last executing test programs: 4.394305903s ago: executing program 0 (id=1138): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292e254c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000800)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r0], 0x30}, 0x1, 0x0, 0x0, 0x8000000}, 0x20000010) recvmsg$unix(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/54, 0x36}], 0x1}, 0x0) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f00000006c0)={{[0xe, 0x48745928, 0xfffffffe, 0x5]}, 0x0, 0x1, 0x9, 0x0, &(0x7f0000000640)=[{{@_ha_fsid={[0x0, 0x9]}, {0x7f, 0x9, 0x0, 0xb5}}, 0xfe5, 0x0, 'syzkaller0\x00'}, {{@_ha_fsid={[0x7ff]}, {0x7, 0x28, 0x3, 0x31}}, 0x8, 0x0, '@!\'\x00'}, {{@align=0x968, {0x6, 0x673, 0x0, 0x88}}, 0x7, 0x0, 'netem\x00'}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)=@delchain={0x4c, 0x65, 0x100, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x7, 0xa}, {0xd, 0xffff}, {0x7, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0xf, 0x40}}, @TCA_RATE={0x6, 0x5, {0x1, 0x27}}, @TCA_RATE={0x6, 0x5, {0x80, 0x6}}, @TCA_RATE={0x6, 0x5, {0x1a, 0x9}}, @TCA_RATE={0x6, 0x5, {0x4, 0x73}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004040}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000240)={'bridge_slave_1\x00', &(0x7f0000000100)=@ethtool_perm_addr={0x4b, 0x29, "4b721b782b17a7b6a00d962a64048655bcb0b0e6aceb1791b0551fdb8a571f6b3c1cb52ecd721b8ac2"}}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xf, 0xb}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40048b0}, 0x4890) 3.275288664s ago: executing program 0 (id=1150): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x41, 0x107, 0xfffff7fe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @ipv4=@empty}, @typed={0x4, 0x1, 0x0, 0x0, @binary}]}, @typed={0x5, 0x9a, 0x0, 0x0, @str='\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) 3.0556287s ago: executing program 0 (id=1152): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x1, 0x4004010) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000a00)={@random="e33110495bfd", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1, @private0={0xfc, 0x0, '\x00', 0x1}}}}}}}, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e22, @loopback}, {0x1, @local}, 0x12, {0x2, 0x4e20, @rand_addr=0x64010101}, 'wg2\x00'}) 2.848192108s ago: executing program 0 (id=1155): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000000) r1 = socket(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000dd7bdac2d89b6bb3be22592e9c2655bc00bb9678b79f6d3c9358cb9866363ded421dcc253216806e9745bea5256bb2f394298d74c0b560113bb6e6a521ead55fe4cc9e7c9176e9b694bcbaffe393f12d1223ddf5976dd3218de699d5f5d38a24c374c0248c1000"/133, @ANYRES32=r1, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}}, 0x4084) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000380)={r1, &(0x7f0000000040)='{@!\x00', 0x600003, &(0x7f0000000180)={@align=0xa64b, {0x9, 0x9, 0x80000001, 0x9}}, 0x7, &(0x7f0000000280), &(0x7f0000000340)=0xffffffff}) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000480)={0x9, 0x1, 0x6, 0x2dc}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="341a3c1a80abdb19d6000000000000000700000305cdbcefaf9402b1200003006269746d61703a69700000000500050001000000"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x4040000) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000780)={'bond_slave_1\x00', 0x400}) close(0x3) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="c4000000190001050000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=r5, @ANYBLOB="920000fe67faa59d10e0b5941b00"], 0xc4}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0x7, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) 2.572755585s ago: executing program 3 (id=1159): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) (async) socket(0x400000000010, 0x3, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$packet(0x11, 0x2, 0x300) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r2}, 0x8) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x92f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv6_delrule={0x38, 0x18, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0xff, 0x3, 0x0, 0x2}, [@FRA_DST={0x14, 0x7, @loopback}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044004}, 0x20044884) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) listen(r6, 0x1) getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) (async) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000180)='`', 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2, 0x540}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000340)="b4", 0x1}], 0x1}}], 0x2, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000280)={'ipvlan1\x00', 0x400}) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0) close(r9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) ioctl$SIOCSIFHWADDR(r9, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r10) 2.323378424s ago: executing program 4 (id=1161): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="9400000010000104000000000b9bdd", @ANYRES32=0x0, @ANYBLOB="80420000440001005c00128009000100626f6e64000000004c00028005000100050000000800030007000000080004000a000000080009000300000005001d00090000000500150001000000050010008000000005001b00df000000080007000200000008003a00", @ANYRES32], 0x94}}, 0x0) 2.088318543s ago: executing program 4 (id=1163): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000000000000000000800000000000900000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000050002000000000000010001000000000084010500ac1414aa0000000000000000000000000000000033"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 1.967620047s ago: executing program 3 (id=1164): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000340)={{0xffffffffffffffff, &(0x7f0000000040)='-\x00', 0x200800, &(0x7f0000000080)={@align, {0x5, 0xffff, 0x7, 0x3}}, 0x2, &(0x7f0000000180)={@_ha_fsid}, &(0x7f0000000200)=0x9}, {[0x9, 0x10]}, 0x1, 0x0, &(0x7f0000000280)}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x3, 0x4, 0x8, 0x40000, r0}, 0x50) socket(0x20, 0x800, 0x70) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x4, 0x3e, &(0x7f0000000280)="223a2cd1", &(0x7f0000000440)=""/62, 0xfffffffa, 0x0, 0xbd, 0x90, &(0x7f0000000480)="af16480f00fbaa9bac9f1b206d6be40c2952076be16dc71adbd5a767553125945973e761414ce6d5c57dd186f8ab626c4cf6ae921ba9c305040e4a98ba6bbbf0b6426c7407126e391216162595be3bd8a4e7e43cec423d49d7304cc7cd5e6c352b55be65adee56f96a751faf34cb7fc4627bd7d7a6ee14e192e8168138183495bc33b9fc225b90cc70e91109dada47d8c01e19a2c914760c56b8f1b82776279798dd1476877536f7ac0abfb6dddb198fc930f72e4e261df9877014768c", &(0x7f0000000540)="3c73eb75be4626fcac1ca1ee5858e56f07e8d82f3446cc10e3fafd35b730da4e95b9551296e811854175082035e34321c84da7e0fb711382be639d8f87c2c6f9c9035aad80e10b397e9639e5de27507b5d2dd13aa5e832a8c7c44971d078604adfc5d7fdeb2ed1c1d36e8a8dd20db4e751f5790f9c868c6f1a0e8dffb40db02e740b372f318ae99aaa6329fc7d6d0658", 0x7, 0x0, 0x4}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18318e29dd040000000000000000b1dda21b5000007a8000001811000000000000", @ANYRES32=r1, @ANYRESHEX=r2], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.966950656s ago: executing program 0 (id=1165): socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = epoll_create1(0x0) (async, rerun: 64) socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000), 0x4) socket(0x2b, 0x1, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r2], 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000380)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x4, @private1, 0xffffffff}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e20, 0x101, @private0, 0x5}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000240)='B', 0x1}], 0x1}}], 0x2, 0x4000010) (async) shutdown(r3, 0x1) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000140)=ANY=[], 0xa) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x20) 1.966654823s ago: executing program 4 (id=1166): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000400)=@ethtool_rxfh={0x51, 0x7}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000ffffffff0000000004000000850000007b00000018010000696c6c2500000000002020207b1af8ff00000000bfa10000000000000750d1a075f1ad48f48196010000f8ffffffb702000008000000b703000001800000850000007b0000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x3, 0x1, 0x0, 0xf, 0x0, 0x7, [{0x3, 0x801, 0x5}]}]}, {0x0, [0x4f, 0x0, 0x30]}}, 0x0, 0x35, 0x0, 0x9}, 0x28) 1.857709691s ago: executing program 4 (id=1167): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfb0a}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x7ff}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x28, 0x140a, 0x400, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x80c0}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.784187987s ago: executing program 1 (id=1168): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) r1 = socket$inet6(0xa, 0x3, 0x8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r1}, 0x20) syz_emit_ethernet(0x86, &(0x7f0000000c00)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x50, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "0d0802", 0x0, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, [@hopopts={0x2b, 0x1, '\x00', [@enc_lim, @padn={0x1, 0x1, [0x0]}, @pad1]}, @dstopts={0x84}]}}}}}}}, 0x0) 1.735947609s ago: executing program 0 (id=1169): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000001680)}}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x7, 0x6}, {0x6, 0xfd, 0xee, 0x16}]}) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000540)=0xfff) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r5, &(0x7f0000000200)={0xa, 0x0, 0x6, @remote, 0x22a, 0x2}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044882}, 0x20040084) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x3}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x8, 0x7fffffff, 0xf863, 0x1b, 0x1, 0x8, 0x5}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) write$ppp(r2, &(0x7f00000001c0)="43f1", 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x94) 1.678631034s ago: executing program 3 (id=1170): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000009080)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) connect$vsock_stream(r3, &(0x7f000000b840)={0x28, 0x0, 0x2710, @local}, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000000000)) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r4 = socket(0x8, 0x4, 0x3) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r6, 0x8, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4008044) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="0500000000000000bc010000000000000fa00000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x400, 0xf, 0x0, 0xffffffffffffffff, 0xd6}, 0x50) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r1, 0x0, 0x4, 0x8000000000000000}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) close(r4) sendmsg$NFT_BATCH(r0, &(0x7f0000004580)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000001040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r5) sendmsg$NLBL_MGMT_C_LISTALL(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x64, r8, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x77}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x200000d0) 1.618221164s ago: executing program 1 (id=1171): sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200029bd7000ffdbdf251c0030ca316401007063690011000200303030303a30303a31302e300000000008000b00fbffffff080001007063690011000200303030303a30303a31302e300000000008000c"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101"], 0x40}, 0xfffe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000007cc38af8ffa0000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000b"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000001c0)="5c00000012006bab9a3ff36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb00"/74, 0x4a}, {&(0x7f0000000380)="1ed68483068e7e7b115365cde0c05b774875", 0x12}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="10"], 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x44040) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 1.483835034s ago: executing program 4 (id=1172): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000400)='dctcp', 0x5) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r1, &(0x7f0000001000)=[{&(0x7f0000000b40)="b63a88b0938ee522cd2ec4a0e333eec2e1ace7c66756fa52e44313", 0x1b}, {0x0}], 0x2) unshare(0x28000600) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYRES64=r3], 0x18}, 0x1, 0x0, 0x0, 0x4000841}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x6, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90}, 0x94) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b80)=ANY=[@ANYBLOB="020100050e0000000000000000000005b8c6e36517084fc45550001a00ac1414bb000000000000000000000000ff0200000000000000000000000000012600040005000500000000000a000000000000000a0000000000000000000000000000000900008eed773e0002001300030000000000000005350000233d38e91726b9f43426ef9d24d5280396c23527817523eae7ccef23f89c436fa2cd45fdc092a88e0cbbaeda494ca92570270000000000000006df24ba7c4223a6adf2f683b43e3b3ceabdbed07882343c7d4562c91ededd45d3b7778adb2f7158dc0601ea641422cdb4890306198f4dc5086969f238159ae7c5c8733cef733b43a632c1914dcb843276b6b5c8d1a8e5fc1517e6088602af81a2d1bb00d23dc4bd52fa54fbafb8839b84aeadb9a35a0b2094fb8f946b4ca7e15d1c6827de864899e7b4681765cbda7268bb750738cc5255693af06dcfb9b02bff5eb963f1aa96d38b5dda81ca55daa210a677843791c453f7daff014c5857e8997e7c5082f56bfc3725084e31e890027e401f3ec2e11f8e2b15cfd6a1cc71d57c8811fd"], 0x70}}, 0x0) shutdown(r3, 0x8c5d47e95537ac9b) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00f4e09a7f1b54000008400000040000000000cffb"], 0x0, 0x2c, 0x0, 0x1, 0x8}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r6, 0x80000}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r7}, 0x38) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r8 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r8, &(0x7f0000000080)='0', 0x1) socket$kcm(0xa, 0x5, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x4000, 0x0) ioctl$TUNSETOFFLOAD(r9, 0x400454d0, 0x2) sendmsg$tipc(r8, &(0x7f0000000a80)={&(0x7f00000004c0)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x3, 0x6}}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000500)="b48be8980c909d0d695a1962cda6c82c9b1226c2a72ff31d937602657b2c71a50e6fbdf764cdddd646d46961ca8ed93dac90cbe39c021f7ed229b062288abcc376ce432eadad2f6a9f076c7e547b5cf721f8961c190488dc42220c3f21a9b48b87c5ee7f8d06ad7c1f70aca6e321edb4d16d7fdc8d7002bb27e4699de67818c76bfeb1cb7182bfacd11e12e134de2b45fc97af6bbdba5cab9dccfd661e99667a6d288cee60d452b7b088126f1ec5114887d0d76841d71abcd42cd80c347c75cf5fcc6fc17ad25af56ca60dca4bb9681bb9d934550d495617740c677a14d804f94294394bf18a7fcd7ac0d5f8f66e", 0xee}, {&(0x7f0000000700)}, {&(0x7f00000007c0)="a04baefa9d7162d91e3de8de735c0b2a67f34ed22a69b6250d9e07fa6c6f71c64ac2229be5bd09f02cc2b8ad78af31ec61a2f3dedbfddb93db218179d983dddf5736eae3a580b29f7ae3415cb61ba068b11523058baa98", 0x57}, {&(0x7f0000000840)="2cf062474f51b35c0c33c9f8fc1cce194d66c7b406626f736ae68f1aa0f420b93ba22df3bbceea52ec582ec0de82acb9a495c926758e58c22957f567984ceeacf70de894eafb0c839898a60c8d40193875fbdc9c3f70a57574f273f1fce4", 0x5e}, {&(0x7f00000008c0)="8614b48163ea07eb939be1c15517d2beb672735104e80c409519bb010d854fa1f1a9c7453cd37192fc7771531c49dfcddbc627ae389e246796f172755f5dc6fc1e9c940c2b0c21093b9506faba", 0x4d}], 0x5, &(0x7f0000000a40), 0x0, 0x4000001}, 0x0) sendto$inet(r1, &(0x7f0000000300)="89", 0x1, 0x4044880, 0x0, 0x0) 1.252259654s ago: executing program 2 (id=1174): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x17a, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r5, 0x25, 0x0, @void}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000005400)={{r4}, &(0x7f0000005380), &(0x7f00000053c0)='%-5lx \x00'}, 0x20) syz_emit_ethernet(0x32, &(0x7f0000001200)=ANY=[], 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) pselect6(0x40, &(0x7f0000000000)={0xa, 0x7ffffffe, 0x2, 0x10000000000006, 0xf, 0x8, 0x80000002, 0x8}, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x3261e) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x8000, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @local}}}}}}, 0x0) epoll_create1(0x80000) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x17a, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r5, 0x25, 0x0, @void}, 0x10) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000005400)={{r4}, &(0x7f0000005380), &(0x7f00000053c0)='%-5lx \x00'}, 0x20) (async) syz_emit_ethernet(0x32, &(0x7f0000001200)=ANY=[], 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) (async) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) (async) pselect6(0x40, &(0x7f0000000000)={0xa, 0x7ffffffe, 0x2, 0x10000000000006, 0xf, 0x8, 0x80000002, 0x8}, 0x0, 0x0, 0x0, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x3261e) (async) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x8000, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @local}}}}}}, 0x0) (async) 1.103792036s ago: executing program 3 (id=1175): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00f\x00', @ANYRES32, @ANYRES64, @ANYRES64], 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x4000000) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x3) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0xb2, 0xfffffffffffffffc}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 1.101087111s ago: executing program 1 (id=1176): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="210327697000fcdbdf25040000000c000180080003"], 0x20}}, 0x4000000) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r2, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x41) r3 = accept(r1, &(0x7f0000000280)=@ax25={{}, [@netrom, @null, @bcast, @default, @null, @rose, @bcast, @netrom]}, &(0x7f0000000080)=0x80) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x13, r3, 0xb400b000) 809.190951ms ago: executing program 3 (id=1177): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000d00)={r2, &(0x7f0000000040), &(0x7f0000000c00), 0x1}, 0x20) (async) r3 = socket$unix(0x1, 0x1, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0x4}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xffffffffffffff8e}}]}, 0x38}}, 0x400) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newtclass={0x40, 0x28, 0x800, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x8, 0x8}, {0x4, 0xe}, {0xffe0, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x2}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x7c, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000045}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020", 0x39}], 0x1}, 0x0) socket$inet(0x2, 0x3, 0xa) (async) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfe33) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xfff2, 0xf}, {0x8}, {0x7, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x4c800) (async) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) write(r7, &(0x7f0000000080)="2c0000001a000100000000000000000002200000000000000000000008000100e00102030800030001000000", 0x2c) (async) r8 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async) unshare(0x20000400) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x20, 0x140d, 0x1, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004) (async) socket(0x15, 0x5, 0x702) 805.843347ms ago: executing program 1 (id=1178): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000000000000000000800000000000900000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000200002000000000000010001000000000084010500ac1414aa0000000000000000000000000000000033"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 657.038673ms ago: executing program 1 (id=1179): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000030a010800000000000000000a0000070900010073797a31000000000c00024000000000000000020400048018000480140003006772653a0000000000000000000000000a000700726f757465"], 0x84}, 0x1, 0x0, 0x0, 0x8465}, 0x20008040) 515.509172ms ago: executing program 4 (id=1180): r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x20, 0x2, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x105c}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x20004000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000004118fcfadef38053dcda49112a080100ffff07000400000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c841}, 0x4008094) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES32=r0, @ANYRES16], 0x49}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000014) socket(0x9, 0x1, 0x3) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x0, 0x4e6a, 0x50, @empty, @loopback, 0x7, 0x7, 0xbd22, 0x5}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="580b79ee574f2a89f2ecf8c1e53cbeb87c7e84f2cad25844ee35a14adda9dae9ec9acd5f62bd5a1e5582b36c33c7421a7da16ef39595f5b143c181b350a9ef20eb0be898d0218c3b3099f7e9fbd3b91567979348c92e93fd05460ac80db88f612cf6238dfb408b8c1807d9c4b4ff277071711b31e3520c66851da521be6596ef27984933c5e2d481230a44a022bd24bef2207ad2"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x20}, 0x94) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES8=r3, @ANYRES16=r0, @ANYRESHEX], 0x28}}, 0xc004) r4 = socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$netlink(r4, 0xffffffffffffffff, 0x44) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="86c751e8e92f6b1484f8bc1ff83b5e735a9abc8f58057ebeb8d8c63f6f0ef1bb34197bddeb7c3cc63d623afe35c15c26f3c2484bac6508ccbeb52fac0440db96eae3fcfc635e15d7427b60d2ec471227e2adc15ea21c071346ab99eae65e0ab603e2c51d5f7711c3ff8ef1544095d879d1d090e5b3790b1be78460d7a74243ee79a97c72000000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x24000854) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_emit_ethernet(0x122c, &(0x7f0000002800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0088a820008100000086dd60f57a1411ee3a00fe8000000000000000000000000000bbff0200000000000000000000000000018900907800000000fe800000000000000000000000000002fe8000000000000000000000000000aa033860810bbc23abfec2d2f04ad7be8309dedb3a1bce26fe3a00a38b80245969166773b280f0984cb0fbb5a8bbb87aa3c27926e57ea35921ce02120c61f7c962776196de5a111538a6a5df60e7b342174bfc993afda2606173370f155f90783a10833948370a6b6af438b56b6a6a2f7a825e2aa312e5c4d25fef71635391d8e323a27be1ab8ad60fcdfed79e86f18959fa07eaae1b3ba59baa0fc03c408df8a38309cbc3b11bd39f52d8a290be462ffd1625fbdf11b889d60ee76050f0325994b092a5338c6545b30b08fb3493a19ab15a7b95f1f861f755a0a48abee7eb14dc75344ef553fb026b46a60ce9d33f9b6266fd3972fd4f47ca10941273be38e66b883516127b4faf54e9d7089be9357ef8851db5d041cc4b1cf475b838906eb655d2be932926e87b42d41290eb37a36d97982e1fac8d62d297401ca97ec730f7a7170d31786d229ebab37fda7874159494c08c0d37789e07254f9576abfbcaaa3459d66dc4b398aea065b62e59c5bd324997b84fd7f9f33693b99f3eb82d331aab8527f093e0c62cef98f6e65c3256b173773102d91b13604578166ac0cd87a202358f41658747fa7c68d028e57d4fd639e355783d188573247f1ff6d5c7de7fbfff4118171900872bed38f0b8129a37f51fd08d36d4f077706d5477f12ce3fa207c6f071f7f9fe6510c4a7b073cc741a2857d87dd15e2b40edc99908d774f8eef4285e195e0d4f8bf2b3ade2f042cd783dc12f91c5722bc08d03a4b6eac9d2d450f7ef414dd0c13d4d843086cb16269a3d05db68cec6a145612bb3ac9666d8b33f21181fe2b74171da8b8925e5240955cf1432c3534af6be4dccc4a01194131ae59e7f8b145360627f054db14ffeaac25faa2f1677e7e71a92cb0678ad9436ba73b20389f1fc59d8dc414b82475933b9ee2e87e860326738f5fd5072d13e2c7107fff9cd5aaf1814b7e9b389e66b916bf4b0db8fb100a138bd6219026e4a494903e2a01fd5aeee3551a942fb3fb6ca3bf4e0bb79c704871e26fbec23c0b21349b717d54939cd4140b1ff3da624fff717f25cad04fbd505274d80334be3dec7f7af6d4eb622a095e8dab1dd02c519ae63a7e2822346a6b74425f317d1ea6f9e35c7214743e914583f63b54639263b28d8dc71a3b18c0dccee6c5221ac7efbb4145deec2bdd8a266ab7e292df94337cd5ffe57201194adc6fccc564700d0114babb416fe6865603b27df13ec3136491a2c78cb4f90ee9ebdce587d7071e2b4ae6455ff74451c9f2b681bf8c40e0c4e9c6a4ef732b640913fe53f82f7fe79ef8f16641f5cd42586216e4f3b367df11368542f12b8972e578ef59ea048dc2f8757952ffd9055b7f1ad6d73df2f43078bd47244f8559fe1380eac367d21e06c1e3cdf3b080654c4d03eea46fd5047548141d692e121805ee186a060381eb2f02f48a2f6611deacc4f19e48c8d3059f04e3f8684d36704dc92843d18bfa659a3ce6ad9b17fb8106b7f297627b4fea90b8deef022c004b482f08b6f14ab2468f765dd30afdce39bab7a72eda304029568e305dc6c265c941c03f354751732057e4c16c1784c708e2ee439c9b07a3947539d89897ce3b8c3da9130b82b73cad6fb091d7b24681c8d71afdc0b4299043b98194eeb7a3168430bcde48c83cfa55a64e501db9b5707157d82031a70b8a8dd1273355e2a96e2a02f2c347f2b13db5812042e5df2aeadccfa9eb9fdfadc6188cada49a74f5f04183daf1c40387a57ccd73e3648245872479c4b10daed81ff69499fd81afdc2e066973c0934d7a760218580f259d68cbe8c3f77064e8a13c1f51e819b4d53c1e0ceeb7d87c746a59fae944997337934f33cb3bac7d5d65baad6106dfa6fba7cf97f24e29d506203d8cf5b2ed79607f8093e81d4314d5e42415958fe7ddf8d4ce1df60b0a1b06de64ff66430eab549badc8f44a1fcce065219f71f1cbfbeb40a6fc734e6386fbcd85c23a6e1c350aab42791d832d0947d61bcf10223e1f9ecc819988b3e8e386d743573374c2dacca4cef40f5726962b5b1c8e8823234f032bb78abc3348edf70b7c988ee6e2ef975290f58106a441393075511912c30a719323f8c6bb86d127b7b5e443d793eafa6b39420b759172838fc88540b7398853f570eb2d8cc30406de5707948d8a63c3a4a9715fcb89a48601e155134ede5216c8f23dcd3ce6c94eec2fff17c7616cb3ae427a8c088eafba665f8973a68bbec2bced4e474b2670e53083c06f44d3d3567b0c1ce4f63ccd44dc25b3d50ad056a8729885820087491857cf54178a19174309b27ae2e8aa52e4dae304044a3b77f98b0bfb921c8ef057dbcabbdb589e6613e7c1acb365e6c5014bb8157a185d1e610af78ba826391e54f91cab456ef6481c6c063c512fe1c313c6009ae564d2899c326d0fb44e8c6ee79e7b747349903ad4ca349a7800d0e4f59a9ff1d1677e79bed2dece9e941226f976dde502aae97650f25bfb13c37c3bfbb8fb6e65d8c54b8d10f06afee9be59af7de56fd390d5f23ec467c7c44ebe6b0f916b292ec8e26d0d32cfac6423137b56c4b662765634bd7c01a5c1e7b9dbc6761404bbacbc62d561a4f0c5557dcc92375fe32cfc560a0e034ae06613f859d5480526175a6dc583b08582758fa5898a47bade3d0ce52f6dbf735a5b7cf2646feb5576213c313eef546216a132bb641fbd3dd4cc489dbe720a48bed6363e9aeb5512882bc1bbfe9a0de37eb4fbdc3aede63fd8aec76891bd9ee19edfa9ec3b0f02790eb23b2d4bef1cea8afd475b4be7a177c567ddf30f26244afa615ad31a6dd3083ded653e457c7a7ac6a7e8db87cbb27a5cd95fee9d8925014cfc51cb9e59fd1446ed0740c98743d18ce3aefba602123e0f2fe228b291ef5b05ffc12580e9b5cb0c6d93f7dfd81ef54e24fb0c3cb5768b29fa0f10b77ac09d2751b208654daccb16cf753a60a550a0fa6b7d6d8b037e2bf8479340a65c419ae6fb3be6ef5021ffe423e436df5e0474360ef3d7fd60b3a00cbba4e4d1892859f6e241194a108b2910f28cea374636b1b1289763bbb25b1a548ee99e9df29e96dca3aac06a1f851cc74772d45b812ff79706225caf7f1bd9d3f870958f54151aff63aa38aa7ec90bf3adb898bf3a30366721df31365466d2cd263d54448ef9ce656de5f1ae2fc1857cc9b1196b09b230458c7ee8c472489ec3194504a559633c277a0dcea188176a8fd7f2bd0cfe941c8cf5238ae9f35219c08c5cfe89e5f4490ddd138fbfb9c912d9f594b4b14ec35d6bb94e4e946787303f7fb72332b3a3538fc725cbf13150167dfb628e89754c9f6bc6e5c42f5ec48ab018795eb0b198ab9b0d2ef9a886bb799a5e1f598b346d3204e5e4f9409ece066eb8b3b9281d236c3cfa5cb1420cf11fca3b838752debbf8065b055595a0d4428c8748c0a7b447db7398e1732a32c75fd6014a4b74fe968e5b32207752a27e6949c39e7de25fcb0f5eaaff7c31f88542f12d6636183fd9988f8f0934c3f239a749ff92e7057fad8b92e41344a121a9ddf40a577c4498f00f7097284a106b6d9651c467708c755171077ccb18d41a85d1ca85d5439eb33de2f1235747bb87c8ef185740837aabe032fc36e15f9aec6d61ccfbb9a7eda5d07e4755395e7761318e79b6e9a4dbd698bebec68d69bc6870c51da5befca0ac2e6afa78a3ac97a3abacf0dce9ff17af76999bbc91841e2d730a77b85942e5f383258f4a09d5fbbac5cba97c87d1ea7b8f7231c60b65e2f56adb7401af93924713729138079966b9981b1ad94c3b01127ce349b8636aa2416bea1101c1a966f7554146f0056c77a85ec0a76941f1a7b5997d89961910c774a2628c2dfa7ddce6d3021d5181fcdce59891fd961237bf4199d07ad0a953444f1b4a9ad5eaca2d3c305fb42a48cff7fd3bfd6cdda8f56ee22ecdb31a589369968834ddc498c2f1bb6de97729d97b98f0f358ca3a1a6498b4cd3d469c5b01c68593bb9dd0ef00beabe14854dc6717b300bf3b870950fe35e77435eb2d47e78e39e6ad582bcf54ad8d06de4b3daf52db040633df62aa635603e956e407474435af0d3b84e299f5feabcb038ebf477b7871473396d3b6e228da3d9102a3d9c88fc4cc9ec13d313920aed8fb2c7f15a0cc6926aa5b2b25e147359aa339b603f8cab7d015167c68d6b04eb1e8a92f7d93c866cb1c038a60725affa3f04e75eaadf33322f81ec6c2cd2515e89e626e8f59af967b101b40e7239bff520ffc7a03c409ce0462cc811d64167b399f2b80253ef31891a8d1e396917e7517a4f7959d7202be5d11ffb7281cf304708affd391ab35e8ffd1f87b417b22bdcbcc9376a60a731d33e585307133a4724d5ccd4fd01ff3ff2ddcbb30b8f57f6b37742c672009385cdeb445df85949626f7e4cd14775753fbcf3872c09c5ccafffe0e5a1755836c60d6d1b9b4a6481693e6db793b4f03ccfd9f2593c56614a0dedec73a6f1ee268e5d2132f507ba488f85885e63b01512ac1534654aae10d0fb86d97c1bae8d1083c2f434f1928c68e75a0951cdd639b9b7663c0f2ff7c7f8527e74da53bb39bc03b7143d45ccd4666de24333a574ae668b8fecc74a698ad48b58819646ed3724f1a71ef12cad3796aae71e34704136a7da1e91e3c19bc1f77925e82588febc8805f03a2aa938dfd89d4b65e95fd02151a607e047b40a8d0d28d81f92118e45920d74a8cfef2f91d61f5bfe81d157382f00caf307b976831743d43c72c76a2156e0f49c7b2a5fae631b0cbeb9e74371706745a4a92edd4f477c5f4aaff25a7e1eedb2facfc0b838d1738e876373392ed745fb9a00cd3193ffde3d02c78d53d15885fb93cf682c524c0822632a3a287d1e228205a1d7f4eb08bfc2d44b22d23908b106eac7224ff8e9a1696b8d4700cc4d60f700ea6f97d7ec978cc849d6322984aa8b1e8a38cf57a2b502b760decb62b0c076f08178b3ff520a46f27d61420daaa3556bf09a6dfb85c21b1b4997a0ea0dc75c4cc1b38ac1baf0552ab9a4bfcde214db7ff9ba4ef6d6e297a07b1d523b32f4c7c062d0a06e7fc2dc405d37faaf5483d589dca3e0dcee6ba2be468b17293ef9be866cce615941db405bc6321d97c51f46f7bb299fc7eacaedd6f4852b4962effb71baa4836795b4954c2813ce639d563865901ba0ac8f9e750f37e91d1dcc9eeac27283e86a54be2047cedde3e050ba7443ed17d07bdb14a409d7c48f43115b53b746cae784590f7f7539ac3abc02ec1dd653aa314e5d782e1fa582a85768b5a48e16d0f80c98e9924f1d02af47825ace029c24d429312b05345c0ed66ef96eace44ae0aa095590a1865e52bce1f10df1b9e58922fc8ed78295562d8664a9bfe7cab6aebb3ee71c9b9736e824c17dd0bb814e543fe3a914f9b6e88fde79854850eaaff1724749556761f426571e4efa0905063fa506cc52060ff5c1e6513ad4609cc4363eb56836ed490523b23c2ad618bfb30a06080438e974dc1768b571e3a13ab946fb873110a3035ff331a35f631a262ae3746c04d11a7eabf8451019a5467019aaa8bdc557ae1710c62ebf1b4147aab1a215ce79b0bcb229160612e12bad8c0d639ae7cfbf411"], 0x0) write$rfkill(r5, &(0x7f0000000340)={0x93b, 0x0, 0x3, 0x1}, 0x8) r6 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[]}, 0x78) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r7, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)="a85751ad519b201965da2ebcc4898c7f46cb0819b38bbf504fd2617bf9689f2cdbe63959901f5afb841befbb8787b77bc6855e836e2c277f600c31ff7ea5acf0a9525fa1c161d06b23b802aaf4716846d96af1654995ec32db50c7e056aa45212cd6", 0x62}], 0x2}}], 0x1, 0x20008081) syz_emit_ethernet(0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaabb00044205cf67560008c2fe87a90e"], 0x0) 441.92148ms ago: executing program 1 (id=1181): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000100)=0xffff, 0x4) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x81}}, 0x1c) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x3422a61a}], 0x1, 0x10102, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x52e, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xa}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0900001800000008000000400000fbe80a88004200f90c", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0xc, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x80}]}}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x14, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x39}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20018000) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="f26177000000000000000000000000000000000000000000000000000000000003"], 0x58) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0xfffffffffffffc67, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x0, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8}, @NFTA_NG_TYPE]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001600)={r1, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000daf3715ede9ef24200007a000000", @ANYRES32=0x0, @ANYBLOB="00000000081000001c0012800b00010062726964676500000c000280040018"], 0x3c}, 0x1, 0x0, 0x0, 0x34001843}, 0x4004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) 412.115861ms ago: executing program 3 (id=1182): syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000069078ac141400ac1e000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780800445545b07dd1368784f65c42c880c823a70d5f75042440653fafedc22a09559ddb84b01aa71aab295699f4c121291f14a584b99c21019b2acb36b4d61750027684933fb31c4b5e67bb8a8dcc9fc6eafdba1d867651439329a3d76920da8d97a70adfd303e1e9256b0960c4819a2b4bcf657d583e0db73ecdfeb76bdecf4e4563d5e25860c23f70f535ded2b81ec697b4a483f2cf34e5a4736ece1e19e02348aafc1c31efb88bfaef64a0a5455095ddf5d39851ddca78ab57f10a878bba6b29010000008583e17d8f734bea5fe3487e1adf4d00703807e29ce62f0519136b5c76ff753b58fe76e91898efc8b2dd67"], 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000280)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) unshare(0x2c020400) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="600602"], 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'geneve0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="b876b298", @ANYRES16=r7, @ANYBLOB="010029bd7000000000000200000008000300", @ANYBLOB="cf80173f56b8c9f2f002d06951111e6ea9ba66642f2088fa5d8e62ad1702beef595ce49346dd297d860fcdc332c31add09169d12cb894b40d2b2acbfde474f1b4b113f93606b87a85339af123c98061e24a9b8fb224f2a8223f4cf3525a864496849b5fe48803b8ad138633d01908dc55a15cebccdf36550afa9cf129a3b0e6a9ff5955cc21ba691d9d3fc8d49332adc6c42bd2cebd6c0644c1d26b131e62ba49b50aa73c18dd6d4de356e7075f4f2bdf8c3431a3693f619209583db94d102749b65ba8d80e1bffc74b362289bb4c370f755b53841d98a748f4811e950c0be43170a58d2c20c534b9f2ff830af84809185da3620307c", @ANYBLOB="0c00990041000000600000000800a0dd1b0076090000080026009409000008009f00040000010800a10001013176f39db8b3c343bc73836882be6efb3a9cf3470eabab2a6ee119b1da6e0037f22aaa737a70faee62bef3c589e0aa0ad51c0ecc7475781d032cba215c475eff2d454353b2dcb9c0a6616a1eef2a88429d99b2cf68db923bc0cc3046f2b4e6758208ccb161"], 0x48}}, 0x80) sendto$packet(0xffffffffffffffff, &(0x7f00000005c0)="bad330fbc93f8b78040000ea0756", 0xe, 0x4041, &(0x7f00000001c0)={0x11, 0x88a8, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1a41, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xd132}) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$sock_int(r10, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x5}, 0x1c) listen(r10, 0x0) listen(r11, 0x0) write$cgroup_subtree(r9, &(0x7f0000000200)=ANY=[@ANYBLOB="7301ba32"], 0xffffffc2) sendmsg$nl_route(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x34, 0x18, 0x1, 0x1000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_OUT={0xc, 0x2, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}}, 0x44890) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r12, 0x6, 0xd, &(0x7f0000000080)='veno', 0x4) 232.047662ms ago: executing program 2 (id=1183): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000680)=[{&(0x7f0000000c00)="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", 0x401}], 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069003e000000000095000000"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0xca, &(0x7f0000000080)=""/202, 0x0, 0x0, '\x00', 0x0, @sk_msg, r0}, 0x94) 220.869965ms ago: executing program 2 (id=1184): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="9400000010000104000000000b9bdd", @ANYRES32=0x0, @ANYBLOB="80420000440001005c00128009000100626f6e64000000004c00028005000100050000000800030007000000080004000a000000080009000300000005001d00090000000500150001000000050010008000000005001b00df000000080007000200000008003a00", @ANYRES32], 0x94}}, 0x0) 172.156802ms ago: executing program 2 (id=1185): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x216}], 0x1}, 0xff00) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x2, 0xfffff000}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@getnexthop={0x20, 0x6a, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NHA_ID={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004080}, 0x20004800) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r3) (async) r4 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 64) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 64) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) writev(r5, &(0x7f00000006c0)=[{&(0x7f0000000040)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900172f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a1905234", 0x34}, {&(0x7f00000001c0)="7b0d0000fffe", 0x6}], 0x2) (async) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) ioctl$PPPIOCUNBRIDGECHAN(r7, 0x7434) (async) bind$alg(r4, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x1800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="7c00000010003704030000000300000000000000", @ANYRES32=r9, @ANYBLOB="0b1b0500000000005c0012800b00010069703667726500004c00028008000100", @ANYRES32=r9, @ANYBLOB="14000600fe8000000000000000000000000000bb14000700fe"], 0x7c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) (async) r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r10, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa) connect$bt_rfcomm(r10, &(0x7f0000000080)={0x1f, @none, 0x4}, 0xa) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) (async, rerun: 64) r11 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 64) recvmsg$can_bcm(r11, &(0x7f0000000c00)={&(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000b00)=[{&(0x7f00000003c0)=""/252, 0xfc}, {&(0x7f00000004c0)}, {&(0x7f0000000600)=""/208, 0xd0}, {&(0x7f0000000700)=""/220, 0xdc}, {&(0x7f0000000800)=""/250, 0xfa}, {&(0x7f0000000900)=""/49, 0x31}, {&(0x7f0000000940)=""/174, 0xae}, {&(0x7f0000000a00)=""/8, 0x8}, {&(0x7f0000000c40)=""/130, 0x82}], 0x9, &(0x7f0000000bc0)=""/20, 0x14}, 0x40000001) 51.592595ms ago: executing program 2 (id=1186): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5b67}, [@call={0x85, 0x0, 0x0, 0xf}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000000}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f00000006c0)='GPL\x00', 0x7, 0x0, 0x0, 0x100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000030400000000fedbdf2500007400", @ANYRES32=r3, @ANYBLOB="20580000075005001c0012800b00010062726964676500000c028005001900ff0000002fff6c1cf6afef7af844e03aae31fe7eaa2cfff1dbbdb349d77c89984cff3b581c71ed022213a75e51c71afa944b526e0e1a260dcb4f342d278fcf28dd713ce69f63de24f5b5d9c12b2c378ef1ae2a81532328c109bf39122ebf886dd9bb33837edfddad61ec2c81b314e99b90669acf2ab37c5429096d5543c90ead25a520bba8f5a7eaef54fe394f1b5860f34e6e857722dfdea4bf9f9a0a73123e1a56370507e7258d2e9b5560760f7a78ca47e0"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x1bf5b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}]}}}]}, 0x3c}}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800bb00000000003000000030000000050000000000000001007614db71fdd97c8376900a0004080000000000000003000000100000000000000000000002000000000300000000"], 0x0, 0x4d}, 0x28) r6 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000480)={0x28, 0x0, 0x2710, @host}, 0x10, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f00000004c0), 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r3, @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0300000004000000000000000000000000000000000000c44a7401226ff300000000006dd6798c3003c0b3cf84effed9994ecd580bcc6bf84a86e4edccc9e6c605c4dd947b15cad481bf220ae274d52fdb9dd19d6c9b6d9a83783662f08a6041be"], 0x50) r7 = socket(0x1d, 0x5, 0x1) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r7, 0x0) r8 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r8, &(0x7f0000000080), 0x10) r9 = accept4$unix(r7, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}, 0x9bc}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)=""/80, 0x50}], 0x1}, 0x8}], 0x2, 0x24040, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x78}}, 0x0) 0s ago: executing program 2 (id=1187): socket$igmp6(0xa, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) socket(0x11, 0x3, 0x0) unshare(0x22020400) r0 = socket(0xa, 0x3, 0x87) sendto(r0, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) poll(&(0x7f0000000200)=[{r0, 0x2008}], 0x1, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008"], 0x22) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f0000000080)=""/4047, &(0x7f0000000000)=0xfcf) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.211' (ED25519) to the list of known hosts. [ 75.965200][ T5595] cgroup: Unknown subsys name 'net' [ 76.097260][ T5595] cgroup: Unknown subsys name 'cpuset' [ 76.106790][ T5595] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.800605][ T5595] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.498536][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.512038][ T5612] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.526911][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.541787][ T5619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.550979][ T5615] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.563091][ T5615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.571826][ T5623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.580634][ T5615] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.588775][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.594328][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.598770][ T5615] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.613885][ T5628] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.624044][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.634324][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.634806][ T5628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.643944][ T5627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.651570][ T5628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.660162][ T5627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.666499][ T4926] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.672946][ T5627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.683656][ T4926] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.689861][ T5627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.695149][ T4926] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.704597][ T5627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.745262][ T4926] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.613915][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.621208][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.628846][ T5610] bridge_slave_0: entered allmulticast mode [ 83.636558][ T5610] bridge_slave_0: entered promiscuous mode [ 83.680587][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.687968][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.695443][ T5610] bridge_slave_1: entered allmulticast mode [ 83.702662][ T5610] bridge_slave_1: entered promiscuous mode [ 83.774304][ T4926] Bluetooth: hci1: command tx timeout [ 83.774309][ T5619] Bluetooth: hci3: command tx timeout [ 83.774517][ T5619] Bluetooth: hci0: command tx timeout [ 83.783304][ T4926] Bluetooth: hci2: command tx timeout [ 83.804186][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.811829][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.820752][ T5608] bridge_slave_0: entered allmulticast mode [ 83.828977][ T5608] bridge_slave_0: entered promiscuous mode [ 83.853361][ T4926] Bluetooth: hci4: command tx timeout [ 83.869072][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.876695][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.884089][ T5608] bridge_slave_1: entered allmulticast mode [ 83.891781][ T5608] bridge_slave_1: entered promiscuous mode [ 83.915916][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.923321][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.930827][ T5609] bridge_slave_0: entered allmulticast mode [ 83.938178][ T5609] bridge_slave_0: entered promiscuous mode [ 83.948665][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.960832][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.980382][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.987605][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.995587][ T5611] bridge_slave_0: entered allmulticast mode [ 84.003092][ T5611] bridge_slave_0: entered promiscuous mode [ 84.024041][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.031509][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.040157][ T5609] bridge_slave_1: entered allmulticast mode [ 84.047718][ T5609] bridge_slave_1: entered promiscuous mode [ 84.085876][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.093436][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.100667][ T5611] bridge_slave_1: entered allmulticast mode [ 84.109267][ T5611] bridge_slave_1: entered promiscuous mode [ 84.148032][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.176499][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.189702][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.201482][ T5610] team0: Port device team_slave_0 added [ 84.209857][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.251824][ T5610] team0: Port device team_slave_1 added [ 84.271262][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.324112][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.359545][ T5609] team0: Port device team_slave_0 added [ 84.378087][ T5608] team0: Port device team_slave_0 added [ 84.409078][ T5609] team0: Port device team_slave_1 added [ 84.429033][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.436547][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.464801][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.480593][ T5608] team0: Port device team_slave_1 added [ 84.488990][ T5611] team0: Port device team_slave_0 added [ 84.497244][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.508312][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.516699][ T5607] bridge_slave_0: entered allmulticast mode [ 84.525040][ T5607] bridge_slave_0: entered promiscuous mode [ 84.543960][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.553067][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.581002][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.603521][ T5611] team0: Port device team_slave_1 added [ 84.621042][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.629001][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.637665][ T5607] bridge_slave_1: entered allmulticast mode [ 84.645860][ T5607] bridge_slave_1: entered promiscuous mode [ 84.656016][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.665904][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.696919][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.753000][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.760478][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.791113][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.811341][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.818743][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.846930][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.859304][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.867463][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.895151][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.921972][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.935093][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.946056][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.953587][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.980694][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.992959][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.001209][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.028423][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.104120][ T5610] hsr_slave_0: entered promiscuous mode [ 85.110940][ T5610] hsr_slave_1: entered promiscuous mode [ 85.132017][ T5607] team0: Port device team_slave_0 added [ 85.140901][ T5607] team0: Port device team_slave_1 added [ 85.163146][ T5609] hsr_slave_0: entered promiscuous mode [ 85.170004][ T5609] hsr_slave_1: entered promiscuous mode [ 85.176882][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 85.182701][ T5609] Cannot create hsr debugfs directory [ 85.261209][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.268370][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.294477][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.321061][ T5608] hsr_slave_0: entered promiscuous mode [ 85.328009][ T5608] hsr_slave_1: entered promiscuous mode [ 85.335295][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 85.341112][ T5608] Cannot create hsr debugfs directory [ 85.351923][ T5611] hsr_slave_0: entered promiscuous mode [ 85.358800][ T5611] hsr_slave_1: entered promiscuous mode [ 85.365381][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 85.371233][ T5611] Cannot create hsr debugfs directory [ 85.391125][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.398239][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.424870][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.630819][ T5607] hsr_slave_0: entered promiscuous mode [ 85.637745][ T5607] hsr_slave_1: entered promiscuous mode [ 85.644082][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 85.649934][ T5607] Cannot create hsr debugfs directory [ 85.853774][ T5619] Bluetooth: hci0: command tx timeout [ 85.859809][ T5627] Bluetooth: hci1: command tx timeout [ 85.865335][ T5627] Bluetooth: hci3: command tx timeout [ 85.871868][ T4926] Bluetooth: hci2: command tx timeout [ 85.933404][ T4926] Bluetooth: hci4: command tx timeout [ 86.093852][ T5609] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.115280][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.127261][ T5609] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.138044][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.146919][ T5609] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.158792][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.167598][ T5609] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.178908][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.260366][ T5610] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.270999][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.279700][ T5610] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.290861][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.301316][ T5610] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.312643][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.322963][ T5610] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.335380][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.442968][ T5611] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.455940][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.467060][ T5611] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.480499][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.496990][ T5611] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.510211][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.520415][ T5611] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.530558][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.658656][ T5608] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.669686][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.678037][ T5608] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.688911][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.706482][ T5608] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.716239][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.740193][ T5608] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.750554][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.809657][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.877978][ T5607] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.888613][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.897150][ T5607] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.907400][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.915851][ T5607] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.926606][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.945567][ T5607] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.957025][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.971366][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.007088][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.015351][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.028722][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.052294][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.059720][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.115419][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.154008][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.161382][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.217461][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.234550][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.242011][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.335730][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.402920][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.411304][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.478032][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.485460][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.506478][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.647899][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.724321][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.736995][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.744381][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.782952][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.790300][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.822504][ T5611] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.856597][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.909089][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.916792][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.934563][ T4926] Bluetooth: hci2: command tx timeout [ 87.942031][ T5619] Bluetooth: hci0: command tx timeout [ 87.949150][ T5612] Bluetooth: hci3: command tx timeout [ 87.956019][ T4926] Bluetooth: hci1: command tx timeout [ 87.992490][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.000611][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.016663][ T4926] Bluetooth: hci4: command tx timeout [ 88.838663][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.895179][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.047582][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.150208][ T5610] veth0_vlan: entered promiscuous mode [ 89.246926][ T5610] veth1_vlan: entered promiscuous mode [ 89.389632][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.456878][ T5611] veth0_vlan: entered promiscuous mode [ 89.487467][ T5610] veth0_macvtap: entered promiscuous mode [ 89.506489][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.516480][ T5611] veth1_vlan: entered promiscuous mode [ 89.541991][ T5610] veth1_macvtap: entered promiscuous mode [ 89.611812][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.633170][ T5607] veth0_vlan: entered promiscuous mode [ 89.652016][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.678298][ T5607] veth1_vlan: entered promiscuous mode [ 89.711812][ T5611] veth0_macvtap: entered promiscuous mode [ 89.730529][ T5611] veth1_macvtap: entered promiscuous mode [ 89.754221][ T3374] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.793655][ T162] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.804013][ T5608] veth0_vlan: entered promiscuous mode [ 89.813405][ T3374] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.826135][ T5609] veth0_vlan: entered promiscuous mode [ 89.865128][ T5608] veth1_vlan: entered promiscuous mode [ 89.875832][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.926623][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.945684][ T5607] veth0_macvtap: entered promiscuous mode [ 89.954345][ T5609] veth1_vlan: entered promiscuous mode [ 89.967451][ T162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.973383][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.985499][ T162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.998476][ T5607] veth1_macvtap: entered promiscuous mode [ 90.014234][ T5619] Bluetooth: hci0: command tx timeout [ 90.019978][ T5612] Bluetooth: hci3: command tx timeout [ 90.024200][ T5627] Bluetooth: hci2: command tx timeout [ 90.026060][ T4926] Bluetooth: hci1: command tx timeout [ 90.073959][ T162] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.084996][ T162] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.093987][ T4926] Bluetooth: hci4: command tx timeout [ 90.114068][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.132966][ T162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.140930][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.146545][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.153818][ T162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.184841][ T5609] veth0_macvtap: entered promiscuous mode [ 90.238313][ T5609] veth1_macvtap: entered promiscuous mode [ 90.262440][ T5608] veth0_macvtap: entered promiscuous mode [ 90.262631][ T5610] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.305832][ T5608] veth1_macvtap: entered promiscuous mode [ 90.352884][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.377769][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.388155][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.447315][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.484160][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.517215][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.533711][ T1158] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.589803][ T162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.616109][ T162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.664950][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.702747][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.902176][ T5813] syzkaller1: entered promiscuous mode [ 90.907972][ T162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.924625][ T5813] syzkaller1: entered allmulticast mode [ 90.933804][ T162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.955812][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.993964][ T71] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.003937][ T5817] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 91.050521][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.062617][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.123696][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.205566][ T5821] Cannot find set identified by id 0 to match [ 91.230290][ T3374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.265700][ T3374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.323747][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.389788][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.405350][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.437330][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.457208][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.515230][ T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.548016][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.627299][ T71] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.787406][ T3374] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.830559][ T3374] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.910335][ T3374] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.940861][ T3374] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.944320][ T5838] openvswitch: netlink: Message has -2 unknown bytes. [ 91.954234][ T5836] IPVS: set_ctl: invalid protocol: 115 10.1.1.1:20001 [ 91.958091][ T162] IPVS: starting estimator thread 0... [ 91.973439][ T5841] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 92.065153][ T5840] IPVS: using max 34 ests per chain, 81600 per kthread [ 92.154024][ T71] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.195480][ T5838] Driver unsupported XDP return value 0 on prog (id 2) dev N/A, expect packet loss! [ 92.269789][ T1216] cfg80211: failed to load regulatory.db [ 92.538759][ T5847] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12'. [ 92.681338][ T5853] Zero length message leads to an empty skb [ 92.892869][ T5856] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13'. [ 93.399655][ T5863] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14'. [ 93.504355][ T5864] syzkaller0: entered promiscuous mode [ 93.510985][ T5864] syzkaller0: entered allmulticast mode [ 93.824481][ T5868] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16'. [ 94.066636][ T5874] netlink: 148 bytes leftover after parsing attributes in process `syz.0.17'. [ 94.079294][ T5869] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16'. [ 94.100549][ T5708] block nbd64: NBD_DISCONNECT [ 94.124032][ T5869] nbd: device at index 64 is going down [ 94.483027][ T5878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'. [ 94.532157][ T5708] udevd[5708]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 96.672417][ T5825] Set syz0 is full, maxelem 65536 reached [ 97.110048][ T5891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23'. [ 97.226054][ T5894] netlink: 20 bytes leftover after parsing attributes in process `syz.3.25'. [ 97.237781][ T5894] openvswitch: netlink: Flow actions attr not present in new flow. [ 97.329427][ T5895] netlink: 76 bytes leftover after parsing attributes in process `syz.3.25'. [ 98.007851][ T5923] netlink: 12 bytes leftover after parsing attributes in process `syz.4.33'. [ 98.106042][ T5926] netlink: 36 bytes leftover after parsing attributes in process `syz.1.35'. [ 98.412214][ T5915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31'. [ 98.829680][ T5933] netlink: 48 bytes leftover after parsing attributes in process `syz.0.36'. [ 98.926722][ T5922] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.936156][ T5922] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.247819][ T5922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.267520][ T5922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.564917][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.663650][ T3374] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.691688][ T3374] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.062384][ T5981] netlink: 'syz.0.51': attribute type 1 has an invalid length. [ 100.130812][ T5987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.50'. [ 100.143529][ T162] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.154939][ T5987] block nbd0: Unsupported socket: should be TCP or UNIX. [ 100.407851][ T5983] syzkaller1: entered promiscuous mode [ 100.423073][ T5983] syzkaller1: entered allmulticast mode [ 100.601733][ T6008] syz_tun: entered allmulticast mode [ 100.626056][ T6001] syzkaller1: entered promiscuous mode [ 100.635964][ T6001] syzkaller1: entered allmulticast mode [ 100.800159][ T6012] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 100.854341][ T1158] IPVS: starting estimator thread 0... [ 100.870370][ T6012] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.57'. [ 100.947018][ T6011] netlink: 164 bytes leftover after parsing attributes in process `syz.4.58'. [ 100.973898][ T6017] IPVS: using max 32 ests per chain, 76800 per kthread [ 100.988014][ T6019] netlink: 'syz.2.60': attribute type 28 has an invalid length. [ 101.337440][ T6034] netlink: 'syz.0.63': attribute type 5 has an invalid length. [ 101.490333][ T6041] tipc: Started in network mode [ 101.526968][ T6041] tipc: Node identity ac14140f, cluster identity 4711 [ 101.552972][ T6041] tipc: New replicast peer: 255.255.255.255 [ 101.564692][ T6041] tipc: Enabled bearer , priority 10 [ 102.015176][ T6065] netlink: 'syz.1.75': attribute type 6 has an invalid length. [ 102.263962][ T6081] __nla_validate_parse: 3 callbacks suppressed [ 102.263980][ T6081] netlink: 20 bytes leftover after parsing attributes in process `syz.1.79'. [ 102.282950][ T6085] netlink: 'syz.2.77': attribute type 1 has an invalid length. [ 102.539561][ T6074] netlink: 'syz.2.77': attribute type 2 has an invalid length. [ 102.687024][ T5618] tipc: Node number set to 2886997007 [ 102.862121][ T6107] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 102.922261][ T6107] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.83'. [ 103.052233][ T6114] ip6gretap0: entered promiscuous mode [ 103.256768][ T6124] netlink: 64 bytes leftover after parsing attributes in process `syz.4.89'. [ 103.274698][ T6126] netlink: 16 bytes leftover after parsing attributes in process `syz.2.90'. [ 103.307393][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.91'. [ 103.331631][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.91'. [ 103.341159][ T6126] ipvlan0: entered promiscuous mode [ 103.350069][ T6126] ipvlan0: left promiscuous mode [ 103.367606][ T6124] syzkaller1: entered promiscuous mode [ 103.418758][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.91'. [ 103.430241][ T48] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0 [ 103.435919][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.91'. [ 103.447862][ T48] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 103.447907][ T48] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 103.447941][ T48] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 103.869960][ T6150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.96'. [ 104.279365][ T6161] netlink: 16 bytes leftover after parsing attributes in process `syz.4.103'. [ 104.294486][ T6166] netlink: zone id is out of range [ 104.313065][ T6166] netlink: zone id is out of range [ 104.320573][ T6161] ipvlan0: entered promiscuous mode [ 104.328689][ T6166] netlink: zone id is out of range [ 104.330705][ T6161] ipvlan0: left promiscuous mode [ 104.337234][ T6166] netlink: zone id is out of range [ 104.357479][ T6166] netlink: zone id is out of range [ 104.573533][ T6177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.729513][ T6185] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.741235][ T6185] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.086711][ T6204] ip_tables: iptables: counters copy to user failed while replacing table [ 105.227264][ T6206] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 105.283675][ T6206] ovs-system: entered promiscuous mode [ 105.292900][ T6207] syzkaller0: entered promiscuous mode [ 105.299955][ T6207] syzkaller0: entered allmulticast mode [ 105.512358][ T6216] ipvlan0: entered promiscuous mode [ 105.521075][ T6216] ipvlan0: left promiscuous mode [ 106.173040][ T6242] syzkaller1: entered promiscuous mode [ 106.178814][ T6242] syzkaller1: entered allmulticast mode [ 107.677641][ T6187] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 107.920243][ T6249] __nla_validate_parse: 4 callbacks suppressed [ 107.920263][ T6249] netlink: 16 bytes leftover after parsing attributes in process `syz.2.129'. [ 107.950733][ T6259] netlink: 16 bytes leftover after parsing attributes in process `syz.3.130'. [ 108.031984][ T6249] ipvlan0: entered promiscuous mode [ 108.087128][ T6249] ipvlan0: left promiscuous mode [ 108.317895][ T6278] veth1_to_bond: entered promiscuous mode [ 108.351311][ T6277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.134'. [ 108.351872][ T6276] veth1_to_bond: entered allmulticast mode [ 108.372834][ T6279] netlink: 32 bytes leftover after parsing attributes in process `syz.3.133'. [ 108.413577][ T6279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.133'. [ 108.460704][ T6277] veth1_to_bond (unregistering): left promiscuous mode [ 108.524474][ T6277] veth1_to_bond (unregistering): left allmulticast mode [ 108.589758][ T6294] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 108.619878][ T6277] bond0: (slave bond_slave_1): Releasing backup interface [ 108.660284][ T6289] netlink: 84 bytes leftover after parsing attributes in process `syz.3.133'. [ 108.901141][ T6308] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 109.458492][ T6327] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.722166][ T6344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.149'. [ 109.734868][ T6344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.149'. [ 110.113402][ T6355] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 111.945858][ T6314] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 112.826589][ T6391] netlink: 'syz.4.162': attribute type 10 has an invalid length. [ 112.872231][ T6391] syz_tun: entered promiscuous mode [ 112.912541][ T6395] netlink: 16 bytes leftover after parsing attributes in process `syz.1.163'. [ 112.947949][ T6391] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 113.033074][ T6395] ipvlan0: entered promiscuous mode [ 113.058992][ T6395] ipvlan0: left promiscuous mode [ 113.630952][ T6426] netlink: 'syz.2.166': attribute type 4 has an invalid length. [ 113.697261][ T6429] netlink: 'syz.2.166': attribute type 4 has an invalid length. [ 114.255864][ T6437] netlink: 224 bytes leftover after parsing attributes in process `syz.4.171'. [ 114.280958][ T6435] netlink: 'syz.3.170': attribute type 17 has an invalid length. [ 114.301590][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.170'. [ 114.452725][ T6440] warning: `syz.4.171' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 114.541263][ T6442] ovs-s!: entered promiscuous mode [ 114.782414][ T6454] netlink: 24 bytes leftover after parsing attributes in process `syz.2.175'. [ 115.550300][ T6466] netlink: 'syz.2.178': attribute type 97 has an invalid length. [ 115.626955][ T6474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.177'. [ 115.673747][ T6474] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 115.839759][ T6478] netlink: 'syz.2.181': attribute type 23 has an invalid length. [ 115.849380][ T6478] netlink: 'syz.2.181': attribute type 21 has an invalid length. [ 115.857903][ T6478] IPv6: NLM_F_CREATE should be specified when creating new route [ 115.870834][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.181'. [ 116.527746][ T6497] netlink: 'syz.0.186': attribute type 1 has an invalid length. [ 116.634924][ T6484] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 117.060172][ T6521] netlink: 'syz.1.193': attribute type 1 has an invalid length. [ 117.230216][ T6533] netlink: 24 bytes leftover after parsing attributes in process `syz.2.194'. [ 117.279192][ T6521] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.391635][ T6533] ip6gre1: entered promiscuous mode [ 117.423014][ T6533] ip6gre1: entered allmulticast mode [ 117.490341][ T6540] bond1: entered allmulticast mode [ 117.508733][ T6544] netlink: 72 bytes leftover after parsing attributes in process `syz.4.199'. [ 117.599367][ T6542] macvlan2: entered promiscuous mode [ 117.628857][ T6542] macvlan2: entered allmulticast mode [ 117.653777][ T6542] bond1: entered promiscuous mode [ 117.667157][ T6542] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 117.700118][ T6542] bond1: left promiscuous mode [ 117.764942][ T6556] netlink: 52 bytes leftover after parsing attributes in process `syz.1.200'. [ 117.801579][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.822097][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.992158][ T6564] Bluetooth: MGMT ver 1.23 [ 118.007636][ T6567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.206'. [ 118.080754][ T6570] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 118.092598][ T6567] netlink: 24 bytes leftover after parsing attributes in process `syz.0.206'. [ 118.156794][ T6573] bridge_slave_0: left allmulticast mode [ 118.171577][ T6573] bridge_slave_0: left promiscuous mode [ 118.198694][ T6573] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.240397][ T6573] bridge_slave_1: left allmulticast mode [ 118.262510][ T6573] bridge_slave_1: left promiscuous mode [ 118.285892][ T6573] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.361006][ T6573] bond0: (slave bond_slave_0): Releasing backup interface [ 118.367064][ T6579] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20001 [ 118.380116][ T6579] IPv6: Can't replace route, no match found [ 118.418821][ T6573] bond0: (slave bond_slave_1): Releasing backup interface [ 118.440593][ T6573] team0: Port device team_slave_0 removed [ 118.459253][ T6573] team0: Port device team_slave_1 removed [ 118.466115][ T6573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.478942][ T6573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.515676][ T6573] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 118.555301][ T6584] ipvlan0: entered promiscuous mode [ 118.578206][ T6584] ipvlan0: left promiscuous mode [ 118.912202][ T6610] netlink: 'syz.4.215': attribute type 1 has an invalid length. [ 118.926148][ T6599] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.682535][ T6640] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 119.744290][ T6644] veth1_macvtap: left promiscuous mode [ 119.757154][ T6644] macsec0: entered allmulticast mode [ 119.764973][ T6640] __nla_validate_parse: 1 callbacks suppressed [ 119.764997][ T6640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.225'. [ 119.846695][ T6646] veth1_macvtap: entered promiscuous mode [ 119.871168][ T6646] veth1_macvtap: entered allmulticast mode [ 119.904261][ T6646] macsec0: left allmulticast mode [ 119.907191][ T6652] netlink: 16 bytes leftover after parsing attributes in process `syz.3.227'. [ 119.917929][ T6646] veth1_macvtap: left allmulticast mode [ 119.943733][ T6640] openvswitch: ovs-system: Dropping previously announced user features [ 119.997030][ T6652] ipvlan0: entered promiscuous mode [ 120.014311][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 120.016094][ T6652] ipvlan0: left promiscuous mode [ 120.021243][ T4926] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 120.110747][ T6658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.231'. [ 120.221905][ T6664] netlink: 'syz.2.230': attribute type 1 has an invalid length. [ 120.465598][ T6670] netlink: 28 bytes leftover after parsing attributes in process `syz.4.234'. [ 120.536315][ T6677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.236'. [ 120.585561][ T6678] netlink: 16 bytes leftover after parsing attributes in process `syz.1.235'. [ 120.638201][ T6685] netlink: 72 bytes leftover after parsing attributes in process `syz.2.236'. [ 120.766170][ T6698] netlink: 'syz.4.240': attribute type 6 has an invalid length. [ 120.778631][ T6696] netlink: 'syz.4.240': attribute type 6 has an invalid length. [ 120.793912][ T6678] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 120.839453][ T6678] bond2 (unregistering): Released all slaves [ 121.000979][ T6698] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 121.075867][ T24] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 121.456450][ T6711] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20002 [ 121.818843][ T6718] netlink: 'syz.3.244': attribute type 1 has an invalid length. [ 122.074362][ T6718] 8021q: adding VLAN 0 to HW filter on device bond2 [ 122.103439][ T6723] bond2: (slave geneve2): making interface the new active one [ 122.113873][ T6723] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 122.138110][ T6692] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 122.432182][ T6731] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 122.470583][ T6731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.247'. [ 122.498574][ T6731] openvswitch: ovs-system: Dropping previously announced user features [ 122.506003][ T6739] pim6reg1: entered promiscuous mode [ 122.522350][ T6739] pim6reg1: entered allmulticast mode [ 122.886228][ T6757] netlink: 12 bytes leftover after parsing attributes in process `syz.3.253'. [ 122.905080][ T6757] netlink: 'syz.3.253': attribute type 1 has an invalid length. [ 122.949252][ T6757] netlink: 64 bytes leftover after parsing attributes in process `syz.3.253'. [ 124.737034][ T6717] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 124.968408][ T6818] netlink: 16 bytes leftover after parsing attributes in process `syz.1.259'. [ 125.040430][ T6818] ipvlan0: entered promiscuous mode [ 125.091118][ T6818] ipvlan0: left promiscuous mode [ 125.144024][ T6826] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 125.252630][ T6830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.261'. [ 125.297118][ T6826] bridge1: entered allmulticast mode [ 125.620858][ T6842] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 125.667036][ T6846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.263'. [ 125.716275][ T6849] netlink: 16 bytes leftover after parsing attributes in process `syz.3.266'. [ 127.782940][ T6842] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 127.818828][ T6846] openvswitch: ovs-system: Dropping previously announced user features [ 127.823713][ T6849] ipvlan0: entered promiscuous mode [ 127.835056][ T6849] ipvlan0: left promiscuous mode [ 128.365598][ T6878] netlink: 16 bytes leftover after parsing attributes in process `syz.1.273'. [ 128.439755][ T6878] ipvlan0: entered promiscuous mode [ 128.474184][ T6878] ipvlan0: left promiscuous mode [ 129.454662][ T6919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.279'. [ 129.749760][ T6914] netlink: 'syz.3.279': attribute type 5 has an invalid length. [ 129.774450][ T6925] netlink: 198796 bytes leftover after parsing attributes in process `syz.1.281'. [ 129.802446][ T6925] netlink: 'syz.1.281': attribute type 2 has an invalid length. [ 129.830212][ T6925] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 130.392319][ T6934] netlink: 40 bytes leftover after parsing attributes in process `syz.1.282'. [ 130.792968][ T6946] syzkaller0: entered promiscuous mode [ 130.821369][ T6946] syzkaller0: entered allmulticast mode [ 130.861635][ T6952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.214170][ T6965] netlink: 16 bytes leftover after parsing attributes in process `syz.0.292'. [ 131.237349][ T6965] ipvlan0: entered promiscuous mode [ 131.237417][ T6969] x_tables: duplicate underflow at hook 1 [ 131.243995][ T6965] ipvlan0: left promiscuous mode [ 131.519478][ T6978] netlink: 44 bytes leftover after parsing attributes in process `syz.0.293'. [ 133.214983][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.225431][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.743521][ T6951] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 134.412017][ T6992] Bluetooth: MGMT ver 1.23 [ 134.532563][ T6996] netlink: 'syz.0.301': attribute type 1 has an invalid length. [ 134.661661][ T7000] netlink: 16 bytes leftover after parsing attributes in process `syz.4.303'. [ 134.683567][ T7003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.304'. [ 134.706879][ T7003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.765030][ T7000] ipvlan0: entered promiscuous mode [ 134.790561][ T7000] ipvlan0: left promiscuous mode [ 134.859388][ T7012] FAULT_INJECTION: forcing a failure. [ 134.859388][ T7012] name failslab, interval 1, probability 0, space 0, times 1 [ 134.876250][ T7012] CPU: 1 UID: 0 PID: 7012 Comm: syz.0.307 Not tainted syzkaller #0 PREEMPT(full) [ 134.876277][ T7012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.876288][ T7012] Call Trace: [ 134.876296][ T7012] [ 134.876303][ T7012] dump_stack_lvl+0xe8/0x150 [ 134.876335][ T7012] should_fail_ex+0x40c/0x560 [ 134.876363][ T7012] should_failslab+0xa8/0x100 [ 134.876392][ T7012] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 134.876415][ T7012] ? skb_clone+0x212/0x3a0 [ 134.876442][ T7012] ? skb_clone+0x212/0x3a0 [ 134.876471][ T7012] skb_clone+0x212/0x3a0 [ 134.876498][ T7012] __netlink_deliver_tap+0x413/0x860 [ 134.876534][ T7012] ? netlink_deliver_tap+0x2e/0x1b0 [ 134.876557][ T7012] netlink_deliver_tap+0x19c/0x1b0 [ 134.876581][ T7012] netlink_unicast+0x77f/0x940 [ 134.876609][ T7012] netlink_sendmsg+0x813/0xb40 [ 134.876636][ T7012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.876659][ T7012] ? aa_sock_msg_perm+0xf1/0x1b0 [ 134.876678][ T7012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.876696][ T7012] sock_sendmsg_nosec+0x13a/0x180 [ 134.876720][ T7012] ____sys_sendmsg+0x54e/0x850 [ 134.876743][ T7012] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.876769][ T7012] ? import_iovec+0x73/0xa0 [ 134.876793][ T7012] ___sys_sendmsg+0x2a5/0x360 [ 134.876812][ T7012] ? __lock_acquire+0x683/0x2cf0 [ 134.876836][ T7012] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.876884][ T7012] ? __fget_files+0x2a/0x420 [ 134.876901][ T7012] ? __fget_files+0x3a2/0x420 [ 134.876928][ T7012] __x64_sys_sendmsg+0x1b1/0x290 [ 134.876948][ T7012] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 134.876990][ T7012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.877006][ T7012] do_syscall_64+0x174/0x580 [ 134.877026][ T7012] ? trace_irq_disable+0x3b/0x140 [ 134.877044][ T7012] ? clear_bhb_loop+0x70/0xc0 [ 134.877062][ T7012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.877076][ T7012] RIP: 0033:0x7fd7db39e0d9 [ 134.877091][ T7012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.877102][ T7012] RSP: 002b:00007fd7dc2d8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.877120][ T7012] RAX: ffffffffffffffda RBX: 00007fd7db625fa0 RCX: 00007fd7db39e0d9 [ 134.877130][ T7012] RDX: 0000000020040890 RSI: 00002000000006c0 RDI: 0000000000000003 [ 134.877140][ T7012] RBP: 00007fd7dc2d8090 R08: 0000000000000000 R09: 0000000000000000 [ 134.877148][ T7012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.877157][ T7012] R13: 00007fd7db626038 R14: 00007fd7db625fa0 R15: 00007ffe97fc2a38 [ 134.877182][ T7012] [ 135.494160][ T7028] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 135.725899][ T7041] netlink: 16 bytes leftover after parsing attributes in process `syz.3.317'. [ 135.781932][ T7041] ipvlan0: entered promiscuous mode [ 135.873363][ T7041] ipvlan0: left promiscuous mode [ 135.945342][ T7049] FAULT_INJECTION: forcing a failure. [ 135.945342][ T7049] name failslab, interval 1, probability 0, space 0, times 0 [ 135.984986][ T7049] CPU: 0 UID: 0 PID: 7049 Comm: syz.1.321 Not tainted syzkaller #0 PREEMPT(full) [ 135.985013][ T7049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.985023][ T7049] Call Trace: [ 135.985031][ T7049] [ 135.985038][ T7049] dump_stack_lvl+0xe8/0x150 [ 135.985073][ T7049] should_fail_ex+0x40c/0x560 [ 135.985103][ T7049] should_failslab+0xa8/0x100 [ 135.985132][ T7049] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 135.985154][ T7049] ? local_lock_release+0x9c/0x160 [ 135.985177][ T7049] ? __alloc_skb+0x1d7/0x7a0 [ 135.985195][ T7049] ? __alloc_skb+0x1d7/0x7a0 [ 135.985221][ T7049] __alloc_skb+0x1d7/0x7a0 [ 135.985247][ T7049] netlink_dump+0x1e7/0xee0 [ 135.985276][ T7049] ? rcu_is_watching+0x15/0xb0 [ 135.985309][ T7049] ? __pfx_netlink_dump+0x10/0x10 [ 135.985346][ T7049] ? genl_start+0x497/0x6d0 [ 135.985373][ T7049] __netlink_dump_start+0x589/0x7b0 [ 135.985405][ T7049] genl_family_rcv_msg_dumpit+0x213/0x310 [ 135.985430][ T7049] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 135.985458][ T7049] ? genl_get_cmd+0x82f/0x960 [ 135.985483][ T7049] ? __pfx_genl_start+0x10/0x10 [ 135.985499][ T7049] ? __pfx_genl_dumpit+0x10/0x10 [ 135.985515][ T7049] ? __pfx_genl_done+0x10/0x10 [ 135.985536][ T7049] ? __lock_acquire+0x683/0x2cf0 [ 135.985573][ T7049] genl_rcv_msg+0x5e1/0x7a0 [ 135.985599][ T7049] ? __pfx_genl_rcv_msg+0x10/0x10 [ 135.985617][ T7049] ? __pfx_nl80211_dump_station+0x10/0x10 [ 135.985638][ T7049] ? __pfx_nl80211_dump_station_done+0x10/0x10 [ 135.985681][ T7049] netlink_rcv_skb+0x226/0x4a0 [ 135.985707][ T7049] ? __pfx_genl_rcv_msg+0x10/0x10 [ 135.985727][ T7049] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 135.985765][ T7049] ? down_read+0x2be/0x330 [ 135.985787][ T7049] genl_rcv+0x28/0x40 [ 135.985802][ T7049] netlink_unicast+0x7bb/0x940 [ 135.985834][ T7049] netlink_sendmsg+0x813/0xb40 [ 135.985869][ T7049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.985898][ T7049] ? aa_sock_msg_perm+0xf1/0x1b0 [ 135.985924][ T7049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.985945][ T7049] sock_sendmsg_nosec+0x13a/0x180 [ 135.985976][ T7049] ____sys_sendmsg+0x54e/0x850 [ 135.986005][ T7049] ? __pfx_____sys_sendmsg+0x10/0x10 [ 135.986038][ T7049] ? import_iovec+0x73/0xa0 [ 135.986069][ T7049] ___sys_sendmsg+0x2a5/0x360 [ 135.986092][ T7049] ? __lock_acquire+0x683/0x2cf0 [ 135.986120][ T7049] ? __pfx____sys_sendmsg+0x10/0x10 [ 135.986199][ T7049] ? __fget_files+0x2a/0x420 [ 135.986223][ T7049] ? __fget_files+0x3a2/0x420 [ 135.986256][ T7049] __x64_sys_sendmsg+0x1b1/0x290 [ 135.986281][ T7049] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 135.986322][ T7049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.986343][ T7049] do_syscall_64+0x174/0x580 [ 135.986369][ T7049] ? trace_irq_disable+0x3b/0x140 [ 135.986393][ T7049] ? clear_bhb_loop+0x70/0xc0 [ 135.986417][ T7049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.986442][ T7049] RIP: 0033:0x7f951a59e0d9 [ 135.986461][ T7049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.986476][ T7049] RSP: 002b:00007f951b3e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.986497][ T7049] RAX: ffffffffffffffda RBX: 00007f951a825fa0 RCX: 00007f951a59e0d9 [ 135.986510][ T7049] RDX: 0000000020040890 RSI: 00002000000006c0 RDI: 0000000000000003 [ 135.986522][ T7049] RBP: 00007f951b3e0090 R08: 0000000000000000 R09: 0000000000000000 [ 135.986533][ T7049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.986544][ T7049] R13: 00007f951a826038 R14: 00007f951a825fa0 R15: 00007fff95b50f18 [ 135.986576][ T7049] [ 136.077164][ T7051] ip6erspan0: entered allmulticast mode [ 136.332503][ T7058] netlink: 'syz.3.324': attribute type 1 has an invalid length. [ 136.419199][ T7059] netlink: 'syz.2.320': attribute type 1 has an invalid length. [ 136.588012][ T7051] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 136.970070][ T7086] netlink: 32 bytes leftover after parsing attributes in process `syz.3.328'. [ 137.421749][ T7099] FAULT_INJECTION: forcing a failure. [ 137.421749][ T7099] name failslab, interval 1, probability 0, space 0, times 0 [ 137.513850][ T7099] CPU: 0 UID: 0 PID: 7099 Comm: syz.0.333 Not tainted syzkaller #0 PREEMPT(full) [ 137.513879][ T7099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 137.513890][ T7099] Call Trace: [ 137.513898][ T7099] [ 137.513906][ T7099] dump_stack_lvl+0xe8/0x150 [ 137.513943][ T7099] should_fail_ex+0x40c/0x560 [ 137.513973][ T7099] should_failslab+0xa8/0x100 [ 137.514000][ T7099] __kmalloc_cache_noprof+0xa8/0x660 [ 137.514025][ T7099] ? nl80211_dump_station+0x14c/0x1b30 [ 137.514047][ T7099] ? nl80211_dump_station+0x14c/0x1b30 [ 137.514076][ T7099] nl80211_dump_station+0x14c/0x1b30 [ 137.514112][ T7099] ? rcu_is_watching+0x15/0xb0 [ 137.514138][ T7099] ? trace_kmalloc+0x2a/0xf0 [ 137.514162][ T7099] ? __pfx_nl80211_dump_station+0x10/0x10 [ 137.514182][ T7099] ? __kmalloc_node_track_caller_noprof+0x4e1/0x730 [ 137.514205][ T7099] ? __kmalloc_node_track_caller_noprof+0x2fd/0x730 [ 137.514228][ T7099] ? netlink_dump+0x1e7/0xee0 [ 137.514250][ T7099] ? netlink_dump+0x1e7/0xee0 [ 137.514282][ T7099] genl_dumpit+0x10b/0x1b0 [ 137.514307][ T7099] netlink_dump+0x711/0xee0 [ 137.514345][ T7099] ? __pfx_netlink_dump+0x10/0x10 [ 137.514382][ T7099] ? genl_start+0x497/0x6d0 [ 137.514409][ T7099] __netlink_dump_start+0x589/0x7b0 [ 137.514442][ T7099] genl_family_rcv_msg_dumpit+0x213/0x310 [ 137.514467][ T7099] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 137.514495][ T7099] ? genl_get_cmd+0x82f/0x960 [ 137.514519][ T7099] ? __pfx_genl_start+0x10/0x10 [ 137.514535][ T7099] ? __pfx_genl_dumpit+0x10/0x10 [ 137.514552][ T7099] ? __pfx_genl_done+0x10/0x10 [ 137.514571][ T7099] ? __dev_queue_xmit+0x29b/0x3820 [ 137.514607][ T7099] genl_rcv_msg+0x5e1/0x7a0 [ 137.514634][ T7099] ? __pfx_genl_rcv_msg+0x10/0x10 [ 137.514652][ T7099] ? __pfx_nl80211_dump_station+0x10/0x10 [ 137.514671][ T7099] ? __pfx_nl80211_dump_station_done+0x10/0x10 [ 137.514694][ T7099] ? __pfx_ref_tracker_free+0x10/0x10 [ 137.514718][ T7099] ? __asan_memcpy+0x40/0x70 [ 137.514738][ T7099] ? __skb_clone+0x5c/0x6c0 [ 137.514768][ T7099] netlink_rcv_skb+0x226/0x4a0 [ 137.514792][ T7099] ? __pfx_genl_rcv_msg+0x10/0x10 [ 137.514813][ T7099] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 137.514853][ T7099] ? down_read+0x2be/0x330 [ 137.514877][ T7099] genl_rcv+0x28/0x40 [ 137.514894][ T7099] netlink_unicast+0x7bb/0x940 [ 137.514928][ T7099] netlink_sendmsg+0x813/0xb40 [ 137.514965][ T7099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.514993][ T7099] ? aa_sock_msg_perm+0xf1/0x1b0 [ 137.515020][ T7099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.515044][ T7099] sock_sendmsg_nosec+0x13a/0x180 [ 137.515076][ T7099] ____sys_sendmsg+0x54e/0x850 [ 137.515107][ T7099] ? __pfx_____sys_sendmsg+0x10/0x10 [ 137.515152][ T7099] ? import_iovec+0x73/0xa0 [ 137.515184][ T7099] ___sys_sendmsg+0x2a5/0x360 [ 137.515204][ T7099] ? __lock_acquire+0x683/0x2cf0 [ 137.515232][ T7099] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.515296][ T7099] ? __fget_files+0x2a/0x420 [ 137.515319][ T7099] ? __fget_files+0x3a2/0x420 [ 137.515355][ T7099] __x64_sys_sendmsg+0x1b1/0x290 [ 137.515383][ T7099] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 137.515427][ T7099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.515449][ T7099] do_syscall_64+0x174/0x580 [ 137.515482][ T7099] ? trace_irq_disable+0x3b/0x140 [ 137.515506][ T7099] ? clear_bhb_loop+0x70/0xc0 [ 137.515530][ T7099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.515549][ T7099] RIP: 0033:0x7fd7db39e0d9 [ 137.515568][ T7099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.515583][ T7099] RSP: 002b:00007fd7dc2d8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.515604][ T7099] RAX: ffffffffffffffda RBX: 00007fd7db625fa0 RCX: 00007fd7db39e0d9 [ 137.515617][ T7099] RDX: 0000000020040890 RSI: 00002000000006c0 RDI: 0000000000000003 [ 137.515629][ T7099] RBP: 00007fd7dc2d8090 R08: 0000000000000000 R09: 0000000000000000 [ 137.515641][ T7099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.515652][ T7099] R13: 00007fd7db626038 R14: 00007fd7db625fa0 R15: 00007ffe97fc2a38 [ 137.515684][ T7099] [ 138.010682][ T7105] netlink: 72 bytes leftover after parsing attributes in process `syz.2.335'. [ 138.066615][ T7105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.335'. [ 138.112486][ T7112] netlink: 'syz.1.337': attribute type 1 has an invalid length. [ 138.160936][ T7114] tipc: Can't bind to reserved service type 0 [ 138.436191][ T7125] batman_adv: batadv0: Adding interface: veth0 [ 138.451084][ T7125] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.513276][ T7125] batman_adv: batadv0: Interface activated: veth0 [ 138.536780][ T7130] netlink: 24 bytes leftover after parsing attributes in process `syz.1.343'. [ 138.551165][ T7129] netlink: 'syz.2.342': attribute type 30 has an invalid length. [ 138.554106][ T7128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.573877][ T7129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.342'. [ 138.591707][ T7128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.635285][ T7128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.661739][ T7128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.670369][ T7128] batman_adv: batadv0: Interface deactivated: veth0 [ 138.677601][ T7128] batman_adv: batadv0: Removing interface: veth0 [ 138.776787][ T7129] bond0: option arp_missed_max: invalid value (0) [ 138.784305][ T7129] bond0: option arp_missed_max: allowed values 1 - 255 [ 139.272716][ T7155] netlink: 36 bytes leftover after parsing attributes in process `syz.0.349'. [ 139.468648][ T7156] netlink: 76 bytes leftover after parsing attributes in process `syz.1.348'. [ 139.486627][ T7166] netlink: 'syz.4.351': attribute type 1 has an invalid length. [ 139.497970][ T7156] nbd: illegal input index -1721480071 [ 139.675655][ T7161] netlink: 28 bytes leftover after parsing attributes in process `syz.1.348'. [ 139.735239][ T7180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.352'. [ 140.771743][ T7221] __nla_validate_parse: 1 callbacks suppressed [ 140.771765][ T7221] netlink: 20 bytes leftover after parsing attributes in process `syz.3.360'. [ 140.816893][ T7221] netlink: 20 bytes leftover after parsing attributes in process `syz.3.360'. [ 141.234513][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.364'. [ 141.994324][ T7260] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 142.011274][ T7260] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 142.332569][ T7272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.371'. [ 142.548930][ T7276] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 142.601043][ T7276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.372'. [ 142.646631][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.375'. [ 142.657041][ T7276] openvswitch: ovs-system: Dropping previously announced user features [ 143.114304][ T7303] netlink: 36 bytes leftover after parsing attributes in process `syz.1.377'. [ 143.250719][ T7306] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 143.349352][ T7310] syzkaller0: entered promiscuous mode [ 143.369648][ T7310] syzkaller0: entered allmulticast mode [ 143.477724][ T7310] netlink: 'syz.4.380': attribute type 13 has an invalid length. [ 143.517018][ T7310] netlink: 'syz.4.380': attribute type 17 has an invalid length. [ 143.651229][ T7310] syz_tun: left promiscuous mode [ 144.422367][ T7310] bridge1: left allmulticast mode [ 144.465296][ T7310] syzkaller0: left promiscuous mode [ 144.472795][ T7310] syzkaller0: left allmulticast mode [ 144.591823][ T7322] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.684897][ T7343] netlink: 16 bytes leftover after parsing attributes in process `syz.3.388'. [ 144.708309][ T7323] netlink: 'syz.0.382': attribute type 12 has an invalid length. [ 144.967031][ T7343] ipvlan0: entered promiscuous mode [ 144.985724][ T7343] ipvlan0: left promiscuous mode [ 145.203095][ T7346] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 145.302943][ T7346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.389'. [ 145.355524][ T7346] openvswitch: ovs-system: Dropping previously announced user features [ 146.016713][ T7396] netlink: 16 bytes leftover after parsing attributes in process `syz.1.403'. [ 146.065659][ T7396] ipvlan0: entered promiscuous mode [ 146.111548][ T7396] ipvlan0: left promiscuous mode [ 146.231802][ T7402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.404'. [ 146.261689][ T7408] ip_tables: iptables: counters copy to user failed while replacing table [ 146.761659][ T7429] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.396584][ T7460] netlink: 28 bytes leftover after parsing attributes in process `syz.3.420'. [ 147.406607][ T7458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.419'. [ 147.432820][ T5272] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 147.459826][ T7462] netlink: 40 bytes leftover after parsing attributes in process `syz.1.422'. [ 148.093507][ T4926] Bluetooth: hci2: command tx timeout [ 148.534765][ T7492] netlink: 'syz.2.431': attribute type 10 has an invalid length. [ 148.591403][ T7492] team0: Port device dummy0 added [ 148.678975][ T7491] unsupported nla_type 22051 [ 148.802613][ T7497] netlink: 28 bytes leftover after parsing attributes in process `syz.3.432'. [ 148.828787][ T7506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.434'. [ 148.851814][ T7497] netlink: 48 bytes leftover after parsing attributes in process `syz.3.432'. [ 150.192502][ T7563] syz_tun: entered allmulticast mode [ 150.317328][ T7586] netlink: 13695 bytes leftover after parsing attributes in process `syz.0.446'. [ 150.359606][ T7587] tipc: Started in network mode [ 150.377523][ T7587] tipc: Node identity 1eece749a552, cluster identity 4711 [ 150.408613][ T7587] tipc: Enabled bearer , priority 0 [ 150.452206][ T7588] syzkaller0: entered promiscuous mode [ 150.464222][ T7588] syzkaller0: entered allmulticast mode [ 150.632193][ T7595] team0: Port device wlan0 added [ 150.650508][ T7588] tipc: Resetting bearer [ 150.704742][ T7588] tipc: Disabling bearer [ 150.760352][ T7606] netlink: 12 bytes leftover after parsing attributes in process `syz.1.457'. [ 150.784596][ T7606] openvswitch: netlink: Key type 76 is out of range max 32 [ 151.161047][ T7628] netlink: 20 bytes leftover after parsing attributes in process `syz.2.464'. [ 151.499955][ T7641] netlink: 60 bytes leftover after parsing attributes in process `syz.3.468'. [ 151.534979][ T7641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.468'. [ 151.554621][ T7643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.469'. [ 151.571628][ T7643] netlink: 16 bytes leftover after parsing attributes in process `syz.4.469'. [ 151.585623][ T7643] netlink: 'syz.4.469': attribute type 34 has an invalid length. [ 151.594041][ T7643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.469'. [ 151.790610][ T7653] netlink: 32 bytes leftover after parsing attributes in process `syz.3.472'. [ 152.309121][ T7676] xt_TPROXY: Can be used only with -p tcp or -p udp [ 153.396465][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.491'. [ 153.428159][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.491'. [ 153.804606][ T7739] ip6erspan0: entered allmulticast mode [ 153.857654][ T7742] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 154.023025][ T7746] GUP no longer grows the stack in syz.3.499 (7746): 200000003000-20000000a000 (200000001000) [ 154.047771][ T7746] CPU: 1 UID: 0 PID: 7746 Comm: syz.3.499 Not tainted syzkaller #0 PREEMPT(full) [ 154.047799][ T7746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 154.047810][ T7746] Call Trace: [ 154.047818][ T7746] [ 154.047827][ T7746] dump_stack_lvl+0xe8/0x150 [ 154.047862][ T7746] __get_user_pages+0x238c/0x2720 [ 154.047895][ T7746] ? __gup_longterm_locked+0xc3b/0x15c0 [ 154.047945][ T7746] __gup_longterm_locked+0xd52/0x15c0 [ 154.047968][ T7746] ? lock_acquire+0x106/0x350 [ 154.048012][ T7746] gup_fast_fallback+0x1d8c/0x20e0 [ 154.048031][ T7746] ? lockdep_hardirqs_on+0x7a/0x110 [ 154.048097][ T7746] ? __pfx_gup_fast_fallback+0x10/0x10 [ 154.048121][ T7746] ? is_valid_gup_args+0x11f/0x200 [ 154.048144][ T7746] ? get_user_pages_fast+0x4d/0xb0 [ 154.048167][ T7746] __iov_iter_get_pages_alloc+0x378/0xa40 [ 154.048205][ T7746] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 154.048241][ T7746] iov_iter_get_pages2+0x5e/0xa0 [ 154.048274][ T7746] __se_sys_vmsplice+0x7b5/0x1660 [ 154.048325][ T7746] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 154.048358][ T7746] ? __pfx_futex_wake+0x10/0x10 [ 154.048472][ T7746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.048495][ T7746] do_syscall_64+0x174/0x580 [ 154.048522][ T7746] ? trace_irq_disable+0x3b/0x140 [ 154.048546][ T7746] ? clear_bhb_loop+0x70/0xc0 [ 154.048571][ T7746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.048590][ T7746] RIP: 0033:0x7f632df9e0d9 [ 154.048609][ T7746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.048624][ T7746] RSP: 002b:00007f632edd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 154.048645][ T7746] RAX: ffffffffffffffda RBX: 00007f632e225fa0 RCX: 00007f632df9e0d9 [ 154.048658][ T7746] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000007 [ 154.048670][ T7746] RBP: 00007f632e035024 R08: 0000000000000000 R09: 0000000000000000 [ 154.048680][ T7746] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 154.048690][ T7746] R13: 00007f632e226038 R14: 00007f632e225fa0 R15: 00007ffddf357fb8 [ 154.048724][ T7746] [ 154.550268][ T7762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.505'. [ 156.615604][ T7731] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 157.082094][ T3374] IPVS: starting estimator thread 0... [ 157.186586][ T7793] IPVS: using max 26 ests per chain, 62400 per kthread [ 157.241434][ T7805] IPVS: set_ctl: invalid protocol: 0 172.20.20.30:20003 [ 158.910181][ T7866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.533'. [ 158.925608][ T7866] ip6tnl1: entered allmulticast mode [ 158.932980][ T1158] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 160.566552][ T7819] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 160.817617][ T7895] netlink: 16 bytes leftover after parsing attributes in process `syz.0.544'. [ 161.377782][ T7916] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 161.384876][ T7914] netlink: 'syz.0.550': attribute type 1 has an invalid length. [ 161.420013][ T7920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.551'. [ 161.444130][ T7920] openvswitch: ovs-system: Dropping previously announced user features [ 161.455190][ T7914] netlink: 224 bytes leftover after parsing attributes in process `syz.0.550'. [ 161.550236][ T7919] netlink: 20 bytes leftover after parsing attributes in process `syz.0.550'. [ 161.570126][ T7919] SET target dimension over the limit! [ 162.764384][ T7966] wg1: entered promiscuous mode [ 162.784615][ T7966] wg1: entered allmulticast mode [ 163.053427][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 163.142916][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.567'. [ 163.262550][ T7970] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 163.308598][ T7973] openvswitch: ovs-system: Dropping previously announced user features [ 164.255209][ T7995] x_tables: duplicate underflow at hook 1 [ 166.442350][ T8014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.575'. [ 166.475781][ T8019] netlink: 20 bytes leftover after parsing attributes in process `syz.1.576'. [ 166.499275][ T8019] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 166.700431][ T8035] netlink: 36 bytes leftover after parsing attributes in process `syz.1.579'. [ 166.799034][ T8036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.578'. [ 166.896763][ T8045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.581'. [ 167.499413][ T8045] wg1: left promiscuous mode [ 167.525595][ T8045] wg1: left allmulticast mode [ 167.670428][ T8045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.741872][ T8045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.147735][ T8045] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 168.284106][ T8101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.588'. [ 168.413288][ T8029] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 168.461576][ T8029] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 168.519371][ T8029] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 168.545399][ T8105] netlink: 16 bytes leftover after parsing attributes in process `syz.4.589'. [ 168.579157][ T8029] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 168.601899][ T8029] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 168.651762][ T8061] ip6gre1: left promiscuous mode [ 168.794044][ T8109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.590'. [ 168.809247][ T8086] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 168.830810][ T8101] openvswitch: ovs-system: Dropping previously announced user features [ 168.856017][ T8105] bond3: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 168.869958][ T8105] bond3 (unregistering): Released all slaves [ 168.903966][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.590'. [ 168.914388][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.590'. [ 168.948448][ T1158] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.958230][ T1158] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.974704][ T1158] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.003505][ T1158] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.378182][ T8130] Cannot find set identified by id 0 to match [ 169.768906][ T8141] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 169.817715][ T8141] openvswitch: ovs-system: Dropping previously announced user features [ 169.870864][ T8144] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 170.539219][ T8151] xt_CT: No such helper "netbios-ns" [ 170.702473][ T8160] bond2: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 170.720564][ T8160] bond2 (unregistering): Released all slaves [ 170.973396][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 171.100619][ T8171] 8021q: adding VLAN 0 to HW filter on device bond3 [ 171.273078][ T8186] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 171.301745][ T8186] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 171.327117][ T8186] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 171.353281][ T8193] openvswitch: ovs-system: Dropping previously announced user features [ 171.809852][ T8200] netdevsim netdevsim2 €Â: renamed from netdevsim0 (while UP) [ 172.015328][ T8192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.054737][ T8195] __nla_validate_parse: 6 callbacks suppressed [ 172.054756][ T8195] netlink: 176 bytes leftover after parsing attributes in process `syz.0.616'. [ 172.134437][ T8192] bond0 (unregistering): Released all slaves [ 172.146717][ T8216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.616'. [ 172.269306][ T8216] netlink: 176 bytes leftover after parsing attributes in process `syz.0.616'. [ 172.297634][ T8221] openvswitch: netlink: Actions may not be safe on all matching packets [ 172.792101][ T8239] netlink: 24 bytes leftover after parsing attributes in process `syz.4.628'. [ 172.855362][ T8239] ip6gre1: entered promiscuous mode [ 172.871426][ T8239] ip6gre1: entered allmulticast mode [ 173.189312][ T8251] netlink: 'syz.2.632': attribute type 3 has an invalid length. [ 173.210595][ T8251] netlink: 'syz.2.632': attribute type 1 has an invalid length. [ 173.211465][ T8248] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 173.242037][ T8251] netlink: 224 bytes leftover after parsing attributes in process `syz.2.632'. [ 173.304819][ T8248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.631'. [ 173.431116][ T8253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.455236][ T8251] netlink: 36 bytes leftover after parsing attributes in process `syz.2.632'. [ 173.455417][ T8248] openvswitch: ovs-system: Dropping previously announced user features [ 173.712879][ T8274] tipc: Started in network mode [ 173.731599][ T8274] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 173.771934][ T8274] tipc: Enabled bearer , priority 10 [ 173.888519][ T8278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.640'. [ 173.920070][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.640'. [ 173.950460][ T8278] netlink: 'syz.3.640': attribute type 14 has an invalid length. [ 173.986148][ T8280] netlink: 32 bytes leftover after parsing attributes in process `syz.4.641'. [ 174.488879][ T8306] netlink: 'syz.1.650': attribute type 1 has an invalid length. [ 174.699299][ T8318] netlink: 'syz.1.654': attribute type 1 has an invalid length. [ 174.755045][ T8321] hsr0: entered promiscuous mode [ 174.915485][ T1216] tipc: Node number set to 4269801488 [ 175.202542][ T8344] RDS: rds_bind could not find a transport for fe88::102, load rds_tcp or rds_rdma? [ 175.217886][ T8338] macsec2: entered promiscuous mode [ 175.266949][ T8346] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 175.322701][ T8341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.410043][ T8341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.566338][ T8341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.719469][ T8346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.856476][ T5744] hid-generic 0005:15C2:5505.0001: item fetching failed at offset 0/2 [ 175.867515][ T5744] hid-generic 0005:15C2:5505.0001: probe with driver hid-generic failed with error -22 [ 176.197621][ T8383] vlan2: entered promiscuous mode [ 176.213365][ T8383] bridge0: entered promiscuous mode [ 176.236706][ T8382] netlink: 'syz.1.671': attribute type 2 has an invalid length. [ 176.285129][ T8386] netlink: 'syz.2.672': attribute type 10 has an invalid length. [ 176.500938][ T8396] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 177.185004][ T8413] __nla_validate_parse: 12 callbacks suppressed [ 177.185026][ T8413] netlink: 32 bytes leftover after parsing attributes in process `syz.4.684'. [ 177.523703][ T8451] netlink: 116 bytes leftover after parsing attributes in process `syz.1.694'. [ 177.549580][ T8445] netlink: 52 bytes leftover after parsing attributes in process `syz.2.692'. [ 177.620135][ T8452] netlink: 76 bytes leftover after parsing attributes in process `syz.2.692'. [ 177.657291][ T8456] netlink: 24 bytes leftover after parsing attributes in process `syz.4.696'. [ 177.684237][ T8445] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.692951][ T8445] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.744403][ T8462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.698'. [ 177.760745][ T8452] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.768138][ T8452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.775783][ T8452] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.782960][ T8452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.844608][ T8452] netlink: 52 bytes leftover after parsing attributes in process `syz.2.692'. [ 177.906998][ T8452] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.914443][ T8452] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.340728][ T8496] netlink: 16 bytes leftover after parsing attributes in process `syz.1.707'. [ 178.422377][ T8500] netlink: 24 bytes leftover after parsing attributes in process `syz.0.710'. [ 178.450390][ T8502] netlink: 116 bytes leftover after parsing attributes in process `syz.2.708'. [ 178.977913][ T8520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.987420][ T8520] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.999731][ T8520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.012014][ T36] IPVS: starting estimator thread 0... [ 180.028746][ T8542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.113362][ T8543] IPVS: using max 28 ests per chain, 67200 per kthread [ 181.180030][ T8520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.190241][ T8520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.202899][ T8520] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 181.213605][ T8520] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.238430][ T8520] veth1_vlan: left promiscuous mode [ 181.246185][ T8520] veth0_vlan: left promiscuous mode [ 181.258158][ T8520] veth0_vlan: entered promiscuous mode [ 181.267142][ T8520] veth1_vlan: entered promiscuous mode [ 181.281277][ T8520] veth1_macvtap: left promiscuous mode [ 181.291917][ T8520] veth0_macvtap: left promiscuous mode [ 181.299458][ T8520] veth0_macvtap: entered promiscuous mode [ 181.310484][ T8520] veth1_macvtap: entered promiscuous mode [ 181.324418][ T8520] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 181.332731][ T8520] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 181.340965][ T8520] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 181.352944][ T8520] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.362338][ T8520] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 181.374773][ T8520] 8021q: adding VLAN 0 to HW filter on device bond2 [ 181.382564][ T8110] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 181.400098][ T3374] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.407381][ T3374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.417611][ T3374] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.424827][ T3374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.566329][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.626854][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.678919][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.721392][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.113451][ T8572] netlink: 'syz.0.732': attribute type 1 has an invalid length. [ 182.133740][ T8571] ovs-system: left promiscuous mode [ 182.148197][ T8571] Virtual device ovs-system asks to queue packet! [ 182.229562][ T8578] __nla_validate_parse: 7 callbacks suppressed [ 182.229584][ T8578] netlink: 116 bytes leftover after parsing attributes in process `syz.1.735'. [ 184.718132][ T8593] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 185.049573][ T8613] netlink: 24 bytes leftover after parsing attributes in process `syz.2.739'. [ 185.414410][ T8634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.745'. [ 185.586792][ T8644] netlink: 'syz.1.747': attribute type 1 has an invalid length. [ 185.621466][ T8644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.747'. [ 185.743016][ T8648] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 185.847128][ T8652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.748'. [ 185.871013][ T8652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.748'. [ 186.041573][ T8660] netlink: 24 bytes leftover after parsing attributes in process `syz.4.751'. [ 186.066776][ T8660] netlink: 48 bytes leftover after parsing attributes in process `syz.4.751'. [ 186.242954][ T8660] bond3: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 186.333477][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 186.466301][ T12] tipc: Subscription rejected, illegal request [ 187.127428][ T8682] netlink: 24 bytes leftover after parsing attributes in process `syz.1.755'. [ 187.142618][ T8683] netlink: 'syz.2.753': attribute type 1 has an invalid length. [ 187.196559][ T8683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.753'. [ 187.308607][ T8683] bridge2: entered promiscuous mode [ 187.550343][ T8692] __nla_validate_parse: 1 callbacks suppressed [ 187.550364][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.758'. [ 187.786573][ T8706] netlink: 'syz.4.760': attribute type 1 has an invalid length. [ 187.832362][ T8706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.760'. [ 187.931695][ T8713] netlink: 24 bytes leftover after parsing attributes in process `syz.1.762'. [ 187.988244][ T8713] netlink: 48 bytes leftover after parsing attributes in process `syz.1.762'. [ 188.262236][ T8713] bond4: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 188.829227][ T8736] netlink: 24 bytes leftover after parsing attributes in process `syz.0.768'. [ 188.966797][ T8741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.770'. [ 189.200227][ T8743] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 189.220283][ T8750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.772'. [ 191.541663][ T8743] bond4: (slave macvlan2): making interface the new active one [ 191.552304][ T8743] bond4: (slave macvlan2): Enslaving as an active interface with an up link [ 191.573577][ T1216] bond_slave_0: entered promiscuous mode [ 191.580764][ T1216] bond_slave_1: entered promiscuous mode [ 191.813390][ T8762] netlink: 'syz.3.774': attribute type 1 has an invalid length. [ 191.848898][ T8762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.774'. [ 192.040656][ T8773] xt_hashlimit: size too large, truncated to 1048576 [ 192.080792][ T8771] batman_adv: batadv0: Adding interface: macvtap1 [ 192.106607][ T8776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.779'. [ 192.127681][ T8771] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.176025][ T8780] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20003 [ 192.190680][ T8771] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 192.532132][ T8794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.783'. [ 192.557870][ T8796] netlink: 16 bytes leftover after parsing attributes in process `syz.3.782'. [ 192.784923][ T8803] netlink: 40 bytes leftover after parsing attributes in process `syz.4.784'. [ 192.835133][ T8803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.784'. [ 192.856305][ T8806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.786'. [ 192.942347][ T8808] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 192.996160][ T8808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.787'. [ 193.062058][ T8814] netlink: 12 bytes leftover after parsing attributes in process `syz.4.789'. [ 193.068978][ T8808] ovs-system: entered promiscuous mode [ 193.107282][ T8811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.788'. [ 193.341766][ T8828] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 193.480207][ T8834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.788'. [ 194.657760][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.667458][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.826119][ T8819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.788'. [ 195.952237][ T8869] netlink: 'syz.1.790': attribute type 1 has an invalid length. [ 195.983653][ T8869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.790'. [ 196.079407][ T8834] hsr_slave_1 (unregistering): left promiscuous mode [ 196.848571][ T8906] bridge0: port 1(veth0) entered blocking state [ 196.886121][ T8906] bridge0: port 1(veth0) entered disabled state [ 196.912552][ T8906] veth0: entered allmulticast mode [ 196.941471][ T8906] veth0: entered promiscuous mode [ 197.132512][ T8918] netlink: 'syz.4.803': attribute type 1 has an invalid length. [ 197.271349][ T8924] openvswitch: netlink: Key type 29 is not supported [ 197.475056][ T8931] xt_l2tp: v2 doesn't support IP mode [ 197.732889][ T8937] __nla_validate_parse: 5 callbacks suppressed [ 197.732910][ T8937] netlink: 24 bytes leftover after parsing attributes in process `syz.1.809'. [ 197.809808][ T8937] netlink: 16 bytes leftover after parsing attributes in process `syz.1.809'. [ 197.812039][ T8939] netlink: 16 bytes leftover after parsing attributes in process `syz.3.810'. [ 197.830554][ T8934] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 197.867935][ T8934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.808'. [ 197.920837][ T8937] bond5: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 199.813704][ T8937] bond5 (unregistering): Released all slaves [ 199.863915][ T8934] openvswitch: ovs-system: Dropping previously announced user features [ 200.160317][ T8948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.813'. [ 200.477835][ T8974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.817'. [ 200.486916][ T8973] netlink: 'syz.4.816': attribute type 1 has an invalid length. [ 200.665878][ T8981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.818'. [ 200.770627][ T8987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.820'. [ 200.829148][ T8987] bridge0: port 3(veth1) entered blocking state [ 200.863425][ T8987] bridge0: port 3(veth1) entered disabled state [ 200.869341][ T8992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.822'. [ 200.896004][ T8987] veth1: entered allmulticast mode [ 200.946475][ T8987] veth1: entered promiscuous mode [ 200.966828][ T8987] bridge0: port 3(veth1) entered blocking state [ 200.973352][ T8987] bridge0: port 3(veth1) entered forwarding state [ 201.012046][ T8999] netlink: 164 bytes leftover after parsing attributes in process `syz.1.823'. [ 201.848998][ T9028] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 202.186843][ T9041] netlink: 'syz.4.831': attribute type 1 has an invalid length. [ 204.261678][ T9072] __nla_validate_parse: 3 callbacks suppressed [ 204.261698][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.841'. [ 204.571713][ T9083] netlink: 24 bytes leftover after parsing attributes in process `syz.4.844'. [ 204.572420][ T9082] netlink: 'syz.0.843': attribute type 1 has an invalid length. [ 205.027547][ T162] IPVS: starting estimator thread 0... [ 205.054356][ T9096] sctp: [Deprecated]: syz.0.848 (pid 9096) Use of int in max_burst socket option deprecated. [ 205.054356][ T9096] Use struct sctp_assoc_value instead [ 205.116298][ T9070] team0: Device xfrm0 is of different type [ 205.133226][ T9093] IPVS: using max 26 ests per chain, 62400 per kthread [ 205.298416][ T9099] netlink: 244 bytes leftover after parsing attributes in process `syz.0.849'. [ 205.350969][ T9099] netlink: 'syz.0.849': attribute type 1 has an invalid length. [ 205.437790][ T9105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.849'. [ 205.577981][ T9099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.717444][ T9114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.853'. [ 205.884763][ T9122] netlink: 'syz.3.856': attribute type 1 has an invalid length. [ 206.699282][ T9147] netlink: 20 bytes leftover after parsing attributes in process `syz.4.866'. [ 206.978194][ T4926] Bluetooth: hci1: command 0x0406 tx timeout [ 206.984417][ T5628] Bluetooth: hci3: command 0x0406 tx timeout [ 206.991655][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 206.997839][ T5631] Bluetooth: hci4: command 0x0406 tx timeout [ 207.484929][ T9171] syzkaller0: entered promiscuous mode [ 207.500773][ T9171] syzkaller0: entered allmulticast mode [ 207.790305][ T9189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.875'. [ 207.961137][ T9203] IPVS: length: 15 != 8 [ 210.180988][ T9163] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 210.490401][ T9221] netlink: 'syz.0.879': attribute type 1 has an invalid length. [ 210.646240][ T9223] netlink: 'syz.4.883': attribute type 4 has an invalid length. [ 210.670143][ T9223] netlink: 152 bytes leftover after parsing attributes in process `syz.4.883'. [ 210.782089][ T9229] syzkaller1: entered promiscuous mode [ 210.815911][ T9229] syzkaller1: entered allmulticast mode [ 210.816538][ T9232] netlink: 36 bytes leftover after parsing attributes in process `syz.3.885'. [ 210.849874][ T9234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.887'. [ 210.872904][ T9236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.888'. [ 211.030132][ T9243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.891'. [ 211.052907][ T9243] netlink: 24 bytes leftover after parsing attributes in process `syz.1.891'. [ 211.072722][ T9244] Bluetooth: ISO socket layer initialized [ 211.152487][ T9246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.892'. [ 211.159777][ T9239] netlink: 52 bytes leftover after parsing attributes in process `syz.4.890'. [ 211.177874][ T9239] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.185350][ T9239] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.261972][ T9246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.892'. [ 211.301169][ T9252] netlink: 'syz.0.893': attribute type 1 has an invalid length. [ 211.672430][ T9272] netlink: 24 bytes leftover after parsing attributes in process `syz.2.900'. [ 211.745725][ T9272] ip6gre2: entered promiscuous mode [ 211.760347][ T9272] ip6gre2: entered allmulticast mode [ 211.771036][ T162] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 211.799688][ T188] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 211.811336][ T162] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 211.974461][ T188] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 212.003403][ T188] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 212.038477][ T188] bridge0: entered promiscuous mode [ 212.201677][ T9302] netlink: 'syz.1.908': attribute type 1 has an invalid length. [ 212.260210][ T9305] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 212.929604][ T9328] bond5: (slave veth0_vlan): Device is not bonding slave [ 212.978195][ T9328] bond5: option active_slave: invalid value (veth0_vlan) [ 213.093851][ T9328] bond5 (unregistering): Released all slaves [ 213.557334][ T9344] syzkaller0: entered promiscuous mode [ 213.590669][ T9344] syzkaller0: entered allmulticast mode [ 214.056753][ T9368] Cannot find del_set index 1 as target [ 215.019925][ T9395] netlink: 'syz.0.927': attribute type 1 has an invalid length. [ 215.309697][ T9403] bond2: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 215.374444][ T9403] bond2 (unregistering): Released all slaves [ 215.473619][ T9407] netlink: 'syz.1.930': attribute type 29 has an invalid length. [ 215.498671][ T9407] netlink: 'syz.1.930': attribute type 29 has an invalid length. [ 215.533650][ T9407] netlink: 'syz.1.930': attribute type 29 has an invalid length. [ 215.564105][ T9407] netlink: 'syz.1.930': attribute type 29 has an invalid length. [ 215.597608][ T9415] syzkaller0: entered promiscuous mode [ 215.615065][ T9415] syzkaller0: entered allmulticast mode [ 215.637038][ T9407] netlink: 'syz.1.930': attribute type 29 has an invalid length. [ 215.663461][ T9407] netlink: 'syz.1.930': attribute type 29 has an invalid length. [ 215.672223][ T9407] netlink: 'syz.1.930': attribute type 29 has an invalid length. [ 215.682027][ T9417] __nla_validate_parse: 15 callbacks suppressed [ 215.682048][ T9417] netlink: 24 bytes leftover after parsing attributes in process `syz.0.933'. [ 215.697645][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 215.707066][ T9407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.930'. [ 215.716483][ T9407] netlink: 'syz.1.930': attribute type 29 has an invalid length. [ 215.735791][ T9407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.930'. [ 216.046679][ T9428] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 216.132952][ T9433] sctp: [Deprecated]: syz.0.936 (pid 9433) Use of int in max_burst socket option. [ 216.132952][ T9433] Use struct sctp_assoc_value instead [ 216.598508][ T9452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.943'. [ 216.685145][ T9454] syzkaller0: entered promiscuous mode [ 216.693105][ T9454] syzkaller0: entered allmulticast mode [ 216.859293][ T9460] syzkaller0: entered promiscuous mode [ 216.877766][ T9460] syzkaller0: entered allmulticast mode [ 216.939625][ T9468] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 216.950313][ T9468] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.071564][ T9471] netlink: 120 bytes leftover after parsing attributes in process `syz.3.946'. [ 217.092008][ T9473] netlink: 'syz.1.948': attribute type 13 has an invalid length. [ 217.094908][ T9462] netlink: 'syz.4.947': attribute type 3 has an invalid length. [ 217.174914][ T9476] netlink: 'syz.2.949': attribute type 2 has an invalid length. [ 217.693454][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 217.943651][ T9496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.956'. [ 217.945801][ T9498] netlink: 16 bytes leftover after parsing attributes in process `syz.0.957'. [ 218.085645][ T9498] bond2: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 219.925002][ T9498] bond2 (unregistering): Released all slaves [ 220.522102][ T9540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.969'. [ 220.637117][ T9544] validate_nla: 2 callbacks suppressed [ 220.637137][ T9544] netlink: 'syz.3.971': attribute type 1 has an invalid length. [ 220.727689][ T9554] netlink: 16 bytes leftover after parsing attributes in process `syz.0.975'. [ 220.753964][ T9550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.974'. [ 220.771908][ T9544] 8021q: adding VLAN 0 to HW filter on device bond5 [ 220.796142][ T9548] bond5: (slave veth3): Enslaving as an active interface with a down link [ 220.839526][ T9554] bond2: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 220.853545][ T9554] bond2 (unregistering): Released all slaves [ 220.887408][ T9564] netlink: 56 bytes leftover after parsing attributes in process `syz.2.976'. [ 220.900498][ T9555] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.973'. [ 221.010139][ T9557] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 221.042686][ T9557] 8021q: adding VLAN 0 to HW filter on device bond3 [ 221.068808][ T9557] 8021q: adding VLAN 0 to HW filter on device bond4 [ 221.113089][ T9544] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 221.126251][ T9544] bond5: (slave batadv1): making interface the new active one [ 221.137281][ T9544] batadv1: entered promiscuous mode [ 221.145198][ T9544] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 221.161326][ T1158] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 221.317568][ T12] bond5: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 221.344580][ T1158] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 221.398242][ T1158] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 221.427156][ T1158] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 221.615367][ T9573] syz.3.982 (9573) used greatest stack depth: 18280 bytes left [ 221.807690][ T9592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.987'. [ 221.980375][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.989'. [ 222.034474][ T9594] tipc: Enabled bearer , priority 0 [ 222.055706][ T9600] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 222.072369][ T9603] netlink: 24 bytes leftover after parsing attributes in process `syz.0.992'. [ 222.082082][ T9594] syzkaller0: entered promiscuous mode [ 222.088417][ T9594] syzkaller0: entered allmulticast mode [ 222.194189][ T9605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.992'. [ 222.224749][ T9610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.994'. [ 222.248063][ T9610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.994'. [ 222.265339][ T9593] tipc: Resetting bearer [ 222.322019][ T9593] tipc: Disabling bearer [ 223.072836][ T9648] netlink: 'syz.4.1006': attribute type 1 has an invalid length. [ 223.189204][ T9648] 8021q: adding VLAN 0 to HW filter on device bond4 [ 223.196993][ T9650] tipc: Enabling of bearer rejected, failed to enable media [ 223.402888][ T9668] netlink: 'syz.1.1011': attribute type 23 has an invalid length. [ 224.093366][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 224.437232][ T9702] netlink: 'syz.2.1023': attribute type 21 has an invalid length. [ 224.499974][ T9702] netlink: 'syz.2.1023': attribute type 5 has an invalid length. [ 225.204841][ T9730] sctp: [Deprecated]: syz.1.1032 (pid 9730) Use of int in max_burst socket option deprecated. [ 225.204841][ T9730] Use struct sctp_assoc_value instead [ 225.499175][ T9741] netlink: 'syz.2.1035': attribute type 1 has an invalid length. [ 225.741462][ T9741] 8021q: adding VLAN 0 to HW filter on device bond2 [ 225.871033][ T9766] ipt_REJECT: ECHOREPLY no longer supported. [ 226.152649][ T9779] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 226.258090][ T9776] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.278376][ T9776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.541126][ T9776] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 226.552737][ T9776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 226.570472][ T9776] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 226.656801][ T9772] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 226.762475][ T9789] netlink: 'syz.2.1043': attribute type 16 has an invalid length. [ 226.807037][ T9789] netlink: 'syz.2.1043': attribute type 17 has an invalid length. [ 226.833630][ T9793] __nla_validate_parse: 9 callbacks suppressed [ 226.833649][ T9793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1045'. [ 226.859983][ T71] bridge0: port 1(veth0) entered blocking state [ 226.866526][ T71] bridge0: port 1(veth0) entered forwarding state [ 226.939040][ T9721] bridge4: entered allmulticast mode [ 227.018754][ T9789] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.026323][ T9789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.034077][ T9789] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.041308][ T9789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.137388][ T9789] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 227.438585][ T9806] vlan2: entered promiscuous mode [ 227.508939][ T9813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1051'. [ 228.009729][ T9836] netlink: 'syz.2.1058': attribute type 2 has an invalid length. [ 228.066526][ T9823] bond5 (unregistering): Released all slaves [ 228.241481][ T9844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1060'. [ 228.725297][ T9836] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.734531][ T9836] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.736889][ T9842] SET target dimension over the limit! [ 228.882382][ T9836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.911908][ T9836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.165034][ T1158] netdevsim netdevsim2 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.210786][ T1158] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.261638][ T1158] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.296226][ T1158] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.322812][ T9876] SET target dimension over the limit! [ 229.383362][ T9878] batadv_slave_1: entered promiscuous mode [ 229.589045][ T9889] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 229.743007][ T9896] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1073'. [ 230.048276][ T9911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1074'. [ 230.720875][ T9920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1077'. [ 230.787420][ T9921] macsec2: entered allmulticast mode [ 230.794460][ T9921] dummy0: entered allmulticast mode [ 230.799352][ T9923] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1078'. [ 230.800597][ T9921] dummy0: entered promiscuous mode [ 230.809773][ T9923] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1078'. [ 230.836614][ T9921] dummy0: left allmulticast mode [ 230.889445][ T9854] dummy0: left promiscuous mode [ 232.193657][ T12] batadv1: left promiscuous mode [ 232.506626][ T9886] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 232.972620][ T9950] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1085'. [ 233.021957][ T9954] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1086'. [ 233.046750][ T30] audit: type=1804 audit(1787005414.054:2): pid=9950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1085" name="/newroot/219/cgroup.controllers" dev="tmpfs" ino=1143 res=1 errno=0 [ 233.144855][ T30] audit: type=1800 audit(1787005414.084:3): pid=9950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1085" name="cgroup.controllers" dev="tmpfs" ino=1143 res=0 errno=0 [ 233.228095][ T9962] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1088'. [ 233.248291][ T9962] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1088'. [ 233.298912][ T9962] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1088'. [ 233.363321][ T9964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1089'. [ 233.626749][ T9981] netlink: 'syz.4.1092': attribute type 12 has an invalid length. [ 233.647225][ T9981] xt_connbytes: Forcing CT accounting to be enabled [ 233.662124][ T9981] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 233.691915][ T9981] nftables ruleset with unbound set [ 233.780527][ T5621] Bluetooth: hci2: link tx timeout [ 233.791210][ T5621] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.909970][ T5612] Bluetooth: hci2: link tx timeout [ 233.922794][ T5612] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.955960][ T5612] Bluetooth: hci2: link tx timeout [ 233.963545][ T5612] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 234.168493][ T5612] Bluetooth: hci2: link tx timeout [ 234.173758][ T5612] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 235.853320][ T5612] Bluetooth: hci2: command 0x0406 tx timeout [ 236.108980][T10003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1097'. [ 236.137146][T10003] netlink: 'syz.2.1097': attribute type 2 has an invalid length. [ 236.151351][T10003] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1097'. [ 236.216070][T10009] smbdirect: ib_dev[syz1] removed [ 236.245013][T10005] netlink: 284 bytes leftover after parsing attributes in process `syz.4.1098'. [ 236.327159][ T9968] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 236.348083][ T9978] ksmbd: Unknown IPC event: 4, ignore. [ 236.784826][T10038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1104'. [ 236.816377][T10019] veth9: entered allmulticast mode [ 237.202667][T10056] bridge0: port 1(veth0) entered disabled state [ 238.208903][T10097] __nla_validate_parse: 2 callbacks suppressed [ 238.208924][T10097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1118'. [ 238.519114][T10108] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1123'. [ 238.689081][T10119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1126'. [ 240.610518][T10081] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 240.829306][T10143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1130'. [ 240.870583][T10146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1132'. [ 240.901210][T10146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1132'. [ 240.912777][T10149] netlink: 'syz.4.1133': attribute type 1 has an invalid length. [ 240.940700][T10149] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.1133'. [ 241.164781][T10164] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1136'. [ 241.166731][T10165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1137'. [ 241.750751][T10178] ipvlan2: entered promiscuous mode [ 241.849253][T10185] netlink: 'syz.3.1144': attribute type 6 has an invalid length. [ 241.995553][T10187] netlink: 'syz.4.1145': attribute type 2 has an invalid length. [ 242.292939][T10207] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1149'. [ 242.456615][T10210] openvswitch: netlink: Flow actions attr not present in new flow. [ 242.649824][T10213] netlink: 'syz.0.1152': attribute type 12 has an invalid length. [ 243.030982][T10220] bond5: entered promiscuous mode [ 243.037104][T10220] 8021q: adding VLAN 0 to HW filter on device bond5 [ 243.153085][T10220] bond6: entered promiscuous mode [ 243.160780][T10220] 8021q: adding VLAN 0 to HW filter on device bond6 [ 243.251563][T10220] bond7: entered promiscuous mode [ 243.257593][T10220] 8021q: adding VLAN 0 to HW filter on device bond7 [ 243.367584][T10247] __nla_validate_parse: 2 callbacks suppressed [ 243.367606][T10247] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1162'. [ 243.402243][T10220] bond8: entered promiscuous mode [ 243.427305][T10220] 8021q: adding VLAN 0 to HW filter on device bond8 [ 243.439691][T10250] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1161'. [ 243.487099][T10220] bond9: entered promiscuous mode [ 243.492814][T10220] 8021q: adding VLAN 0 to HW filter on device bond9 [ 243.546834][T10220] bond10: entered promiscuous mode [ 243.552612][T10220] 8021q: adding VLAN 0 to HW filter on device bond10 [ 243.676687][T10220] bond11: entered promiscuous mode [ 243.710096][T10220] 8021q: adding VLAN 0 to HW filter on device bond11 [ 243.899586][T10271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1167'. [ 243.970819][T10271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1167'. [ 243.985433][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.014956][ T48] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.055148][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.088087][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.146852][T10280] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1171'. [ 244.162245][T10281] netlink: 'syz.0.1169': attribute type 1 has an invalid length. [ 244.206254][T10286] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1171'. [ 244.207736][T10285] ip_tables: iptables: counters copy to user failed while replacing table [ 244.248223][T10280] netlink: 'syz.1.1171': attribute type 32 has an invalid length. [ 244.274845][T10280] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1171'. [ 244.305640][T10290] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1173'. [ 244.659999][T10300] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1175'. [ 244.990341][T10309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1177'. [ 245.576794][T10343] bridge0: entered promiscuous mode [ 245.582328][T10343] bridge0: entered allmulticast mode [ 245.974705][T10319] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 245.982045][T10319] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 245.999454][T10319] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 246.005607][T10319] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 246.020748][T10319] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 246.027047][T10319] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 246.039760][T10319] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 246.046152][T10319] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 246.060783][T10319] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 246.067784][T10319] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 246.165662][T10319] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 246.177620][T10319] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 246.186072][T10319] CPU: 0 UID: 0 PID: 10319 Comm: syz.4.1180 Not tainted syzkaller #0 PREEMPT(full) [ 246.195582][T10319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 246.205755][T10319] RIP: 0010:klist_remove+0x156/0x340 [ 246.211092][T10319] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 cd 84 6a f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ae 84 6a f6 49 8b 44 24 58 48 89 44 24 08 [ 246.230785][T10319] RSP: 0018:ffffc9000343f820 EFLAGS: 00010202 [ 246.236893][T10319] RAX: 000000000000000b RBX: ffff88807eaf1f00 RCX: 0000000000000000 [ 246.244891][T10319] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 246.252896][T10319] RBP: ffffc9000343f920 R08: ffffffff903d2de3 R09: 1ffffffff207a5bc [ 246.260873][T10319] R10: dffffc0000000000 R11: fffffbfff207a5bd R12: 0000000000000000 [ 246.268939][T10319] R13: 1ffff110068aa58c R14: ffff888034552c60 R15: dffffc0000000000 [ 246.277023][T10319] FS: 00007fbf76afa6c0(0000) GS:ffff888124f4c000(0000) knlGS:0000000000000000 [ 246.286046][T10319] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 246.292631][T10319] CR2: 00007ffd152d2720 CR3: 000000007e1ca000 CR4: 00000000003526f0 [ 246.300696][T10319] Call Trace: [ 246.303992][T10319] [ 246.306943][T10319] ? __pfx_klist_remove+0x10/0x10 [ 246.311971][T10319] ? kobject_move+0x5e2/0x720 [ 246.316651][T10319] ? __pfx_kobject_move+0x10/0x10 [ 246.321692][T10319] ? do_raw_spin_unlock+0xf5/0x210 [ 246.326816][T10319] ? get_device_parent+0x366/0x3a0 [ 246.331937][T10319] device_move+0x18e/0x720 [ 246.336374][T10319] hci_conn_del_sysfs+0xb8/0x1a0 [ 246.341341][T10319] hci_conn_del+0xc3d/0x1200 [ 246.346029][T10319] ? __pfx_iso_disconn_cfm+0x10/0x10 [ 246.351369][T10319] hci_conn_hash_flush+0x189/0x260 [ 246.356516][T10319] hci_dev_close_sync+0x7fc/0x10a0 [ 246.361670][T10319] ? __pfx___mutex_lock+0x10/0x10 [ 246.366708][T10319] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 246.372255][T10319] ? do_raw_spin_lock+0x12b/0x2f0 [ 246.377288][T10319] hci_dev_do_close+0x30/0xc0 [ 246.381975][T10319] hci_rfkill_set_block+0x1f4/0x290 [ 246.387273][T10319] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 246.393125][T10319] rfkill_set_block+0x19f/0x4d0 [ 246.398009][T10319] rfkill_fop_write+0x43b/0x560 [ 246.402867][T10319] ? apparmor_file_permission+0x1f4/0x300 [ 246.408616][T10319] ? __pfx_rfkill_fop_write+0x10/0x10 [ 246.414203][T10319] ? security_kernfs_init_security+0x210/0x270 [ 246.420367][T10319] ? rw_verify_area+0x203/0x4c0 [ 246.425225][T10319] ? __pfx_rfkill_fop_write+0x10/0x10 [ 246.430646][T10319] vfs_write+0x296/0xba0 [ 246.434986][T10319] ? __pfx_vfs_write+0x10/0x10 [ 246.439765][T10319] ? __fget_files+0x2a/0x420 [ 246.444400][T10319] ? __fget_files+0x2a/0x420 [ 246.448995][T10319] ? __fget_files+0x3a2/0x420 [ 246.453680][T10319] ? __fget_files+0x2a/0x420 [ 246.458277][T10319] ksys_write+0x150/0x270 [ 246.462885][T10319] ? __pfx_ksys_write+0x10/0x10 [ 246.467745][T10319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.473826][T10319] do_syscall_64+0x174/0x580 [ 246.478428][T10319] ? trace_irq_disable+0x3b/0x140 [ 246.483557][T10319] ? clear_bhb_loop+0x70/0xc0 [ 246.488412][T10319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.494306][T10319] RIP: 0033:0x7fbf75b9e0d9 [ 246.498778][T10319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.518389][T10319] RSP: 002b:00007fbf76afa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 246.526823][T10319] RAX: ffffffffffffffda RBX: 00007fbf75e25fa0 RCX: 00007fbf75b9e0d9 [ 246.534826][T10319] RDX: 0000000000000008 RSI: 0000200000000340 RDI: 0000000000000009 [ 246.542820][T10319] RBP: 00007fbf75c35024 R08: 0000000000000000 R09: 0000000000000000 [ 246.550798][T10319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.558774][T10319] R13: 00007fbf75e26038 R14: 00007fbf75e25fa0 R15: 00007ffec437fd78 [ 246.566757][T10319] [ 246.569777][T10319] Modules linked in: [ 246.575271][T10319] ---[ end trace 0000000000000000 ]--- [ 246.585919][T10319] RIP: 0010:klist_remove+0x156/0x340 [ 246.591976][T10319] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 cd 84 6a f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ae 84 6a f6 49 8b 44 24 58 48 89 44 24 08 [ 246.622844][T10319] RSP: 0018:ffffc9000343f820 EFLAGS: 00010202 [ 246.630009][T10319] RAX: 000000000000000b RBX: ffff88807eaf1f00 RCX: 0000000000000000 [ 246.639176][T10319] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 246.657497][T10319] RBP: ffffc9000343f920 R08: ffffffff903d2de3 R09: 1ffffffff207a5bc [ 246.666084][T10319] R10: dffffc0000000000 R11: fffffbfff207a5bd R12: 0000000000000000 [ 246.692627][T10319] R13: 1ffff110068aa58c R14: ffff888034552c60 R15: dffffc0000000000 [ 246.712217][T10319] FS: 00007fbf76afa6c0(0000) GS:ffff888124f4c000(0000) knlGS:0000000000000000 [ 246.730309][T10319] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 246.744461][T10319] CR2: 0000200000238000 CR3: 000000007e1ca000 CR4: 00000000003526f0 [ 246.762267][T10319] Kernel panic - not syncing: Fatal exception [ 246.768751][T10319] Kernel Offset: disabled [ 246.773263][T10319] Rebooting in 86400 seconds..