last executing test programs: 6.092049392s ago: executing program 1 (id=889): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newtaction={0x70, 0x30, 0xffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x8d, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x110, 0x3, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006180)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x852, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x3ff, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1fe, 0x84, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x2f6, 0x5, 0x10001, 0xf7, 0x3, 0x8, 0x9, 0x1, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d2c, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0xffffffff, 0x8, 0x470, 0x7f, 0x6, 0xfffffffc, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0xbaf, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x8000, 0x6, 0xfed, 0xf, 0x6ae, 0x2, 0x23, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x5, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x5, 0x6, 0x10, 0x9, 0x80008, 0x80000001, 0x0, 0x74, 0x6, 0x7fffffff, 0x0, 0xa, 0xfffffc01, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0xfffffffe, 0x200, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab2, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0xad36, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x4, 0x1, 0x5, 0x354d, 0x0, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7e, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x8004b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x8, 0x0, 0x4, 0x3, {0x6, 0x2, 0x2, 0x3, 0x81, 0x9}, {0x4, 0x2, 0x6, 0x0, 0x7, 0x4}, 0x1, 0x6, 0x6}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0x80000ec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x381, 0x8, 0x6, 0x3, 0xb, 0x800, 0xd2f5, 0x40, 0x4, 0xe71e, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0x2, 0x3, 0x10000, 0x5, 0x4, 0x1ff, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb827, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x5, 0x0, 0x2, 0x8, 0x1, 0x3, 0x9, 0xc, 0x7, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x88, 0xadd9, 0xe, 0x0, 0x7, 0x7ffffffc, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x3, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0x7, 0x3, 0x0, 0x6, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x6, 0x4, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x4, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x9, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0xa, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x7fffffff, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000c09807850000000600000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%pS \x00'}, 0x20) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0x959, 0x10}, 0xc) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x5, 0x6af, 0x6, 0x12200, 0xffffffffffffffff, 0x8, '\x00', r5, 0xffffffffffffffff, 0x1, 0x4, 0x1, 0x4}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%ps \x00'}, 0x20) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x4}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000ffcd0000000000000100418ebad30000000000000000000000000000fded9bedd7fd5cad165ead382ec1b97be864d17db3275eab3a0a4388cde1d32c0705789abfee685c45024943e98135bcfef0a7de107a47540991b17ebcf26fd6880ecd64ca5c2948af2c792da6f65ba484f2006ccf13b825d3827ee702850f019ae0420b86f8827222ad942e400795452a8bbd447a6f28f57ee9ebb6ae566fbcd372a0e04c6715f5525526ea41cd2b5f84e791e44e88e757f59243c86e46a831bd0fe5f5071af7193467a946d8ff152aeb4cef7911913295a7c953"], &(0x7f0000000180)='syzkaller\x00', 0x2028, 0x92, &(0x7f0000000280)=""/146, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff, r10, r11, r12, r13, r14, r15, r16], &(0x7f0000000700)=[{0x1, 0x1, 0xa, 0x3}, {0x0, 0x2, 0x10, 0xa}, {0x3, 0x3, 0xd, 0x2}, {0x1, 0x3, 0x9, 0x8}, {0x5, 0x4, 0xe, 0xb}, {0x5, 0x7, 0x3, 0x5}], 0x10, 0x401}, 0x94) 5.333313009s ago: executing program 1 (id=899): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x1843}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x5}, 0x1c) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="86feae88000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r9, @ANYBLOB], 0x44}}, 0x0) r10 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0xffffffffffffffd5, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r11], 0x5c}}, 0x40) 4.827002162s ago: executing program 2 (id=908): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @any, 0x8fe, 0x2}, 0xe) (async, rerun: 64) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 64) close(0x4) (async, rerun: 32) unshare(0x6a040000) (rerun: 32) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000340)={{0x84, @multicast2, 0x4e20, 0x0, 'fo\x00', 0xc, 0x4, 0x7f}, {@multicast2, 0x4e20, 0x1, 0x7, 0x2, 0x5}}, 0x44) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async, rerun: 32) sendmsg$NFT_BATCH(r2, 0x0, 0x4000000) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000800a1c000000000a010300000000000000000100cca21d5dd66faad5bde9d40001080002400000000254000000030a01040000000000000000010000000900030073797a31000000000900010073797a3100000000280004800800014000000005080002401b2fd2c514000300776731000000000000000000000000001c000000020a05000000000000000000010000080800024000000314000000110001000000"], 0xb4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async, rerun: 32) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200008000"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB='\x00'/28], 0x48) (rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r5}, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) (async) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$alg(r7, &(0x7f0000003100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002ec0)=ANY=[@ANYBLOB="18000000000000ff000000000000001800000000000000170147334e69083a0000020000000000"], 0x30, 0x368438cd61b90292}, 0x40) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000340)=@sack_info={r10, 0x7, 0x9}, &(0x7f0000000900)=0xc) 4.466071288s ago: executing program 4 (id=911): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006180)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) 4.353078355s ago: executing program 1 (id=913): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB="000000000000000000002471cf45cec72252ffabb9c461bee9c5763ada46bcfbb07907c3c89dc3218f296a0daffaa769d95e44d0d43f44639289d7cf50897cacc0a97b2d6c3fb3ee3330e7a9e3acdcdc1880df9b51801d773dc4502a0f657850862e43d1e7e0b3d402a7727165c85fd190ed99f4c39a72e0e2183c6fc3af47538c12a42610bd844c118e14790e693b8b877943a3ff7367b86dd924276fb6f577a7d29df0a5c2e0736170a7e2e38107b05f53d4b40763575bf4", @ANYRES16=r1, @ANYBLOB="000400f8fffffedbdf253e00000008000300", @ANYRES32=r2, @ANYBLOB="0c009900020000006b000000"], 0x28}, 0x1, 0x0, 0x0, 0x4080814}, 0x20040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)) ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f0000000740)=0x401) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f00000000c0), 0x10) sendmmsg$inet(r7, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="050000007402b8f419", 0x9}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}, {&(0x7f0000000200)="587211", 0x3}, {&(0x7f0000000100)="b4c5eb", 0x3}], 0x4}}], 0x1, 0x240400c4) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$sock_SIOCINQ(r8, 0x541b, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r11 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r11, &(0x7f00000005c0), 0x10) r12 = socket$netlink(0x10, 0x3, 0x0) sendto$l2tp6(r10, &(0x7f0000000680)="80d63637e46490914aebbec4cedd7122f8d5c99c21ecbbfc8b1c51462d9f95b57f025b7eb95671e8ce100299d7a95261b9cf02edb4021613dac7afe61913d87fcf115761a521b8a1", 0x48, 0x8080, &(0x7f0000000700)={0xa, 0x0, 0x9, @rand_addr=' \x01\x00', 0x9, 0x1}, 0x20) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000001600080029bd7000fedbdf250a4a08c8", @ANYRES32=0x0, @ANYBLOB="1400020000000000000000000000000000000000fcff080006000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x0) 4.318425589s ago: executing program 3 (id=915): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x46, &(0x7f0000000180)=0xfffffffc, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x24, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1dd91698}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x98}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x28, 0x35, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0}}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009500000700000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x2, &(0x7f00000003c0)={0x0, 0x1, 0x6, @remote}, 0x10) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f00000002c0)={0x3, @bcast, 0xffffffffffffffff}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) accept4(r0, &(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @private2}, &(0x7f00000001c0)=0x80, 0x800) 4.183813983s ago: executing program 0 (id=916): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) pwritev(r2, 0x0, 0x0, 0x6, 0x4) syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb8100000086dd6d4f022c001800fffc020000000000000000000000000001fc010000000000000000000000000001060105"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x3d}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xe}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x48004}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1200000001000000040000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000c2d4d0c2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x88ca, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.026801386s ago: executing program 0 (id=917): socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x11, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500ff0005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 2.741173857s ago: executing program 4 (id=918): socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x11, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c07005400128008000100687372004800028005000300080000000500030005c3ff0005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 2.702361375s ago: executing program 0 (id=919): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0xac, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x24, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x556b7e70}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x51}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x401}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x400}]}]}], {0x14}}, 0xf4}}, 0x4000040) 2.623932354s ago: executing program 1 (id=920): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r1, 0x61d1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f00000001c0)=0x9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty=0x1f, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0x0, 0x6, 0x6}, 0x3c) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_buf(r5, 0x6, 0xd, &(0x7f0000000100)="97", 0x1) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x24040844}, 0x40841) 2.623559795s ago: executing program 3 (id=921): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0}, 0x18) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000440)={&(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x2, {0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x805}, 0x40805) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) 2.552889289s ago: executing program 0 (id=922): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0xe0, 0xffffffff, 0xffffffff, 0xe0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0xffffffff], 'bond_slave_0\x00', 'netpci0\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x6, 0x8}, {0x0, 0x5, 0x4}, {0x0, 0x2, 0x1}, 0x98, 0x9}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [0x0, 0xffffff00], 'wg1\x00', 'gre0\x00', {0xff}, {0xff}}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) 2.531020067s ago: executing program 3 (id=923): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x1843}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x5}, 0x1c) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="86feae88000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r9, @ANYBLOB], 0x44}}, 0x0) r10 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0xffffffffffffffd5, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r11], 0x5c}}, 0x40) 2.46649325s ago: executing program 2 (id=924): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0xfffffffb}, 0x48) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xad, 0x2, {{0x405, 0x5, 0x2, 0x7fffffff, 0x7a, 0x4}}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x19, &(0x7f0000000240)={&(0x7f00000000c0)=@migrate={0x154, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@multicast2}}, @migrate={0xe8}]}, 0x154}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.466079715s ago: executing program 4 (id=925): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130720000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x10) 2.338459684s ago: executing program 2 (id=926): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000202000000000000000000000a03000000000000002600000a"], 0x0, 0x3e}, 0x20) 2.301251932s ago: executing program 4 (id=927): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f00000033c0)=[{{&(0x7f0000000280)={0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000000000002900000037"], 0x18}}], 0x1, 0x40052) (async) r1 = socket(0x10, 0x3, 0x0) (async) recvfrom(r0, &(0x7f0000000040)=""/62, 0x3e, 0x40000040, &(0x7f0000000100)=@l2={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5}, 0x80) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001540)=ANY=[@ANYBLOB="700000001900010000000000000000001d0109004d001180"], 0x70}}, 0x0) 2.155025882s ago: executing program 4 (id=928): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006180)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) 2.154529148s ago: executing program 2 (id=929): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$bt_hci(r1, &(0x7f0000000240)={0x1, @write_eir={{0xc52, 0xf1}, {0x8, "4851c1058ae8525ab20bc5d5d3c0f68900d6cbd98ef6bede15dc964c2b191f0f65cdbcb97601a413a66f05e0b151f5bd2561dd7f2808902525ffc3ed130704518546415611e2bcf4cb7f6be0210bf0b6aceed1ace53db1f28b10d5b62be340b4cd1baf83a8df4291c01902722ffc3668d1e3c547d812af5070aabaf77d44ef6b84096191bc218a451113e869f0968d148b7077801b4d251d69b147ca9a822b016f4b2093426c3022ec502f08ebe4d33ef4a18eea4e4780828ff85a1eff2a0ce3ea86447b886da5812c7efb8a6b6a0d17028449596b1a589b087fb039c318da46212e740e0cd9a9e6f0fb65f525dd0cf9"}}}, 0xf5) getsockname$l2tp(r1, &(0x7f00000001c0)={0x2, 0x0, @private}, &(0x7f0000000340)=0x10) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL={0x5, 0x3, 0xb1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.005312715s ago: executing program 0 (id=930): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x74c4}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r0, 0x0, 0x0) unshare(0x2c060000) unshare(0x2c020400) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x1c}}, 0x20000880) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) r5 = socket$kcm(0x2, 0x2, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x800, @none, 0x69, 0x1}, 0xe) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') 1.874172773s ago: executing program 1 (id=931): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value=0x180}, 0x50) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3ec}, [], {0x14, 0x3f8}}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000000)={0x8, 0x4, 0x7, 0x3}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x96c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x940, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x924, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x920, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x804, 0x1, "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"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x8f, 0x1, "4c5158ae560a528ff9f1050275f2f06dbb6a916939beed63d688644eed0a3e05a8082e9339ca9e1c93f83cc917ac819616d2a236b02726635cd21ef6909e53d804fd9352707430587910cdc1e59d251f7d0dce836510b6acf34cbdfbc2f451d36b70bd5029b0ca908e08a70aca9575daf94103c3b01688d3676d5bb9856ba4b231e191b2e1af343d37ad1a"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x9f0}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) listen(0xffffffffffffffff, 0xa596) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x140, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x2}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1112}, @CTA_NAT_DST={0x80, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010101}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1}]}, @CTA_TUPLE_REPLY={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}]}, @CTA_TUPLE_REPLY={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x140}, 0x1, 0x0, 0x0, 0x10000}, 0x2000c000) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x10000, 0x55}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0xc1) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@gettaction={0x18, 0x32, 0xe72c5f922f23cad9, 0x70bd27, 0x25dfdbf7, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c844}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r5, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}]}, 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) socket$netlink(0x10, 0x3, 0x9) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value=0x180}, 0x50) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3ec}, [], {0x14, 0x3f8}}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000000)={0x8, 0x4, 0x7, 0x3}, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x96c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x940, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x924, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x920, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x804, 0x1, "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"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x8f, 0x1, "4c5158ae560a528ff9f1050275f2f06dbb6a916939beed63d688644eed0a3e05a8082e9339ca9e1c93f83cc917ac819616d2a236b02726635cd21ef6909e53d804fd9352707430587910cdc1e59d251f7d0dce836510b6acf34cbdfbc2f451d36b70bd5029b0ca908e08a70aca9575daf94103c3b01688d3676d5bb9856ba4b231e191b2e1af343d37ad1a"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x9f0}}, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) listen(0xffffffffffffffff, 0xa596) (async) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x140, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x2}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1112}, @CTA_NAT_DST={0x80, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010101}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1}]}, @CTA_TUPLE_REPLY={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}]}, @CTA_TUPLE_REPLY={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x140}, 0x1, 0x0, 0x0, 0x10000}, 0x2000c000) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x10000, 0x55}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0xc1) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@gettaction={0x18, 0x32, 0xe72c5f922f23cad9, 0x70bd27, 0x25dfdbf7, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c844}, 0x4000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r5, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}]}, 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async) 1.694982545s ago: executing program 2 (id=932): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0xac, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x24, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x556b7e70}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x51}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x401}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x400}]}]}], {0x14}}, 0xf4}}, 0x4000040) 1.667452388s ago: executing program 2 (id=933): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0xfffffffffffffe73, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x1d, 0x0, 0xffffffff, 0x5, 0x6, 0x0, 0x2}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x48040}, 0x40081d0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x24, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1dd91698}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x98}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x28, 0x35, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0}}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009500000700000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x2, &(0x7f00000003c0)={0x0, 0x1, 0x6, @remote}, 0x10) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f00000002c0)={0x3, @bcast, 0xffffffffffffffff}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) accept4(r0, &(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @private2}, &(0x7f00000001c0)=0x80, 0x800) 1.55491581s ago: executing program 3 (id=934): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x3, 0x20}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x9, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000002850000001b000000b700000000000000850000000700000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r2}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010019"], 0x0, 0x26, 0x0, 0x1}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x98) recvmsg$unix(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000280)=""/142, 0x8e}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r7, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r9, 0x5421, &(0x7f0000000100)=0x5) connect$netrom(r9, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) connect$netrom(r9, 0x0, 0x0) connect$netrom(r9, &(0x7f0000000300)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) sendmsg$NFT_MSG_GETOBJ(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) 615.531376ms ago: executing program 3 (id=935): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c62825df0d3e40500001a0001002abd3000fbdb000000420008061c825e2d35418c9bfdf00a1b52566eca6284ab785deba406e247f518ee763529fa3eed3a4547ad5a1ee7ecce8e", @ANYRESHEX=r0, @ANYBLOB="0800190032"], 0x7a}}, 0x20000050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000038529c0d00000000fcffffff8500000053000000180100002020692500000000002020207b1af8ff00000000bfa10000ddff000007010000f8ffffffb702000008000000b703000001000000850000001700000095000000000000005b331a4f9b80b9c9bc8309362f1dadf86e1c46900fa8f36b43a525e276d4ca623f"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c62825df0d3e40500001a0001002abd3000fbdb000000420008061c825e2d35418c9bfdf00a1b52566eca6284ab785deba406e247f518ee763529fa3eed3a4547ad5a1ee7ecce8e", @ANYRESHEX=r0, @ANYBLOB="0800190032"], 0x7a}}, 0x20000050) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000038529c0d00000000fcffffff8500000053000000180100002020692500000000002020207b1af8ff00000000bfa10000ddff000007010000f8ffffffb702000008000000b703000001000000850000001700000095000000000000005b331a4f9b80b9c9bc8309362f1dadf86e1c46900fa8f36b43a525e276d4ca623f"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) (async) 596.659813ms ago: executing program 3 (id=936): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r7}, 0x90) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r10], 0x20}}, 0x8080) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r6, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r8], 0x34}}, 0x4008000) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYRES16=r3, @ANYBLOB="01080000000000f200003a43af6b131ebb80e100000008", @ANYRES32=r4, @ANYBLOB="05005b002d000000"], 0x24}}, 0x48000) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r1, @ANYRES16=0x0], 0x24}}, 0x0) unshare(0x20000400) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001ec0)='ns/time\x00') r13 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r13, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) unshare(0x22020600) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r2, 0x20, &(0x7f0000000180)={&(0x7f00000003c0)=""/229, 0xe5, 0x0, &(0x7f0000000cc0)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r14}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(r11) 119.591343ms ago: executing program 4 (id=937): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x110, 0x3, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006180)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x852, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x3ff, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1fe, 0x84, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x2f6, 0x5, 0x10001, 0xf7, 0x3, 0x8, 0x9, 0x1, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d2c, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0xffffffff, 0x8, 0x470, 0x7f, 0x6, 0xfffffffc, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0xbaf, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x8000, 0x6, 0xfed, 0xf, 0x6ae, 0x2, 0x23, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x5, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x80008, 0x80000001, 0x0, 0x74, 0x6, 0x7fffffff, 0x0, 0xa, 0xfffffc01, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x200, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab2, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x4, 0x1, 0x5, 0x354d, 0x0, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7e, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x8004b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x8, 0x0, 0x4, 0x3, {0x6, 0x2, 0x2, 0x3, 0x81, 0x9}, {0x4, 0x2, 0x6, 0x0, 0x7, 0x4}, 0x1, 0x6, 0x6}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0x80000ec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x381, 0x8, 0x6, 0x3, 0xb, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0x2, 0x3, 0x10000, 0x5, 0x4, 0x1ff, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb827, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x5, 0x0, 0x2, 0x8, 0x1, 0x3, 0x9, 0xc, 0x7, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x88, 0xadd9, 0xe, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x3, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0x7, 0x3, 0x0, 0x6, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x6, 0x4, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x4, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x9, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0xa, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x7fffffff, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x20, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) 112.094034ms ago: executing program 0 (id=938): openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000980)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa22}, 0x94) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000e40)={0x0, @multicast2, @multicast1}, &(0x7f0000000e80)=0xc) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000ec0)=0x6, 0x4) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@private0}}, {{@in6=@private1}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000000061115a0000000000850000001c000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r4, 0x25, 0x0, @void}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r6, r7}, 0x5) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmsg$sock(r0, &(0x7f0000000340)={&(0x7f0000000a00)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000a80)="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", 0xfb}, {&(0x7f0000000b80)="94a9953a29ab8e32b1c4ebfd091728925ef4c809f152b8a69f8c5dd3be7d660107e3d4d51260dac7b4d073677b957ff4760fe390f2e7d4c6f2defb91d7874eef4d137eaaa09dcc2e36e4e9405379f5c1fd6a5685959c1eac1e29c35dbce9b1521b37cd76a36b61ca52b1bd977829c5884285ddc83b37ccd7f62b4458c7127937b4f878945e1a8458eb64e2ae9d92a2fd4a57861ea4608c", 0x97}, {&(0x7f0000000c40)="b8bc2e3eb423c4228fb804ecb94cc51a5abd12d932843f76a4de1fb1372de968afd62085d50de94e825c1b4df0a757675bdbe58b683bde30436ce7fb5a60d30fdcab54406bc0a9ef814aa57b85bfb70680360aaf37e6eb196ad19309f5aad1e946ad5c2806519ca172feec5697", 0x6d}, {&(0x7f0000000cc0)="91a89ed7a08e4dbd14ada31767956b8b6ecdc747103079c740a06e76924e7b85b75f059c962279f236c9a059a04631951ed9954382817338d1ad95a07599f6adddec49d0904d94514e388c4b228e7074a6128ab217bebd08c4dc77886e2389ce38c37038b4b0006f6c9c33a4f50dc23b983fca8255bac87562ea669cb42df9e2d6980912999209ce9cb22b15754d9e60b230d6a3eff3255a309e0bace9a803864eb4b90f1657e9d09cf0bfd6e0d7096dfccd6d19aa022c2b192d8ccbe1fc0e2c2a0822964d9ea0f97c382119af29c3", 0xcf}], 0x4, &(0x7f0000000dc0)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x2c}}], 0x48}, 0x4014) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000f00)={'syzkaller1\x00', 0x7}) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 0s ago: executing program 1 (id=939): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fedbdf250300000008000600ac1414bb08000b00", @ANYRES32=0x0, @ANYBLOB="060001004e"], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x54, 0x24, 0x400, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0x6, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x1ff, 0x4, 0x0, 0x5, 0xfffffffd, 0x10000}, [@TCA_NETEM_ECN={0x8}]}}}]}, 0x54}}, 0x42000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', r6, r8, 0x5, 0x5}, 0x50) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010000a0000000000000000000000000a58000000060a0b0400000000000000000200fffe2c0004802800018007000100727400001c0002800800014000000002080002400000000805000320010000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x0, &(0x7f0000000440)={0x11, 0x10, r6, 0x1, 0xfe, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.204' (ED25519) to the list of known hosts. [ 79.498779][ T5815] cgroup: Unknown subsys name 'net' [ 79.612543][ T5815] cgroup: Unknown subsys name 'cpuset' [ 79.621057][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.233056][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.462268][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.471933][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.488127][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.496311][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.506075][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.515246][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.524605][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.525917][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.534853][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.540167][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.551626][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.561763][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.569586][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.578588][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.578932][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.586981][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.600414][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.602162][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.609242][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.617792][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.629595][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.633056][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.644952][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.653764][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.664032][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.319380][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 84.456712][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 84.468725][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 84.514753][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 84.634854][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 84.685148][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.693837][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.702066][ T5833] bridge_slave_0: entered allmulticast mode [ 84.709771][ T5833] bridge_slave_0: entered promiscuous mode [ 84.771395][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.779800][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.787199][ T5833] bridge_slave_1: entered allmulticast mode [ 84.794260][ T5833] bridge_slave_1: entered promiscuous mode [ 84.831417][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.839178][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.846750][ T5839] bridge_slave_0: entered allmulticast mode [ 84.854433][ T5839] bridge_slave_0: entered promiscuous mode [ 84.901020][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.908403][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.915698][ T5839] bridge_slave_1: entered allmulticast mode [ 84.923576][ T5839] bridge_slave_1: entered promiscuous mode [ 84.943438][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.951331][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.958715][ T5826] bridge_slave_0: entered allmulticast mode [ 84.965826][ T5826] bridge_slave_0: entered promiscuous mode [ 85.005105][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.014904][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.023416][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.031536][ T5826] bridge_slave_1: entered allmulticast mode [ 85.039396][ T5826] bridge_slave_1: entered promiscuous mode [ 85.046829][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.054862][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.062534][ T5825] bridge_slave_0: entered allmulticast mode [ 85.069922][ T5825] bridge_slave_0: entered promiscuous mode [ 85.096438][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.129705][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.137078][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.144324][ T5825] bridge_slave_1: entered allmulticast mode [ 85.151978][ T5825] bridge_slave_1: entered promiscuous mode [ 85.174288][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.238363][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.252191][ T5833] team0: Port device team_slave_0 added [ 85.261168][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.283187][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.290682][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.299988][ T5842] bridge_slave_0: entered allmulticast mode [ 85.307478][ T5842] bridge_slave_0: entered promiscuous mode [ 85.329056][ T5833] team0: Port device team_slave_1 added [ 85.336673][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.350420][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.360416][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.368015][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.375193][ T5842] bridge_slave_1: entered allmulticast mode [ 85.382862][ T5842] bridge_slave_1: entered promiscuous mode [ 85.426397][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.449436][ T5839] team0: Port device team_slave_0 added [ 85.503900][ T5839] team0: Port device team_slave_1 added [ 85.510567][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.517820][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.544031][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.558356][ T5826] team0: Port device team_slave_0 added [ 85.581072][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.602751][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.609775][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.638207][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.651345][ T5826] team0: Port device team_slave_1 added [ 85.658171][ T5843] Bluetooth: hci1: command tx timeout [ 85.665041][ T5825] team0: Port device team_slave_0 added [ 85.671267][ T5843] Bluetooth: hci0: command tx timeout [ 85.674672][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.731627][ T5825] team0: Port device team_slave_1 added [ 85.737370][ T5843] Bluetooth: hci4: command tx timeout [ 85.737562][ T5843] Bluetooth: hci3: command tx timeout [ 85.743282][ T5845] Bluetooth: hci2: command tx timeout [ 85.777717][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.784805][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.812093][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.858395][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.865473][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.892688][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.905736][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.912803][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.940416][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.952446][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.959472][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.986328][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.000576][ T5842] team0: Port device team_slave_0 added [ 86.022911][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.030217][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.056956][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.069029][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.076020][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.102884][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.116347][ T5842] team0: Port device team_slave_1 added [ 86.165168][ T5833] hsr_slave_0: entered promiscuous mode [ 86.171708][ T5833] hsr_slave_1: entered promiscuous mode [ 86.208543][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.215646][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.243895][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.304039][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.312197][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.339039][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.358411][ T5839] hsr_slave_0: entered promiscuous mode [ 86.364901][ T5839] hsr_slave_1: entered promiscuous mode [ 86.372251][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 86.378198][ T5839] Cannot create hsr debugfs directory [ 86.434460][ T5826] hsr_slave_0: entered promiscuous mode [ 86.440972][ T5826] hsr_slave_1: entered promiscuous mode [ 86.448387][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 86.454142][ T5826] Cannot create hsr debugfs directory [ 86.464890][ T5825] hsr_slave_0: entered promiscuous mode [ 86.471549][ T5825] hsr_slave_1: entered promiscuous mode [ 86.478584][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 86.484864][ T5825] Cannot create hsr debugfs directory [ 86.622079][ T5842] hsr_slave_0: entered promiscuous mode [ 86.628959][ T5842] hsr_slave_1: entered promiscuous mode [ 86.635385][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 86.641592][ T5842] Cannot create hsr debugfs directory [ 87.265840][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.298876][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.318111][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.337894][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.371485][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.386620][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.409260][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.423543][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.500135][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.518808][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.545796][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.559466][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.647302][ T5826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.658506][ T5826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.674212][ T5826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.701025][ T5826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.737999][ T5845] Bluetooth: hci0: command tx timeout [ 87.738034][ T5843] Bluetooth: hci1: command tx timeout [ 87.810555][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.818400][ T5843] Bluetooth: hci2: command tx timeout [ 87.818576][ T5846] Bluetooth: hci3: command tx timeout [ 87.829696][ T5845] Bluetooth: hci4: command tx timeout [ 87.842888][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.859151][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.870547][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.912652][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.986293][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.998973][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.040809][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.048258][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.082724][ T1018] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.089897][ T1018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.128836][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.182712][ T1018] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.190241][ T1018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.216404][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.231074][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.245440][ T1018] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.252650][ T1018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.273392][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.349685][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.374299][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.395977][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.420088][ T1304] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.427849][ T1304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.450026][ T1304] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.457426][ T1304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.491210][ T1304] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.498507][ T1304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.511232][ T1304] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.518572][ T1304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.583244][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.643921][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.651177][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.672435][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.679851][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.706080][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.755727][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.935407][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.100847][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.140779][ T5833] veth0_vlan: entered promiscuous mode [ 89.192847][ T5833] veth1_vlan: entered promiscuous mode [ 89.321436][ T5842] veth0_vlan: entered promiscuous mode [ 89.329430][ T5833] veth0_macvtap: entered promiscuous mode [ 89.371857][ T5833] veth1_macvtap: entered promiscuous mode [ 89.384353][ T5842] veth1_vlan: entered promiscuous mode [ 89.412653][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.435102][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.463742][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.474580][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.538659][ T1304] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.550743][ T1304] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.569105][ T1304] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.580088][ T1304] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.603157][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.621564][ T5842] veth0_macvtap: entered promiscuous mode [ 89.693420][ T5842] veth1_macvtap: entered promiscuous mode [ 89.748924][ T5826] veth0_vlan: entered promiscuous mode [ 89.792065][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.802936][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.816287][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.825335][ T5846] Bluetooth: hci0: command tx timeout [ 89.831596][ T5845] Bluetooth: hci1: command tx timeout [ 89.859574][ T5825] veth0_vlan: entered promiscuous mode [ 89.874014][ T5826] veth1_vlan: entered promiscuous mode [ 89.898423][ T5845] Bluetooth: hci2: command tx timeout [ 89.898622][ T5843] Bluetooth: hci4: command tx timeout [ 89.908543][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.910788][ T5846] Bluetooth: hci3: command tx timeout [ 89.942903][ T5825] veth1_vlan: entered promiscuous mode [ 89.955360][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.970335][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.989117][ T1304] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.001610][ T1304] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.021387][ T1304] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.083427][ T1304] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.115112][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.177263][ T5826] veth0_macvtap: entered promiscuous mode [ 90.244605][ T5826] veth1_macvtap: entered promiscuous mode [ 90.265544][ T5825] veth0_macvtap: entered promiscuous mode [ 90.326870][ T5949] Zero length message leads to an empty skb [ 90.328376][ T5825] veth1_macvtap: entered promiscuous mode [ 90.349392][ T1018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.360840][ T1018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.402958][ T5839] veth0_vlan: entered promiscuous mode [ 90.424460][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.435395][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.440476][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.452544][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.500967][ T5839] veth1_vlan: entered promiscuous mode [ 90.528614][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.545135][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.574462][ T5951] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 90.581933][ T5951] IPv6: NLM_F_CREATE should be set when creating new route [ 90.602930][ T5951] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 90.612245][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.623492][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.682592][ T5951] bond1: option resend_igmp: invalid value (2878) [ 90.701679][ T5951] bond1: option resend_igmp: allowed values 0 - 255 [ 90.714482][ T5951] bond1 (unregistering): Released all slaves [ 90.762605][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.801894][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.828621][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.866262][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.885958][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.915668][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.049797][ T5839] veth0_macvtap: entered promiscuous mode [ 91.897753][ T5843] Bluetooth: hci0: command tx timeout [ 91.907347][ T5843] Bluetooth: hci1: command tx timeout [ 91.979776][ T5843] Bluetooth: hci4: command tx timeout [ 91.980024][ T5846] Bluetooth: hci3: command tx timeout [ 91.987164][ T5843] Bluetooth: hci2: command tx timeout [ 92.003023][ T24] cfg80211: failed to load regulatory.db [ 92.059430][ T5839] veth1_macvtap: entered promiscuous mode [ 92.129300][ T1018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.152171][ T1018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.242102][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.327417][ T2999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.340738][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.354625][ T2999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.411858][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.423341][ T2999] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.439229][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.449480][ T2999] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.487096][ T2999] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.513062][ T2999] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.529608][ T2999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.548209][ T2999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.935768][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.960665][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.224760][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.251134][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.555905][ T5986] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 93.598603][ T5990] netlink: 'syz.0.12': attribute type 10 has an invalid length. [ 93.785326][ T5990] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 93.799192][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 93.824834][ T6007] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15'. [ 93.845869][ T5996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.861833][ T6004] IPv6: Can't replace route, no match found [ 93.882652][ T5996] bond0: (slave rose0): Enslaving as an active interface with an up link [ 93.893792][ T6011] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15'. [ 94.119062][ T6000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.352122][ T6025] netlink: 9 bytes leftover after parsing attributes in process `syz.0.17'. [ 94.355730][ T6000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.525992][ T6025] .70·: renamed from hsr0 (while UP) [ 94.599786][ T6025] .70·: entered allmulticast mode [ 94.604982][ T6025] hsr_slave_0: entered allmulticast mode [ 94.647396][ T6025] hsr_slave_1: entered allmulticast mode [ 94.715792][ T6025] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 95.373434][ T6057] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 95.474373][ T6060] netlink: 24 bytes leftover after parsing attributes in process `syz.2.22'. [ 95.720736][ T6068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22'. [ 96.146775][ T6078] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 96.168225][ T6080] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 96.194870][ T6080] xt_CT: You must specify a L4 protocol and not use inversions on it [ 96.239589][ T6080] netlink: 112 bytes leftover after parsing attributes in process `syz.1.25'. [ 96.637465][ T6103] netlink: 9 bytes leftover after parsing attributes in process `syz.2.29'. [ 96.666098][ T6093] syzkaller0: entered promiscuous mode [ 96.672359][ T6093] syzkaller0: entered allmulticast mode [ 98.604946][ T6101] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 98.619738][ T6103] .70·: renamed from hsr0 (while UP) [ 98.628477][ T6103] .70·: entered allmulticast mode [ 98.633609][ T6103] hsr_slave_0: entered allmulticast mode [ 98.640122][ T6103] hsr_slave_1: entered allmulticast mode [ 98.646263][ T6103] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 98.828081][ T6145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.32'. [ 98.885115][ T6147] netlink: 24 bytes leftover after parsing attributes in process `syz.1.33'. [ 99.328473][ T6157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33'. [ 100.123322][ T6129] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 100.362792][ T6163] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 100.376242][ T6164] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 100.429668][ T6163] xt_CT: You must specify a L4 protocol and not use inversions on it [ 100.473231][ T6163] netlink: 112 bytes leftover after parsing attributes in process `syz.3.35'. [ 100.736839][ T6173] netlink: 'syz.1.37': attribute type 1 has an invalid length. [ 100.894412][ T6173] netlink: 32 bytes leftover after parsing attributes in process `syz.1.37'. [ 101.266499][ T6188] netlink: 'syz.3.38': attribute type 13 has an invalid length. [ 101.287594][ T6177] bond1: option arp_validate: invalid value (18446744073491447809) [ 101.310344][ T6190] netlink: 'syz.4.39': attribute type 10 has an invalid length. [ 101.363420][ T6177] bond1 (unregistering): Released all slaves [ 101.393952][ T6194] netlink: 24 bytes leftover after parsing attributes in process `syz.1.41'. [ 101.434307][ T6170] mpoa:mpoad_close: () going down [ 101.725884][ T6188] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.735673][ T6188] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.760045][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.41'. [ 101.948905][ T6188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.084074][ T6190] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 102.171091][ T6209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.274196][ T6209] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.319228][ T6210] ip6_vti0: entered promiscuous mode [ 102.375719][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'. [ 102.400541][ T1018] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.469787][ T1018] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.494538][ T1018] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.786122][ T1018] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.618649][ T6248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.50'. [ 104.749301][ T6239] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 104.763505][ T6251] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 104.795361][ T6256] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 105.023690][ T6265] netlink: 'syz.0.54': attribute type 1 has an invalid length. [ 105.040239][ T6264] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 105.111089][ T6270] netlink: 24 bytes leftover after parsing attributes in process `syz.4.57'. [ 105.113051][ T6264] xt_CT: You must specify a L4 protocol and not use inversions on it [ 105.142214][ T6266] netlink: 112 bytes leftover after parsing attributes in process `syz.2.55'. [ 105.146267][ T6268] netlink: 'syz.3.56': attribute type 1 has an invalid length. [ 105.167139][ T6268] netlink: 'syz.3.56': attribute type 2 has an invalid length. [ 105.189487][ T6268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.56'. [ 105.190750][ T6265] netlink: 32 bytes leftover after parsing attributes in process `syz.0.54'. [ 105.408812][ T6277] netlink: 72 bytes leftover after parsing attributes in process `syz.3.58'. [ 105.435483][ T6276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.57'. [ 105.912106][ T6295] syzkaller0: entered promiscuous mode [ 105.935844][ T6295] syzkaller0: entered allmulticast mode [ 106.011525][ T6298] syzkaller0: entered promiscuous mode [ 106.020683][ T6298] syzkaller0: entered allmulticast mode [ 106.084554][ T6298] tipc: Started in network mode [ 106.096731][ T6298] tipc: Node identity 2af726948465, cluster identity 4711 [ 106.105200][ T6298] tipc: Enabled bearer , priority 0 [ 106.143110][ T6297] tipc: Resetting bearer [ 106.161316][ T6297] tipc: Disabling bearer [ 106.175936][ T6303] netlink: 256 bytes leftover after parsing attributes in process `syz.1.65'. [ 106.464749][ T6312] syzkaller0: entered promiscuous mode [ 106.484379][ T6312] syzkaller0: entered allmulticast mode [ 106.488382][ T6306] sctp: [Deprecated]: syz.1.65 (pid 6306) Use of int in max_burst socket option. [ 106.488382][ T6306] Use struct sctp_assoc_value instead [ 106.571800][ T6312] tipc: Enabled bearer , priority 0 [ 106.594441][ T6311] tipc: Resetting bearer [ 106.660211][ T6311] tipc: Disabling bearer [ 106.771252][ T6327] netlink: 72 bytes leftover after parsing attributes in process `syz.2.71'. [ 107.156128][ T6335] vlan2: entered promiscuous mode [ 107.178203][ T6338] netlink: 24 bytes leftover after parsing attributes in process `syz.2.75'. [ 107.178268][ T6335] vlan2: entered allmulticast mode [ 107.290078][ T6335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.74'. [ 107.397958][ T6346] Bluetooth: MGMT ver 1.23 [ 107.778514][ T5846] block nbd0: Receive control failed (result -32) [ 108.326472][ T6384] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.491604][ T6391] syz.1.85 uses obsolete (PF_INET,SOCK_PACKET) [ 109.345266][ T6419] netlink: 'syz.2.93': attribute type 32 has an invalid length. [ 109.417268][ T5843] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 109.424243][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 109.761095][ T6438] netlink: 'syz.1.94': attribute type 10 has an invalid length. [ 109.848318][ T6438] bond0: (slave wlan1): Opening slave failed [ 109.903912][ T6435] geneve2: entered promiscuous mode [ 110.173049][ T6432] syzkaller0: entered promiscuous mode [ 110.179713][ T6432] syzkaller0: entered allmulticast mode [ 110.234287][ T6451] __nla_validate_parse: 6 callbacks suppressed [ 110.234307][ T6451] netlink: 32 bytes leftover after parsing attributes in process `syz.4.99'. [ 110.641231][ T6467] netlink: 32 bytes leftover after parsing attributes in process `syz.0.100'. [ 110.801475][ T6476] sctp: [Deprecated]: syz.1.101 (pid 6476) Use of struct sctp_assoc_value in delayed_ack socket option. [ 110.801475][ T6476] Use struct sctp_sack_info instead [ 112.413658][ T6463] netlink: 'syz.1.101': attribute type 12 has an invalid length. [ 112.714520][ T6503] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 112.900864][ T6515] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 113.027407][ T6523] netlink: 'syz.2.108': attribute type 2 has an invalid length. [ 113.159630][ T6523] Driver unsupported XDP return value 0 on prog (id 51) dev N/A, expect packet loss! [ 113.551018][ T6541] netlink: 9 bytes leftover after parsing attributes in process `syz.4.110'. [ 113.771336][ T6541] .70·: renamed from hsr0 (while UP) [ 113.797869][ T6555] netlink: 32 bytes leftover after parsing attributes in process `syz.2.112'. [ 113.880034][ T6541] .70·: entered allmulticast mode [ 113.886204][ T6541] hsr_slave_0: entered allmulticast mode [ 113.940519][ T6541] hsr_slave_1: entered allmulticast mode [ 113.968481][ T6541] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 114.050983][ T6546] batadv1: entered promiscuous mode [ 114.491356][ T6566] syzkaller0: entered promiscuous mode [ 114.543954][ T6566] syzkaller0: entered allmulticast mode [ 114.613344][ T6580] tipc: Started in network mode [ 114.628182][ T6580] tipc: Node identity fe3b21a884a1, cluster identity 4711 [ 114.696103][ T6580] tipc: Enabled bearer , priority 0 [ 114.867312][ T6561] tipc: Resetting bearer [ 115.313429][ T6561] tipc: Disabling bearer [ 116.162912][ T6620] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 116.177983][ T6623] netlink: 9 bytes leftover after parsing attributes in process `syz.1.125'. [ 116.232203][ T6623] .70·: renamed from hsr0 (while UP) [ 116.259508][ T6623] .70·: entered allmulticast mode [ 116.276309][ T6623] hsr_slave_0: entered allmulticast mode [ 116.314054][ T6623] hsr_slave_1: entered allmulticast mode [ 116.347643][ T6623] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 117.150133][ T6652] netlink: 24 bytes leftover after parsing attributes in process `syz.0.133'. [ 117.185335][ T6646] syzkaller0: entered promiscuous mode [ 117.191295][ T6646] syzkaller0: entered allmulticast mode [ 117.500482][ T6662] syzkaller0: entered promiscuous mode [ 117.525459][ T6662] syzkaller0: entered allmulticast mode [ 117.583209][ T6671] tipc: Started in network mode [ 117.594260][ T6671] tipc: Node identity a2c5714701e8, cluster identity 4711 [ 117.604585][ T6671] tipc: Enabled bearer , priority 0 [ 117.647360][ T6658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.133'. [ 118.432855][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805725b400: rx timeout, send abort [ 118.443222][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805725b400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 119.111783][ T6653] tipc: Resetting bearer [ 119.137859][ T6653] tipc: Disabling bearer [ 119.204007][ T5972] tipc: Node number set to 2737664327 [ 119.235021][ T6679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.327302][ T6682] netlink: 16 bytes leftover after parsing attributes in process `syz.4.134'. [ 119.375567][ T6679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.493637][ T6680] ip6_vti0: entered promiscuous mode [ 119.539558][ T6680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.134'. [ 119.553922][ T6695] netlink: 16 bytes leftover after parsing attributes in process `syz.0.136'. [ 119.592502][ T6686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.732530][ T6686] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.781696][ T6692] ip6_vti0: entered promiscuous mode [ 119.800822][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.136'. [ 119.989755][ T6710] netlink: 9 bytes leftover after parsing attributes in process `syz.3.138'. [ 119.999854][ T6710] .70·: renamed from hsr0 [ 120.041017][ T6710] .70·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 120.145942][ T6710] .70·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 120.226265][ T6710] .70·: entered allmulticast mode [ 120.235793][ T6718] netlink: 24 bytes leftover after parsing attributes in process `syz.4.139'. [ 120.267835][ T6710] hsr_slave_0: entered allmulticast mode [ 120.274163][ T6710] hsr_slave_1: entered allmulticast mode [ 120.319098][ T6710] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 120.475105][ T6725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.139'. [ 120.794078][ T6735] bridge0: entered promiscuous mode [ 120.811090][ T6735] ip6gretap0: entered promiscuous mode [ 120.823563][ T6735] hsr0: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 120.848950][ T6735] hsr0: Slave B (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 120.981586][ T6741] xt_TCPMSS: Only works on TCP SYN packets [ 121.345820][ T6759] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.365716][ T6760] __nla_validate_parse: 3 callbacks suppressed [ 121.365738][ T6760] netlink: 72 bytes leftover after parsing attributes in process `syz.4.151'. [ 121.411295][ T6763] netlink: 9 bytes leftover after parsing attributes in process `syz.1.152'. [ 121.540233][ T6766] xt_CT: You must specify a L4 protocol and not use inversions on it [ 121.557731][ T6770] netlink: 112 bytes leftover after parsing attributes in process `syz.0.150'. [ 121.581132][ T6756] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 121.608129][ T6763] .71·: renamed from .70· (while UP) [ 121.692263][ T6763] A link change request failed with some changes committed already. Interface .71· may have been left with an inconsistent configuration, please check. [ 121.877396][ T6776] netlink: 14 bytes leftover after parsing attributes in process `syz.4.153'. [ 122.201829][ T6782] netlink: 32 bytes leftover after parsing attributes in process `syz.0.155'. [ 122.413967][ T6792] netlink: 28 bytes leftover after parsing attributes in process `syz.1.159'. [ 122.459141][ T6792] netlink: 28 bytes leftover after parsing attributes in process `syz.1.159'. [ 122.558600][ T6792] bridge0: entered promiscuous mode [ 122.567688][ T6792] ip6gretap0: entered promiscuous mode [ 122.575806][ T6792] debugfs: 'hsr0' already exists in 'hsr' [ 122.596832][ T6792] Cannot create hsr debugfs directory [ 122.756481][ T6803] syzkaller0: entered promiscuous mode [ 122.765145][ T6803] syzkaller0: entered allmulticast mode [ 122.879132][ T6803] tipc: Started in network mode [ 122.892969][ T6803] tipc: Node identity 36c0be20e806, cluster identity 4711 [ 122.933855][ T6803] tipc: Enabled bearer , priority 0 [ 122.978391][ T6802] tipc: Resetting bearer [ 122.987404][ T6811] netlink: 9 bytes leftover after parsing attributes in process `syz.0.166'. [ 123.061908][ T6802] tipc: Disabling bearer [ 123.127657][ T6811] .71·: renamed from .70· (while UP) [ 123.206750][ T6811] A link change request failed with some changes committed already. Interface .71· may have been left with an inconsistent configuration, please check. [ 123.399865][ T6826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.171'. [ 123.454174][ T6825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.171'. [ 123.896440][ T6849] netlink: 'syz.1.178': attribute type 12 has an invalid length. [ 123.918174][ T6849] netlink: 'syz.1.178': attribute type 11 has an invalid length. [ 124.372174][ T6860] syzkaller0: entered promiscuous mode [ 124.382547][ T6860] syzkaller0: entered allmulticast mode [ 124.428074][ T6860] tipc: Enabled bearer , priority 0 [ 124.465510][ T6856] tipc: Resetting bearer [ 124.579208][ T6856] tipc: Disabling bearer [ 124.631216][ T6867] .71·: renamed from .70· (while UP) [ 124.673952][ T6867] A link change request failed with some changes committed already. Interface .71· may have been left with an inconsistent configuration, please check. [ 124.715544][ T6874] netlink: 'syz.1.185': attribute type 1 has an invalid length. [ 125.078213][ T6885] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address [ 125.092523][ T6885] bond1: (slave vxcan5): Setting fail_over_mac to active for active-backup mode [ 125.108913][ T6885] bond1: (slave vxcan5): making interface the new active one [ 125.122033][ T6885] bond1: (slave vxcan5): Enslaving as an active interface with an up link [ 125.139129][ T6886] bond1 (unregistering): (slave vxcan5): Releasing backup interface [ 125.159554][ T6886] bond1 (unregistering): Released all slaves [ 125.202658][ T6897] mac80211_hwsim hwsim11 wlan1: Device is already in use. [ 125.367895][ T6898] bond0: (slave wlan1): Releasing backup interface [ 125.728565][ T6911] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 125.785087][ T6911] tipc: Enabled bearer , priority 10 [ 126.362479][ T6938] netlink: 'syz.4.199': attribute type 1 has an invalid length. [ 126.488206][ T6943] __nla_validate_parse: 10 callbacks suppressed [ 126.488227][ T6943] netlink: 9 bytes leftover after parsing attributes in process `syz.3.200'. [ 126.537993][ T6938] veth0_to_bridge: entered promiscuous mode [ 126.540998][ T6942] netlink: 'syz.1.198': attribute type 1 has an invalid length. [ 126.570702][ T6943] .71·: renamed from .70· (while UP) [ 126.606392][ T6943] A link change request failed with some changes committed already. Interface .71· may have been left with an inconsistent configuration, please check. [ 126.658372][ T6937] veth0_to_bridge: left promiscuous mode [ 126.667229][ T6949] veth0_to_bridge: entered promiscuous mode [ 126.747677][ T6939] veth0_to_bridge: left promiscuous mode [ 126.898041][ T5894] tipc: Node number set to 2056921512 [ 126.907486][ T6957] netlink: 24 bytes leftover after parsing attributes in process `syz.2.204'. [ 127.159458][ T6967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.204'. [ 127.172060][ T6966] netlink: 32 bytes leftover after parsing attributes in process `syz.1.206'. [ 128.421275][ T7004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.527765][ T7006] netlink: 16 bytes leftover after parsing attributes in process `syz.1.212'. [ 128.649703][ T7004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.706397][ T7005] ip6_vti0: entered promiscuous mode [ 128.726173][ T7005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.212'. [ 128.802010][ T7017] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 129.090924][ T7019] netlink: 'syz.2.216': attribute type 1 has an invalid length. [ 129.141356][ T7019] veth0_to_bridge: entered promiscuous mode [ 129.149974][ T7018] veth0_to_bridge: left promiscuous mode [ 129.315781][ T7026] netlink: 9 bytes leftover after parsing attributes in process `syz.4.218'. [ 129.354370][ T7026] .70·: renamed from .71· (while UP) [ 129.399563][ T7026] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 129.423698][ T7029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.691841][ T7036] netlink: 28 bytes leftover after parsing attributes in process `syz.1.220'. [ 129.844919][ T7036] netlink: 32 bytes leftover after parsing attributes in process `syz.1.220'. [ 130.034276][ T7048] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.223'. [ 130.505332][ T7054] tipc: Enabled bearer , priority 0 [ 130.575298][ T7057] syzkaller0: entered promiscuous mode [ 130.616286][ T7057] syzkaller0: entered allmulticast mode [ 130.755390][ T7053] tipc: Resetting bearer [ 130.814624][ T7053] tipc: Disabling bearer [ 131.518317][ T7100] __nla_validate_parse: 4 callbacks suppressed [ 131.518338][ T7100] netlink: 32 bytes leftover after parsing attributes in process `syz.0.236'. [ 131.559831][ T7102] netlink: 28 bytes leftover after parsing attributes in process `syz.2.237'. [ 131.599569][ T7102] netlink: 28 bytes leftover after parsing attributes in process `syz.2.237'. [ 131.674757][ T7102] bridge0: entered promiscuous mode [ 131.708679][ T7102] ip6gretap0: entered promiscuous mode [ 131.729243][ T7102] debugfs: 'hsr0' already exists in 'hsr' [ 131.743899][ T7102] Cannot create hsr debugfs directory [ 131.829933][ T7107] geneve2: entered promiscuous mode [ 131.840312][ T69] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 131.871391][ T69] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 131.901270][ T69] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 131.927158][ T1018] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 131.966893][ T7109] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 132.107768][ T7118] netlink: 'syz.2.243': attribute type 3 has an invalid length. [ 132.172978][ T7124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.245'. [ 132.944704][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.954512][ T7145] netlink: 28 bytes leftover after parsing attributes in process `syz.0.250'. [ 132.969141][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.000931][ T7150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.248'. [ 133.068440][ T7154] netlink: 32 bytes leftover after parsing attributes in process `syz.0.250'. [ 133.102900][ T7150] netlink: 16 bytes leftover after parsing attributes in process `syz.1.248'. [ 133.541285][ T7167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.567361][ T7167] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.618382][ T7167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 133.748483][ T7167] syz.3.252 (7167) used greatest stack depth: 17784 bytes left [ 135.345750][ T7236] netlink: 'syz.3.262': attribute type 13 has an invalid length. [ 135.357629][ T7233] netlink: 24 bytes leftover after parsing attributes in process `syz.2.263'. [ 135.467195][ T7229] .71·: left allmulticast mode [ 135.477144][ T7229] hsr_slave_0: left allmulticast mode [ 135.533788][ T7229] hsr_slave_1: left allmulticast mode [ 135.847319][ T7256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.263'. [ 136.364269][ T7229] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 136.373807][ T7229] syzkaller0: entered promiscuous mode [ 136.381232][ T7229] syzkaller0: entered allmulticast mode [ 136.532008][ T7270] xt_CT: You must specify a L4 protocol and not use inversions on it [ 137.241185][ T7305] __nla_validate_parse: 2 callbacks suppressed [ 137.241203][ T7305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.279'. [ 137.498715][ T7315] FAULT_INJECTION: forcing a failure. [ 137.498715][ T7315] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 137.529144][ T7315] CPU: 1 UID: 0 PID: 7315 Comm: syz.0.281 Not tainted syzkaller #0 PREEMPT(full) [ 137.529181][ T7315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 137.529193][ T7315] Call Trace: [ 137.529201][ T7315] [ 137.529210][ T7315] dump_stack_lvl+0xe8/0x150 [ 137.529243][ T7315] should_fail_ex+0x414/0x560 [ 137.529281][ T7315] _copy_to_user+0x31/0xb0 [ 137.529308][ T7315] simple_read_from_buffer+0xe1/0x170 [ 137.529340][ T7315] proc_fail_nth_read+0x1b3/0x220 [ 137.529366][ T7315] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 137.529391][ T7315] ? rw_verify_area+0x2a6/0x4d0 [ 137.529421][ T7315] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 137.529440][ T7315] vfs_read+0x200/0xa30 [ 137.529454][ T7315] ? fdget_pos+0x247/0x320 [ 137.529477][ T7315] ? __pfx___mutex_lock+0x10/0x10 [ 137.529496][ T7315] ? __pfx_vfs_read+0x10/0x10 [ 137.529515][ T7315] ? __fget_files+0x2a/0x420 [ 137.529545][ T7315] ? __fget_files+0x3a0/0x420 [ 137.529568][ T7315] ? __fget_files+0x2a/0x420 [ 137.529602][ T7315] ksys_read+0x145/0x250 [ 137.529625][ T7315] ? __pfx_ksys_read+0x10/0x10 [ 137.529658][ T7315] do_syscall_64+0xec/0xf80 [ 137.529679][ T7315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.529698][ T7315] ? trace_irq_disable+0x37/0x100 [ 137.529724][ T7315] ? clear_bhb_loop+0x60/0xb0 [ 137.529749][ T7315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.529769][ T7315] RIP: 0033:0x7f470898e15c [ 137.529788][ T7315] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 137.529804][ T7315] RSP: 002b:00007f470990d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 137.529826][ T7315] RAX: ffffffffffffffda RBX: 00007f4708be5fa0 RCX: 00007f470898e15c [ 137.529840][ T7315] RDX: 000000000000000f RSI: 00007f470990d0a0 RDI: 0000000000000003 [ 137.529853][ T7315] RBP: 00007f470990d090 R08: 0000000000000000 R09: 0000000000000000 [ 137.529865][ T7315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.529877][ T7315] R13: 00007f4708be6038 R14: 00007f4708be5fa0 R15: 00007fff63007cd8 [ 137.529913][ T7315] [ 138.123413][ T7327] netlink: 'syz.1.284': attribute type 10 has an invalid length. [ 138.629128][ T7345] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 138.893820][ T7355] netlink: 'syz.1.295': attribute type 1 has an invalid length. [ 139.038679][ T7352] lo speed is unknown, defaulting to 1000 [ 139.045418][ T7352] lo speed is unknown, defaulting to 1000 [ 139.062325][ T7352] lo speed is unknown, defaulting to 1000 [ 139.081873][ T7352] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 139.106259][ T7352] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 139.451973][ T7358] bond1: (slave vxcan11): The slave device specified does not support setting the MAC address [ 139.480113][ T7358] bond1: (slave vxcan11): Error -95 calling set_mac_address [ 139.580548][ T7352] lo speed is unknown, defaulting to 1000 [ 139.616388][ T7352] lo speed is unknown, defaulting to 1000 [ 139.639330][ T7352] lo speed is unknown, defaulting to 1000 [ 139.661606][ T7352] lo speed is unknown, defaulting to 1000 [ 139.711003][ T7366] netlink: 132 bytes leftover after parsing attributes in process `syz.2.296'. [ 139.723829][ T7352] lo speed is unknown, defaulting to 1000 [ 139.749535][ T7366] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.821072][ T7367] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.296'. [ 140.120792][ T7374] lo speed is unknown, defaulting to 1000 [ 140.308392][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.303'. [ 140.495290][ T7387] lo speed is unknown, defaulting to 1000 [ 140.518238][ T7396] netlink: 9 bytes leftover after parsing attributes in process `syz.2.306'. [ 140.640278][ T7396] .71·: renamed from .70· (while UP) [ 140.685101][ T7403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.308'. [ 140.697551][ T5894] IPVS: starting estimator thread 0... [ 140.725871][ T7396] A link change request failed with some changes committed already. Interface .71· may have been left with an inconsistent configuration, please check. [ 140.766122][ T7403] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 140.812554][ T7404] IPVS: using max 29 ests per chain, 69600 per kthread [ 140.826571][ T7403] netlink: 'syz.3.308': attribute type 10 has an invalid length. [ 141.108876][ T7408] netlink: 'syz.1.309': attribute type 4 has an invalid length. [ 141.243131][ T7414] lo speed is unknown, defaulting to 1000 [ 141.300969][ T7422] netlink: 28 bytes leftover after parsing attributes in process `syz.1.312'. [ 141.312948][ T7422] netlink: 'syz.1.312': attribute type 3 has an invalid length. [ 141.328645][ T7422] netlink: 24 bytes leftover after parsing attributes in process `syz.1.312'. [ 141.446167][ T7424] netlink: 40 bytes leftover after parsing attributes in process `syz.4.313'. [ 141.680931][ T7424] ip6_vti0: left promiscuous mode [ 141.767630][ T7424] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 141.883531][ T7435] lo speed is unknown, defaulting to 1000 [ 141.954675][ T7447] netlink: 'syz.2.320': attribute type 1 has an invalid length. [ 142.059880][ T7447] veth0_to_bridge: entered promiscuous mode [ 142.101347][ T7446] veth0_to_bridge: left promiscuous mode [ 142.133394][ T7445] lo speed is unknown, defaulting to 1000 [ 142.371922][ T7461] netlink: 28 bytes leftover after parsing attributes in process `syz.4.324'. [ 142.383635][ T7461] netlink: 'syz.4.324': attribute type 3 has an invalid length. [ 142.390393][ T7459] netlink: 72 bytes leftover after parsing attributes in process `syz.2.323'. [ 142.393446][ T7461] netlink: 24 bytes leftover after parsing attributes in process `syz.4.324'. [ 142.404883][ T7458] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 142.826901][ T7473] netlink: 76 bytes leftover after parsing attributes in process `syz.3.329'. [ 142.869821][ T7467] lo speed is unknown, defaulting to 1000 [ 142.970042][ T7482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.330'. [ 142.995516][ T7484] netlink: 'syz.3.329': attribute type 13 has an invalid length. [ 143.028223][ T7485] netlink: 16 bytes leftover after parsing attributes in process `syz.0.330'. [ 143.033843][ T7484] netlink: 'syz.3.329': attribute type 17 has an invalid length. [ 143.657715][ T7502] netlink: 72 bytes leftover after parsing attributes in process `syz.4.335'. [ 143.940567][ T7509] netlink: 'syz.0.336': attribute type 1 has an invalid length. [ 143.986566][ T7509] netlink: 'syz.0.336': attribute type 3 has an invalid length. [ 144.058794][ T7509] netlink: 'syz.0.336': attribute type 1 has an invalid length. [ 144.110355][ T7509] netlink: 140 bytes leftover after parsing attributes in process `syz.0.336'. [ 144.165979][ T7523] netlink: 28 bytes leftover after parsing attributes in process `syz.3.337'. [ 144.215442][ T7522] lo speed is unknown, defaulting to 1000 [ 144.224326][ T7523] netlink: 60 bytes leftover after parsing attributes in process `syz.3.337'. [ 144.591867][ T7535] sctp: [Deprecated]: syz.3.340 (pid 7535) Use of int in max_burst socket option deprecated. [ 144.591867][ T7535] Use struct sctp_assoc_value instead [ 144.643655][ T7510] syzkaller0: entered promiscuous mode [ 144.651093][ T7510] syzkaller0: entered allmulticast mode [ 146.566925][ T7531] lo speed is unknown, defaulting to 1000 [ 147.120144][ T7556] lo speed is unknown, defaulting to 1000 [ 147.230467][ T7566] veth0_macvtap: left promiscuous mode [ 147.238748][ T7566] macvtap0: entered allmulticast mode [ 147.390244][ T7571] bond0: entered promiscuous mode [ 147.422302][ T7571] bond_slave_0: entered promiscuous mode [ 147.461860][ T7571] bond_slave_1: entered promiscuous mode [ 147.537887][ T7571] batadv0: entered promiscuous mode [ 147.569719][ T7571] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 147.626754][ T7571] bond0: left promiscuous mode [ 147.671859][ T7571] bond_slave_0: left promiscuous mode [ 147.705720][ T7571] bond_slave_1: left promiscuous mode [ 147.757180][ T7571] batadv0: left promiscuous mode [ 149.885814][ T7609] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 151.752461][ T7628] __nla_validate_parse: 2 callbacks suppressed [ 151.752485][ T7628] netlink: 16 bytes leftover after parsing attributes in process `syz.3.362'. [ 151.895401][ T7635] bond2: Unable to set down delay as MII monitoring is disabled [ 151.911928][ T7627] netlink: 'syz.4.361': attribute type 9 has an invalid length. [ 151.943566][ T7635] bond2 (unregistering): Released all slaves [ 151.951459][ T7627] netlink: 'syz.4.361': attribute type 6 has an invalid length. [ 152.015627][ T7632] ip6_vti0: entered promiscuous mode [ 152.023903][ T7632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.362'. [ 152.055338][ T7634] syzkaller0: entered promiscuous mode [ 152.070736][ T7634] syzkaller0: entered allmulticast mode [ 152.203730][ T7647] lo speed is unknown, defaulting to 1000 [ 152.439567][ T7658] netlink: 32 bytes leftover after parsing attributes in process `syz.0.370'. [ 152.682143][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.370'. [ 152.783609][ T7672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.374'. [ 152.823925][ T7667] IPv6: NLM_F_REPLACE set, but no existing node found! [ 152.859821][ T7663] lo speed is unknown, defaulting to 1000 [ 152.942164][ T7678] netlink: 'syz.1.376': attribute type 62 has an invalid length. [ 153.270267][ T7664] lo speed is unknown, defaulting to 1000 [ 153.278963][ T5941] IPVS: starting estimator thread 0... [ 153.415267][ T7690] IPVS: using max 30 ests per chain, 72000 per kthread [ 153.452976][ T7692] syzkaller0: entered promiscuous mode [ 153.471184][ T7692] syzkaller0: entered allmulticast mode [ 153.758083][ T7708] netlink: 64 bytes leftover after parsing attributes in process `syz.3.384'. [ 153.793767][ T7711] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 153.844418][ T7710] netlink: 44 bytes leftover after parsing attributes in process `syz.3.384'. [ 154.029361][ T7722] netlink: 'syz.3.387': attribute type 1 has an invalid length. [ 154.065129][ T7722] veth0_to_bridge: entered promiscuous mode [ 154.073636][ T7719] veth0_to_bridge: left promiscuous mode [ 154.506246][ T7736] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.392'. [ 154.528825][ T7736] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 154.560510][ T7730] lo speed is unknown, defaulting to 1000 [ 154.850870][ T7747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.395'. [ 155.053626][ T7754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.396'. [ 155.733578][ T7771] syzkaller0: entered promiscuous mode [ 155.747230][ T7771] syzkaller0: entered allmulticast mode [ 155.796408][ T7788] netlink: 'syz.3.401': attribute type 10 has an invalid length. [ 158.294285][ T7817] lo speed is unknown, defaulting to 1000 [ 158.685020][ T7837] netlink: 'syz.1.413': attribute type 1 has an invalid length. [ 158.799145][ T7837] __nla_validate_parse: 5 callbacks suppressed [ 158.799169][ T7837] netlink: 32 bytes leftover after parsing attributes in process `syz.1.413'. [ 159.282943][ T7841] tipc: Enabled bearer , priority 0 [ 159.469863][ T7846] syzkaller0: entered promiscuous mode [ 159.476561][ T7846] syzkaller0: entered allmulticast mode [ 159.495704][ T7846] tipc: Resetting bearer [ 159.530944][ T7864] wg1 speed is unknown, defaulting to 1000 [ 159.539897][ T7840] tipc: Resetting bearer [ 160.137737][ T7884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.419'. [ 161.391755][ T7840] tipc: Disabling bearer [ 161.417236][ T7864] wg1 speed is unknown, defaulting to 1000 [ 161.425118][ T7842] pim6reg1: entered allmulticast mode [ 161.482861][ T7864] wg1 speed is unknown, defaulting to 1000 [ 161.573785][ T7864] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 161.624540][ T7864] wg1 speed is unknown, defaulting to 1000 [ 161.680979][ T7864] wg1 speed is unknown, defaulting to 1000 [ 161.726308][ T7864] wg1 speed is unknown, defaulting to 1000 [ 161.751168][ T7864] wg1 speed is unknown, defaulting to 1000 [ 161.781130][ T7864] wg1 speed is unknown, defaulting to 1000 [ 162.114853][ T7906] lo speed is unknown, defaulting to 1000 [ 162.180331][ T7906] wg1 speed is unknown, defaulting to 1000 [ 162.263161][ T7914] netlink: 'syz.0.429': attribute type 1 has an invalid length. [ 162.339789][ T7914] netlink: 32 bytes leftover after parsing attributes in process `syz.0.429'. [ 162.365183][ T7913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.428'. [ 163.236651][ T7941] netlink: 28 bytes leftover after parsing attributes in process `syz.3.437'. [ 163.259597][ T7941] netlink: 28 bytes leftover after parsing attributes in process `syz.3.437'. [ 165.036564][ T7939] sch_tbf: burst 2 is lower than device dummy0 mtu (1550) ! [ 165.067450][ T7942] sch_tbf: burst 2 is lower than device dummy0 mtu (1550) ! [ 165.504347][ T7965] netlink: 'syz.2.445': attribute type 1 has an invalid length. [ 165.525690][ T7966] netlink: 'syz.3.444': attribute type 11 has an invalid length. [ 165.544781][ T7966] netlink: 'syz.3.444': attribute type 11 has an invalid length. [ 165.557729][ T7966] netlink: 224 bytes leftover after parsing attributes in process `syz.3.444'. [ 165.570871][ T7965] netlink: 32 bytes leftover after parsing attributes in process `syz.2.445'. [ 165.581602][ T7963] lo speed is unknown, defaulting to 1000 [ 165.588372][ T7963] wg1 speed is unknown, defaulting to 1000 [ 165.947398][ T7966] bridge1: entered promiscuous mode [ 166.017326][ T7966] bridge1: entered allmulticast mode [ 166.238400][ T7985] netlink: 200 bytes leftover after parsing attributes in process `syz.0.448'. [ 166.251601][ T7981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.446'. [ 166.292532][ T7989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.448'. [ 166.703875][ T7987] lo speed is unknown, defaulting to 1000 [ 166.807841][ T7987] wg1 speed is unknown, defaulting to 1000 [ 167.135993][ T8013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.453'. [ 167.524117][ T8026] FAULT_INJECTION: forcing a failure. [ 167.524117][ T8026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.547152][ T8026] CPU: 0 UID: 0 PID: 8026 Comm: syz.0.455 Not tainted syzkaller #0 PREEMPT(full) [ 167.547181][ T8026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 167.547192][ T8026] Call Trace: [ 167.547199][ T8026] [ 167.547208][ T8026] dump_stack_lvl+0xe8/0x150 [ 167.547238][ T8026] should_fail_ex+0x414/0x560 [ 167.547275][ T8026] _copy_from_user+0x2d/0xb0 [ 167.547300][ T8026] ___sys_sendmsg+0x158/0x2a0 [ 167.547327][ T8026] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.547383][ T8026] ? __fget_files+0x2a/0x420 [ 167.547402][ T8026] ? __fget_files+0x3a0/0x420 [ 167.547429][ T8026] __x64_sys_sendmsg+0x19b/0x260 [ 167.547450][ T8026] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 167.547477][ T8026] ? __pfx_ksys_write+0x10/0x10 [ 167.547502][ T8026] do_syscall_64+0xec/0xf80 [ 167.547518][ T8026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.547533][ T8026] ? trace_irq_disable+0x37/0x100 [ 167.547552][ T8026] ? clear_bhb_loop+0x60/0xb0 [ 167.547571][ T8026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.547585][ T8026] RIP: 0033:0x7f470898f749 [ 167.547600][ T8026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.547613][ T8026] RSP: 002b:00007f470990d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.547630][ T8026] RAX: ffffffffffffffda RBX: 00007f4708be5fa0 RCX: 00007f470898f749 [ 167.547641][ T8026] RDX: 0000000024040808 RSI: 0000200000000180 RDI: 0000000000000005 [ 167.547651][ T8026] RBP: 00007f470990d090 R08: 0000000000000000 R09: 0000000000000000 [ 167.547660][ T8026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.547669][ T8026] R13: 00007f4708be6038 R14: 00007f4708be5fa0 R15: 00007fff63007cd8 [ 167.547695][ T8026] [ 167.934896][ T8030] netlink: 'syz.0.457': attribute type 1 has an invalid length. [ 168.028797][ T8035] netlink: 32 bytes leftover after parsing attributes in process `syz.0.457'. [ 168.076303][ T8033] lo speed is unknown, defaulting to 1000 [ 168.121965][ T8033] wg1 speed is unknown, defaulting to 1000 [ 168.150137][ T8038] warning: `syz.1.459' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 168.301421][ T8041] netlink: 9 bytes leftover after parsing attributes in process `syz.2.460'. [ 168.341256][ T8041] .70·: renamed from .71· (while UP) [ 168.376657][ T8041] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 168.823091][ T8056] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 168.964976][ T8056] xt_CT: You must specify a L4 protocol and not use inversions on it [ 169.010508][ T8056] netlink: 112 bytes leftover after parsing attributes in process `syz.3.465'. [ 169.054422][ T8064] lo speed is unknown, defaulting to 1000 [ 169.067998][ T8066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.464'. [ 169.102552][ T8071] geneve3: entered promiscuous mode [ 169.117514][ T8072] bridge0: hsr_addr_subst_dest: Unknown node [ 169.124196][ T8072] ip6gretap0: hsr_addr_subst_dest: Unknown node [ 169.150365][ T8064] wg1 speed is unknown, defaulting to 1000 [ 169.401417][ T8077] .71·: renamed from .70· (while UP) [ 169.561191][ T8086] netlink: 'syz.3.472': attribute type 1 has an invalid length. [ 169.712567][ T8077] A link change request failed with some changes committed already. Interface .71· may have been left with an inconsistent configuration, please check. [ 169.995954][ T8100] dvmrp1: entered allmulticast mode [ 170.006499][ T8102] dvmrp1: left allmulticast mode [ 170.203329][ T8105] lo speed is unknown, defaulting to 1000 [ 170.240790][ T8105] wg1 speed is unknown, defaulting to 1000 [ 170.355373][ T8115] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 170.478061][ T8120] netlink: 'syz.4.478': attribute type 1 has an invalid length. [ 170.586216][ T8120] 8021q: adding VLAN 0 to HW filter on device bond1 [ 170.669349][ T8126] vlan2: entered allmulticast mode [ 170.684082][ T8126] bond1: entered allmulticast mode [ 170.786531][ T8144] netlink: 'syz.2.485': attribute type 1 has an invalid length. [ 170.904801][ T8147] __nla_validate_parse: 3 callbacks suppressed [ 170.904824][ T8147] netlink: 32 bytes leftover after parsing attributes in process `syz.2.485'. [ 170.944866][ T8120] bond1: (slave gretap1): making interface the new active one [ 170.964669][ T8120] gretap1: entered allmulticast mode [ 170.974614][ T8120] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 171.085293][ T8150] netlink: 16 bytes leftover after parsing attributes in process `syz.3.486'. [ 171.306799][ T8160] netlink: 348 bytes leftover after parsing attributes in process `syz.3.488'. [ 171.500967][ T8173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.490'. [ 171.541527][ T8177] netlink: 28 bytes leftover after parsing attributes in process `syz.0.487'. [ 171.604373][ T8180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.487'. [ 171.647674][ T8180] netlink: 24 bytes leftover after parsing attributes in process `syz.0.487'. [ 173.128619][ T8189] netlink: 28 bytes leftover after parsing attributes in process `syz.2.491'. [ 173.166299][ T8191] FAULT_INJECTION: forcing a failure. [ 173.166299][ T8191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.227109][ T8191] CPU: 1 UID: 0 PID: 8191 Comm: syz.1.492 Not tainted syzkaller #0 PREEMPT(full) [ 173.227139][ T8191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 173.227150][ T8191] Call Trace: [ 173.227158][ T8191] [ 173.227167][ T8191] dump_stack_lvl+0xe8/0x150 [ 173.227197][ T8191] should_fail_ex+0x414/0x560 [ 173.227232][ T8191] _copy_from_iter+0x1cd/0x1630 [ 173.227262][ T8191] ? __pfx__copy_from_iter+0x10/0x10 [ 173.227283][ T8191] ? __build_skb_around+0x22d/0x3c0 [ 173.227305][ T8191] ? __alloc_skb+0x198/0x3a0 [ 173.227324][ T8191] ? netlink_sendmsg+0x642/0xb30 [ 173.227347][ T8191] ? skb_put+0x11b/0x210 [ 173.227373][ T8191] netlink_sendmsg+0x6b2/0xb30 [ 173.227407][ T8191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.227436][ T8191] ? aa_sock_msg_perm+0xf1/0x1b0 [ 173.227463][ T8191] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 173.227482][ T8191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.227508][ T8191] __sock_sendmsg+0x21c/0x270 [ 173.227540][ T8191] ____sys_sendmsg+0x505/0x820 [ 173.227572][ T8191] ? __pfx_____sys_sendmsg+0x10/0x10 [ 173.227608][ T8191] ? import_iovec+0x74/0xa0 [ 173.227636][ T8191] ___sys_sendmsg+0x21f/0x2a0 [ 173.227664][ T8191] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.227727][ T8191] ? __fget_files+0x2a/0x420 [ 173.227751][ T8191] ? __fget_files+0x3a0/0x420 [ 173.227787][ T8191] __x64_sys_sendmsg+0x19b/0x260 [ 173.227815][ T8191] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 173.227850][ T8191] ? __pfx_ksys_write+0x10/0x10 [ 173.227883][ T8191] do_syscall_64+0xec/0xf80 [ 173.227904][ T8191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.227923][ T8191] ? trace_irq_disable+0x37/0x100 [ 173.227957][ T8191] ? clear_bhb_loop+0x60/0xb0 [ 173.227981][ T8191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.228000][ T8191] RIP: 0033:0x7f693938f749 [ 173.228019][ T8191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.228035][ T8191] RSP: 002b:00007f693a15e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.228057][ T8191] RAX: ffffffffffffffda RBX: 00007f69395e5fa0 RCX: 00007f693938f749 [ 173.228071][ T8191] RDX: 0000000024040808 RSI: 0000200000000180 RDI: 0000000000000005 [ 173.228083][ T8191] RBP: 00007f693a15e090 R08: 0000000000000000 R09: 0000000000000000 [ 173.228095][ T8191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.228106][ T8191] R13: 00007f69395e6038 R14: 00007f69395e5fa0 R15: 00007ffdd1da3768 [ 173.228146][ T8191] [ 173.683168][ T8196] lo speed is unknown, defaulting to 1000 [ 173.694716][ T8196] wg1 speed is unknown, defaulting to 1000 [ 174.156459][ T8216] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 174.281087][ T8218] netlink: 'syz.1.502': attribute type 1 has an invalid length. [ 174.420362][ T8218] 8021q: adding VLAN 0 to HW filter on device bond2 [ 174.453484][ T8218] bond2: (slave gretap1): making interface the new active one [ 174.472365][ T8218] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 174.497677][ T8221] vlan2: entered allmulticast mode [ 174.516721][ T8221] bond2: entered allmulticast mode [ 174.544897][ T8221] gretap1: entered allmulticast mode [ 174.634818][ T8223] lo speed is unknown, defaulting to 1000 [ 174.663179][ T8236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.503'. [ 174.664710][ T8223] wg1 speed is unknown, defaulting to 1000 [ 174.791549][ T8239] netlink: 16 bytes leftover after parsing attributes in process `syz.3.506'. [ 174.849414][ T8236] hsr_slave_1 (unregistering): left promiscuous mode [ 175.844201][ T8269] lo speed is unknown, defaulting to 1000 [ 175.915533][ T8269] wg1 speed is unknown, defaulting to 1000 [ 175.943182][ T8278] __nla_validate_parse: 4 callbacks suppressed [ 175.943204][ T8278] netlink: 16 bytes leftover after parsing attributes in process `syz.0.516'. [ 176.244973][ T8291] netlink: 128 bytes leftover after parsing attributes in process `syz.2.518'. [ 176.330352][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.516'. [ 176.797916][ T8301] syzkaller1: entered promiscuous mode [ 176.803771][ T8301] syzkaller1: entered allmulticast mode [ 176.952334][ T8316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.525'. [ 177.038339][ T8319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.527'. [ 177.096571][ T8320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.525'. [ 177.724980][ T8348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.534'. [ 177.874852][ T8356] netlink: 'syz.1.534': attribute type 13 has an invalid length. [ 177.901127][ T8339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.532'. [ 177.947314][ T8343] lo speed is unknown, defaulting to 1000 [ 177.955978][ T8360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.535'. [ 178.134741][ T10] IPVS: starting estimator thread 0... [ 178.253686][ T8356] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.263102][ T8356] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.277353][ T8364] IPVS: using max 28 ests per chain, 67200 per kthread [ 178.585541][ T8356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.916308][ T8343] wg1 speed is unknown, defaulting to 1000 [ 178.947693][ T8373] netem: invalid attributes len -1 [ 178.966473][ T8373] netem: change failed [ 179.084210][ T7216] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.115399][ T7216] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 179.135012][ T7216] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.165267][ T7216] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 179.224131][ T8394] Bluetooth: MGMT ver 1.23 [ 179.272683][ T7216] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.297027][ T7216] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 179.311733][ T8393] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.538'. [ 179.344395][ T7216] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.363515][ T7216] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 179.383430][ T8362] lo speed is unknown, defaulting to 1000 [ 179.441935][ T8363] lo speed is unknown, defaulting to 1000 [ 179.460347][ T8362] wg1 speed is unknown, defaulting to 1000 [ 179.552775][ T8363] wg1 speed is unknown, defaulting to 1000 [ 180.565357][ T8439] syzkaller0: entered promiscuous mode [ 180.582381][ T8439] syzkaller0: entered allmulticast mode [ 180.657459][ T8439] tipc: Enabled bearer , priority 10 [ 180.670051][ T8436] tipc: Resetting bearer [ 180.728848][ T8436] tipc: Disabling bearer [ 180.818593][ T8441] lo speed is unknown, defaulting to 1000 [ 180.826414][ T8441] wg1 speed is unknown, defaulting to 1000 [ 181.137671][ T5846] Bluetooth: hci4: link tx timeout [ 181.143204][ T5846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 181.159583][ T5843] Bluetooth: hci4: link tx timeout [ 181.165607][ T5843] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 181.173504][ T5843] Bluetooth: hci4: link tx timeout [ 181.179035][ T5843] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 181.319204][ T8469] __nla_validate_parse: 1 callbacks suppressed [ 181.319224][ T8469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.563'. [ 181.423669][ T8475] netlink: 'syz.2.561': attribute type 1 has an invalid length. [ 181.479833][ T8469] bridge_slave_1: left allmulticast mode [ 181.500419][ T8469] bridge_slave_1: left promiscuous mode [ 181.514236][ T8469] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.522808][ T8479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.561'. [ 181.557611][ T8469] bridge_slave_0: left allmulticast mode [ 181.566030][ T8469] bridge_slave_0: left promiscuous mode [ 181.574807][ T8469] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.599148][ T8484] netlink: 'syz.4.564': attribute type 1 has an invalid length. [ 181.607059][ T8469] bridge0 (unregistering): left promiscuous mode [ 181.678683][ T8477] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 181.705569][ T8479] bond1: (slave bridge1): making interface the new active one [ 181.714436][ T8479] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 181.761501][ T8484] 8021q: adding VLAN 0 to HW filter on device bond2 [ 181.779036][ T8478] batadv1: entered allmulticast mode [ 181.815103][ T8478] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 181.864552][ T8486] vlan0: entered allmulticast mode [ 181.877044][ T8486] bond2: entered allmulticast mode [ 181.968764][ T8496] netlink: 68 bytes leftover after parsing attributes in process `syz.3.566'. [ 181.982646][ T8496] netlink: 20 bytes leftover after parsing attributes in process `syz.3.566'. [ 182.071253][ T8499] syzkaller0: entered promiscuous mode [ 182.091117][ T8499] syzkaller0: entered allmulticast mode [ 182.116852][ T8498] tipc: Enabled bearer , priority 0 [ 182.131088][ T8505] netlink: 'syz.2.569': attribute type 13 has an invalid length. [ 182.141652][ T8505] netlink: 'syz.2.569': attribute type 17 has an invalid length. [ 182.175443][ T8505] ip6_vti0: left promiscuous mode [ 182.260771][ T8505] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 182.290460][ T8498] tipc: Resetting bearer [ 182.306240][ T8509] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 182.350519][ T8498] tipc: Disabling bearer [ 182.571102][ T8513] lo speed is unknown, defaulting to 1000 [ 182.590140][ T8519] netlink: 316 bytes leftover after parsing attributes in process `syz.1.576'. [ 182.615533][ T8513] wg1 speed is unknown, defaulting to 1000 [ 182.793253][ T8526] netlink: 48 bytes leftover after parsing attributes in process `syz.2.579'. [ 182.831191][ T8532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.580'. [ 183.109806][ T8532] ieee80211 phy14: Failed to add default virtual iface [ 183.195790][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 183.549593][ T8551] netlink: 32 bytes leftover after parsing attributes in process `syz.3.586'. [ 183.655737][ T8550] netlink: 'syz.1.585': attribute type 3 has an invalid length. [ 183.820281][ T8562] netlink: 32 bytes leftover after parsing attributes in process `syz.2.587'. [ 184.012263][ T8557] veth0: entered promiscuous mode [ 184.148676][ T8554] lo speed is unknown, defaulting to 1000 [ 184.162455][ T8554] wg1 speed is unknown, defaulting to 1000 [ 184.374442][ T8577] netlink: 'syz.0.591': attribute type 12 has an invalid length. [ 184.491073][ T8557] veth0: left promiscuous mode [ 184.795538][ T8583] lo speed is unknown, defaulting to 1000 [ 184.803893][ T8602] syzkaller0: entered promiscuous mode [ 184.810507][ T8602] syzkaller0: entered allmulticast mode [ 184.825121][ T8583] wg1 speed is unknown, defaulting to 1000 [ 184.906317][ T8608] netlink: 16 bytes leftover after parsing attributes in process `syz.0.598'. [ 185.222402][ T8619] lo speed is unknown, defaulting to 1000 [ 185.232667][ T8619] wg1 speed is unknown, defaulting to 1000 [ 185.576696][ T8629] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 186.082384][ T8619] netlink: 'syz.4.601': attribute type 2 has an invalid length. [ 186.125496][ T8649] lo speed is unknown, defaulting to 1000 [ 186.147261][ T8649] wg1 speed is unknown, defaulting to 1000 [ 186.371481][ T8665] __nla_validate_parse: 5 callbacks suppressed [ 186.371562][ T8665] netlink: 32 bytes leftover after parsing attributes in process `syz.0.615'. [ 186.491746][ T8660] tipc: Enabled bearer , priority 2 [ 186.565232][ T8668] lo speed is unknown, defaulting to 1000 [ 186.589573][ T8668] wg1 speed is unknown, defaulting to 1000 [ 187.137477][ T8666] syzkaller0: entered promiscuous mode [ 187.143709][ T8666] syzkaller0: entered allmulticast mode [ 187.187249][ T8658] tipc: Resetting bearer [ 187.243921][ T8658] tipc: Disabling bearer [ 187.476906][ T8695] FAULT_INJECTION: forcing a failure. [ 187.476906][ T8695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.538906][ T8695] CPU: 1 UID: 0 PID: 8695 Comm: syz.4.622 Not tainted syzkaller #0 PREEMPT(full) [ 187.538933][ T8695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 187.538945][ T8695] Call Trace: [ 187.538952][ T8695] [ 187.538961][ T8695] dump_stack_lvl+0xe8/0x150 [ 187.538994][ T8695] should_fail_ex+0x414/0x560 [ 187.539031][ T8695] _copy_from_user+0x2d/0xb0 [ 187.539056][ T8695] ___sys_sendmsg+0x158/0x2a0 [ 187.539084][ T8695] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.539145][ T8695] ? __fget_files+0x2a/0x420 [ 187.539168][ T8695] ? __fget_files+0x3a0/0x420 [ 187.539203][ T8695] __x64_sys_sendmsg+0x19b/0x260 [ 187.539231][ T8695] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 187.539266][ T8695] ? __pfx_ksys_write+0x10/0x10 [ 187.539300][ T8695] do_syscall_64+0xec/0xf80 [ 187.539320][ T8695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.539339][ T8695] ? trace_irq_disable+0x37/0x100 [ 187.539365][ T8695] ? clear_bhb_loop+0x60/0xb0 [ 187.539389][ T8695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.539408][ T8695] RIP: 0033:0x7efddb98f749 [ 187.539426][ T8695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.539443][ T8695] RSP: 002b:00007efddc84c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.539465][ T8695] RAX: ffffffffffffffda RBX: 00007efddbbe5fa0 RCX: 00007efddb98f749 [ 187.539478][ T8695] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000005 [ 187.539490][ T8695] RBP: 00007efddc84c090 R08: 0000000000000000 R09: 0000000000000000 [ 187.539500][ T8695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.539511][ T8695] R13: 00007efddbbe6038 R14: 00007efddbbe5fa0 R15: 00007ffffd988f08 [ 187.539545][ T8695] [ 187.541103][ T8695] veth0_to_bridge: entered promiscuous mode [ 187.553275][ T8696] digital: digital_start_poll: Unknown protocol [ 187.744007][ T8693] veth0_to_bridge: left promiscuous mode [ 188.060799][ T8715] lo speed is unknown, defaulting to 1000 [ 188.087342][ T8715] wg1 speed is unknown, defaulting to 1000 [ 188.216730][ T8727] syzkaller0: entered promiscuous mode [ 188.228191][ T8727] syzkaller0: entered allmulticast mode [ 188.283338][ T8727] tipc: Enabled bearer , priority 3 [ 188.316489][ T8726] tipc: Resetting bearer [ 188.356343][ T8726] tipc: Disabling bearer [ 188.451335][ T8736] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.636'. [ 188.485569][ T8725] netlink: 'syz.0.631': attribute type 9 has an invalid length. [ 188.510152][ T8733] netlink: 20 bytes leftover after parsing attributes in process `syz.3.635'. [ 188.524796][ T8725] netlink: 'syz.0.631': attribute type 6 has an invalid length. [ 188.736281][ T8748] veth0_to_bridge: entered promiscuous mode [ 188.744703][ T8747] veth0_to_bridge: left promiscuous mode [ 189.133260][ T6505] udevd[6505]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 189.238531][ T6505] udevd[6505]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 189.348504][ T8770] lo speed is unknown, defaulting to 1000 [ 189.462020][ T8770] wg1 speed is unknown, defaulting to 1000 [ 189.587072][ T8776] lo speed is unknown, defaulting to 1000 [ 189.628085][ T8776] wg1 speed is unknown, defaulting to 1000 [ 189.673454][ T8783] syzkaller0: entered promiscuous mode [ 189.701396][ T8783] syzkaller0: entered allmulticast mode [ 189.904521][ T8793] tipc: Started in network mode [ 189.927118][ T8793] tipc: Node identity 620a606528f1, cluster identity 4711 [ 189.948203][ T8793] tipc: Enabled bearer , priority 4 [ 190.001855][ T8782] tipc: Resetting bearer [ 190.141915][ T8782] tipc: Disabling bearer [ 190.174726][ T8804] netlink: 'syz.3.650': attribute type 10 has an invalid length. [ 190.226359][ T8805] netlink: 'syz.3.650': attribute type 10 has an invalid length. [ 190.371541][ T8804] team0: Failed to send options change via netlink (err -105) [ 190.417533][ T8804] team0: Port device dummy0 added [ 190.498709][ T8805] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 190.541299][ T8805] team0: Failed to send options change via netlink (err -105) [ 190.551598][ T8805] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 190.576578][ T8805] team0: Port device dummy0 removed [ 190.593513][ T8805] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 190.611785][ T8818] veth0_to_bridge: entered promiscuous mode [ 190.767502][ T8815] veth0_to_bridge: left promiscuous mode [ 190.977322][ T8835] nbd1: detected capacity change from 0 to 127 [ 190.985556][ T8838] netlink: 64 bytes leftover after parsing attributes in process `syz.3.657'. [ 191.023670][ T8838] block nbd0: reconnected socket [ 191.041736][ T8835] netlink: 'syz.3.657': attribute type 10 has an invalid length. [ 191.079222][ T8838] nbd: socks must be embedded in a SOCK_ITEM attr [ 191.144102][ T8842] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 191.378102][ T5846] block nbd1: Receive control failed (result -104) [ 191.378733][ T5843] block nbd0: Receive control failed (result -32) [ 191.532438][ T8855] lo speed is unknown, defaulting to 1000 [ 191.541227][ T8855] wg1 speed is unknown, defaulting to 1000 [ 191.654421][ T8863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.661'. [ 191.679922][ T8863] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 191.786807][ T8871] netlink: 28 bytes leftover after parsing attributes in process `syz.1.664'. [ 191.807075][ T8871] netlink: 28 bytes leftover after parsing attributes in process `syz.1.664'. [ 191.990787][ T8878] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 192.085061][ T8878] netlink: 'syz.4.665': attribute type 1 has an invalid length. [ 192.323533][ T8878] 8021q: adding VLAN 0 to HW filter on device bond3 [ 192.346783][ T8893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.667'. [ 192.380252][ T8886] vlan1: entered allmulticast mode [ 192.399303][ T8886] bond3: entered allmulticast mode [ 192.633194][ T8900] FAULT_INJECTION: forcing a failure. [ 192.633194][ T8900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.671407][ T8900] CPU: 0 UID: 0 PID: 8900 Comm: syz.1.668 Not tainted syzkaller #0 PREEMPT(full) [ 192.671437][ T8900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 192.671448][ T8900] Call Trace: [ 192.671456][ T8900] [ 192.671465][ T8900] dump_stack_lvl+0xe8/0x150 [ 192.671496][ T8900] should_fail_ex+0x414/0x560 [ 192.671531][ T8900] _copy_from_iter+0x1cd/0x1630 [ 192.671567][ T8900] ? __pfx__copy_from_iter+0x10/0x10 [ 192.671589][ T8900] ? __build_skb_around+0x22d/0x3c0 [ 192.671614][ T8900] ? __alloc_skb+0x198/0x3a0 [ 192.671635][ T8900] ? netlink_sendmsg+0x642/0xb30 [ 192.671658][ T8900] ? skb_put+0x11b/0x210 [ 192.671683][ T8900] netlink_sendmsg+0x6b2/0xb30 [ 192.671720][ T8900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.671757][ T8900] ? aa_sock_msg_perm+0xf1/0x1b0 [ 192.671786][ T8900] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 192.671805][ T8900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.671832][ T8900] __sock_sendmsg+0x21c/0x270 [ 192.671866][ T8900] ____sys_sendmsg+0x505/0x820 [ 192.671896][ T8900] ? __pfx_____sys_sendmsg+0x10/0x10 [ 192.671931][ T8900] ? import_iovec+0x74/0xa0 [ 192.671959][ T8900] ___sys_sendmsg+0x21f/0x2a0 [ 192.671985][ T8900] ? __pfx____sys_sendmsg+0x10/0x10 [ 192.672046][ T8900] ? __fget_files+0x2a/0x420 [ 192.672070][ T8900] ? __fget_files+0x3a0/0x420 [ 192.672105][ T8900] __x64_sys_sendmsg+0x19b/0x260 [ 192.672132][ T8900] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 192.672166][ T8900] ? __pfx_ksys_write+0x10/0x10 [ 192.672197][ T8900] do_syscall_64+0xec/0xf80 [ 192.672218][ T8900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.672237][ T8900] ? trace_irq_disable+0x37/0x100 [ 192.672260][ T8900] ? clear_bhb_loop+0x60/0xb0 [ 192.672285][ T8900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.672310][ T8900] RIP: 0033:0x7f693938f749 [ 192.672328][ T8900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.672344][ T8900] RSP: 002b:00007f693a15e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.672367][ T8900] RAX: ffffffffffffffda RBX: 00007f69395e5fa0 RCX: 00007f693938f749 [ 192.672381][ T8900] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000005 [ 192.672393][ T8900] RBP: 00007f693a15e090 R08: 0000000000000000 R09: 0000000000000000 [ 192.672405][ T8900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.672416][ T8900] R13: 00007f69395e6038 R14: 00007f69395e5fa0 R15: 00007ffdd1da3768 [ 192.672451][ T8900] [ 193.679041][ T8935] netlink: 28 bytes leftover after parsing attributes in process `syz.0.671'. [ 194.307970][ T25] block nbd1: Connection timed out, retrying (0/1 alive) [ 194.333037][ T25] block nbd1: Connection timed out, retrying (0/1 alive) [ 194.352863][ T8939] block nbd1: Dead connection, failed to find a fallback [ 194.367229][ T8939] block nbd1: shutting down sockets [ 194.372922][ T8939] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.385389][ T25] block nbd1: Connection timed out, retrying (0/1 alive) [ 194.393211][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.399736][ T25] block nbd1: Connection timed out, retrying (0/1 alive) [ 194.407218][ T8939] Buffer I/O error on dev nbd1, logical block 0, async page read [ 194.415609][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.422323][ T8939] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.432082][ T8939] Buffer I/O error on dev nbd1, logical block 3, async page read [ 194.447048][ T8939] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.456817][ T8939] Buffer I/O error on dev nbd1, logical block 2, async page read [ 194.465257][ T8939] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.475559][ T8939] Buffer I/O error on dev nbd1, logical block 1, async page read [ 194.490711][ T6505] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.502213][ T6505] Buffer I/O error on dev nbd1, logical block 0, async page read [ 194.510595][ T6505] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.520478][ T6505] Buffer I/O error on dev nbd1, logical block 1, async page read [ 194.529163][ T6505] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.539608][ T6505] Buffer I/O error on dev nbd1, logical block 2, async page read [ 194.547677][ T6505] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.557350][ T6505] Buffer I/O error on dev nbd1, logical block 3, async page read [ 194.565738][ T6505] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.575757][ T6505] Buffer I/O error on dev nbd1, logical block 0, async page read [ 194.583818][ T6505] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.593796][ T6505] Buffer I/O error on dev nbd1, logical block 1, async page read [ 194.607078][ T6505] ldm_validate_partition_table(): Disk read failed. [ 194.621818][ T6505] Dev nbd1: unable to read RDB block 0 [ 194.628187][ T6505] nbd1: unable to read partition table [ 194.646560][ T6505] ldm_validate_partition_table(): Disk read failed. [ 194.653883][ T6505] Dev nbd1: unable to read RDB block 0 [ 194.660454][ T6505] nbd1: unable to read partition table [ 194.866842][ T8911] veth0_to_bridge: entered promiscuous mode [ 194.880406][ T8914] veth0_to_bridge: left promiscuous mode [ 195.127907][ T8951] netlink: 104 bytes leftover after parsing attributes in process `syz.0.672'. [ 195.298993][ T8955] lo speed is unknown, defaulting to 1000 [ 195.358826][ T8955] wg1 speed is unknown, defaulting to 1000 [ 195.579554][ T8979] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 195.685725][ T8983] netlink: 'syz.0.679': attribute type 1 has an invalid length. [ 195.756801][ T8983] 8021q: adding VLAN 0 to HW filter on device bond2 [ 195.781944][ T8990] vlan2: entered allmulticast mode [ 195.789144][ T8990] bond2: entered allmulticast mode [ 195.954136][ T8996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.683'. [ 196.235871][ T9003] FAULT_INJECTION: forcing a failure. [ 196.235871][ T9003] name failslab, interval 1, probability 0, space 0, times 0 [ 196.251245][ T9003] CPU: 1 UID: 0 PID: 9003 Comm: syz.4.684 Not tainted syzkaller #0 PREEMPT(full) [ 196.251271][ T9003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 196.251283][ T9003] Call Trace: [ 196.251291][ T9003] [ 196.251299][ T9003] dump_stack_lvl+0xe8/0x150 [ 196.251331][ T9003] should_fail_ex+0x414/0x560 [ 196.251368][ T9003] should_failslab+0xa8/0x100 [ 196.251394][ T9003] kmem_cache_alloc_noprof+0x88/0x710 [ 196.251423][ T9003] ? __netlink_lookup+0xbd/0x8a0 [ 196.251450][ T9003] ? skb_clone+0x212/0x3a0 [ 196.251480][ T9003] skb_clone+0x212/0x3a0 [ 196.251507][ T9003] __netlink_deliver_tap+0x404/0x850 [ 196.251546][ T9003] ? netlink_deliver_tap+0x2e/0x1b0 [ 196.251571][ T9003] netlink_deliver_tap+0x19c/0x1b0 [ 196.251596][ T9003] netlink_unicast+0x7fa/0x9e0 [ 196.251628][ T9003] ? __pfx_netlink_unicast+0x10/0x10 [ 196.251649][ T9003] ? __alloc_skb+0x198/0x3a0 [ 196.251669][ T9003] ? netlink_sendmsg+0x642/0xb30 [ 196.251690][ T9003] ? skb_put+0x11b/0x210 [ 196.251723][ T9003] netlink_sendmsg+0x805/0xb30 [ 196.251759][ T9003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.251788][ T9003] ? aa_sock_msg_perm+0xf1/0x1b0 [ 196.251815][ T9003] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 196.251832][ T9003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.251865][ T9003] __sock_sendmsg+0x21c/0x270 [ 196.251896][ T9003] ____sys_sendmsg+0x505/0x820 [ 196.251926][ T9003] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.251959][ T9003] ? import_iovec+0x74/0xa0 [ 196.251986][ T9003] ___sys_sendmsg+0x21f/0x2a0 [ 196.252012][ T9003] ? __pfx____sys_sendmsg+0x10/0x10 [ 196.252077][ T9003] ? __fget_files+0x2a/0x420 [ 196.252099][ T9003] ? __fget_files+0x3a0/0x420 [ 196.252140][ T9003] __x64_sys_sendmsg+0x19b/0x260 [ 196.252167][ T9003] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 196.252201][ T9003] ? __pfx_ksys_write+0x10/0x10 [ 196.252234][ T9003] do_syscall_64+0xec/0xf80 [ 196.252255][ T9003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.252272][ T9003] ? trace_irq_disable+0x37/0x100 [ 196.252297][ T9003] ? clear_bhb_loop+0x60/0xb0 [ 196.252320][ T9003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.252338][ T9003] RIP: 0033:0x7efddb98f749 [ 196.252355][ T9003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.252370][ T9003] RSP: 002b:00007efddc84c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.252391][ T9003] RAX: ffffffffffffffda RBX: 00007efddbbe5fa0 RCX: 00007efddb98f749 [ 196.252405][ T9003] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000005 [ 196.252417][ T9003] RBP: 00007efddc84c090 R08: 0000000000000000 R09: 0000000000000000 [ 196.252428][ T9003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.252439][ T9003] R13: 00007efddbbe6038 R14: 00007efddbbe5fa0 R15: 00007ffffd988f08 [ 196.252473][ T9003] [ 196.252638][ T9003] netlink: 'syz.4.684': attribute type 1 has an invalid length. [ 196.561421][ T9003] veth0_to_bridge: entered promiscuous mode [ 196.601497][ T9002] veth0_to_bridge: left promiscuous mode [ 197.096237][ T9014] bond2 (unregistering): Released all slaves [ 197.188363][ T9029] netlink: 44 bytes leftover after parsing attributes in process `syz.1.691'. [ 197.191504][ T9028] lo speed is unknown, defaulting to 1000 [ 197.272189][ T9029] pim6reg99999999: entered allmulticast mode [ 197.279480][ T9028] wg1 speed is unknown, defaulting to 1000 [ 197.543036][ T9043] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 197.640481][ T9045] netlink: 'syz.3.696': attribute type 1 has an invalid length. [ 197.888115][ T9045] 8021q: adding VLAN 0 to HW filter on device bond1 [ 197.942170][ T9047] vlan2: entered allmulticast mode [ 197.967112][ T9047] bond1: entered allmulticast mode [ 197.981814][ T9056] netlink: 'syz.4.699': attribute type 1 has an invalid length. [ 198.059894][ T9056] 8021q: adding VLAN 0 to HW filter on device bond4 [ 198.130758][ T9053] bond4: (slave geneve2): making interface the new active one [ 198.143756][ T9053] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 198.266275][ T9055] syzkaller0: entered promiscuous mode [ 198.280294][ T9055] syzkaller0: entered allmulticast mode [ 198.310005][ T7216] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 198.360952][ T7216] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 198.400981][ T9059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.701'. [ 198.646368][ T9077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.702'. [ 199.967123][ T7216] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 199.976356][ T7216] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 200.334926][ T9106] lo speed is unknown, defaulting to 1000 [ 200.340711][ T9111] netlink: 'syz.0.705': attribute type 10 has an invalid length. [ 200.342727][ T9106] wg1 speed is unknown, defaulting to 1000 [ 200.402861][ T9111] bond0: (slave wlan1): Releasing backup interface [ 200.533658][ T9125] netlink: 52 bytes leftover after parsing attributes in process `syz.4.712'. [ 200.543354][ T9125] netlink: 'syz.4.712': attribute type 1 has an invalid length. [ 201.206068][ T9150] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 201.354290][ T9139] lo speed is unknown, defaulting to 1000 [ 201.379652][ T9139] wg1 speed is unknown, defaulting to 1000 [ 201.486568][ T9163] FAULT_INJECTION: forcing a failure. [ 201.486568][ T9163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.501686][ T9161] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 201.507155][ T9163] CPU: 0 UID: 0 PID: 9163 Comm: syz.2.722 Not tainted syzkaller #0 PREEMPT(full) [ 201.507181][ T9163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 201.507191][ T9163] Call Trace: [ 201.507199][ T9163] [ 201.507207][ T9163] dump_stack_lvl+0xe8/0x150 [ 201.507236][ T9163] should_fail_ex+0x414/0x560 [ 201.507269][ T9163] _copy_from_user+0x2d/0xb0 [ 201.507292][ T9163] kstrtouint_from_user+0xc4/0x170 [ 201.507321][ T9163] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 201.507357][ T9163] proc_fail_nth_write+0x88/0x200 [ 201.507376][ T9163] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 201.507402][ T9163] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 201.507422][ T9163] vfs_write+0x27e/0xb30 [ 201.507450][ T9163] ? __pfx_vfs_write+0x10/0x10 [ 201.507470][ T9163] ? __fget_files+0x2a/0x420 [ 201.507496][ T9163] ? __fget_files+0x3a0/0x420 [ 201.507516][ T9163] ? __fget_files+0x2a/0x420 [ 201.507546][ T9163] ksys_write+0x145/0x250 [ 201.507566][ T9163] ? __pfx_ksys_write+0x10/0x10 [ 201.507583][ T9163] ? rcu_is_watching+0x15/0xb0 [ 201.507605][ T9163] ? trace_sys_enter+0x25/0xf0 [ 201.507632][ T9163] do_syscall_64+0xec/0xf80 [ 201.507651][ T9163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.507667][ T9163] ? trace_irq_disable+0x37/0x100 [ 201.507689][ T9163] ? clear_bhb_loop+0x60/0xb0 [ 201.507710][ T9163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.507727][ T9163] RIP: 0033:0x7f7f6098e1ff [ 201.507743][ T9163] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 201.507757][ T9163] RSP: 002b:00007f7f618ad030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 201.507777][ T9163] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7f6098e1ff [ 201.507789][ T9163] RDX: 0000000000000001 RSI: 00007f7f618ad0a0 RDI: 0000000000000006 [ 201.507800][ T9163] RBP: 00007f7f618ad090 R08: 0000000000000000 R09: 0000000000000000 [ 201.507811][ T9163] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 201.507821][ T9163] R13: 00007f7f60be6038 R14: 00007f7f60be5fa0 R15: 00007fff6c574038 [ 201.507853][ T9163] [ 201.772824][ T9161] xt_CT: You must specify a L4 protocol and not use inversions on it [ 201.781231][ T9156] lo speed is unknown, defaulting to 1000 [ 201.783665][ T9156] wg1 speed is unknown, defaulting to 1000 [ 201.859495][ T9161] netlink: 112 bytes leftover after parsing attributes in process `syz.0.723'. [ 201.941946][ T9176] ip6_vti0: entered promiscuous mode [ 202.003491][ T9176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.724'. [ 202.039956][ T9181] netlink: 16 bytes leftover after parsing attributes in process `syz.2.724'. [ 202.442060][ T9183] lo speed is unknown, defaulting to 1000 [ 202.456845][ T9183] wg1 speed is unknown, defaulting to 1000 [ 202.565441][ T9195] netlink: 'syz.0.729': attribute type 10 has an invalid length. [ 202.581641][ T9193] lo speed is unknown, defaulting to 1000 [ 202.589322][ T9195] bond0: (slave wlan1): Opening slave failed [ 202.607328][ T9193] wg1 speed is unknown, defaulting to 1000 [ 202.773483][ T9199] xt_limit: Overflow, try lower: 271964/0 [ 202.832535][ T9199] netlink: 25 bytes leftover after parsing attributes in process `syz.4.731'. [ 203.003357][ T9199] netlink: 24 bytes leftover after parsing attributes in process `syz.4.731'. [ 203.215417][ T9218] netlink: 28 bytes leftover after parsing attributes in process `syz.4.736'. [ 203.355722][ T9218] netlink: 32 bytes leftover after parsing attributes in process `syz.4.736'. [ 203.421019][ T9227] syzkaller0: entered promiscuous mode [ 203.426896][ T9227] syzkaller0: entered allmulticast mode [ 203.536347][ T9227] tipc: Enabled bearer , priority 10 [ 203.551935][ T9226] tipc: Resetting bearer [ 203.596150][ T9226] tipc: Disabling bearer [ 204.025091][ T9257] ip6_vti0: entered promiscuous mode [ 204.049728][ T9257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.742'. [ 204.076096][ T9248] netlink: 16 bytes leftover after parsing attributes in process `syz.4.742'. [ 204.705663][ T9259] netlink: 52 bytes leftover after parsing attributes in process `syz.2.743'. [ 204.745549][ T9280] netlink: 'syz.4.748': attribute type 1 has an invalid length. [ 204.799498][ T9281] netlink: 60 bytes leftover after parsing attributes in process `syz.4.748'. [ 204.809696][ T9281] netlink: 23 bytes leftover after parsing attributes in process `syz.4.748'. [ 205.165018][ T9288] netlink: 'syz.2.749': attribute type 1 has an invalid length. [ 205.418957][ T9225] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 205.425576][ T9225] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 205.433775][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 205.996510][ T9270] netlink: 1 bytes leftover after parsing attributes in process `syz.1.747'. [ 206.009468][ T9280] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 206.010013][ T9286] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 206.032153][ T9288] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 206.068184][ T9275] lo speed is unknown, defaulting to 1000 [ 206.084697][ T9275] wg1 speed is unknown, defaulting to 1000 [ 206.222439][ T9298] netlink: 'syz.4.751': attribute type 1 has an invalid length. [ 206.263979][ T9298] veth0_to_bridge: entered promiscuous mode [ 206.279955][ T9296] veth0_to_bridge: left promiscuous mode [ 206.338625][ T9302] syzkaller0: entered promiscuous mode [ 206.344161][ T9302] syzkaller0: entered allmulticast mode [ 206.371795][ T9307] .70·: renamed from .71· (while UP) [ 206.464588][ T9307] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 206.582347][ T9316] netlink: 'syz.1.754': attribute type 4 has an invalid length. [ 206.618848][ T9309] netlink: 'syz.1.754': attribute type 12 has an invalid length. [ 206.640951][ T9315] tipc: Enabled bearer , priority 10 [ 206.683503][ T9301] tipc: Resetting bearer [ 206.699278][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 206.703948][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 206.727375][ T9225] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 206.738454][ T9225] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 206.781582][ T9225] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 206.790324][ T9301] tipc: Disabling bearer [ 206.796189][ T9225] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 206.845889][ T9225] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 206.882368][ T9225] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 207.081707][ T9335] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 207.140345][ T9332] netlink: 'syz.2.762': attribute type 13 has an invalid length. [ 207.372073][ T9332] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.379949][ T9332] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.572077][ T9332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.906117][ T9353] netlink: 'syz.3.768': attribute type 1 has an invalid length. [ 207.940152][ T1010] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.951147][ T1010] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.960716][ T5934] wg1 speed is unknown, defaulting to 1000 [ 207.975797][ T5934] syz: Port: 1 Link DOWN [ 207.982154][ T1010] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.001099][ T1010] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.040014][ T9369] __nla_validate_parse: 4 callbacks suppressed [ 208.040036][ T9369] netlink: 28 bytes leftover after parsing attributes in process `syz.2.771'. [ 208.062092][ T9369] netlink: 28 bytes leftover after parsing attributes in process `syz.2.771'. [ 208.205912][ T9372] syzkaller0: entered promiscuous mode [ 208.212318][ T9372] syzkaller0: entered allmulticast mode [ 208.254763][ T9373] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 208.279792][ T9372] tipc: Enabled bearer , priority 0 [ 208.299336][ T9371] tipc: Resetting bearer [ 208.346093][ T9371] tipc: Disabling bearer [ 208.352902][ T9376] netlink: 'syz.1.772': attribute type 1 has an invalid length. [ 208.418479][ T9376] 8021q: adding VLAN 0 to HW filter on device bond3 [ 208.502627][ T9375] netlink: 168 bytes leftover after parsing attributes in process `syz.2.775'. [ 208.741737][ T9398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.778'. [ 208.763440][ T9398] netlink: 16 bytes leftover after parsing attributes in process `syz.0.778'. [ 209.169721][ T9412] netlink: 28 bytes leftover after parsing attributes in process `syz.4.785'. [ 209.178835][ T9412] netlink: 28 bytes leftover after parsing attributes in process `syz.4.785'. [ 209.205089][ T9412] bridge0: entered promiscuous mode [ 209.218471][ T9412] ip6gretap0: entered promiscuous mode [ 209.225047][ T9412] debugfs: 'hsr0' already exists in 'hsr' [ 209.232007][ T9412] Cannot create hsr debugfs directory [ 209.369961][ T9423] syzkaller0: entered promiscuous mode [ 209.384878][ T9423] syzkaller0: entered allmulticast mode [ 209.422026][ T9425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.789'. [ 209.433528][ T9423] tipc: Enabled bearer , priority 0 [ 209.463474][ T9422] tipc: Resetting bearer [ 209.487408][ T9426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.520365][ T9422] tipc: Disabling bearer [ 209.574739][ T9426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.624203][ T9425] lo speed is unknown, defaulting to 1000 [ 209.630900][ T9428] FAULT_INJECTION: forcing a failure. [ 209.630900][ T9428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.649733][ T9428] CPU: 1 UID: 0 PID: 9428 Comm: syz.0.790 Not tainted syzkaller #0 PREEMPT(full) [ 209.649762][ T9428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 209.649773][ T9428] Call Trace: [ 209.649781][ T9428] [ 209.649790][ T9428] dump_stack_lvl+0xe8/0x150 [ 209.649822][ T9428] should_fail_ex+0x414/0x560 [ 209.649853][ T9428] _copy_to_user+0x31/0xb0 [ 209.649875][ T9428] simple_read_from_buffer+0xe1/0x170 [ 209.649905][ T9428] proc_fail_nth_read+0x1b3/0x220 [ 209.649931][ T9428] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 209.649954][ T9428] ? rw_verify_area+0x2a6/0x4d0 [ 209.649980][ T9428] ? tun_chr_write_iter+0x18a/0x200 [ 209.650002][ T9428] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 209.650024][ T9428] vfs_read+0x200/0xa30 [ 209.650041][ T9428] ? fdget_pos+0x247/0x320 [ 209.650071][ T9428] ? __pfx___mutex_lock+0x10/0x10 [ 209.650094][ T9428] ? __pfx_vfs_read+0x10/0x10 [ 209.650113][ T9428] ? __fget_files+0x2a/0x420 [ 209.650139][ T9428] ? __fget_files+0x3a0/0x420 [ 209.650161][ T9428] ? __fget_files+0x2a/0x420 [ 209.650191][ T9428] ksys_read+0x145/0x250 [ 209.650212][ T9428] ? __pfx_ksys_read+0x10/0x10 [ 209.650244][ T9428] do_syscall_64+0xec/0xf80 [ 209.650266][ T9428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.650297][ T9428] ? trace_irq_disable+0x37/0x100 [ 209.650323][ T9428] ? clear_bhb_loop+0x60/0xb0 [ 209.650348][ T9428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.650368][ T9428] RIP: 0033:0x7f470898e15c [ 209.650387][ T9428] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 209.650403][ T9428] RSP: 002b:00007f470990d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 209.650427][ T9428] RAX: ffffffffffffffda RBX: 00007f4708be5fa0 RCX: 00007f470898e15c [ 209.650441][ T9428] RDX: 000000000000000f RSI: 00007f470990d0a0 RDI: 0000000000000008 [ 209.650453][ T9428] RBP: 00007f470990d090 R08: 0000000000000000 R09: 0000000000000000 [ 209.650465][ T9428] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001 [ 209.650477][ T9428] R13: 00007f4708be6038 R14: 00007f4708be5fa0 R15: 00007fff63007cd8 [ 209.650513][ T9428] [ 209.889772][ T9425] wg1 speed is unknown, defaulting to 1000 [ 210.417373][ T9446] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 210.547684][ T9456] netlink: 'syz.2.796': attribute type 1 has an invalid length. [ 210.554044][ T9450] lo speed is unknown, defaulting to 1000 [ 210.639140][ T9456] 8021q: adding VLAN 0 to HW filter on device bond2 [ 210.659438][ T9450] wg1 speed is unknown, defaulting to 1000 [ 210.722134][ T9460] bond2: (slave gretap1): making interface the new active one [ 210.747975][ T9460] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 210.843706][ T9472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.800'. [ 210.875632][ T9472] netlink: 16 bytes leftover after parsing attributes in process `syz.1.800'. [ 210.994274][ T9474] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 211.048466][ T9479] xt_CT: You must specify a L4 protocol and not use inversions on it [ 211.123086][ T9481] netlink: 'syz.0.802': attribute type 1 has an invalid length. [ 211.151741][ T9481] veth0_to_bridge: entered promiscuous mode [ 211.165190][ T9480] veth0_to_bridge: left promiscuous mode [ 211.298186][ T9492] IPv6: Can't replace route, no match found [ 211.576008][ T9504] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 211.628437][ T9504] xt_CT: You must specify a L4 protocol and not use inversions on it [ 211.750110][ T9511] netlink: 'syz.2.814': attribute type 9 has an invalid length. [ 211.751888][ T9513] netlink: 'syz.4.815': attribute type 1 has an invalid length. [ 211.793762][ T9513] veth0_to_bridge: entered promiscuous mode [ 211.808766][ T9512] veth0_to_bridge: left promiscuous mode [ 211.841879][ T9522] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 211.953215][ T9525] netlink: 'syz.1.818': attribute type 1 has an invalid length. [ 211.971626][ T9531] netlink: 'syz.4.822': attribute type 1 has an invalid length. [ 212.024488][ T9525] 8021q: adding VLAN 0 to HW filter on device bond4 [ 212.087341][ T9531] 8021q: adding VLAN 0 to HW filter on device bond5 [ 212.156469][ T9539] veth5: entered promiscuous mode [ 212.202371][ T9539] bond5: (slave veth5): Enslaving as an active interface with a down link [ 212.388151][ T9548] netlink: 'syz.3.825': attribute type 4 has an invalid length. [ 212.573648][ T9562] netlink: 'syz.3.828': attribute type 1 has an invalid length. [ 212.966418][ T9581] netlink: 'syz.3.834': attribute type 1 has an invalid length. [ 214.485306][ T9599] netlink: 'syz.3.838': attribute type 4 has an invalid length. [ 214.646406][ T9606] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 214.700734][ T9607] netlink: 'syz.2.842': attribute type 1 has an invalid length. [ 214.724646][ T9610] netlink: 'syz.4.841': attribute type 1 has an invalid length. [ 214.758111][ T9614] __nla_validate_parse: 10 callbacks suppressed [ 214.758142][ T9614] netlink: 32 bytes leftover after parsing attributes in process `syz.2.842'. [ 214.783580][ T9610] 8021q: adding VLAN 0 to HW filter on device bond6 [ 215.120078][ T9630] netlink: 'syz.2.847': attribute type 13 has an invalid length. [ 215.147786][ T9630] netlink: 'syz.2.847': attribute type 17 has an invalid length. [ 215.232907][ T9637] netlink: 20 bytes leftover after parsing attributes in process `syz.2.847'. [ 215.242566][ T9637] netlink: 20 bytes leftover after parsing attributes in process `syz.2.847'. [ 215.316530][ T9637] netlink: 20 bytes leftover after parsing attributes in process `syz.2.847'. [ 215.328510][ T9637] netlink: 20 bytes leftover after parsing attributes in process `syz.2.847'. [ 215.464331][ T9637] netlink: 20 bytes leftover after parsing attributes in process `syz.2.847'. [ 215.474723][ T9637] netlink: 20 bytes leftover after parsing attributes in process `syz.2.847'. [ 215.662096][ T9647] netlink: 'syz.4.851': attribute type 1 has an invalid length. [ 216.858842][ T9644] netlink: 'syz.3.850': attribute type 4 has an invalid length. [ 216.899312][ T9648] gretap2: entered allmulticast mode [ 217.190527][ T9673] netlink: 'syz.4.857': attribute type 1 has an invalid length. [ 217.238913][ T9673] netlink: 32 bytes leftover after parsing attributes in process `syz.4.857'. [ 217.425382][ T9687] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 217.435294][ T9689] xt_bpf: check failed: parse error [ 217.535396][ T9694] netlink: 'syz.0.861': attribute type 1 has an invalid length. [ 217.566228][ T9696] ip6_vti0: left promiscuous mode [ 217.655925][ T9694] 8021q: adding VLAN 0 to HW filter on device bond3 [ 217.927709][ T9709] syzkaller0: entered promiscuous mode [ 217.988901][ T9709] syzkaller0: entered allmulticast mode [ 218.049427][ T9709] tipc: Enabled bearer , priority 0 [ 218.075864][ T9706] tipc: Resetting bearer [ 218.121590][ T9706] tipc: Disabling bearer [ 218.432428][ T9721] syzkaller0: entered promiscuous mode [ 218.453246][ T9721] syzkaller0: entered allmulticast mode [ 218.568834][ T9721] tipc: Enabled bearer , priority 0 [ 218.598035][ T9720] tipc: Resetting bearer [ 218.899130][ T9720] tipc: Disabling bearer [ 218.997229][ T9738] netlink: 'syz.4.873': attribute type 1 has an invalid length. [ 219.016659][ T9738] netlink: 32 bytes leftover after parsing attributes in process `syz.4.873'. [ 219.227484][ T9751] netlink: 'syz.0.874': attribute type 10 has an invalid length. [ 219.327731][ T9756] netlink: 28 bytes leftover after parsing attributes in process `syz.1.878'. [ 219.479422][ T9762] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 219.551688][ T9763] netlink: 'syz.1.880': attribute type 1 has an invalid length. [ 219.650067][ T9763] 8021q: adding VLAN 0 to HW filter on device bond5 [ 219.810466][ T9775] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 220.065223][ T9778] __nla_validate_parse: 1 callbacks suppressed [ 220.065244][ T9778] netlink: 36 bytes leftover after parsing attributes in process `syz.0.884'. [ 220.248012][ T9782] netlink: 'syz.4.887': attribute type 1 has an invalid length. [ 220.271476][ T9782] netlink: 32 bytes leftover after parsing attributes in process `syz.4.887'. [ 220.321314][ T9784] veth0_to_bridge: entered promiscuous mode [ 220.350539][ T9783] veth0_to_bridge: left promiscuous mode [ 220.517556][ T9791] netlink: 'syz.0.888': attribute type 4 has an invalid length. [ 220.536888][ T9796] netlink: 'syz.1.889': attribute type 58 has an invalid length. [ 220.572740][ T9796] netlink: 20 bytes leftover after parsing attributes in process `syz.1.889'. [ 220.594671][ T9799] xt_TPROXY: Can be used only with -p tcp or -p udp [ 220.781764][ T9801] netlink: 76 bytes leftover after parsing attributes in process `syz.1.889'. [ 220.782910][ T9812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.893'. [ 220.802068][ T9801] netlink: 76 bytes leftover after parsing attributes in process `syz.1.889'. [ 220.827044][ T9812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.893'. [ 220.885899][ T9806] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 220.902648][ T9806] bond3 (unregistering): Released all slaves [ 220.931889][ T9813] batadv0: entered promiscuous mode [ 220.937834][ T9813] vlan3: entered promiscuous mode [ 221.179824][ T9830] netlink: 36 bytes leftover after parsing attributes in process `syz.2.898'. [ 221.243907][ T9835] netlink: 'syz.3.901': attribute type 1 has an invalid length. [ 221.246746][ T9833] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 221.252449][ T9835] netlink: 244 bytes leftover after parsing attributes in process `syz.3.901'. [ 221.282836][ T9836] netlink: 32 bytes leftover after parsing attributes in process `syz.4.900'. [ 221.294670][ T9836] netlink: 'syz.4.900': attribute type 1 has an invalid length. [ 221.311735][ T9836] veth0_to_bridge: entered promiscuous mode [ 221.320361][ T9834] veth0_to_bridge: left promiscuous mode [ 221.350243][ T9840] netlink: 'syz.1.899': attribute type 1 has an invalid length. [ 221.432357][ T9840] 8021q: adding VLAN 0 to HW filter on device bond6 [ 221.778125][ T9865] netlink: 'syz.3.909': attribute type 1 has an invalid length. [ 221.961608][ T9863] lo speed is unknown, defaulting to 1000 [ 221.995219][ T9863] wg1 speed is unknown, defaulting to 1000 [ 223.668516][ T9887] veth0_to_bridge: entered promiscuous mode [ 223.681833][ T9897] bridge0: entered promiscuous mode [ 223.688545][ T9897] ip6gretap0: entered promiscuous mode [ 223.694547][ T9897] debugfs: 'hsr0' already exists in 'hsr' [ 223.700767][ T9897] Cannot create hsr debugfs directory [ 223.731724][ T9893] veth0_to_bridge: left promiscuous mode [ 223.994021][ T9907] lo speed is unknown, defaulting to 1000 [ 224.002871][ T9905] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 224.036057][ T9907] wg1 speed is unknown, defaulting to 1000 [ 224.059146][ T9910] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 224.194825][ T9921] validate_nla: 2 callbacks suppressed [ 224.194845][ T9921] netlink: 'syz.3.923': attribute type 1 has an invalid length. [ 224.210232][ T9911] netlink: 'syz.0.922': attribute type 4 has an invalid length. [ 224.341729][ T9921] 8021q: adding VLAN 0 to HW filter on device bond2 [ 224.414249][ T9933] netlink: 'syz.2.929': attribute type 1 has an invalid length. [ 224.533338][ T9933] 8021q: adding VLAN 0 to HW filter on device bond3 [ 224.673997][ T9935] bond3: (slave geneve3): making interface the new active one [ 224.684770][ T9935] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 224.944428][ T9953] netlink: 'syz.2.933': attribute type 1 has an invalid length. [ 226.288073][ T9943] bridge0: port 3(.71·) entered blocking state [ 226.294604][ T9943] bridge0: port 3(.71·) entered disabled state [ 226.304669][ T9943] .71·: entered promiscuous mode [ 226.311332][ T9943] bridge0: port 3(.71·) entered blocking state [ 226.317975][ T9943] bridge0: port 3(.71·) entered forwarding state [ 226.338006][ T7216] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.372567][ T9945] tc_dump_action: action bad kind [ 226.384647][ T9952] __nla_validate_parse: 10 callbacks suppressed [ 226.384667][ T9952] netlink: 284 bytes leftover after parsing attributes in process `syz.2.933'. [ 226.434135][ T9953] veth0_to_bridge: entered promiscuous mode [ 226.443924][ T69] [ 226.446374][ T69] ============================================ [ 226.452724][ T69] WARNING: possible recursive locking detected [ 226.458903][ T69] syzkaller #0 Not tainted [ 226.463529][ T69] -------------------------------------------- [ 226.469852][ T69] kworker/u8:5/69 is trying to acquire lock: [ 226.476358][ T69] ffff88807c3fef30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 226.485595][ T69] [ 226.485595][ T69] but task is already holding lock: [ 226.493147][ T69] ffff888030be4f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 226.502300][ T69] [ 226.502300][ T69] other info that might help us debug this: [ 226.510471][ T69] Possible unsafe locking scenario: [ 226.510471][ T69] [ 226.518499][ T69] CPU0 [ 226.521949][ T69] ---- [ 226.525601][ T69] lock(&hsr->seqnr_lock); [ 226.530482][ T69] lock(&hsr->seqnr_lock); [ 226.535183][ T69] [ 226.535183][ T69] *** DEADLOCK *** [ 226.535183][ T69] [ 226.543509][ T69] May be due to missing lock nesting notation [ 226.543509][ T69] [ 226.552107][ T69] 14 locks held by kworker/u8:5/69: [ 226.557492][ T69] #0: ffff88814d02f948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 226.569632][ T69] #1: ffffc9000213fbc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 226.582541][ T69] #2: ffffffff8f311e48 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 226.592320][ T69] #3: ffff888031222538 (&idev->mc_lock){+.+.}-{4:4}, at: ipv6_mc_dad_complete+0x32/0x410 [ 226.602771][ T69] #4: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x1e7/0xe60 [ 226.612456][ T69] #5: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 226.621985][ T69] #6: ffffffff8df41b00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x289/0x31c0 [ 226.632237][ T69] #7: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 226.641670][ T69] #8: ffff888030be4f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 226.651284][ T69] #9: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0x9e/0x2860 [ 226.661041][ T69] #10: ffffffff8df41b00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x289/0x31c0 [ 226.671321][ T69] #11: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x184/0x1830 [ 226.681355][ T69] #12: ffffffff8df41b00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x289/0x31c0 [ 226.691368][ T69] #13: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 226.700951][ T69] [ 226.700951][ T69] stack backtrace: [ 226.706934][ T69] CPU: 0 UID: 0 PID: 69 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 226.706955][ T69] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 226.706966][ T69] Workqueue: ipv6_addrconf addrconf_dad_work [ 226.706985][ T69] Call Trace: [ 226.706994][ T69] [ 226.707002][ T69] dump_stack_lvl+0xe8/0x150 [ 226.707021][ T69] print_deadlock_bug+0x279/0x290 [ 226.707042][ T69] __lock_acquire+0x2540/0x2cf0 [ 226.707060][ T69] ? do_raw_spin_lock+0x121/0x290 [ 226.707079][ T69] ? __pfx_skb_network_protocol+0x10/0x10 [ 226.707102][ T69] ? hsr_dev_xmit+0x237/0x360 [ 226.707120][ T69] lock_acquire+0x107/0x340 [ 226.707133][ T69] ? hsr_dev_xmit+0x237/0x360 [ 226.707155][ T69] ? hsr_dev_xmit+0x237/0x360 [ 226.707172][ T69] _raw_spin_lock_bh+0x36/0x50 [ 226.707194][ T69] ? hsr_dev_xmit+0x237/0x360 [ 226.707212][ T69] hsr_dev_xmit+0x237/0x360 [ 226.707229][ T69] ? hsr_dev_xmit+0x2d/0x360 [ 226.707254][ T69] dev_hard_start_xmit+0x2cd/0x800 [ 226.707279][ T69] __dev_queue_xmit+0x149d/0x31c0 [ 226.707302][ T69] ? __dev_queue_xmit+0x289/0x31c0 [ 226.707327][ T69] ? __pfx___dev_queue_xmit+0x10/0x10 [ 226.707346][ T69] ? lockdep_hardirqs_on+0x7b/0x110 [ 226.707361][ T69] ? ebt_do_table+0x2655/0x2810 [ 226.707381][ T69] ? __local_bh_enable_ip+0xd0/0x130 [ 226.707396][ T69] ? ebt_do_table+0x2655/0x2810 [ 226.707426][ T69] br_dev_queue_push_xmit+0x6c5/0x890 [ 226.707443][ T69] ? lock_acquire+0x107/0x340 [ 226.707458][ T69] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 226.707475][ T69] ? NF_HOOK+0x9e/0x3c0 [ 226.707489][ T69] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 226.707505][ T69] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 226.707520][ T69] NF_HOOK+0x320/0x3c0 [ 226.707535][ T69] ? NF_HOOK+0x9e/0x3c0 [ 226.707549][ T69] ? __pfx_NF_HOOK+0x10/0x10 [ 226.707564][ T69] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 226.707579][ T69] ? lock_acquire+0x107/0x340 [ 226.707596][ T69] br_forward_finish+0xd3/0x130 [ 226.707610][ T69] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 226.707625][ T69] ? __pfx_br_forward_finish+0x10/0x10 [ 226.707640][ T69] ? __pfx_br_forward_finish+0x10/0x10 [ 226.707654][ T69] NF_HOOK+0x320/0x3c0 [ 226.707669][ T69] ? NF_HOOK+0x9e/0x3c0 [ 226.707683][ T69] ? __pfx_NF_HOOK+0x10/0x10 [ 226.707697][ T69] ? __asan_memcpy+0x40/0x70 [ 226.707720][ T69] ? __pfx_br_forward_finish+0x10/0x10 [ 226.707736][ T69] ? __skb_clone+0x483/0x7a0 [ 226.707753][ T69] ? br_handle_vlan+0x61/0x530 [ 226.707777][ T69] __br_forward+0x397/0x540 [ 226.707791][ T69] ? __pfx_br_forward_finish+0x10/0x10 [ 226.707808][ T69] maybe_deliver+0xb5/0x160 [ 226.707825][ T69] br_flood+0x31a/0x6a0 [ 226.707843][ T69] ? br_dev_xmit+0x184/0x1830 [ 226.707862][ T69] br_dev_xmit+0x1198/0x1830 [ 226.707881][ T69] ? __pfx_skb_network_protocol+0x10/0x10 [ 226.707900][ T69] ? br_dev_xmit+0x184/0x1830 [ 226.707920][ T69] ? __pfx_br_dev_xmit+0x10/0x10 [ 226.707938][ T69] ? netif_skb_features+0xa69/0x1540 [ 226.707957][ T69] ? hsr_create_tagged_frame+0x24e/0xe10 [ 226.707978][ T69] ? hsr_forward_skb+0x1013/0x2860 [ 226.707999][ T69] ? hsr_dev_xmit+0x173/0x360 [ 226.708016][ T69] ? dev_hard_start_xmit+0x2cd/0x800 [ 226.708035][ T69] ? NF_HOOK+0x9e/0x380 [ 226.708051][ T69] ? mld_sendpack+0x8d4/0xe60 [ 226.708070][ T69] ? __pfx_netif_skb_features+0x10/0x10 [ 226.708088][ T69] ? kthread+0x711/0x8a0 [ 226.708106][ T69] ? ret_from_fork+0x510/0xa50 [ 226.708123][ T69] dev_hard_start_xmit+0x2cd/0x800 [ 226.708147][ T69] __dev_queue_xmit+0x149d/0x31c0 [ 226.708170][ T69] ? __dev_queue_xmit+0x289/0x31c0 [ 226.708192][ T69] ? __copy_skb_header+0xa7/0x550 [ 226.708211][ T69] ? __pfx___dev_queue_xmit+0x10/0x10 [ 226.708237][ T69] ? __pskb_copy_fclone+0x9b5/0xfb0 [ 226.708257][ T69] ? __asan_memcpy+0x40/0x70 [ 226.708278][ T69] ? __pskb_copy_fclone+0x9b5/0xfb0 [ 226.708302][ T69] ? hsr_create_tagged_frame+0x8cd/0xe10 [ 226.708322][ T69] ? hsr_addr_subst_dest+0x30d/0xa90 [ 226.708343][ T69] hsr_forward_skb+0x158b/0x2860 [ 226.708368][ T69] ? hsr_forward_skb+0x9e/0x2860 [ 226.708390][ T69] ? __pfx_hsr_forward_skb+0x10/0x10 [ 226.708411][ T69] ? do_raw_spin_lock+0x121/0x290 [ 226.708431][ T69] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 226.708452][ T69] ? hsr_dev_xmit+0x237/0x360 [ 226.708471][ T69] hsr_dev_xmit+0x242/0x360 [ 226.708488][ T69] ? hsr_dev_xmit+0x2d/0x360 [ 226.708507][ T69] dev_hard_start_xmit+0x2cd/0x800 [ 226.708525][ T69] ? lockdep_hardirqs_on+0x7b/0x110 [ 226.708544][ T69] __dev_queue_xmit+0x149d/0x31c0 [ 226.708566][ T69] ? __dev_queue_xmit+0x289/0x31c0 [ 226.708587][ T69] ? __pfx_mroute6_is_socket+0x10/0x10 [ 226.708608][ T69] ? __pfx___dev_queue_xmit+0x10/0x10 [ 226.708628][ T69] ? neigh_connected_output+0x1ea/0x460 [ 226.708645][ T69] ? eth_header+0x11b/0x200 [ 226.708664][ T69] ? __asan_memcpy+0x40/0x70 [ 226.708692][ T69] ? ip6_output+0x126/0x550 [ 226.708708][ T69] ip6_output+0x340/0x550 [ 226.708727][ T69] NF_HOOK+0x9e/0x380 [ 226.708745][ T69] ? NF_HOOK+0x101/0x380 [ 226.708762][ T69] ? __pfx_NF_HOOK+0x10/0x10 [ 226.708781][ T69] ? __pfx_dst_output+0x10/0x10 [ 226.708799][ T69] ? lockdep_hardirqs_on+0x7b/0x110 [ 226.708813][ T69] ? __local_bh_enable_ip+0xd0/0x130 [ 226.708827][ T69] ? icmp6_dst_alloc+0x3a5/0x420 [ 226.708846][ T69] mld_sendpack+0x8d4/0xe60 [ 226.708864][ T69] ? __asan_memcpy+0x40/0x70 [ 226.708890][ T69] ? mld_sendpack+0x1e7/0xe60 [ 226.708909][ T69] ? __pfx_mld_sendpack+0x10/0x10 [ 226.708932][ T69] ? mld_send_initial_cr+0x352/0x550 [ 226.708950][ T69] ipv6_mc_dad_complete+0x88/0x410 [ 226.708970][ T69] addrconf_dad_completed+0x6d5/0xd60 [ 226.708989][ T69] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 226.709007][ T69] ? __local_bh_enable_ip+0xd0/0x130 [ 226.709023][ T69] addrconf_dad_work+0xc36/0x14b0 [ 226.709041][ T69] ? __pfx_addrconf_dad_work+0x10/0x10 [ 226.709057][ T69] ? process_scheduled_works+0x9ef/0x1770 [ 226.709074][ T69] ? process_scheduled_works+0x9ef/0x1770 [ 226.709088][ T69] ? process_scheduled_works+0x9ef/0x1770 [ 226.709103][ T69] process_scheduled_works+0xad1/0x1770 [ 226.709127][ T69] ? __pfx_process_scheduled_works+0x10/0x10 [ 226.709141][ T69] ? do_raw_spin_lock+0x21f/0x290 [ 226.709166][ T69] worker_thread+0x8a0/0xda0 [ 226.709190][ T69] kthread+0x711/0x8a0 [ 226.709209][ T69] ? __pfx_worker_thread+0x10/0x10 [ 226.709224][ T69] ? __pfx_kthread+0x10/0x10 [ 226.709249][ T69] ? _raw_spin_unlock_irq+0x23/0x50 [ 226.709271][ T69] ? __pfx_kthread+0x10/0x10 [ 226.709289][ T69] ret_from_fork+0x510/0xa50 [ 226.709303][ T69] ? __pfx_ret_from_fork+0x10/0x10 [ 226.709316][ T69] ? __switch_to+0xc9e/0x1480 [ 226.709337][ T69] ? __pfx_kthread+0x10/0x10 [ 226.709355][ T69] ret_from_fork_asm+0x1a/0x30 [ 226.709381][ T69] [ 227.406010][ T9970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.936'. [ 227.410377][ T9978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.939'. [ 227.415607][ T7216] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.434132][ T9957] veth0_to_bridge: left promiscuous mode [ 227.466837][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.476621][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0