202c9b05a18d30bcc56e38083b05c75c6e6e58446f0d212544b28aa29ca126486c3ccec65e047a83a825d463ea68125ab0051b27e3c8d59526f6350647b4639007b15aae3b5a56bc291316e3ed614038c77e877dd0624d3c3e3fdc169dcd5bd1c1f1cdc95d375710dbd7440739f3f6e6cef5189ce5", &(0x7f0000000c00)=""/83, 0x4, 0x0, 0x8a, 0x66, &(0x7f0000000c80)="86798da6a3faef0fb59216acef053b8d909ca82711ee36ac0fde535c72177bb049f6e3885dc84f7a1ce479825913f369ef8c95314e5c411f0f61d74adce0a00d6c250c772cad768556b42bf79219e37d33e767ed5995a3d75b9549e400a9c73d0c202f1d25ccfca02ede7d30558f8e73248e13ed4ea33395acf2cdfdd0f440c610eb3c3c5eab69f40d1d", &(0x7f0000000d40)="4417e87698f7407109e97c3aadcb98544dc42cd517f4ceef2edd8a37eeded6fa31cae2d3d7d5e0dc0a8c01ff50b7c528f069fb906c5f27e06e0eaba0192ef0644c6a21442d21bc879b22efa74e11486d63c66857d3c221215b74b2ef46252612c0be3477c166", 0x1, 0x0, 0xd}, 0x50) socket$pppoe(0x18, 0x1, 0x0) (async) r11 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r11, 0x80047437, &(0x7f0000000e40)) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000e80)) readv(r11, &(0x7f0000001000)=[{&(0x7f0000000ec0)}, {&(0x7f0000000f00)=""/251, 0xfb}], 0x2) (async) readv(r11, &(0x7f0000001000)=[{&(0x7f0000000ec0)}, {&(0x7f0000000f00)=""/251, 0xfb}], 0x2) 1m33.521095896s ago: executing program 2 (id=1929): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0x71, 0xc, 0x43}]}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r3, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x120, 0x0, 0x0) (async) listen(r2, 0xda90) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4068087}, 0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0xc618, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x20, 0x16, 0x107, 0x70bd29, 0x25dddbfe, {0x20, 0x7c}, [@nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc090) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0xfffffffffffffffd, &(0x7f00000003c0)=0x4d) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000040)=@rc={0x1f, @none}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000001c0)}, {&(0x7f0000000340)="a34f9c5eba28f3b075f9c98114aee2b42d9e9eb40df890363f5d9aad5f84fe", 0x1f}], 0x2, &(0x7f00000009c0)=[{0xf8, 0x10d, 0x8, "32041cdf8cac7f0d12c96ac48e59ffa124ca7f10ed76280444b5f0623fe7f2caa65a6e655928ca42ada0a710f8431dcc599d31a5c3e25ade1ff104e0f26666d93db6c5abbae465a842a740aed0e35249c604c5e18c224bb8d875db822ffb8636fd332efeb6ab9ddfc7874460afbec274331cec33ebd9329c51add4704734ca2f1ebe8d16829bd099cc82462b9b920bee7fd1dcbecfd50cc0a0f4615afd92c1387a6848610660af1743f5dac5e1eb68ff117a6d562a48dcdc85e291a2f59425e5319218a1cac39a1285aa8fc09d1e79df20f0e6382ac15ca4ef1b74b9ccd8c1a03a"}, {0x40, 0x116, 0x5, "9aed9e5e59df4be113ed76a666ace6f557688327ad6ee721d93ad1efcb0be730f23ae2769fc32b380c"}, {0xf8, 0x6, 0x6, "0ca0c59b9474578ff5566070bdfdd35212f6989f30beba1b2647940e3de9ee795a261ffc1e05bb1bc77440a573adf2db245abb62b3ab523dcd8ba569aa87f43eee7cbabdeedcbdae41ea65388cd5ed634146e7efac6aa7a02e9216ac3013ecb6965b1b764956b917dba745dd960161d27982f6e20e6ec4ec0b2faf924102052c8c78414918c73efee5eaec86761a80c379eeb4838d53d1ae5f5759765509d77485d76d456fc4ed5d82e7b682b023cf8bc883e09d6fa040ebeed2dc247423b2aeed4914c18d9fc9c531ead6c143e604b1bdb5b09940395f4972b4ef88ec154ef506a57f13aa060b"}, {0x68, 0x109, 0x0, "ba3d5b9d5831f20276daac0ce298baba6e45011a6296affc027e4ea0c62b441438f22e7f83a5cb593a3e118234c723363ee4ccb2ac5c87f1a9eb4973773241d58dac6a49ba108057df54e0f7f803e768e1c0"}], 0x298}, 0x800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x4, 0xa31860206087edf6, 0x3, 0x4, 0x3, 0x4}, 0x20) (async) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) (async) socket$netlink(0x10, 0x3, 0x10) 1m33.240937366s ago: executing program 0 (id=1930): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000040)) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@enum={0x9, 0x4, 0x0, 0x6, 0x4, [{0x7, 0x18}, {0x2, 0xfff}, {0x2, 0x8}, {0x2, 0x401}]}, @fwd={0xe}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x25, 0x6}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x0, [{0x4, 0xfffffffe}]}, @union={0xa, 0x0, 0x0, 0x5, 0x0, 0x8, [{0xf, 0x1, 0x3}, {0x6, 0x0, 0x2}, {0x4, 0x5, 0x9}, {0x3, 0x5, 0x81}, {0x10, 0x1, 0x401}, {0x5, 0x4, 0x5}]}]}, {0x0, [0x30, 0x61, 0x61]}}, 0x0, 0x46}, 0x28) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0xfffffffffffffeaa, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x8081}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x34}}, 0x4000000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r6, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, 0x0, &(0x7f0000000000)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000001e00)={0x18, 0x6c, 0x1, 0x70bd26, 0x25dfdbff, "", [@typed={0x8, 0xd, 0x0, 0x0, @fd}]}, 0x18}], 0x1, 0x0, 0x0, 0x20004880}, 0xc000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x1d6225b, 0x0, 0x0, 0x14}, 0x90) 0s ago: executing program 33 (id=1930): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000040)) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@enum={0x9, 0x4, 0x0, 0x6, 0x4, [{0x7, 0x18}, {0x2, 0xfff}, {0x2, 0x8}, {0x2, 0x401}]}, @fwd={0xe}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x25, 0x6}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x0, [{0x4, 0xfffffffe}]}, @union={0xa, 0x0, 0x0, 0x5, 0x0, 0x8, [{0xf, 0x1, 0x3}, {0x6, 0x0, 0x2}, {0x4, 0x5, 0x9}, {0x3, 0x5, 0x81}, {0x10, 0x1, 0x401}, {0x5, 0x4, 0x5}]}]}, {0x0, [0x30, 0x61, 0x61]}}, 0x0, 0x46}, 0x28) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0xfffffffffffffeaa, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x8081}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x34}}, 0x4000000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r6, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, 0x0, &(0x7f0000000000)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000001e00)={0x18, 0x6c, 0x1, 0x70bd26, 0x25dfdbff, "", [@typed={0x8, 0xd, 0x0, 0x0, @fd}]}, 0x18}], 0x1, 0x0, 0x0, 0x20004880}, 0xc000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x1d6225b, 0x0, 0x0, 0x14}, 0x90) kernel console output (not intermixed with test programs): RBX: 00007f369f5f66c0 RCX: 00007f36a135e98e [ 224.416646][ T9531] RDX: 000000000000000f RSI: 00007f369f5f60a0 RDI: 0000000000000008 [ 224.416679][ T9531] RBP: 00007f369f5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 224.416711][ T9531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.416741][ T9531] R13: 00007f36a1626128 R14: 00007f36a1626090 R15: 00007ffe93c69088 [ 224.416831][ T9531] [ 225.486982][ T9581] __nla_validate_parse: 1 callbacks suppressed [ 225.487033][ T9581] netlink: 32 bytes leftover after parsing attributes in process `syz.1.810'. [ 225.487056][ T9581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.810'. [ 225.487075][ T9581] netlink: 32 bytes leftover after parsing attributes in process `syz.1.810'. [ 225.487100][ T9581] netlink: 16 bytes leftover after parsing attributes in process `syz.1.810'. [ 225.776712][ T9588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.856341][ T9586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.099244][ T9595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.814'. [ 226.099297][ T9595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.814'. [ 226.123692][ T9593] netlink: 104 bytes leftover after parsing attributes in process `syz.5.813'. [ 226.606721][ T9603] netlink: 64 bytes leftover after parsing attributes in process `syz.0.815'. [ 226.727279][ T9607] xt_hashlimit: size too large, truncated to 1048576 [ 226.971973][ T9610] netlink: 'syz.5.816': attribute type 1 has an invalid length. [ 227.244120][ T9622] netlink: 'syz.1.821': attribute type 10 has an invalid length. [ 227.263573][ T9627] netlink: 36 bytes leftover after parsing attributes in process `syz.1.821'. [ 227.289586][ T9610] 8021q: adding VLAN 0 to HW filter on device bond2 [ 227.368012][ T9621] @0Ù: renamed from bond_slave_1 (while UP) [ 227.772372][ T9641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.823'. [ 228.223479][ T9641] hsr_slave_1 (unregistering): left promiscuous mode [ 228.278344][ T9644] tipc: Failed to remove unknown binding: 66,1,1/0:2881704896/2881704898 [ 228.387395][ T12] nci: nci_rx_work: unknown MT 0x6 [ 228.419689][ T9651] netlink: 'syz.0.824': attribute type 4 has an invalid length. [ 228.420628][ T9651] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 229.785434][ T9692] veth0: entered promiscuous mode [ 229.867847][ T9692] veth0: left promiscuous mode [ 231.194368][ T9644] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 231.707378][ T9708] __nla_validate_parse: 5 callbacks suppressed [ 231.707434][ T9708] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.835'. [ 231.725257][ T9708] netlink: 68 bytes leftover after parsing attributes in process `syz.0.835'. [ 232.248707][ T9734] batman_adv: batadv0: Adding interface: gretap1 [ 232.259512][ T9734] batman_adv: batadv0: The MTU of interface gretap1 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.259580][ T9734] batman_adv: batadv0: Interface activated: gretap1 [ 232.324489][ T9740] wg2 speed is unknown, defaulting to 1000 [ 232.380354][ T9736] Bluetooth: MGMT ver 1.23 [ 233.008968][ T9750] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 233.217954][ T9757] netlink: 28 bytes leftover after parsing attributes in process `syz.5.846'. [ 233.218056][ T9757] netlink: 28 bytes leftover after parsing attributes in process `syz.5.846'. [ 233.219778][ T9757] netlink: 8 bytes leftover after parsing attributes in process `syz.5.846'. [ 233.425848][ T9769] xt_TPROXY: Can be used only with -p tcp or -p udp [ 234.049326][ T9785] syzkaller0: entered promiscuous mode [ 234.049370][ T9785] syzkaller0: entered allmulticast mode [ 234.145169][ T9784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.855'. [ 234.505831][ T9789] netlink: 36 bytes leftover after parsing attributes in process `syz.2.857'. [ 235.151879][ T9788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.181758][ T9825] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20001 [ 235.484721][ T31] audit: type=1804 audit(1788525721.945:7): pid=9832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.867" name="/newroot/160/cgroup.controllers" dev="tmpfs" ino=835 res=1 errno=0 [ 235.487914][ T31] audit: type=1800 audit(1788525721.945:8): pid=9832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.867" name="cgroup.controllers" dev="tmpfs" ino=835 res=0 errno=0 [ 235.577919][ T31] audit: type=1804 audit(1788525722.035:9): pid=9832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.867" name="/newroot/160/cgroup.controllers" dev="tmpfs" ino=835 res=1 errno=0 [ 235.727414][ T9836] netlink: 'syz.3.868': attribute type 4 has an invalid length. [ 235.736560][ T9836] netlink: 17 bytes leftover after parsing attributes in process `syz.3.868'. [ 237.853924][ T9812] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 238.389124][ T9860] netlink: 32 bytes leftover after parsing attributes in process `syz.5.876'. [ 238.398899][ T9860] netlink: 32 bytes leftover after parsing attributes in process `syz.5.876'. [ 238.417469][ T9863] netlink: 'syz.1.878': attribute type 29 has an invalid length. [ 238.514375][ T9867] netlink: 16 bytes leftover after parsing attributes in process `syz.1.878'. [ 238.657827][ T9869] wg2 speed is unknown, defaulting to 1000 [ 238.672360][ T9863] netlink: 56 bytes leftover after parsing attributes in process `syz.1.878'. [ 239.143046][ T9888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.885'. [ 239.143152][ T9888] netlink: 'syz.2.885': attribute type 21 has an invalid length. [ 239.310786][ T9895] Bluetooth: ISO socket layer initialized [ 239.644867][ T9897] netlink: 36 bytes leftover after parsing attributes in process `syz.3.886'. [ 239.794434][ T9910] netlink: 32 bytes leftover after parsing attributes in process `syz.5.890'. [ 239.803986][ T9910] netlink: 32 bytes leftover after parsing attributes in process `syz.5.890'. [ 241.118405][ T9959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.901'. [ 241.260490][ T9961] netlink: 'syz.2.902': attribute type 1 has an invalid length. [ 241.269000][ T9961] netlink: 756 bytes leftover after parsing attributes in process `syz.2.902'. [ 241.712668][ T9969] syzkaller0: entered promiscuous mode [ 241.718571][ T9969] syzkaller0: entered allmulticast mode [ 241.731655][ T9969] tipc: Enabled bearer , priority 0 [ 241.875727][ T9969] tipc: Resetting bearer [ 241.962361][ T9967] tipc: Resetting bearer [ 242.267096][ T9967] tipc: Disabling bearer [ 242.800161][ T9981] bond3: option xmit_hash_policy: invalid value (10) [ 242.839066][ T9981] bond3 (unregistering): Released all slaves [ 243.490560][T10023] __nla_validate_parse: 3 callbacks suppressed [ 243.490610][T10023] netlink: 20 bytes leftover after parsing attributes in process `syz.5.920'. [ 243.508138][T10022] netlink: 20 bytes leftover after parsing attributes in process `syz.5.920'. [ 243.553022][T10027] netlink: 20 bytes leftover after parsing attributes in process `syz.5.920'. [ 243.884010][T10041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.924'. [ 243.986841][T10036] geneve2: entered promiscuous mode [ 243.995900][T10045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.923'. [ 244.012793][T10042] netlink: 'syz.0.923': attribute type 12 has an invalid length. [ 244.716291][T10064] atomic_op ffff8880763929e0 conn xmit_atomic 0000000000000000 [ 244.749139][T10064] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3942. macoff=106 [ 244.761911][T10066] netlink: 80 bytes leftover after parsing attributes in process `syz.0.931'. [ 245.332282][T10073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.935'. [ 245.635111][T10082] syzkaller0: entered promiscuous mode [ 245.642418][T10082] syzkaller0: entered allmulticast mode [ 247.150627][T10123] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 247.167582][T10123] bond3 (unregistering): Released all slaves [ 247.181995][T10126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.950'. [ 247.831578][T10144] netlink: 'syz.1.954': attribute type 1 has an invalid length. [ 247.831620][T10144] netlink: 'syz.1.954': attribute type 2 has an invalid length. [ 247.864122][T10144] netlink: 16 bytes leftover after parsing attributes in process `syz.1.954'. [ 248.013190][T10150] netlink: 64 bytes leftover after parsing attributes in process `syz.3.957'. [ 248.361924][T10156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.216726][ T12] IPVS: starting estimator thread 0... [ 249.312321][T10184] IPVS: using max 26 ests per chain, 62400 per kthread [ 249.444901][T10179] IPVS: sh: FWM 3 0x00000003 - no destination available [ 249.708767][T10207] __nla_validate_parse: 3 callbacks suppressed [ 249.708910][T10207] netlink: 8 bytes leftover after parsing attributes in process `syz.5.971'. [ 250.059380][T10211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.973'. [ 250.105947][T10213] IPVS: length: 15 != 8 [ 250.142806][T10213] IPVS: length: 15 != 8 [ 250.478271][T10224] syzkaller1: entered promiscuous mode [ 250.478321][T10224] syzkaller1: entered allmulticast mode [ 250.806946][T10238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.981'. [ 250.877699][T10238] ip6tnl3: entered allmulticast mode [ 251.042509][T10249] netlink: 'syz.0.986': attribute type 2 has an invalid length. [ 251.122275][T10253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.987'. [ 251.186338][T10250] pim6reg1: entered promiscuous mode [ 251.193841][T10250] pim6reg1: entered allmulticast mode [ 251.982674][T10281] netlink: 40 bytes leftover after parsing attributes in process `syz.2.992'. [ 252.003894][T10278] netlink: 'syz.5.991': attribute type 1 has an invalid length. [ 252.498969][T10277] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.499040][T10277] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.766096][T10281] ip6tnl4: entered allmulticast mode [ 253.070441][T10277] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.075828][T10277] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.155113][T10295] netlink: 32 bytes leftover after parsing attributes in process `syz.5.998'. [ 253.155168][T10295] netlink: 32 bytes leftover after parsing attributes in process `syz.5.998'. [ 253.250516][T10297] xt_nat: multiple ranges no longer supported [ 253.314907][T10277] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.314988][T10277] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.639038][T10302] x_tables: duplicate underflow at hook 1 [ 253.650180][T10277] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.650248][T10277] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.982614][T10314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1004'. [ 254.102604][T10314] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 254.223164][ T6036] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.223237][ T6036] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.258447][T10311] wg2 speed is unknown, defaulting to 1000 [ 254.372607][ T6036] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.372676][ T6036] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.683987][ T6036] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.684066][ T6036] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.012748][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.022246][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.093935][T10336] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1010'. [ 255.093994][T10336] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1010'. [ 255.156202][T10331] netlink: 'syz.2.1008': attribute type 1 has an invalid length. [ 255.156250][T10331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1008'. [ 255.492225][T10346] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1013'. [ 255.619742][T10349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1012'. [ 256.049156][T10362] netlink: 'syz.5.1016': attribute type 1 has an invalid length. [ 256.204214][T10373] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1021'. [ 256.204270][T10373] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1021'. [ 256.270619][T10362] gretap2: entered allmulticast mode [ 256.329995][T10362] bond3: (slave gretap2): making interface the new active one [ 256.338935][T10362] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 256.342608][T10365] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1020'. [ 258.343704][T10433] netlink: Invalid conntrack helper [ 258.350064][T10433] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.512661][T10438] openvswitch: netlink: IPv4 tun info is not correct [ 258.670448][T10440] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1032'. [ 258.681196][T10440] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1032'. [ 259.114093][T10384] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 259.449876][T10456] netlink: 'syz.0.1037': attribute type 3 has an invalid length. [ 259.762723][T10444] bridge2: port 1(erspan0) entered disabled state [ 259.983312][T10473] netlink: 'syz.2.1040': attribute type 1 has an invalid length. [ 260.895100][T10444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.984746][T10444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.340496][T10444] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 261.362346][T10444] batman_adv: batadv0: Interface deactivated: gretap1 [ 261.418402][T10473] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 261.617064][T10485] __nla_validate_parse: 1 callbacks suppressed [ 261.617121][T10485] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1043'. [ 261.617153][T10485] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1043'. [ 261.699027][ T3295] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.699518][ T3295] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.708400][ T6037] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.874594][ T9426] wg2 speed is unknown, defaulting to 1000 [ 261.881743][ T6036] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.901658][ T9426] syz2: Port: 1 Link DOWN [ 262.037264][T10489] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1042'. [ 262.139623][T10492] netlink: 'syz.5.1044': attribute type 10 has an invalid length. [ 262.201948][T10497] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1044'. [ 262.298351][T10488] IPVS: Error connecting to the multicast addr [ 262.390346][T10497] bridge_slave_1: left allmulticast mode [ 262.390393][T10497] bridge_slave_1: left promiscuous mode [ 262.390649][T10497] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.513528][T10497] bridge_slave_0: left allmulticast mode [ 262.513655][T10497] bridge_slave_0: left promiscuous mode [ 262.529288][T10497] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.876980][T10483] wg2 speed is unknown, defaulting to 1000 [ 263.904117][T10537] netlink: 'syz.5.1053': attribute type 9 has an invalid length. [ 264.202014][T10547] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1055'. [ 264.202151][T10547] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1055'. [ 264.311743][T10552] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1056'. [ 264.321493][T10543] syzkaller0: entered promiscuous mode [ 264.327098][T10543] syzkaller0: entered allmulticast mode [ 264.588841][T10559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1060'. [ 264.818305][T10565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1058'. [ 264.876005][T10575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1063'. [ 264.969430][T10579] netlink: 'syz.1.1063': attribute type 1 has an invalid length. [ 265.076133][T10576] raw_sendmsg: syz.5.1062 forgot to set AF_INET. Fix it! [ 265.227744][T10579] bond3: entered promiscuous mode [ 265.231971][T10579] bond3: entered allmulticast mode [ 265.233223][T10579] 8021q: adding VLAN 0 to HW filter on device bond3 [ 265.255175][T10596] netlink: 'syz.0.1064': attribute type 21 has an invalid length. [ 265.263513][T10596] IPv6: NLM_F_CREATE should be specified when creating new route [ 265.275883][T10584] erspan1: entered allmulticast mode [ 265.289360][T10584] bond3: (slave erspan1): making interface the new active one [ 265.289439][T10584] erspan1: entered promiscuous mode [ 265.303527][T10584] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 265.355165][T10588] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 265.400111][T10579] syz.1.1063 (10579) used obsolete PPPIOCDETACH ioctl [ 265.597514][T10603] netlink: 'syz.2.1066': attribute type 32 has an invalid length. [ 265.872353][T10606] pim6reg: entered allmulticast mode [ 265.945614][T10617] ref_ctr_offset mismatch. inode: 0x82 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 265.979895][T10612] netlink: 'syz.5.1069': attribute type 10 has an invalid length. [ 266.152659][T10612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.210721][T10612] team0: Port device bond0 added [ 266.286993][T10606] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 266.397962][T10626] netlink: 'syz.1.1072': attribute type 1 has an invalid length. [ 266.411969][T10626] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.433606][T10605] pim6reg: left allmulticast mode [ 266.779185][T10634] netlink: 'syz.1.1075': attribute type 13 has an invalid length. [ 266.847719][T10633] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.944018][T10661] __nla_validate_parse: 5 callbacks suppressed [ 267.944143][T10661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1080'. [ 268.692219][T10676] netlink: 'syz.1.1084': attribute type 1 has an invalid length. [ 268.796529][T10674] netlink: 'syz.3.1082': attribute type 13 has an invalid length. [ 268.907118][T10676] bond4: entered promiscuous mode [ 268.917621][T10676] 8021q: adding VLAN 0 to HW filter on device bond4 [ 269.743110][T10699] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.242396][ T3295] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.242518][ T3295] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.242683][ T3295] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.242754][ T3295] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.242848][ T3295] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.242918][ T3295] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.243011][ T3295] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.243080][ T3295] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.556025][T10715] ip6tnl0: Caught tx_queue_len zero misconfig [ 270.903759][T10717] veth5: entered promiscuous mode [ 270.903860][T10717] veth5: entered allmulticast mode [ 270.937972][T10717] team0: Device veth5 is up. Set it down before adding it as a team port [ 271.489730][T10750] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1096'. [ 271.809877][T10756] bond0: Caught tx_queue_len zero misconfig [ 271.983707][T10762] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1099'. [ 272.026332][T10761] netlink: 'syz.2.1099': attribute type 2 has an invalid length. [ 272.587962][T10776] tipc: Enabled bearer , priority 10 [ 272.657550][T10774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1104'. [ 272.779888][T10780] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 272.839435][T10781] lo: entered allmulticast mode [ 272.852601][T10785] macsec0: entered promiscuous mode [ 272.869486][T10783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1107'. [ 272.884254][T10783] macsec0 (unregistering): left promiscuous mode [ 273.108248][T10778] lo: left allmulticast mode [ 273.704530][ T10] tipc: Node number set to 3147967305 [ 275.269030][T10847] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 275.331610][T10845] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1126'. [ 275.342724][T10845] ovs-system: left promiscuous mode [ 275.388075][T10845] Virtual device ovs-system asks to queue packet! [ 276.124622][T10873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1133'. [ 276.209657][T10852] team0 (unregistering): Port device team_slave_0 removed [ 276.229419][T10852] team0 (unregistering): Port device team_slave_1 removed [ 276.260676][T10852] team0 (unregistering): Port device bond0 removed [ 276.365957][T10858] batadv_slave_1: entered promiscuous mode [ 276.497935][T10873] veth5: entered allmulticast mode [ 276.539809][T10857] batadv_slave_1: left promiscuous mode [ 278.735883][T10953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1150'. [ 278.768830][T10950] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) ! [ 278.826549][T10940] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1148'. [ 278.886109][T10951] netlink: 'syz.1.1150': attribute type 12 has an invalid length. [ 278.896261][T10953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1150'. [ 278.937335][T10940] bond4: (slave dummy0): Releasing active interface [ 279.487716][T10955] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 279.487782][T10955] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 279.487823][T10955] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 279.567508][T10982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.698712][T10987] netlink: 200 bytes leftover after parsing attributes in process `syz.5.1156'. [ 280.172651][T11001] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1159'. [ 280.181480][T11001] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1159'. [ 280.181620][T11001] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1159'. [ 280.924227][T11015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1161'. [ 281.423637][T11037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1166'. [ 281.526355][T11039] netlink: 'syz.1.1166': attribute type 21 has an invalid length. [ 281.544499][T11021] syzkaller0: entered promiscuous mode [ 281.544545][T11021] syzkaller0: entered allmulticast mode [ 281.658156][T11043] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 282.090040][T11056] netlink: 'syz.3.1169': attribute type 1 has an invalid length. [ 285.197262][T11039] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1166'. [ 285.280520][T11058] gre0: entered promiscuous mode [ 285.280564][T11058] gre0: entered allmulticast mode [ 285.281856][T11058] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 285.808056][T11091] mac80211_hwsim hwsim18 wlan0: left promiscuous mode [ 285.808108][T11091] mac80211_hwsim hwsim18 wlan0: left allmulticast mode [ 285.830720][T11091] ip6gretap1: left allmulticast mode [ 285.836951][T11091] vlan2: left allmulticast mode [ 285.842560][T11091] bridge2: left allmulticast mode [ 285.848171][T11091] veth3: left allmulticast mode [ 285.855428][T11091] geneve2: left promiscuous mode [ 285.866120][T11091] gretap2: left allmulticast mode [ 286.075223][T11107] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1174'. [ 286.530631][T11114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 286.618352][T11114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1177'. [ 286.675578][T11123] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1179'. [ 286.719806][T11114] bond4: option ad_actor_sys_prio: invalid value (0) [ 286.729543][T11114] bond4: option ad_actor_sys_prio: allowed values 1 - 65535 [ 286.750191][T11114] bond4 (unregistering): Released all slaves [ 287.275740][ T13] IPVS: starting estimator thread 0... [ 287.371786][T11144] IPVS: using max 25 ests per chain, 60000 per kthread [ 287.787204][T11157] netlink: 'syz.1.1186': attribute type 4 has an invalid length. [ 288.216735][T11140] netlink: 'syz.3.1183': attribute type 10 has an invalid length. [ 288.910178][T11192] bridge9: entered promiscuous mode [ 288.916869][T11192] bridge9: entered allmulticast mode [ 288.946362][T11192] team0: Port device bridge9 added [ 289.033269][T11197] bridge0: port 2(team0) entered blocking state [ 289.095374][T11197] bridge0: port 2(team0) entered disabled state [ 289.130759][T11197] team0: entered allmulticast mode [ 289.139505][T11197] team_slave_0: entered allmulticast mode [ 289.145688][T11197] team_slave_1: entered allmulticast mode [ 289.224474][T11197] team0: entered promiscuous mode [ 289.224584][T11197] team_slave_0: entered promiscuous mode [ 289.255157][T11197] team_slave_1: entered promiscuous mode [ 289.445160][T11201] ipvlan1: entered allmulticast mode [ 289.451965][T11201] macvlan1: entered allmulticast mode [ 289.457617][T11201] veth1_vlan: entered allmulticast mode [ 289.486376][T11201] batman_adv: batadv0: Adding interface: ipvlan1 [ 289.493473][T11201] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.521899][T11201] batman_adv: batadv0: Interface activated: ipvlan1 [ 289.962336][T11216] ip6gretap0: entered allmulticast mode [ 290.028694][T11216] batman_adv: batadv0: Adding interface: ip6gretap0 [ 290.028768][T11216] batman_adv: batadv0: The MTU of interface ip6gretap0 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.073396][T11216] batman_adv: batadv0: Interface activated: ip6gretap0 [ 290.202605][T11230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1200'. [ 290.658711][T11243] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1204'. [ 291.117984][T11254] ip6gre2: entered promiscuous mode [ 291.127235][T11254] ip6gre2: entered allmulticast mode [ 291.415485][T11263] geneve2: entered promiscuous mode [ 291.432017][ T6036] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.442569][ T6036] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.452776][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.454320][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.565536][ T13] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 291.609073][ T13] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 291.615749][ T9438] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 291.832696][ T9438] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 291.869169][T11272] 8021q: VLANs not supported on ip6tnl0 [ 291.941768][T11270] wg2 speed is unknown, defaulting to 1000 [ 292.063810][T11289] 8021q: VLANs not supported on ip6tnl0 [ 292.191552][ T9438] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 292.201099][T11291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1215'. [ 292.936186][T11310] netlink: 'syz.5.1218': attribute type 1 has an invalid length. [ 292.936288][T11310] netlink: 756 bytes leftover after parsing attributes in process `syz.5.1218'. [ 293.068232][T11314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1221'. [ 293.320208][T11331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1220'. [ 293.375949][T11326] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 293.705992][T11337] gretap4: entered promiscuous mode [ 293.762871][T11345] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1227'. [ 294.346308][T11369] FAULT_INJECTION: forcing a failure. [ 294.346308][T11369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.364004][T11369] CPU: 0 UID: 0 PID: 11369 Comm: syz.3.1235 Not tainted syzkaller #0 PREEMPT(full) [ 294.364036][T11369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 294.364060][T11369] Call Trace: [ 294.364068][T11369] [ 294.364077][T11369] dump_stack_lvl+0xe8/0x150 [ 294.364116][T11369] should_fail_ex+0x410/0x560 [ 294.364156][T11369] _copy_from_user+0x2d/0xb0 [ 294.364179][T11369] ___sys_sendmsg+0x1c6/0x360 [ 294.364202][T11369] ? __lock_acquire+0x6df/0x2e50 [ 294.364231][T11369] ? __pfx____sys_sendmsg+0x10/0x10 [ 294.364259][T11369] ? kstrtouint+0x6e/0xe0 [ 294.364315][T11369] ? __fget_files+0x2a/0x420 [ 294.364344][T11369] ? __fget_files+0x3a2/0x420 [ 294.364385][T11369] __sys_sendmmsg+0x273/0x4d0 [ 294.364424][T11369] ? __pfx___sys_sendmmsg+0x10/0x10 [ 294.364456][T11369] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 294.364506][T11369] ? ksys_write+0x242/0x270 [ 294.364542][T11369] ? __pfx_ksys_write+0x10/0x10 [ 294.364581][T11369] __x64_sys_sendmmsg+0xa0/0xc0 [ 294.364607][T11369] do_syscall_64+0x166/0x520 [ 294.364636][T11369] ? trace_irq_disable+0x3b/0x140 [ 294.364657][T11369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.364680][T11369] ? clear_bhb_loop+0x70/0xc0 [ 294.364708][T11369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.364730][T11369] RIP: 0033:0x7f0b4c59e159 [ 294.364751][T11369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.364771][T11369] RSP: 002b:00007f0b4a7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 294.364796][T11369] RAX: ffffffffffffffda RBX: 00007f0b4c825fa0 RCX: 00007f0b4c59e159 [ 294.364814][T11369] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 294.364829][T11369] RBP: 00007f0b4a7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 294.364844][T11369] R10: 00000000000000fc R11: 0000000000000246 R12: 0000000000000001 [ 294.364858][T11369] R13: 00007f0b4c826038 R14: 00007f0b4c825fa0 R15: 00007ffff11b2c68 [ 294.364893][T11369] [ 294.696767][T11373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1238'. [ 294.827909][T11382] xt_MASQUERADE: bad rangesize 20224 [ 295.136073][T11362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.136130][T11391] syzkaller1: entered promiscuous mode [ 295.136156][T11391] syzkaller1: entered allmulticast mode [ 295.440394][T11397] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1244'. [ 295.460383][T11397] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1244'. [ 296.001306][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 296.326761][T11423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1249'. [ 296.326816][T11423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1249'. [ 297.327020][T11445] syzkaller0: entered promiscuous mode [ 297.333294][T11445] syzkaller0: entered allmulticast mode [ 297.351003][ T6193] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.351096][ T6193] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.351154][ T6193] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.379933][ T6036] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.735946][T11445] Bluetooth: MGMT ver 1.23 [ 298.387625][T11489] __nla_validate_parse: 1 callbacks suppressed [ 298.387690][T11489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1262'. [ 298.387724][T11489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1262'. [ 298.619215][T11487] batman_adv: batadv0: Adding interface: veth0 [ 298.619312][T11487] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.621358][T11487] batman_adv: batadv0: Interface activated: veth0 [ 298.648363][T11492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.720633][T11492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.787263][T11492] batman_adv: batadv0: Removing interface: ip6gretap1 [ 298.817175][T11492] batman_adv: batadv0: Removing interface: gretap1 [ 298.830156][T11492] batman_adv: batadv0: Interface deactivated: veth0 [ 298.837509][T11492] batman_adv: batadv0: Removing interface: veth0 [ 298.913554][T11506] netlink: 'syz.2.1265': attribute type 1 has an invalid length. [ 299.197522][T11506] 8021q: adding VLAN 0 to HW filter on device bond7 [ 299.342103][T11509] bond7: (slave gretap1): making interface the new active one [ 299.382930][T11509] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 299.806801][T11535] ±ÿ: renamed from lo [ 299.898402][T11535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1271'. [ 300.017042][T11541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1275'. [ 300.017097][T11541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1275'. [ 300.201936][T11537] syzkaller0: entered promiscuous mode [ 300.201981][T11537] syzkaller0: entered allmulticast mode [ 300.283319][T11549] tap0: tun_chr_ioctl cmd 2148553947 [ 300.348321][T11540] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1272'. [ 300.379830][T11554] netlink: 'syz.2.1278': attribute type 11 has an invalid length. [ 300.379997][T11554] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1278'. [ 300.594474][T11554] syzkaller0: entered promiscuous mode [ 300.600280][T11554] syzkaller0: entered allmulticast mode [ 301.060668][T11578] netlink: 'syz.3.1281': attribute type 1 has an invalid length. [ 301.099603][T11580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1283'. [ 301.268735][T11584] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1282'. [ 301.529353][T11575] bond8: (slave veth7): Enslaving as an active interface with a down link [ 301.920491][T11610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1285'. [ 302.363113][T11624] netlink: 'syz.0.1288': attribute type 13 has an invalid length. [ 302.561160][ T9423] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 302.656569][T11641] xt_hashlimit: size too large, truncated to 1048576 [ 302.665464][T11641] xt_hashlimit: max too large, truncated to 1048576 [ 302.801456][ T9423] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 303.227195][T11647] veth1_to_team: Caught tx_queue_len zero misconfig [ 304.324112][T11687] netlink: 'syz.0.1304': attribute type 1 has an invalid length. [ 304.561549][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 305.227214][T11723] block nbd0: Unsupported socket: should be TCP or UNIX. [ 305.238517][T11695] lo: Caught tx_queue_len zero misconfig [ 305.437766][T11703] veth5: entered allmulticast mode [ 305.451960][T11703] bond4: (slave veth5): Enslaving as an active interface with a down link [ 305.599178][T11705] veth7: entered allmulticast mode [ 305.618803][T11705] bond4: (slave veth7): Enslaving as an active interface with a down link [ 305.767276][T11722] __nla_validate_parse: 2 callbacks suppressed [ 305.767373][T11722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1309'. [ 306.225426][T11748] netlink: 'syz.0.1312': attribute type 1 has an invalid length. [ 306.225532][T11748] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1312'. [ 306.904092][T11778] netlink: 67 bytes leftover after parsing attributes in process `syz.5.1319'. [ 307.086629][T11780] bond4: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 307.100752][T11780] bond4 (unregistering): Released all slaves [ 307.839465][T11800] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1327'. [ 307.854308][T11800] nbd: must specify a device to reconfigure [ 307.969616][T11806] syzkaller0: entered promiscuous mode [ 307.975663][T11806] syzkaller0: entered allmulticast mode [ 308.025802][T11808] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1325'. [ 308.066648][T11808] netlink: 564 bytes leftover after parsing attributes in process `syz.1.1325'. [ 308.376361][T11813] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1329'. [ 308.457778][T11817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1330'. [ 308.457874][T11817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1330'. [ 308.476357][T11817] netlink: 'syz.2.1330': attribute type 14 has an invalid length. [ 308.486162][T11817] netlink: 'syz.2.1330': attribute type 13 has an invalid length. [ 308.518733][T11819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1330'. [ 308.521186][T11819] netlink: 'syz.2.1330': attribute type 14 has an invalid length. [ 308.521231][T11819] netlink: 'syz.2.1330': attribute type 13 has an invalid length. [ 308.902790][T11828] openvswitch: netlink: IP tunnel dst address not specified [ 309.038217][T11825] netlink: 'syz.2.1331': attribute type 1 has an invalid length. [ 309.191045][T11825] 8021q: adding VLAN 0 to HW filter on device bond8 [ 309.254470][ T9427] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 309.412353][ T9423] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 310.706581][ T5618] block nbd0: Receive control failed (result -1) [ 311.953900][T11919] netlink: 'syz.2.1352': attribute type 1 has an invalid length. [ 312.127615][T11919] bond9: entered promiscuous mode [ 312.137168][T11919] bond9: entered allmulticast mode [ 312.137640][T11919] 8021q: adding VLAN 0 to HW filter on device bond9 [ 312.193687][T11920] erspan1: entered allmulticast mode [ 312.219884][T11920] bond9: (slave erspan1): making interface the new active one [ 312.219931][T11920] erspan1: entered promiscuous mode [ 312.238620][T11920] bond9: (slave erspan1): Enslaving as an active interface with an up link [ 312.696444][T11938] IPVS: length: 1310721 != 24 [ 312.814012][T11920] syz.2.1352 (11920) used greatest stack depth: 17120 bytes left [ 312.965940][T11948] __nla_validate_parse: 4 callbacks suppressed [ 312.966002][T11948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1358'. [ 313.212559][T11958] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 313.220190][T11958] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 313.226266][T11958] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 314.575383][T11986] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1365'. [ 314.593377][T11986] tunl0: Caught tx_queue_len zero misconfig [ 314.615267][T11986] nbd: must specify an index to disconnect [ 314.650766][T11991] nbd: must specify an index to disconnect [ 314.868308][T11993] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1367'. [ 315.284307][T12003] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1370'. [ 315.324085][T12003] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1370'. [ 315.364491][T12003] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1370'. [ 315.694264][T12013] syzkaller0: entered promiscuous mode [ 315.702927][T12013] syzkaller0: entered allmulticast mode [ 315.870091][T12022] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1375'. [ 316.087629][T12024] netlink: 'syz.3.1377': attribute type 16 has an invalid length. [ 316.096078][T12024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1377'. [ 316.369977][T12039] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1379'. [ 316.712575][T12042] bridge4: entered promiscuous mode [ 316.712677][T12042] bridge4: entered allmulticast mode [ 316.815136][T12042] team0: Port device bridge4 added [ 316.840745][T12049] bridge5: entered promiscuous mode [ 316.846497][T12049] bridge5: entered allmulticast mode [ 316.856937][T12049] team0: Port device bridge5 added [ 316.864127][T12052] bridge0: port 1(team0) entered blocking state [ 316.872807][T12052] bridge0: port 1(team0) entered disabled state [ 316.879372][T12052] team0: entered allmulticast mode [ 316.891556][T12054] bridge0: port 1(team0) entered blocking state [ 316.898701][T12054] bridge0: port 1(team0) entered disabled state [ 316.898896][T12054] team0: entered allmulticast mode [ 316.919802][T12054] team0: entered promiscuous mode [ 317.259589][T12047] syzkaller0: entered promiscuous mode [ 317.259638][T12047] syzkaller0: entered allmulticast mode [ 318.480314][ T9094] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x32 [ 318.921384][T12094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1391'. [ 320.906360][T12081] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1387'. [ 320.954625][T12063] wg2 speed is unknown, defaulting to 1000 [ 321.201313][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 322.315701][T12147] netlink: 'syz.1.1402': attribute type 1 has an invalid length. [ 322.349131][T12147] 8021q: adding VLAN 0 to HW filter on device bond5 [ 322.433141][T12147] veth9: entered allmulticast mode [ 322.459936][T12147] bond5: (slave veth9): Enslaving as an active interface with an up link [ 322.677174][T12156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1404'. [ 322.766621][T12156] netlink: 'syz.0.1404': attribute type 1 has an invalid length. [ 322.946181][T12159] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1405'. [ 323.292752][T12167] syzkaller0: entered promiscuous mode [ 323.292803][T12167] syzkaller0: entered allmulticast mode [ 323.320204][T12167] tipc: Started in network mode [ 323.320263][T12167] tipc: Node identity 0a2a40801a35, cluster identity 4711 [ 323.368323][T12167] tipc: Enabled bearer , priority 0 [ 323.413277][T12167] syzkaller0: mtu greater than device maximum [ 323.435715][T12167] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1407'. [ 323.578141][T12166] tipc: Resetting bearer [ 323.806904][T12166] tipc: Disabling bearer [ 323.843992][T12178] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1409'. [ 323.977830][T12178] smbdirect: ib_dev[syz1] removed [ 323.998858][T12180] tc_dump_action: action bad kind [ 324.171205][T12188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1412'. [ 325.224802][T12221] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1417'. [ 325.224978][T12221] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1417'. [ 325.278078][T12221] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1417'. [ 325.278243][T12221] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1417'. [ 325.303360][T12221] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1417'. [ 325.303516][T12221] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1417'. [ 325.338172][T12221] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1417'. [ 325.338472][T12221] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1417'. [ 325.391971][T12221] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1417'. [ 325.820326][T12237] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20002 [ 325.820462][T12237] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20002 [ 325.820585][T12237] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20002 [ 325.820657][T12237] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20002 [ 325.820746][T12237] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20002 [ 325.820946][T12237] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20002 [ 325.821015][T12237] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20002 [ 325.821086][T12237] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20002 [ 325.821177][T12237] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20002 [ 325.821245][T12237] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20002 [ 325.821339][T12237] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20002 [ 325.821407][T12237] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20002 [ 325.821476][T12237] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20002 [ 325.821544][T12237] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20002 [ 325.821630][T12237] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20002 [ 325.821698][T12237] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20002 [ 325.821777][T12237] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20002 [ 325.821864][T12237] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20002 [ 325.821933][T12237] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20002 [ 325.822002][T12237] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20002 [ 325.822070][T12237] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20002 [ 325.822139][T12237] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20002 [ 325.822221][T12237] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20002 [ 325.822295][T12237] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20002 [ 325.822364][T12237] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20002 [ 326.001314][T12237] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20002 [ 326.016610][T12237] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20002 [ 326.016660][T12237] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20002 [ 326.016689][T12237] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20002 [ 326.016716][T12237] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20002 [ 326.016743][T12237] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20002 [ 326.016769][T12237] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20002 [ 326.016797][T12237] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20002 [ 326.668744][T12258] netlink: NAT attribute has 4 unknown bytes [ 326.668934][T12258] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.954559][T12268] bridge5: entered promiscuous mode [ 326.954600][T12268] bridge5: entered allmulticast mode [ 326.973840][T12268] team0: Port device bridge5 added [ 327.421140][ T9113] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.443339][ T6036] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.443410][ T6036] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.443468][ T6036] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.203840][T12299] xt_CT: You must specify a L4 protocol and not use inversions on it [ 328.911403][T12317] bridge10: entered promiscuous mode [ 328.914059][T12317] bridge10: entered allmulticast mode [ 328.948278][T12317] team0: Port device bridge10 added [ 329.073143][T12318] veth0: Caught tx_queue_len zero misconfig [ 329.242119][T12299] wg2 speed is unknown, defaulting to 1000 [ 329.547029][T12336] __nla_validate_parse: 17 callbacks suppressed [ 329.547082][T12336] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1442'. [ 330.092677][T12346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 330.393664][T12351] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1449'. [ 330.403822][T12351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1449'. [ 330.422510][T12351] netlink: 'syz.0.1449': attribute type 1 has an invalid length. [ 330.432390][T12351] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1449'. [ 333.159877][T12366] bridge6: entered promiscuous mode [ 333.159924][T12366] bridge6: entered allmulticast mode [ 333.179418][T12366] team0: Port device bridge6 added [ 333.294894][T12386] openvswitch: netlink: Duplicate or invalid key (type 0). [ 333.306344][T12373] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 333.321414][T12386] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1457'. [ 333.496531][T12389] xt_policy: output policy not valid in PREROUTING and INPUT [ 333.628970][T12380] wg2 speed is unknown, defaulting to 1000 [ 333.651749][T12392] IPv6: NLM_F_CREATE should be specified when creating new route [ 333.769138][T12395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1460'. [ 333.964082][ T9094] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.964368][ T9094] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.372092][ T6193] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.382531][ T6190] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.613922][T12412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1463'. [ 334.919979][T12416] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 335.419604][T12430] bridge11: entered promiscuous mode [ 335.419651][T12430] bridge11: entered allmulticast mode [ 335.454534][T12430] team0: Port device bridge11 added [ 335.832621][T12441] ì: renamed from bond_slave_0 (while UP) [ 336.055693][T12449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1474'. [ 336.169196][T12449] bond0: entered promiscuous mode [ 336.216849][T12449] bond0: left promiscuous mode [ 336.291403][T12453] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1475'. [ 336.425090][T12457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1475'. [ 336.833171][T12460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.058961][T12476] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1478'. [ 337.194245][T12474] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1478'. [ 337.229345][T12474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1478'. [ 337.375683][T12480] bridge6: entered promiscuous mode [ 337.382542][T12480] bridge6: entered allmulticast mode [ 337.393323][T12480] team0: Port device bridge6 added [ 337.983615][T12505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1488'. [ 338.081263][T12499] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1486'. [ 338.460245][T12517] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1491'. [ 338.569369][T12523] netlink: 'syz.3.1493': attribute type 1 has an invalid length. [ 338.821978][T12537] ip_tables: iptables: counters copy to user failed while replacing table [ 339.136025][T12538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.136074][T12538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.145002][T12538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.145028][T12538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.099546][T12585] __nla_validate_parse: 3 callbacks suppressed [ 340.099597][T12585] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1504'. [ 340.427732][T12585] bond6: option packets_per_slave: invalid value (558759946) [ 340.427789][T12585] bond6: option packets_per_slave: allowed values 0 - 65535 [ 340.460998][T12606] netlink: 'syz.2.1509': attribute type 16 has an invalid length. [ 340.461043][T12606] netlink: 'syz.2.1509': attribute type 17 has an invalid length. [ 340.478380][T12585] bond6 (unregistering): Released all slaves [ 340.785110][T12613] bond6: entered allmulticast mode [ 341.120628][T12625] xt_l2tp: missing protocol rule (udp|l2tpip) [ 341.358405][T12627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1513'. [ 341.490370][T12627] veth11: entered promiscuous mode [ 341.563853][T12638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1515'. [ 341.563909][T12638] batman_adv: batadv0: Interface deactivated: ip6gretap0 [ 341.563948][T12638] batman_adv: batadv0: Removing interface: ip6gretap0 [ 342.712907][T12677] FAULT_INJECTION: forcing a failure. [ 342.712907][T12677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.712981][T12677] CPU: 0 UID: 0 PID: 12677 Comm: syz.3.1524 Not tainted syzkaller #0 PREEMPT(full) [ 342.713012][T12677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 342.713043][T12677] Call Trace: [ 342.713053][T12677] [ 342.713063][T12677] dump_stack_lvl+0xe8/0x150 [ 342.713100][T12677] should_fail_ex+0x410/0x560 [ 342.713139][T12677] _copy_from_user+0x2d/0xb0 [ 342.713163][T12677] ___sys_sendmsg+0x1c6/0x360 [ 342.713186][T12677] ? __lock_acquire+0x6df/0x2e50 [ 342.713213][T12677] ? __pfx____sys_sendmsg+0x10/0x10 [ 342.713273][T12677] ? __fget_files+0x2a/0x420 [ 342.713300][T12677] ? __fget_files+0x3a2/0x420 [ 342.713339][T12677] __x64_sys_sendmsg+0x1b1/0x290 [ 342.713366][T12677] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 342.713411][T12677] do_syscall_64+0x166/0x520 [ 342.713442][T12677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.713466][T12677] ? clear_bhb_loop+0x70/0xc0 [ 342.713494][T12677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.713518][T12677] RIP: 0033:0x7f0b4c59e159 [ 342.713539][T12677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.713559][T12677] RSP: 002b:00007f0b4a7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.713583][T12677] RAX: ffffffffffffffda RBX: 00007f0b4c825fa0 RCX: 00007f0b4c59e159 [ 342.713600][T12677] RDX: 0000000000000000 RSI: 00002000000018c0 RDI: 0000000000000003 [ 342.713614][T12677] RBP: 00007f0b4a7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 342.713628][T12677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.713642][T12677] R13: 00007f0b4c826038 R14: 00007f0b4c825fa0 R15: 00007ffff11b2c68 [ 342.713676][T12677] [ 342.827332][T12672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1523'. [ 343.075980][T12670] 8021q: adding VLAN 0 to HW filter on device bond10 [ 343.082953][T12681] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1525'. [ 343.302411][T12660] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 343.615345][T12692] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1526'. [ 343.860563][T12705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1531'. [ 344.002433][T12704] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1531'. [ 344.002487][T12704] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1531'. [ 344.012921][T12707] xt_bpf: check failed: parse error [ 344.217076][T12706] syzkaller0: entered promiscuous mode [ 344.217131][T12706] syzkaller0: entered allmulticast mode [ 344.312832][ T1219] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 345.041373][ T1219] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 345.128936][T12726] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1537'. [ 347.792418][T12751] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1540'. [ 348.290714][T12774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.694897][T12746] veth1_vlan: left allmulticast mode [ 350.331073][T12746] batman_adv: batadv0: Interface deactivated: ipvlan1 [ 350.473873][ T9094] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.473947][ T9094] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.474009][ T9094] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.474094][ T9094] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.852411][T12777] wg2 speed is unknown, defaulting to 1000 [ 351.966436][T12816] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 352.323504][T12822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1556'. [ 352.349957][T12822] FAULT_INJECTION: forcing a failure. [ 352.349957][T12822] name failslab, interval 1, probability 0, space 0, times 0 [ 352.350041][T12822] CPU: 0 UID: 0 PID: 12822 Comm: syz.1.1556 Not tainted syzkaller #0 PREEMPT(full) [ 352.350068][T12822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 352.350083][T12822] Call Trace: [ 352.350093][T12822] [ 352.350102][T12822] dump_stack_lvl+0xe8/0x150 [ 352.350234][T12822] should_fail_ex+0x410/0x560 [ 352.350370][T12822] ? __alloc_skb+0x1db/0x7a0 [ 352.350498][T12822] should_failslab+0xa8/0x100 [ 352.350555][T12822] ? __alloc_skb+0x1db/0x7a0 [ 352.350583][T12822] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 352.350630][T12822] ? __alloc_skb+0x18d/0x7a0 [ 352.350661][T12822] ? __alloc_skb+0x1db/0x7a0 [ 352.350699][T12822] __alloc_skb+0x1db/0x7a0 [ 352.350740][T12822] netlink_ack+0x136/0xb30 [ 352.350839][T12822] netlink_rcv_skb+0x2a4/0x4a0 [ 352.350866][T12822] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 352.350922][T12822] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 352.350958][T12822] ? bpf_lsm_capable+0x9/0x20 [ 352.351016][T12822] ? security_capable+0x7e/0x2c0 [ 352.351131][T12822] nfnetlink_rcv+0x2b9/0x28c0 [ 352.351158][T12822] ? __dev_queue_xmit+0x29b/0x3820 [ 352.351234][T12822] ? __local_bh_enable_ip+0xd6/0x140 [ 352.351289][T12822] ? lockdep_hardirqs_on+0x7b/0x110 [ 352.351379][T12822] ? __dev_queue_xmit+0x29b/0x3820 [ 352.351402][T12822] ? __local_bh_enable_ip+0xd6/0x140 [ 352.351431][T12822] ? __dev_queue_xmit+0x29b/0x3820 [ 352.351454][T12822] ? __dev_queue_xmit+0x1edc/0x3820 [ 352.351477][T12822] ? do_syscall_64+0x166/0x520 [ 352.351534][T12822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.351590][T12822] ? __dev_queue_xmit+0x29b/0x3820 [ 352.351617][T12822] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 352.351646][T12822] ? __pfx___dev_queue_xmit+0x10/0x10 [ 352.351678][T12822] ? ref_tracker_free+0x689/0x830 [ 352.351742][T12822] ? __pfx_ref_tracker_free+0x10/0x10 [ 352.351785][T12822] ? __skb_clone+0x449/0x6c0 [ 352.351814][T12822] ? skb_clone+0x246/0x3a0 [ 352.351841][T12822] ? __netlink_deliver_tap+0x811/0x860 [ 352.351866][T12822] ? netlink_deliver_tap+0x2e/0x1b0 [ 352.351899][T12822] ? netlink_deliver_tap+0x2e/0x1b0 [ 352.351924][T12822] ? netlink_deliver_tap+0x2e/0x1b0 [ 352.351955][T12822] netlink_unicast+0x7bd/0x940 [ 352.351991][T12822] netlink_sendmsg+0x813/0xb40 [ 352.352027][T12822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.352062][T12822] ? apparmor_socket_sendmsg+0x98/0x360 [ 352.352131][T12822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.352156][T12822] sock_sendmsg_nosec+0x13a/0x180 [ 352.352218][T12822] ____sys_sendmsg+0x54e/0x850 [ 352.352247][T12822] ? __pfx_____sys_sendmsg+0x10/0x10 [ 352.352285][T12822] ? import_iovec+0x73/0xa0 [ 352.352375][T12822] ___sys_sendmsg+0x2a5/0x360 [ 352.352396][T12822] ? __lock_acquire+0x6df/0x2e50 [ 352.352438][T12822] ? __pfx____sys_sendmsg+0x10/0x10 [ 352.352495][T12822] ? __fget_files+0x2a/0x420 [ 352.352535][T12822] ? __fget_files+0x3a2/0x420 [ 352.352574][T12822] __x64_sys_sendmsg+0x1b1/0x290 [ 352.352599][T12822] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 352.352643][T12822] do_syscall_64+0x166/0x520 [ 352.352672][T12822] ? trace_irq_disable+0x3b/0x140 [ 352.352712][T12822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.352735][T12822] ? clear_bhb_loop+0x70/0xc0 [ 352.352763][T12822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.352786][T12822] RIP: 0033:0x7fe3ad39e159 [ 352.352809][T12822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.352828][T12822] RSP: 002b:00007fe3ab5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.352854][T12822] RAX: ffffffffffffffda RBX: 00007fe3ad625fa0 RCX: 00007fe3ad39e159 [ 352.352871][T12822] RDX: 0000000000000000 RSI: 00002000000018c0 RDI: 0000000000000003 [ 352.352885][T12822] RBP: 00007fe3ab5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 352.352900][T12822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.352914][T12822] R13: 00007fe3ad626038 R14: 00007fe3ad625fa0 R15: 00007ffece5a5b28 [ 352.352948][T12822] [ 352.734058][T12800] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 353.148933][T12828] netlink: 'syz.0.1560': attribute type 22 has an invalid length. [ 353.204801][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 353.224527][T12833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1558'. [ 353.224568][T12833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1558'. [ 353.224614][T12833] netlink: 'syz.2.1558': attribute type 19 has an invalid length. [ 353.224634][T12833] netlink: 'syz.2.1558': attribute type 20 has an invalid length. [ 353.277717][T12834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1558'. [ 353.277816][T12834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1558'. [ 353.291585][T12834] netlink: 'syz.2.1558': attribute type 19 has an invalid length. [ 353.291651][T12834] netlink: 'syz.2.1558': attribute type 20 has an invalid length. [ 353.460109][T12842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1562'. [ 353.634984][T12845] x_tables: duplicate underflow at hook 2 [ 353.835476][T12853] syzkaller0: entered promiscuous mode [ 353.843828][T12853] syzkaller0: entered allmulticast mode [ 353.881633][T12853] tipc: Enabled bearer , priority 0 [ 353.903659][T12853] tipc: Resetting bearer [ 353.913905][T12852] tipc: Resetting bearer [ 353.945050][T12852] tipc: Disabling bearer [ 354.469628][ T31] audit: type=1107 audit(1788525840.925:10): pid=12866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 354.504201][T12878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.757070][T12882] ip6t_REJECT: ECHOREPLY is not supported [ 354.919539][T12886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1571'. [ 354.972193][T12889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1571'. [ 355.057494][T12884] syzkaller0: entered promiscuous mode [ 355.063186][T12884] syzkaller0: entered allmulticast mode [ 358.231777][T12902] kthread_run failed with err -4 [ 358.875182][T12944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1588'. [ 358.895064][T12944] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1588'. [ 359.022177][T12948] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1588'. [ 359.239273][T12952] syzkaller0: entered promiscuous mode [ 359.239319][T12952] syzkaller0: entered allmulticast mode [ 359.265884][T12952] tipc: Enabled bearer , priority 0 [ 359.291664][T12952] tipc: Resetting bearer [ 359.353754][T12950] tipc: Resetting bearer [ 359.360005][T12958] netlink: 'syz.0.1592': attribute type 1 has an invalid length. [ 359.378563][T12950] tipc: Disabling bearer [ 359.439469][T12958] 8021q: adding VLAN 0 to HW filter on device bond5 [ 359.448413][T12955] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1593'. [ 359.524874][T12962] bond5: (slave gretap1): Enslaving as a backup interface with an up link [ 359.551210][ T3295] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 359.674253][T12958] bond5 (unregistering): (slave gretap1): Removing an active aggregator [ 359.675011][T12958] bond5 (unregistering): (slave gretap1): Releasing backup interface [ 359.704065][T12958] bond5 (unregistering): Released all slaves [ 360.246562][T12979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1600'. [ 360.350124][T12982] veth9: entered promiscuous mode [ 360.360889][T12984] netlink: 'syz.0.1600': attribute type 1 has an invalid length. [ 360.360943][T12984] netlink: 'syz.0.1600': attribute type 2 has an invalid length. [ 361.074994][T13008] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1607'. [ 361.424386][T13013] ip6gre4: entered promiscuous mode [ 361.424611][T13013] ip6gre4: entered allmulticast mode [ 361.435704][ T1119] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 361.436388][ T1119] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 361.456409][ T9430] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 361.686862][T13016] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1610'. [ 361.716682][ T9442] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 361.804285][T13024] netlink: 'syz.5.1615': attribute type 4 has an invalid length. [ 361.820357][T13024] netlink: 'syz.5.1615': attribute type 4 has an invalid length. [ 361.960315][T13030] openvswitch: netlink: ct_state flags 806d0004 unsupported [ 361.969068][ T9442] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 362.086447][T13033] netlink: 'syz.2.1619': attribute type 4 has an invalid length. [ 362.097999][T13033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1619'. [ 362.715065][T13050] netlink: 'syz.5.1623': attribute type 7 has an invalid length. [ 362.715106][T13050] netlink: 'syz.5.1623': attribute type 8 has an invalid length. [ 362.715144][T13050] netlink: 'syz.5.1623': attribute type 13 has an invalid length. [ 362.921085][T13052] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1625'. [ 363.463612][T13065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1629'. [ 363.463657][T13065] tc_dump_action: action bad kind [ 363.708316][T13072] digital: digital_start_poll: Unknown protocol [ 363.811395][T13068] bond5: entered promiscuous mode [ 363.817123][T13068] 8021q: adding VLAN 0 to HW filter on device bond5 [ 364.530421][T13093] __nla_validate_parse: 5 callbacks suppressed [ 364.537708][T13093] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1637'. [ 365.361879][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 365.936096][T13151] sctp: [Deprecated]: syz.5.1652 (pid 13151) Use of struct sctp_assoc_value in delayed_ack socket option. [ 365.936096][T13151] Use struct sctp_sack_info instead [ 366.031549][T13151] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1652'. [ 366.550203][T13161] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1654'. [ 367.144708][T13182] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1660'. [ 367.366163][T13194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1663'. [ 367.768861][T13213] ip6t_ah: unknown flags 4 [ 367.778553][T13214] ip6t_ah: unknown flags 4 [ 367.893621][T13212] ip6gre2: entered allmulticast mode [ 369.665257][T13296] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1684'. [ 369.677461][T13296] netlink: 'syz.5.1684': attribute type 1 has an invalid length. [ 369.774674][T13300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1682'. [ 369.920034][T13300] 8021q: adding VLAN 0 to HW filter on device bond6 [ 370.359979][ T2146] nci: nci_ntf_packet: unknown ntf opcode 0x600 [ 370.596655][T13328] xt_CT: No such helper "netbios-ns" [ 370.794793][T13349] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1696'. [ 370.828661][T13334] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1694'. [ 370.828983][T13334] openvswitch: netlink: Message has 4 unknown bytes. [ 371.505269][T13363] wg2 speed is unknown, defaulting to 1000 [ 371.528030][T13371] netlink: 'syz.5.1700': attribute type 1 has an invalid length. [ 371.746727][T13376] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 371.950158][T13385] xt_TCPMSS: Only works on TCP SYN packets [ 371.959277][T13386] xt_TCPMSS: Only works on TCP SYN packets [ 371.983265][T13386] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 372.002368][T13388] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 372.007819][T13385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1702'. [ 373.173382][T13313] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 373.658843][T13416] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1711'. [ 373.658898][T13416] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1711'. [ 373.658947][T13416] netlink: 31 bytes leftover after parsing attributes in process `syz.5.1711'. [ 373.690498][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 373.962785][T13424] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.174208][T13433] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1713'. [ 374.332277][T13437] xt_CT: You must specify a L4 protocol and not use inversions on it [ 374.579218][T13444] team0: left allmulticast mode [ 374.579656][T13444] bridge0: port 1(team0) entered disabled state [ 374.653161][T13444] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 374.674833][T13445] team0: No ports can be present during mode change [ 374.751333][T13455] netlink: 'syz.3.1720': attribute type 1 has an invalid length. [ 374.769602][T13463] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1721'. [ 374.835202][T13455] 8021q: adding VLAN 0 to HW filter on device bond9 [ 374.917560][T13456] bond9: (slave gretap1): making interface the new active one [ 374.926808][T13456] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 375.110062][T13468] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 375.236005][T13473] netlink: 'syz.5.1724': attribute type 2 has an invalid length. [ 375.478125][T13469] wg2 speed is unknown, defaulting to 1000 [ 375.701143][T13479] netlink: Conntrack attr has 8 unknown bytes [ 375.701199][T13479] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.718518][T13483] netlink: Conntrack attr has 8 unknown bytes [ 375.718556][T13483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.761174][ T4933] Bluetooth: hci5: command 0x0405 tx timeout [ 376.357602][T13478] netlink: 'syz.5.1726': attribute type 4 has an invalid length. [ 376.390606][T13479] netlink: 'syz.5.1726': attribute type 4 has an invalid length. [ 376.825981][T13516] netlink: 324 bytes leftover after parsing attributes in process `syz.0.1733'. [ 376.916182][T13515] wg2 speed is unknown, defaulting to 1000 [ 377.425617][T13534] tipc: Enabled bearer , priority 0 [ 377.427670][T13534] syzkaller0: entered promiscuous mode [ 377.427727][T13534] syzkaller0: entered allmulticast mode [ 377.711890][T13541] netlink: 'syz.2.1739': attribute type 22 has an invalid length. [ 377.720993][T13541] netlink: 'syz.2.1739': attribute type 9 has an invalid length. [ 377.903759][T13546] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1740'. [ 378.147845][T13545] tap0: tun_chr_ioctl cmd 1074025677 [ 378.148171][T13545] tap0: linktype set to 805 [ 378.345376][T13533] tipc: Resetting bearer [ 378.456870][T13533] tipc: Disabling bearer [ 378.459480][T13560] netlink: 'syz.2.1742': attribute type 13 has an invalid length. [ 378.593777][T13560] gretap0: refused to change device tx_queue_len [ 378.593832][T13560] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 379.381566][T13586] syzkaller1: entered promiscuous mode [ 379.381663][T13586] syzkaller1: entered allmulticast mode [ 380.155614][T13614] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1754'. [ 380.468203][T13621] x_tables: duplicate underflow at hook 1 [ 380.633502][T13628] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1756'. [ 380.645755][T13628] netlink: 'syz.3.1756': attribute type 1 has an invalid length. [ 380.791793][T13628] 8021q: adding VLAN 0 to HW filter on device bond10 [ 380.800153][T13630] team0: left allmulticast mode [ 380.800204][T13630] team0: left promiscuous mode [ 380.811298][T13630] bridge0: port 1(team0) entered disabled state [ 380.926232][T13635] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1758'. [ 380.926346][T13635] netlink: 'syz.5.1758': attribute type 2 has an invalid length. [ 380.928081][T13635] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1758'. [ 380.969590][T13635] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1758'. [ 381.090888][T13638] bridge6: entered promiscuous mode [ 381.090929][T13638] bridge6: entered allmulticast mode [ 381.110386][T13638] team0: Port device bridge6 added [ 381.114211][T13641] bridge0: port 1(team0) entered blocking state [ 381.116034][T13641] bridge0: port 1(team0) entered disabled state [ 381.116210][T13641] team0: entered allmulticast mode [ 381.116227][T13641] team_slave_0: entered allmulticast mode [ 381.116246][T13641] team_slave_1: entered allmulticast mode [ 381.156070][T13641] team0: entered promiscuous mode [ 381.156117][T13641] team_slave_0: entered promiscuous mode [ 381.156831][T13641] team_slave_1: entered promiscuous mode [ 381.186023][T13641] bridge0: port 1(team0) entered blocking state [ 381.186141][T13641] bridge0: port 1(team0) entered forwarding state [ 381.572317][T13647] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1761'. [ 381.578026][T13647] ip_vti0: entered promiscuous mode [ 381.578576][T13647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1761'. [ 381.839207][T13655] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1765'. [ 381.894954][T13660] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1766'. [ 381.895011][T13660] netlink: 'syz.3.1766': attribute type 2 has an invalid length. [ 381.895047][T13660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1766'. [ 382.487194][T13671] xt_CT: No such helper "syz0" [ 383.117133][T13686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.290130][T13694] netlink: 'syz.0.1777': attribute type 20 has an invalid length. [ 383.372847][T13695] erspan0: left allmulticast mode [ 383.372904][T13695] erspan0: left promiscuous mode [ 383.373614][T13695] bridge2: port 1(erspan0) entered disabled state [ 383.415284][T13695] bond0: (slave bond_slave_0): Releasing backup interface [ 383.452132][T13695] bond0: (slave c@0Ù): Releasing backup interface [ 383.481467][T13695] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 384.386630][ T4933] Bluetooth: hci5: link tx timeout [ 384.386989][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.404649][ T4933] Bluetooth: hci5: link tx timeout [ 384.404690][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.405213][ T4933] Bluetooth: hci5: link tx timeout [ 384.405254][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.407898][ T4933] Bluetooth: hci5: link tx timeout [ 384.407933][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.417996][ T4933] Bluetooth: hci5: link tx timeout [ 384.418040][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.418358][ T4933] Bluetooth: hci5: link tx timeout [ 384.418371][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.420335][ T4933] Bluetooth: hci5: link tx timeout [ 384.420349][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.420601][ T4933] Bluetooth: hci5: link tx timeout [ 384.420635][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.422820][ T4933] Bluetooth: hci5: link tx timeout [ 384.422870][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.423191][ T4933] Bluetooth: hci5: link tx timeout [ 384.423223][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.438641][ T4933] Bluetooth: hci5: link tx timeout [ 384.438694][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.460429][ T4933] Bluetooth: hci5: link tx timeout [ 384.460481][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.465624][ T4933] Bluetooth: hci5: link tx timeout [ 384.465676][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.467785][ T4933] Bluetooth: hci5: link tx timeout [ 384.467826][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.474049][ T4933] Bluetooth: hci5: link tx timeout [ 384.474107][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.474395][ T4933] Bluetooth: hci5: link tx timeout [ 384.474422][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.475289][ T4933] Bluetooth: hci5: link tx timeout [ 384.475322][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.477543][ T4933] Bluetooth: hci5: link tx timeout [ 384.477559][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.479968][ T4933] Bluetooth: hci5: link tx timeout [ 384.480011][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.497325][ T4933] Bluetooth: hci5: link tx timeout [ 384.497370][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.500554][ T4933] Bluetooth: hci5: link tx timeout [ 384.500570][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.514697][ T4933] Bluetooth: hci5: link tx timeout [ 384.514749][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.515752][ T4933] Bluetooth: hci5: link tx timeout [ 384.515768][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.515882][ T4933] Bluetooth: hci5: link tx timeout [ 384.515895][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.517103][ T4933] Bluetooth: hci5: link tx timeout [ 384.517137][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.518476][ T4933] Bluetooth: hci5: link tx timeout [ 384.518510][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.519640][ T4933] Bluetooth: hci5: link tx timeout [ 384.519673][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.523402][ T4933] Bluetooth: hci5: link tx timeout [ 384.523444][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.524758][ T4933] Bluetooth: hci5: link tx timeout [ 384.524814][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.578218][ T4933] Bluetooth: hci5: link tx timeout [ 384.578272][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.578578][ T4933] Bluetooth: hci5: link tx timeout [ 384.578611][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.579425][ T4933] Bluetooth: hci5: link tx timeout [ 384.579464][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.580652][ T4933] Bluetooth: hci5: link tx timeout [ 384.580693][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.608082][ T4933] Bluetooth: hci5: link tx timeout [ 384.608140][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.666631][ T4933] Bluetooth: hci5: link tx timeout [ 384.666693][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.667301][ T4933] Bluetooth: hci5: link tx timeout [ 384.667338][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.678524][ T4933] Bluetooth: hci5: link tx timeout [ 384.678574][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.684064][ T4933] Bluetooth: hci5: link tx timeout [ 384.684086][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.684208][ T4933] Bluetooth: hci5: link tx timeout [ 384.684221][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.685531][ T4933] Bluetooth: hci5: link tx timeout [ 384.685572][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.686045][ T4933] Bluetooth: hci5: link tx timeout [ 384.686079][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.687280][ T4933] Bluetooth: hci5: link tx timeout [ 384.687311][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.689668][ T4933] Bluetooth: hci5: link tx timeout [ 384.689710][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.695475][ T4933] Bluetooth: hci5: link tx timeout [ 384.695529][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.696834][ T4933] Bluetooth: hci5: link tx timeout [ 384.696878][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.698318][ T4933] Bluetooth: hci5: link tx timeout [ 384.698350][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.708309][ T4933] Bluetooth: hci5: link tx timeout [ 384.708353][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.710646][ T4933] Bluetooth: hci5: link tx timeout [ 384.710693][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.718569][ T4933] Bluetooth: hci5: link tx timeout [ 384.718604][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.729700][ T4933] Bluetooth: hci5: link tx timeout [ 384.729783][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.747095][ T4933] Bluetooth: hci5: link tx timeout [ 384.747137][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.768470][ T4933] Bluetooth: hci5: link tx timeout [ 384.768521][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.793047][ T4933] Bluetooth: hci5: link tx timeout [ 384.793065][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.793175][ T4933] Bluetooth: hci5: link tx timeout [ 384.793189][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.793308][ T4933] Bluetooth: hci5: link tx timeout [ 384.793321][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.795085][ T4933] Bluetooth: hci5: link tx timeout [ 384.795129][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.796013][ T4933] Bluetooth: hci5: link tx timeout [ 384.796051][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.797965][ T4933] Bluetooth: hci5: link tx timeout [ 384.798003][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.798503][ T4933] Bluetooth: hci5: link tx timeout [ 384.798535][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.799753][ T4933] Bluetooth: hci5: link tx timeout [ 384.799792][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.803574][ T4933] Bluetooth: hci5: link tx timeout [ 384.803615][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.823823][ T4933] Bluetooth: hci5: link tx timeout [ 384.823875][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.843933][ T4933] Bluetooth: hci5: link tx timeout [ 384.843983][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.865275][ T4933] Bluetooth: hci5: link tx timeout [ 384.865294][ T4933] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 385.640352][T13755] block nbd1: server does not support multiple connections per device. [ 385.653916][T13755] block nbd1: shutting down sockets [ 386.064057][T13767] __nla_validate_parse: 6 callbacks suppressed [ 386.066561][T13767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1793'. [ 386.067211][T13767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1793'. [ 386.071247][T13767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1793'. [ 386.071756][T13767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1793'. [ 386.072315][T13767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1793'. [ 386.077606][T13767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1793'. [ 386.078151][T13767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1793'. [ 386.078688][T13767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1793'. [ 386.085820][T13767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1793'. [ 386.086397][T13767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1793'. [ 386.481243][ T4933] Bluetooth: hci5: command 0x0405 tx timeout [ 387.509876][T13810] sctp: [Deprecated]: syz.3.1802 (pid 13810) Use of struct sctp_assoc_value in delayed_ack socket option. [ 387.509876][T13810] Use struct sctp_sack_info instead [ 387.576626][T13810] siw: device registration error -23 [ 388.346540][T13848] dvmrp0: entered allmulticast mode [ 388.370296][T13848] dvmrp0: left allmulticast mode [ 388.548656][T13854] netlink: 'syz.2.1815': attribute type 1 has an invalid length. [ 388.640336][T13856] Cannot find add_set index 0 as target [ 388.816904][T13854] 8021q: adding VLAN 0 to HW filter on device bond11 [ 388.958446][T13854] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 388.958446][T13854] Please contact the netfilter-devel mailing list or update your nftables rules. [ 389.145834][T13854] bond11: (slave geneve3): making interface the new active one [ 389.164198][T13854] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 389.453740][ T6193] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.464719][ T6193] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.473551][ T6193] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.473629][ T6193] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.681436][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 390.355762][T13908] netlink: 'syz.3.1827': attribute type 4 has an invalid length. [ 390.545694][T13907] wg2 speed is unknown, defaulting to 1000 [ 390.704452][T13906] wg2 speed is unknown, defaulting to 1000 [ 391.218077][T13923] syzkaller1: entered promiscuous mode [ 391.218176][T13923] syzkaller1: entered allmulticast mode [ 391.566101][T13938] __nla_validate_parse: 27 callbacks suppressed [ 391.566180][T13938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1832'. [ 391.574116][T13938] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1832'. [ 392.555203][T13959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1839'. [ 392.564564][T13959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1839'. [ 393.404385][T13978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1842'. [ 393.607920][ T31] audit: type=1800 audit(1788525880.065:11): pid=13971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1841" name="memory.events" dev="tmpfs" ino=2001 res=0 errno=0 [ 394.405910][T14009] netlink: 'syz.0.1850': attribute type 1 has an invalid length. [ 394.700237][T14019] ip6gretap1: entered allmulticast mode [ 394.718554][T14019] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 394.737340][T14019] batman_adv: batadv0: Adding interface: ip6gretap1 [ 394.737392][T14019] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.737432][T14019] batman_adv: batadv0: Interface activated: ip6gretap1 [ 394.904863][T14025] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1855'. [ 394.958083][T14036] trusted_key: syz.1.1858 sent an empty control message without MSG_MORE. [ 395.207075][T14035] gretap0: entered promiscuous mode [ 395.220585][T14037] wg2 speed is unknown, defaulting to 1000 [ 396.578957][T14073] syzkaller1: entered promiscuous mode [ 396.579057][T14073] syzkaller1: entered allmulticast mode [ 396.649292][T14076] netlink: 'syz.1.1869': attribute type 23 has an invalid length. [ 396.657506][T14076] netlink: 'syz.1.1869': attribute type 21 has an invalid length. [ 396.665513][T14076] IPv6: NLM_F_CREATE should be specified when creating new route [ 396.709508][T14076] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1869'. [ 396.729312][T14080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1868'. [ 396.740160][T14082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1868'. [ 397.269932][T14096] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 397.287844][T14095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1873'. [ 397.392601][T14107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1874'. [ 397.443541][T14095] bond6: option resend_igmp: invalid value (396094) [ 397.450885][T14095] bond6: option resend_igmp: allowed values 0 - 255 [ 397.463534][T14095] bond6 (unregistering): Released all slaves [ 397.858547][T14117] netlink: 'syz.2.1877': attribute type 1 has an invalid length. [ 397.948777][T14117] 8021q: adding VLAN 0 to HW filter on device bond12 [ 398.011219][T14119] bond12: (slave erspan0): making interface the new active one [ 398.026745][T14119] bond12: (slave erspan0): Enslaving as an active interface with an up link [ 398.119614][T14126] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1879'. [ 398.119968][T14126] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1879'. [ 398.120176][T14126] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1879'. [ 398.120322][T14126] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1879'. [ 398.120477][T14126] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1879'. [ 398.777979][ T31] audit: type=1800 audit(1788525885.235:12): pid=14152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1885" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1488 res=0 errno=0 [ 399.149640][T14166] tipc: Enabled bearer , priority 0 [ 399.474717][T14166] syzkaller0: entered promiscuous mode [ 399.474818][T14166] syzkaller0: entered allmulticast mode [ 399.484170][T14166] tipc: Resetting bearer [ 400.077178][ T3295] tipc: Resetting bearer [ 400.287448][T14214] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 400.517880][T14165] tipc: Resetting bearer [ 402.866512][T14165] tipc: Disabling bearer [ 402.878585][T14197] syzkaller0: entered promiscuous mode [ 402.878633][T14197] syzkaller0: entered allmulticast mode [ 402.888670][T14186] __nla_validate_parse: 7 callbacks suppressed [ 402.888715][T14186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1891'. [ 402.902466][ T9437] tipc: Node number set to 270483584 [ 403.051493][T14223] bridge0: port 1(erspan0) entered blocking state [ 403.051892][T14223] bridge0: port 1(erspan0) entered disabled state [ 403.052329][T14223] erspan0: entered allmulticast mode [ 403.065626][T14223] erspan0: entered promiscuous mode [ 403.134133][T14236] netlink: 'syz.0.1900': attribute type 1 has an invalid length. [ 403.249049][T14236] 8021q: adding VLAN 0 to HW filter on device bond7 [ 403.595804][T14248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1903'. [ 403.857275][T14263] syzkaller0: entered promiscuous mode [ 403.864159][T14263] syzkaller0: entered allmulticast mode [ 403.874195][T14267] wg1: Caught tx_queue_len zero misconfig [ 404.008216][T14268] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1907'. [ 404.125722][T14274] wg2 speed is unknown, defaulting to 1000 [ 404.697312][T14290] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1916'. [ 404.854174][T14294] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1918'. [ 405.174670][T14306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1920'. [ 405.427240][T14312] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1922'. [ 405.780348][T14326] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 405.979161][T14337] bridge0: port 1(veth0) entered blocking state [ 405.979300][T14337] bridge0: port 1(veth0) entered disabled state [ 405.979735][T14337] veth0: entered allmulticast mode [ 406.009502][T14337] veth0: entered promiscuous mode [ 406.018240][T14333] bridge0: port 2(veth1) entered blocking state [ 406.018645][T14333] bridge0: port 2(veth1) entered disabled state [ 406.019085][T14333] veth1: entered allmulticast mode [ 406.039180][T14333] veth1: entered promiscuous mode [ 406.385520][T14356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.389640][T14356] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.444603][T14356] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 406.444643][T14356] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 406.467275][T14356] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 406.472980][T14356] veth1_vlan: left promiscuous mode [ 406.475759][T14356] veth0_vlan: left promiscuous mode [ 406.477821][T14356] veth0_vlan: entered promiscuous mode [ 406.492145][T14356] veth1_vlan: entered promiscuous mode [ 406.505370][T14356] veth1_macvtap: left promiscuous mode [ 406.511995][T14356] veth1_macvtap: entered promiscuous mode [ 406.525077][T14356] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 406.526426][T14356] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 406.530149][T14356] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 406.552053][T14356] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 406.563308][T14356] 8021q: adding VLAN 0 to HW filter on device bond1 [ 406.565719][T14356] 8021q: adding VLAN 0 to HW filter on device bond2 [ 406.569809][T14356] 8021q: adding VLAN 0 to HW filter on device bond3 [ 406.595743][T14356] 8021q: adding VLAN 0 to HW filter on device bond4 [ 406.613681][ T9098] bridge0: port 2(veth1) entered blocking state [ 406.613973][ T9098] bridge0: port 2(veth1) entered forwarding state [ 406.627396][ T9428] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 406.636735][ T9428] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 406.638367][ T9098] bridge0: port 1(veth0) entered blocking state [ 406.638627][ T9098] bridge0: port 1(veth0) entered forwarding state [ 406.756025][ T2146] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 406.767820][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 406.770021][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 406.771218][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 406.771483][ T2146] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.771841][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 406.772506][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 406.772652][ T2146] bond4: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 406.773031][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 406.773549][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 406.773977][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 406.774459][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 406.774972][ T2146] bond4: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 406.775272][ T2146] bond4: (slave veth5): making interface the new active one [ 406.776846][ T2146] bond4: active interface up! [ 406.784406][ T2146] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.785866][ T2146] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.786068][ T2146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.780937][ C1] net_ratelimit: 17877 callbacks suppressed [ 410.780965][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 410.781024][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 410.781396][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 410.781695][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 410.781824][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 410.782262][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 410.782446][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 410.782684][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 410.783106][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 410.783123][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 411.060967][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 415.790797][ C0] net_ratelimit: 22646 callbacks suppressed [ 415.790845][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 415.791120][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 415.791205][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 415.791559][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 415.791743][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 415.791907][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 415.792266][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 415.792359][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 415.792614][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 415.792996][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 416.350203][ C0] sched: DL replenish lagged too much [ 418.027728][T14335] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 419.774593][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 419.785169][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 420.416451][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 420.800850][ C0] net_ratelimit: 22064 callbacks suppressed [ 420.800880][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 420.801282][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 420.801298][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 420.801738][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 420.802055][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 420.802119][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 420.802502][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 420.802736][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 420.802875][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 420.803245][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 425.810898][ C0] net_ratelimit: 22054 callbacks suppressed [ 425.810949][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 425.810991][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 425.811309][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 425.811642][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 425.811657][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 425.812009][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 425.812267][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 425.812352][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 425.812700][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 425.812883][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 427.368506][T14322] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 430.820838][ C1] net_ratelimit: 21773 callbacks suppressed [ 430.820929][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 430.820964][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 430.821329][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 430.821670][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 430.821692][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 430.822046][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 430.822388][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 430.822411][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 430.823035][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 430.823143][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 435.768911][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 435.830871][ C0] net_ratelimit: 22848 callbacks suppressed [ 435.830916][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 435.831250][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 435.831273][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 435.831595][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 435.831839][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 435.831973][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 435.832296][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 435.832427][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 435.832624][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 435.832952][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 440.840842][ C0] net_ratelimit: 28054 callbacks suppressed [ 440.840910][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 440.840908][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 440.841192][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 440.841460][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 440.841473][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 440.841735][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 440.842003][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 440.842123][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 440.842277][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 440.842550][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 445.850802][ C0] net_ratelimit: 28720 callbacks suppressed [ 445.850847][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 445.851032][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 445.851121][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 445.851397][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 445.851543][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 445.851681][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 445.851929][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 445.852005][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 445.852184][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 445.852433][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 450.860754][ C0] net_ratelimit: 28516 callbacks suppressed [ 450.860784][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 450.860811][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 450.861099][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 450.861356][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 450.861394][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 450.861623][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 450.861922][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 450.862032][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 450.862213][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 450.862468][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 455.870999][ C0] net_ratelimit: 30806 callbacks suppressed [ 455.871023][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 455.871117][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 455.871295][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 455.871552][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 455.871609][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 455.871830][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 455.872083][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 455.872106][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 455.872372][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 455.872636][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 460.880764][ C0] net_ratelimit: 30003 callbacks suppressed [ 460.880789][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 460.880854][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 460.881035][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 460.881298][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 460.881444][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 460.881559][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 460.881815][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 460.882063][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 460.882119][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 460.882336][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 465.890915][ C0] net_ratelimit: 29191 callbacks suppressed [ 465.890940][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 465.891062][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 465.891228][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 465.891496][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 465.891713][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 465.891892][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 465.892189][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 465.892346][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 465.892463][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 465.892728][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 468.408378][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 470.900946][ C0] net_ratelimit: 27077 callbacks suppressed [ 470.900971][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 470.901182][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 470.901259][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 470.901531][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 470.901730][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 470.901805][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 470.902141][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 470.902266][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 470.902487][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 470.902761][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 475.910741][ C1] net_ratelimit: 27738 callbacks suppressed [ 475.910793][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 475.910848][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 475.911104][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 475.911367][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 475.911397][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 475.911631][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 475.911872][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 475.911987][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 475.912195][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 475.912468][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 480.920784][ C1] net_ratelimit: 29475 callbacks suppressed [ 480.920825][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 480.920886][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 480.921160][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 480.921407][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 480.921437][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 480.921782][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 480.922052][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 480.922091][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 480.922324][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 480.922605][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 485.930850][ C0] net_ratelimit: 28670 callbacks suppressed [ 485.930874][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 485.931049][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 485.931244][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 485.931553][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 485.931593][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 485.931880][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 485.932210][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 485.932222][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 485.932544][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 485.932704][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 486.328260][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 490.940885][ C1] net_ratelimit: 29257 callbacks suppressed [ 490.940921][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 490.940932][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 490.941203][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 490.941314][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 490.941448][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 490.941709][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 490.941766][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 490.942013][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 490.942194][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 490.942277][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 495.950747][ C0] net_ratelimit: 28226 callbacks suppressed [ 495.950772][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 495.951070][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 495.951093][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 495.951371][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 495.951624][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 495.951649][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 495.951913][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 495.952118][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 495.952193][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 495.952495][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 500.960795][ C0] net_ratelimit: 28977 callbacks suppressed [ 500.960822][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 500.961059][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 500.961115][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 500.961375][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 500.961584][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 500.961729][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 500.962017][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 500.962099][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 500.962288][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 500.962543][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 505.970940][ C0] net_ratelimit: 29886 callbacks suppressed [ 505.970965][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 505.970974][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 505.971218][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 505.971480][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 505.971522][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 505.971759][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 505.972025][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 505.972156][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 505.972275][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 505.972567][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 510.980985][ C0] net_ratelimit: 28592 callbacks suppressed [ 510.980985][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 510.981010][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 510.981316][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 510.981509][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 510.981624][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 510.981942][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:12) [ 510.982034][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 510.982264][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 510.982536][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 510.982559][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:12) [ 515.320714][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 515.901057][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P14340/1:b..l [ 515.909099][ C0] rcu: (detected by 0, t=10560 jiffies, g=78321, q=2102 ncpus=2) [ 515.916966][ C0] task:syz.2.1929 state:R running task stack:24584 pid:14340 tgid:14340 ppid:5620 task_flags:0x400040 flags:0x00080002 [ 515.930797][ C0] Call Trace: [ 515.934128][ C0] [ 515.937100][ C0] __schedule+0x17d4/0x5820 [ 515.941773][ C0] ? __lock_acquire+0x6df/0x2e50 [ 515.946773][ C0] ? __pfx___schedule+0x10/0x10 [ 515.951677][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 515.956779][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 515.962213][ C0] preempt_schedule_common+0x7f/0xd0 [ 515.967549][ C0] ? nl80211_netlink_notify+0x722/0x860 [ 515.973244][ C0] preempt_schedule_thunk+0x16/0x40 [ 515.978516][ C0] __local_bh_enable_ip+0xe9/0x140 [ 515.983684][ C0] nl80211_netlink_notify+0x722/0x860 [ 515.989104][ C0] ? nl80211_netlink_notify+0x75/0x860 [ 515.994629][ C0] notifier_call_chain+0x1a5/0x3d0 [ 515.995219][ C1] net_ratelimit: 24346 callbacks suppressed [ 515.995260][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 515.996115][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 515.996879][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 515.997546][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 515.998249][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 515.998951][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 515.999762][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 516.000501][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 516.001172][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 516.001842][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12) [ 516.117970][ C0] blocking_notifier_call_chain+0x6a/0x90 [ 516.123764][ C0] netlink_release+0x11fb/0x1a80 [ 516.128774][ C0] ? netlink_release+0x106/0x1a80 [ 516.133852][ C0] ? __pfx_netlink_release+0x10/0x10 [ 516.139191][ C0] ? down_write+0x16b/0x200 [ 516.143755][ C0] ? __pfx_down_write+0x10/0x10 [ 516.148687][ C0] __sock_release+0xa0/0x1f0 [ 516.153453][ C0] ? __pfx_sock_close+0x10/0x10 [ 516.158357][ C0] sock_close+0x1c/0x30 [ 516.162561][ C0] __fput+0x418/0xa50 [ 516.166637][ C0] task_work_run+0x1d9/0x270 [ 516.171275][ C0] ? __pfx_task_work_run+0x10/0x10 [ 516.176450][ C0] exit_to_user_mode_loop+0x204/0x770 [ 516.181907][ C0] ? rcu_is_watching+0x16/0xb0 [ 516.186763][ C0] do_syscall_64+0x328/0x520 [ 516.191417][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.197534][ C0] ? clear_bhb_loop+0x70/0xc0 [ 516.202265][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.208205][ C0] RIP: 0033:0x7fbf1cf9e159 [ 516.212660][ C0] RSP: 002b:00007fffde76c1f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 516.221118][ C0] RAX: 0000000000000000 RBX: 00007fbf1d227da0 RCX: 00007fbf1cf9e159 [ 516.229133][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 516.237163][ C0] RBP: 00007fbf1d227da0 R08: 0000000000000006 R09: 0000000000000000 [ 516.245171][ C0] R10: 00007fbf1d227cb0 R11: 0000000000000246 R12: 0000000000063536 [ 516.253178][ C0] R13: 00007fbf1d22618c R14: 000000000006323a R15: 00007fbf1d226180 [ 516.261213][ C0] [ 516.264274][ C0] rcu: rcu_preempt kthread starved for 1260 jiffies! g78321 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 [ 516.275249][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 516.285265][ C0] rcu: RCU grace-period kthread stack dump: [ 516.291201][ C0] task:rcu_preempt state:R running task stack:27496 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 516.304760][ C0] Call Trace: [ 516.308080][ C0] [ 516.311051][ C0] __schedule+0x17d4/0x5820 [ 516.315619][ C0] ? __lock_acquire+0x6df/0x2e50 [ 516.320642][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 516.325816][ C0] ? __pfx___schedule+0x10/0x10 [ 516.330715][ C0] ? lock_acquire+0x115/0x350 [ 516.335448][ C0] ? schedule+0x90/0x2b0 [ 516.339746][ C0] schedule+0x164/0x2b0 [ 516.343951][ C0] schedule_timeout+0x152/0x2c0 [ 516.348944][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 516.354372][ C0] ? __pfx_process_timeout+0x10/0x10 [ 516.359723][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 516.365666][ C0] ? prepare_to_swait_event+0x322/0x350 [ 516.371281][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 516.376194][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 516.382398][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 516.387722][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 516.392979][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 516.398833][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 516.403482][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 516.408730][ C0] ? __kthread_parkme+0x71/0x1f0 [ 516.413725][ C0] ? __kthread_parkme+0x199/0x1f0 [ 516.418806][ C0] kthread+0x38b/0x480 [ 516.422917][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 516.428237][ C0] ? __pfx_kthread+0x10/0x10 [ 516.432870][ C0] ret_from_fork+0x514/0xb70 [ 516.437555][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 516.442719][ C0] ? __switch_to+0xc89/0x1420 [ 516.447452][ C0] ? __pfx_kthread+0x10/0x10 [ 516.452093][ C0] ret_from_fork_asm+0x1a/0x30 [ 516.456938][ C0] [ 516.459993][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 516.466365][ C0] Sending NMI from CPU 0 to CPUs 1: [ 516.471620][ C1] NMI backtrace for cpu 1 [ 516.471645][ C1] CPU: 1 UID: 0 PID: 9114 Comm: kworker/u8:42 Not tainted syzkaller #0 PREEMPT(full) [ 516.471677][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 516.471690][ C1] Workqueue: events_dfl_long defense_work_handler [ 516.471823][ C1] RIP: 0010:advance_sched+0x255/0xc80 [ 516.471902][ C1] Code: 24 18 48 8b 28 48 83 3c 24 00 0f 84 0b 01 00 00 e8 b0 28 dc f7 4d 85 ff 0f 84 52 01 00 00 48 89 6c 24 20 49 8d 9f 50 01 00 00 <48> 89 d8 48 c1 e8 03 48 89 44 24 48 42 80 3c 30 00 74 08 48 89 df [ 516.471920][ C1] RSP: 0018:ffffc90000a17740 EFLAGS: 00000086 [ 516.471936][ C1] RAX: ffffffff89eb8af0 RBX: ffff888056f73550 RCX: ffff888056ee5dc0 [ 516.471950][ C1] RDX: 8000000001000101 RSI: 0000000001000101 RDI: 0000000000000000 [ 516.471963][ C1] RBP: 0000000000000000 R08: 0000000001000101 R09: 0000000000000004 [ 516.471975][ C1] R10: dffffc0000000000 R11: fffff52000142ed8 R12: 0000000000000000 [ 516.471988][ C1] R13: ffff88807b5a0000 R14: dffffc0000000000 R15: ffff888056f73400 [ 516.472003][ C1] FS: 0000000000000000(0000) GS:ffff888124de0000(0000) knlGS:0000000000000000 [ 516.472018][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 516.472031][ C1] CR2: 0000001b33d06ff8 CR3: 0000000052c64000 CR4: 00000000003526f0 [ 516.472048][ C1] Call Trace: [ 516.472056][ C1] [ 516.472068][ C1] ? __pfx_advance_sched+0x10/0x10 [ 516.472093][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 516.472120][ C1] ? __pfx_advance_sched+0x10/0x10 [ 516.472144][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 516.472180][ C1] hrtimer_interrupt+0x4cd/0xaa0 [ 516.472222][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 516.472257][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 516.472284][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 516.472305][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 516.472323][ C1] Code: ff ff ff e8 40 dc 3f 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 92 e7 f0 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 07 22 da [ 516.472338][ C1] RSP: 0018:ffffc90000a17b00 EFLAGS: 00000296 [ 516.472354][ C1] RAX: 10b17c0bb2fd2600 RBX: 0000000000000000 RCX: 8000000000000101 [ 516.472367][ C1] RDX: 000000004dbb4af1 RSI: ffffffff8e6fac1d RDI: ffffffff8c6d8b80 [ 516.472381][ C1] RBP: ffff888056ee5dc0 R08: 8a00000000000000 R09: 0000000000000000 [ 516.472394][ C1] R10: 0000000000000000 R11: ffffffff8ed5c6e0 R12: ffffffff8ed5c6e0 [ 516.472413][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 516.472435][ C1] ? kasan_save_free_info+0x40/0x50 [ 516.472461][ C1] ? unwind_next_frame+0x8f/0x2550 [ 516.472489][ C1] unwind_next_frame+0xac/0x2550 [ 516.472509][ C1] ? unwind_next_frame+0x8f/0x2550 [ 516.472533][ C1] ? kasan_save_track+0x3e/0x80 [ 516.472551][ C1] ? unwind_next_frame+0x8f/0x2550 [ 516.472574][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 516.472604][ C1] arch_stack_walk+0x11b/0x150 [ 516.472629][ C1] ? kasan_save_free_info+0x40/0x50 [ 516.472657][ C1] stack_trace_save+0xa9/0x100 [ 516.472685][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 516.472717][ C1] ? __lock_acquire+0x6df/0x2e50 [ 516.472737][ C1] kasan_save_track+0x3e/0x80 [ 516.472754][ C1] ? kasan_save_track+0x3e/0x80 [ 516.472771][ C1] ? kasan_save_free_info+0x40/0x50 [ 516.472825][ C1] ? ip6_mc_input+0x878/0xc80 [ 516.472883][ C1] kasan_save_free_info+0x40/0x50 [ 516.472909][ C1] __kasan_slab_free+0x5c/0x80 [ 516.472929][ C1] kmem_cache_free+0x182/0x650 [ 516.472952][ C1] ip6_mc_input+0x878/0xc80 [ 516.472973][ C1] ? __pfx_ip6_mc_input+0x10/0x10 [ 516.472995][ C1] ? ip6_rcv_finish+0x265/0x280 [ 516.473045][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 516.473073][ C1] ip_sabotage_in+0x1e1/0x270 [ 516.473143][ C1] ? __pfx_ip_sabotage_in+0x10/0x10 [ 516.473164][ C1] nf_hook_slow+0xc5/0x220 [ 516.473214][ C1] NF_HOOK+0x21f/0x3c0 [ 516.473243][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 516.473270][ C1] ? NF_HOOK+0x9e/0x3c0 [ 516.473297][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 516.473325][ C1] ? ip6_rcv_core+0xa1/0x1870 [ 516.473354][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 516.473386][ C1] ? netif_receive_skb+0x102/0xbf0 [ 516.473417][ C1] netif_receive_skb+0x278/0xbf0 [ 516.473439][ C1] ? lock_acquire+0x115/0x350 [ 516.473458][ C1] ? __pfx_netif_receive_skb+0x10/0x10 [ 516.473483][ C1] ? br_netif_receive_skb+0x126/0x190 [ 516.473534][ C1] NF_HOOK+0xa4/0x3a0 [ 516.473553][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 516.473573][ C1] ? NF_HOOK+0xfa/0x3a0 [ 516.473592][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 516.473612][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 516.473636][ C1] ? br_pass_frame_up+0x275/0x420 [ 516.473657][ C1] br_handle_frame_finish+0x1136/0x1950 [ 516.473685][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 516.473705][ C1] ? ip6t_do_table+0x1d1/0x15b0 [ 516.473753][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 516.473778][ C1] ? nf_hook_slow+0x176/0x220 [ 516.473803][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 516.473823][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 516.473842][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 516.473891][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 516.473913][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 516.473934][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 516.473956][ C1] ? lock_acquire+0x115/0x350 [ 516.473976][ C1] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 516.473999][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 516.474023][ C1] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 516.474046][ C1] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 516.474067][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 516.474091][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 516.474114][ C1] ? br_nf_pre_routing+0x720/0x14b0 [ 516.474138][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 516.474158][ C1] br_handle_frame+0x127f/0x1510 [ 516.474183][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 516.474201][ C1] ? __lock_acquire+0x6df/0x2e50 [ 516.474220][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 516.474253][ C1] ? __lock_acquire+0x6df/0x2e50 [ 516.474274][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 516.474293][ C1] __netif_receive_skb_core+0x989/0x30c0 [ 516.474357][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 516.474398][ C1] ? process_backlog+0x3de/0x18b0 [ 516.474428][ C1] ? process_backlog+0x3de/0x18b0 [ 516.474455][ C1] process_backlog+0x727/0x18b0 [ 516.474484][ C1] ? process_backlog+0x3de/0x18b0 [ 516.474517][ C1] __napi_poll+0xaa/0x330 [ 516.474542][ C1] net_rx_action+0x61d/0xf50 [ 516.474575][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 516.474599][ C1] ? xfrm_dev_backlog+0x24b/0x3c0 [ 516.474668][ C1] handle_softirqs+0x226/0x860 [ 516.474695][ C1] ? do_softirq+0x77/0xd0 [ 516.474721][ C1] ? update_defense_level+0x10b/0xcb0 [ 516.474742][ C1] do_softirq+0x77/0xd0 [ 516.474765][ C1] [ 516.474771][ C1] [ 516.474777][ C1] __local_bh_enable_ip+0x100/0x140 [ 516.474802][ C1] update_defense_level+0x867/0xcb0 [ 516.474823][ C1] ? update_defense_level+0x10b/0xcb0 [ 516.474844][ C1] ? __pfx_update_defense_level+0x10/0x10 [ 516.474864][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 516.474894][ C1] ? lock_acquire+0x115/0x350 [ 516.474918][ C1] ? process_scheduled_works+0x97a/0x1630 [ 516.474942][ C1] defense_work_handler+0x2d/0xd0 [ 516.474965][ C1] process_scheduled_works+0xc3d/0x1630 [ 516.475008][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 516.475036][ C1] ? assign_work+0x3cf/0x5d0 [ 516.475062][ C1] worker_thread+0xa47/0xfb0 [ 516.475095][ C1] ? __kthread_parkme+0x71/0x1f0 [ 516.475128][ C1] kthread+0x38b/0x480 [ 516.475145][ C1] ? __pfx_worker_thread+0x10/0x10 [ 516.475169][ C1] ? __pfx_kthread+0x10/0x10 [ 516.475187][ C1] ret_from_fork+0x514/0xb70 [ 516.475219][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 516.475248][ C1] ? __switch_to+0xc89/0x1420 [ 516.475275][ C1] ? __pfx_kthread+0x10/0x10 [ 516.475293][ C1] ret_from_fork_asm+0x1a/0x30 [ 516.475332][ C1]