last executing test programs: 1m30.920393486s ago: executing program 4 (id=123): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) socket(0x9, 0x1, 0x8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r1, &(0x7f0000005ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)='7', 0x1}], 0x1}}], 0x400000000000334, 0x40001) r2 = socket$inet6(0x10, 0x2, 0x80000000) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, 0x0, 0x0, 0xba5a, 0x0, 0x0, 0x40f00, 0x11}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401}, 0x38) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) epoll_create1(0x0) 1m30.57584188s ago: executing program 4 (id=129): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, {0x7, 0xb}, {}, {0xc, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x64006015}, 0x200008c2) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c001}, 0x20004800) 1m29.559764141s ago: executing program 4 (id=136): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x9}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x2}]}}}]}, 0x4c}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 1m29.155044253s ago: executing program 4 (id=140): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x44, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r3, 0x0, 0x0}, 0x20) socket$inet6_sctp(0xa, 0x4, 0x84) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00'}, 0x18) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) write$cgroup_int(r5, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x4815, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x800) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xf, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x5, 0x0) (async) socket$netlink(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x44, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r3, 0x0, 0x0}, 0x20) (async) socket$inet6_sctp(0xa, 0x4, 0x84) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00'}, 0x18) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) (async) write$cgroup_int(r5, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x4815, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) (async) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x800) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xf, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40}, 0x1c) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) 1m27.971551872s ago: executing program 4 (id=156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x10) (async) close(r0) 1m27.838087342s ago: executing program 4 (id=158): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000180)=""/117, &(0x7f0000000080)=0x75) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48041) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000200)={'bond0\x00', {0x2, 0x4e23, @rand_addr=0x64010101}}) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r2, 0x0, {0x2, 0xff, 0x4}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newtfilter={0x34, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x74, r2, {0xb, 0xffeb}, {0xfff1, 0x800a}, {0xfff3, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x29, 0x3}}, @TCA_RATE={0x6, 0x5, {0x7, 0x1}}]}, 0x34}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000180)=""/117, &(0x7f0000000080)=0x75) (async) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48041) (async) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000200)={'bond0\x00', {0x2, 0x4e23, @rand_addr=0x64010101}}) (async) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r2, 0x0, {0x2, 0xff, 0x4}, 0xfe}, 0x18) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newtfilter={0x34, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x74, r2, {0xb, 0xffeb}, {0xfff1, 0x800a}, {0xfff3, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x29, 0x3}}, @TCA_RATE={0x6, 0x5, {0x7, 0x1}}]}, 0x34}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) (async) 1m12.752449727s ago: executing program 32 (id=158): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000180)=""/117, &(0x7f0000000080)=0x75) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48041) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000200)={'bond0\x00', {0x2, 0x4e23, @rand_addr=0x64010101}}) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r2, 0x0, {0x2, 0xff, 0x4}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newtfilter={0x34, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x74, r2, {0xb, 0xffeb}, {0xfff1, 0x800a}, {0xfff3, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x29, 0x3}}, @TCA_RATE={0x6, 0x5, {0x7, 0x1}}]}, 0x34}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000180)=""/117, &(0x7f0000000080)=0x75) (async) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48041) (async) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000200)={'bond0\x00', {0x2, 0x4e23, @rand_addr=0x64010101}}) (async) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r2, 0x0, {0x2, 0xff, 0x4}, 0xfe}, 0x18) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newtfilter={0x34, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x74, r2, {0xb, 0xffeb}, {0xfff1, 0x800a}, {0xfff3, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x29, 0x3}}, @TCA_RATE={0x6, 0x5, {0x7, 0x1}}]}, 0x34}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) (async) 2.760387445s ago: executing program 5 (id=1135): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@default, @bcast, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='westwood\x00', 0x9) r4 = socket$inet6(0x10, 0x2, 0x4) socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet6(r4, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=@newtfilter={0x3c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffff, 0xffe0}}]}}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) poll(&(0x7f0000000040), 0x55, 0x0) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000040)={@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, 0x1, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 2.100547859s ago: executing program 3 (id=1147): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) read(r0, &(0x7f0000000440)=""/201, 0xc9) recvfrom$inet6(r0, 0x0, 0x0, 0xc0010060, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x22, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x13, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="b700000060000000bca3000000000000240300001afeffff620af0fff8ffffff69a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000a61147900000000001d430000000000007a0a00fe0000001f6114040000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19b0161e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba3a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652db036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700e89a56fe8e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a033a2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf799b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d54abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c940000002b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac987fd637c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fd52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23541320d8579c5ab42bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de01fdee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812fc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b2584e6c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795d35f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7eddd12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f386c4dd317e11c1e89fac1fa9bceb50fad686ffbb5f7d79565271add99821c3601653bf6d4091ce8e0af3ab3a82a2735abb21d675d21f0a65caeb3213db39c9d55a35c1d588a732ee0b3d3a09c7786bc50b014802027d1da4a2a0fde4672d8dccd9fa000000000000697d1f90ddf1f320292d9fa4d81dc97f9fd7088d29edb2473b5284227936edf9f00b6deddc45841b6c54cd3741c95fe628f31ae0bf7619817735688fa26ce52c368e5ac02bdd46f10eae05da628e8d"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) unshare(0x22020400) r2 = socket(0x1d, 0x2, 0x6) bind$can_raw(r2, &(0x7f00000000c0)={0x1d, 0x0, 0x900}, 0x10) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r3, 0x1}, 0x8) 2.061947392s ago: executing program 2 (id=1149): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x200000, 0x4) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="910418166421b54fa0aaaa050004424203"], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8002, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) 1.938936759s ago: executing program 5 (id=1150): unshare(0x22020400) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x3c, r0, 0x1, 0x70bd2e, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1800}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X\x00', 0x2}], 0x1) write$cgroup_subtree(r2, &(0x7f0000001200)=ANY=[], 0xfe33) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000300004802c0001800b000100736f636b657400001c000280080002400000000b080001400000000308000300000000a90900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x84}}, 0x0) 1.757475298s ago: executing program 5 (id=1152): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x64, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x12}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000300)=@newtaction={0x68, 0x30, 0x101, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x9}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="396501ae72"], 0x4) r12 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r12, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r12, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r13, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r13], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="6400000010003904fcffffff0000000000000000", @ANYRES32=r13, @ANYBLOB="00000000422200001800128008000100677265000c000280080006007f"], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x844) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r12, 0x84, 0x13, &(0x7f0000000040)=0x3, 0x4) 1.461176961s ago: executing program 2 (id=1155): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r2, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x20}, @TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0xdae}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newtclass={0x488, 0x28, 0x8, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff3, 0x10}, {0x5, 0xfff1}, {0xa, 0x4}}, [@tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_CEIL64={0xc, 0x7, 0x7fffffff}, @TCA_HTB_RATE64={0xc, 0x6, 0x7fff}, @TCA_HTB_CEIL64={0xc, 0x7, 0x2}, @TCA_HTB_RTAB={0x404, 0x4, [0x5, 0x7, 0x9, 0x0, 0x401, 0x5, 0x8, 0x7fffffff, 0x3, 0x3, 0xd, 0xa, 0x9d0, 0xac7, 0xb, 0x3, 0x6, 0xff, 0x4, 0x9, 0xfffffff9, 0x741a5769, 0x401, 0x9, 0xffff, 0x6, 0x0, 0x7, 0x2, 0x6, 0xfffffff7, 0x0, 0xdd, 0xa, 0xc0, 0x12, 0x6, 0xffffffff, 0x6, 0x2, 0x3, 0x80000000, 0x9, 0x0, 0x6, 0xfffffffc, 0x7, 0x9, 0x1, 0x2327, 0x1, 0x1, 0xffff0001, 0x7fff, 0x3, 0x8, 0x80000001, 0x4, 0xa7d2, 0x5, 0x6, 0xe829, 0x2, 0x8001, 0x5, 0xfffff70f, 0x6, 0x40000, 0x8, 0xa6c0, 0x1, 0x101, 0x7fffffff, 0x2, 0x7, 0xd5, 0x81, 0xffffffff, 0x1ff, 0x80, 0x19b3, 0x5, 0x1, 0x3ff, 0x7f, 0x10000000, 0x7, 0x41fa3697, 0xa, 0x1000, 0x9, 0x4a11, 0x0, 0x2, 0xe, 0x9, 0xe, 0x2, 0x7fff, 0x81, 0x80000000, 0x0, 0xfffff626, 0x800, 0x5, 0x2, 0x3, 0xfffffffe, 0x7fff, 0x0, 0x0, 0xfda, 0xd9, 0x10001, 0x3, 0x7, 0x3aca, 0x9, 0x3, 0x7ff, 0x7, 0x11969e40, 0xff, 0x9, 0xb, 0x1, 0x1, 0x7f, 0x8, 0xffffff4e, 0x7, 0x9, 0x8, 0x1, 0xfc2, 0x100, 0xffffff11, 0x8, 0xd3f, 0x7, 0xe, 0x1000, 0x6f, 0x80000001, 0x4, 0x4, 0x80, 0x81, 0x2, 0x5, 0xf, 0x4, 0x3, 0x7, 0xbd, 0x0, 0x6, 0x363, 0x951a, 0x0, 0x3, 0x6, 0x81a1, 0x97, 0x5, 0xff, 0xa, 0x3, 0x3, 0x0, 0x200, 0x0, 0x91ce, 0x4, 0x10001, 0x3ff, 0x1, 0x3ff, 0x0, 0x1, 0x9, 0x2, 0x7ff, 0xfffffffa, 0x7, 0x1, 0x2, 0x99a, 0x7, 0x6, 0xfffffff8, 0x6, 0x9, 0x919, 0x0, 0x4, 0x4000000, 0xfff, 0xfffff000, 0x5, 0x3, 0xfffffffe, 0x3, 0x796dbdc9, 0x0, 0x4, 0x9, 0x3, 0x50, 0x8, 0x5, 0x100, 0x5, 0x4, 0x9, 0x3, 0x8fac, 0x7ff, 0x5, 0x2, 0x3, 0x80000001, 0x24, 0x8, 0x8, 0xffff0001, 0x3, 0x86f73e5, 0x7, 0x0, 0xfffffffe, 0xd, 0xffff8001, 0x8, 0x101, 0x1, 0x9, 0xfffffffc, 0xca, 0x4, 0x5, 0x80, 0x1, 0x9, 0x7, 0x7, 0x1, 0x1, 0x7ff, 0x81, 0x7, 0x7, 0xfffffff0, 0x6, 0x4, 0xffffd27d]}, @TCA_HTB_CEIL64={0xc, 0x7, 0x1cb}]}}, @tclass_kind_options=@c_tbf={0x8}, @TCA_RATE={0x6, 0x5, {0xdd, 0x5}}, @tclass_kind_options=@c_multiq={0xb}]}, 0x488}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2, 0xe803, 0x41424344}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.435054567s ago: executing program 0 (id=1156): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xa}, 0x48) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x7ff, 0xffff, 0xfffffff3}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e24, 0x4ee, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d}}, 0x0, 0xffff, 0xc, 0x5e, 0x52, 0xffffffff, 0x6}, &(0x7f00000001c0)=0x9c) 1.256249762s ago: executing program 1 (id=1158): r0 = socket(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async, rerun: 64) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/user\x00') (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000240)) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) (async, rerun: 32) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10) (async, rerun: 32) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x9, &(0x7f0000000100), 0x4) (async, rerun: 32) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x200, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xfff7, 0x9}, {0xd, 0x9}, {0xa, 0xa}}, ["", "", ""]}, 0x24}}, 0x0) unshare(0x52000400) r4 = socket(0x1d, 0x2, 0x6) bind$can_raw(r4, &(0x7f00000000c0)={0x1d, 0x0, 0x900}, 0x10) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@newtfilter={0xb0, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x80, 0x2, [@TCA_FLOW_EMATCHES={0x7c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x74, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x58, 0x2, 0x0, 0x0, {{0x6, 0x9, 0x3}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x5, 0x1, 0x2a57}, {0xfffffff8, 0x5, 0x37c, 0x3, 0x9, 0x2}}}]}]}]}}]}, 0xbe}}, 0x8c000) (async) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x800) (async, rerun: 64) readv(r6, &(0x7f0000000180)=[{&(0x7f0000001400)=""/227, 0xe3}, {0x0}], 0x2) (rerun: 64) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000100)=0x12) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000280)=@bpq0, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bind$ax25(r5, &(0x7f0000000080)={{0x3, @default, 0x1}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r8 = socket$netlink(0x10, 0x3, 0xb) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) ioctl$IMCLEAR_L2(r4, 0x80044946, &(0x7f0000000080)=0x7f) 1.248562175s ago: executing program 0 (id=1159): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f0000070000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) socket(0x1e, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x140) sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="ad446050e878"}, 0x14) 1.132710334s ago: executing program 2 (id=1160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.131997491s ago: executing program 3 (id=1161): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @private=0xa010101}, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x800, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x188, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xabe}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x362c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffc976}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @mcast2, 0x9}}}}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4ba}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010100}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xfffffffd, @private0, 0x7}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x200000c2}, 0x20000000) (async) connect$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8004040}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, r4, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040804}, 0x4000000) (async) connect$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) (async) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000640), 0x4) (async) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000680)='ipvlan0\x00') (async) r5 = socket(0x1, 0x800, 0x400) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x74, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_PEER_ADDR6={0x14, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x29}}, @GTPA_MS_ADDR6={0x14, 0xc, @private0}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_FLOW={0x6, 0x6, 0x1ff}, @GTPA_LINK={0x8}]}, 0x74}}, 0x4800) getsockname$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, 0x0}, &(0x7f0000000840)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000880)={0x0, 'sit0\x00', {}, 0x2}) (async, rerun: 64) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0xa0, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010102}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x44001}, 0x400dc) (rerun: 64) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000a40), 0x4) (async) ioctl$sock_inet_sctp_SIOCINQ(r5, 0x541b, &(0x7f0000000a80)) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r3) sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0x8c, r8, 0x0, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8c0}, 0x40001) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f0000001300)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000012c0)={&(0x7f0000000d00)={0x5a8, r8, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x60, 0x80, [@sec_chan_ofs={0x3e, 0x1, 0x3}, @preq={0x82, 0x4c, {{0x1, 0x0, 0x1, 0x0, 0x1}, 0xe0, 0x0, 0x6, @device_b, 0x4c80, @value=@device_b, 0x21be33a7, 0x6d1c98aa, 0x4, [{{0x1, 0x0, 0x1}, @device_b, 0x1}, {{0x1, 0x0, 0x1}, @device_a, 0x6}, {{0x1}, @device_a, 0x8}, {{0x1}, @broadcast, 0x1092}]}}, @mesh_chsw={0x76, 0x6, {0xc, 0x5, 0x32, 0x5}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}]}, @NL80211_ATTR_BEACON_TAIL={0x1a, 0xf, [@ibss={0x6, 0x2, 0x9}, @peer_mgmt={0x75, 0x8, {0x1, 0x1, @val=0x1, @val=0x1c, @void}}, @ssid={0x0, 0x6, @default_ibss_ssid}]}, @NL80211_ATTR_BEACON_HEAD={0x3c8, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x8}, @broadcast, @broadcast, @initial, {0x4, 0x81}}, 0x5f4, @random=0x7f, 0x88, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x24}]}, @void, @val={0x4, 0x6, {0x2, 0x7f, 0xb7, 0x1}}, @val={0x6, 0x2, 0x1ff}, @val={0x5, 0xf9, {0x6, 0x69, 0x6, "eabced7c521a97ce3c3d2804ba2d2a7853d855688a43eedd8f9de421d96944414543fe79ee2c2b5bfd244db43b77ed48387e3d59bb1fefad60cbb1bd09697da00caae9cf856e0b61bc707069a6f5d614f189f68924d561798738d5f38e616dea4933d655835249294fe2d4528074a365390348bdbd1074da1bacfb56603c7b03ef29b1b6133ca0df93f8c0445c1af6a1d470d204747b587bdbceb7d5409c90663cc5d3c6297af0a684ceb78714ba7d1bf3b512e9af3e56e54d0ce97f3a2473e870b20acd447f90a3021c5a92f2df0e58e7137029b710c083e9211fcdea9313caa142b44348d9921cd06c69fac0ffe047c456ab3baa76"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x43, 0x80, 0x6}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xbd}}, @void, [{0xdd, 0xce, "cb32953912cea5e16f6cba5485458a5f7d06edaee1d1e82b048d4baf85fc419da4df5189bcdac1aa9c78368e02f10a88fd4a22afde7a72fce33a4daae578aab3412ab3a474c28adc920b6389d780b31d674619d1f25ec6639195de27545686a36a6fc2ded3197913c0aa461be90c1d704f97eb64af08cd5c149bad36cd01bc391bf2a55add488454e6975c5dadbb9a1d43e91af3af8993693a2c86c5794e7ab3e94a9b1ae7102c1d56398e17fb3ed8b1f7b1a8740920a2381ebcd730f0d0181a35553298d7a5eb047cca51421455"}, {0xdd, 0xd5, "ef1ab63adfbbcd6c0e5d4c77adf187fd50357aab6e99e72e97fd9d43db6340cfff1131ceeeee5cfa6092d19d138b8b6fb6ce7e9b90144b08e2f9bab0280b2b86e6ca647650f6aa9c9c9633a85e9af2eac1f4ca3e7eb509046ed18df5c8faba8cd10aad86e12876e513657fc7802e63431c39cf10aa2c30064cb7eeb68f617939b0351461e432f48287e1787a60763d413da792592a34baf1f202c870882ddc27bcb8ec2eb6eecc94344eab54ed55da2d5f0bc67f5b0424bd5017b025f6b2724c579384edd608c9b0018efd321d8d9e91bf4296ce7e"}, {0xdd, 0x96, "d7bcec023e2240dd633a429fb5c7b43111b7a90ab151c26036078ec1150a22734330c0a1a3dae55fb4e5d59bf3ff7df65cd8a92927c66e119ab09ea05bfe88b7002227edb96235cfd6e3524a18d793a72e78446299879eeb45a37d692f5521d7877adb7b3e227a2949624b1c80e9af7bc0a3b8e42bc375a38d397f1807c07b03d11ea31173daa1fb81c46b89a3b4085c75dd68377a4e"}, {0xdd, 0x11, "e428e71aebb0c49c764ee7fb7d7cf6be24"}, {0xdd, 0x23, "9b0fed3712230b65c42daccfea48e207c6a1603cdc67bd05c0f4432fec896341563947"}]}}, @NL80211_ATTR_BEACON_TAIL={0x19, 0xf, [@ibss={0x6, 0x2, 0x7}, @sec_chan_ofs={0x3e, 0x1}, @gcr_ga={0xbd, 0x6, @device_b}, @dsss={0x3, 0x1, 0xab}, @dsss={0x3, 0x1, 0xf1cf31f209f2b87b}]}, @NL80211_ATTR_IE={0x8, 0x2a, [@ibss={0x6, 0x2, 0x2}]}, @NL80211_ATTR_PROBE_RESP={0xae, 0x91, "8a657ee53bf5e4aa9035f495e1d2fd89fe114388e28cafa0420d5b18c9875f772da1b62721a0594c9ab6978e721ebd2079fec15dddf5d7040ec31d1f47e61553ba8564c34409582c8d5f2733c438b53ec69b76686d4c7f6bf0ca6277352ecd364574833a4b7f5094b9ad9e0c6774deaeb76bac935957d05be23af007846679cc02b70e29854d65bd44735fd4d42d8a601e955102fbd7f230fc6fd9238be39f591220439abb1dff1102b3"}, @NL80211_ATTR_IE={0x25, 0x2a, [@measure_req={0x26, 0x19, {0x9, 0x80, 0x6, "914a1477346098d9b1623ef76f84c658f8abb638fa2a"}}, @chsw_timing={0x68, 0x4, {0x6ec, 0x7f}}]}, @NL80211_ATTR_BEACON_TAIL={0x2c, 0xf, [@dsss={0x3, 0x1, 0xb7}, @channel_switch={0x25, 0x3, {0x0, 0x38, 0xfb}}, @channel_switch={0x25, 0x3, {0x0, 0x47, 0x7}}, @ibss={0x6, 0x2, 0x9}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x3, 0x2c, 0x5}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x60}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_BEACON_TAIL={0x1e, 0xf, [@mic={0x8c, 0x18, {0x96f, "dab70e6f580f", @long="b5307d2df0857bc352762cdfd49896e8"}}]}]}, 0x5a8}, 0x1, 0x0, 0x0, 0x891}, 0x8000) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001380), r5) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x14, r10, 0x0, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x8100}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)=@ipv4_newaddr={0x20, 0x14, 0x400, 0x70bd2a, 0x25dfdbfd, {0x2, 0x1f, 0xd2, 0xc8, r6}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000091}, 0x40) (async) sendmsg$nl_generic(r3, &(0x7f0000004900)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000048c0)={&(0x7f00000015c0)={0x32c8, 0x23, 0x20, 0x70bd25, 0x25dfdbfd, {0x13}, [@nested={0x1004, 0x1d, 0x0, 0x1, [@generic="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"]}, @generic="72dc8c8c8e9caa9ed22f5122cd9fde3455ea7441db7e8bb07c4a1104234fc8caeeab8fef553baaf642384a9f1c98f8d17f67f9f5e4089166013addae89c3bc4dcad88be90104ee6cf983d3d7b7dd537326ca56fc787673664b8a9513f792affb65ef04ded7ee95e54674cb800801be9e5cb293c23e0607f6baac695e1af7f159f310748dad41ca71ac1f40e59e0a0be67f8b8612724fdd01debd5909362b87e344e96342a52df41a7e16750561c36cf6876c1af9efd6885c2d3a9db489a31b3278210ba93150a595c3e7e06ebf6e8542f888f894744ad289", @nested={0x201c, 0x96, 0x0, 0x1, [@generic="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", @nested={0x4, 0xbf}, @typed={0x1004, 0xb7, 0x0, 0x0, @binary="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"}, @nested={0x4, 0x13b}, @nested={0x4, 0x94}, @typed={0x8, 0xa4, 0x0, 0x0, @ipv4=@loopback}]}, @generic="bd9bbcb0ef9b78c35d1909f863627ee664931d7b03739f35679f143bb48490d0fdd703db0733b1784cc46ebb1162bb3988f0137e13e582223039d4b657eb7fe2500d9ea0079ded166763bf1130dc379d1ac7bee8da63691959cbfdf704af0f7eac67c41d8bc0bc03ea1d7739d9ecaef83779936f23e396e78a5f99e15d8dc4836b101f337335e6f55f73ad35632308851f25a0fd72ee2e39ddd4804b9e9eb9c7014fe6b703c9c33b845d27da9509c87c22d9f5a5a91ee44db518168afe4e2e292573b5683099a0c8e25c103338", @typed={0xc, 0x76, 0x0, 0x0, @u64=0x80000001}, @typed={0xf, 0x5f, 0x0, 0x0, @binary="25dd581ba2fc6dc7c13782"}, @generic="39d449ac61d9a477961ee3da7a273b520fd7ab19d9168eb03eda96b290863040d63aad7ae15e942e15108bf01b604014b9f8e367ae4ed3d2f0a52c444e2d10d01b88ea2e18f159d17952e219a4fb9a921259b4d38c22a6eed04a5eb4003d26cfe66c2e9ede2c02bbbf40826bbe7d73704b6337f4db8550a4e9d5984ea9ee7498675e4ca8e928895ed631d428b189bb24f496cb6c779d43b6a487ac8296930f51cd9b29fc3506f815d8b0ee7c61e0b7a77f022f464f41986ecff46be2bb", @nested={0xc, 0x11c, 0x0, 0x1, [@typed={0x8, 0xdf, 0x0, 0x0, @fd=r0}]}, @typed={0x8, 0x9e, 0x0, 0x0, @ipv4=@remote}]}, 0x32c8}, 0x1, 0x0, 0x0, 0x10000}, 0x44804) (async) getsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000004940), &(0x7f0000004980)=0x4) 1.113225581s ago: executing program 0 (id=1162): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) (async) r2 = socket$inet(0x2b, 0x801, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000), 0x4) (async) listen(r2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000500)={'sit0\x00', r3, 0x7800, 0x7, 0x8, 0x3, {{0xe, 0x4, 0x2, 0x3, 0x38, 0x68, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @local, {[@rr={0x7, 0x1b, 0x8a, [@dev={0xac, 0x14, 0x14, 0x33}, @dev={0xac, 0x14, 0x14, 0xc}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010101]}, @ssrr={0x89, 0x7, 0xf3, [@remote]}]}}}}}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r4}, 0x10) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x4, 0x4, 0x4, 0x4}, 0x50) close(r5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x63, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @reject={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x0, 0x2, 0x1}, @NFTA_REJECT_TYPE, @NFTA_REJECT_ICMP_CODE={0x0, 0x2, 0xa}, @NFTA_REJECT_ICMP_CODE={0x0, 0x2, 0x4}, @NFTA_REJECT_ICMP_CODE={0x0, 0x2, 0x9}, @NFTA_REJECT_TYPE={0x0, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x0, 0x2, 0x5}, @NFTA_REJECT_ICMP_CODE={0x0, 0x2, 0xa0}]}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0) (async) r8 = socket(0x1, 0x800, 0x10000) (async) r9 = socket(0x400000000010, 0x3, 0x0) (async) r10 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}, @NFTA_LOG_LEVEL={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r11, {0x1, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0xffffffffffffff88}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x800) sendmsg$nl_route(r8, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@can_newroute={0x4c, 0x18, 0x10, 0x70bd2a, 0x25dfdbff, {0x1d, 0x1, 0x3}, [@CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x0, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "e173bc1a5d848fe9"}}}, @CGW_FILTER={0xc, 0xb, {{0x4}, {0x2, 0x0, 0x0, 0x1}}}, @CGW_SRC_IF={0x8, 0x9, r11}, @CGW_FILTER={0xc, 0xb, {{0x2}, {0x0, 0x1, 0x1}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc001}, 0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES64=r6], 0x1c}}, 0x0) 1.061329574s ago: executing program 1 (id=1163): sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)="2cf568c98614500bad27ca2e65007585f539ba8a140451c38e413333a454c83c90cdc920c45e58bfa939639df4bfedd388730e3890d66eb299aceb0bd0771f614e0cb022c26062d5548447ea54f1d32aa06e68b623315f7c203e3d47c18e891db23146c00fba7a0b08cc036f9b061628afb5a98648", 0x75}, {&(0x7f0000000240)="5897491d854042f57b387907f8660879cf4e65b9f5405c71b7eb2937e5a5cf9a29f772f992ec0c3e3b1e736d18ba10e66473fccd3551940b5291eafc88e55874a059bd9c3beacb4c679e42a8fa9043f31b36d5a65844a72c0e8b2191f09cfbab2b93ab410f9d4ddc7034999d2a9b3fb7ef7fcea7b67ea3674c6003bbbe88b498013c8548dd7c2fde5fd21cd403e90a2c050390b5838bd5f0492d70e09c671bee3886ce7385a334c16187e504af05cfbc50dc7e9dd1297331c55de3b6729d811e1234f8da031d719a39d195e778bbd58eaa36f5f9b5e05f01e05cc90e3ff5d95bd1277147efe419a0a4c607cd43d42aa8decbce87637271", 0xf7}, {&(0x7f0000000340)="c61afcea03d3c6b27ab52465ec3bf5cd2b7a41275eae5d56e7b0b56c92dd278c6be319bb9bd34fdc8e3c591663f970248b21cfefab3fa4bf8bbea5e98f1f1d4f0132f23048e06234dbd976b1f3d9157234cae32aca52bb80828f8ca0351b670a2191eefce590da47a6e6c3adbb6dd44e6bbb2995dc13f8726a4c0d9198b43785913c52ebc08abe2700deebac713898934b1cc047b24980321696649cbe770b88ed87d375985ee56a68f73ac1938914476f8cd71e5903af843ef75dcdb1e45b8ca2cdbc4cfb14ede082ac049774afa379684305ca90557188536bcf7067519df06caab334d47078377191b531bdb42dd2bccdfc8e0a766056", 0xf8}], 0x3}, 0x4000) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000a00)=0x4, 0x4) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x43, 0xffffffffffffff11, &(0x7f0000000000), &(0x7f0000000540)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d572950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x3b) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2805000000000b0000000000000000000200000008000300040001000c0001000088480000"], 0x28}}, 0x8000) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000180)={0x0, 0xded2}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}]}}}]}]}], {0x14}}, 0x74}}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000170000000c0006"], 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x4000004) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$IP_VS_SO_GET_TIMEOUT(r8, 0x0, 0x486, &(0x7f0000000440), &(0x7f0000000500)=0xc) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@getchain={0x34, 0x66, 0x4, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x6, 0x8}, {0x2, 0xfff1}, {0xc, 0x4}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x800}]}, 0x34}}, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000010003b0c00"/20, @ANYRES32=r12, @ANYBLOB="0000000000000003ff70616e00001000098004001200c700919962b4656f"], 0x40}}, 0x0) epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 952.613552ms ago: executing program 2 (id=1164): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000040)={{0x3b, @rand_addr=0x64010101, 0x4e22, 0x4, 'none\x00', 0x14, 0x5, 0x4a}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x4e24, 0x2, 0xf8a9a0b, 0x40007f, 0x14}}, 0x44) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "840472dbebe700", "72ee4106dcc0dd46b5f1f4039c0707df14c2c5c8b35ce7db2b2d3ec78acb08ca", "9f654ce6", "8980eebdf5e85c1d"}, 0x38) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x800, @any, 0x0, 0x1}, 0xe) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x81, @loopback, 0x65}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1ca3a60018b9b8a9f3361e000a001400fe04"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000100)) sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x44}, @HEADER={0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x1}]}, @HEADER={0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'macsec0\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xd1}, 0x805) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r9, 0xf503, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed300000000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f00000016c0)={@remote, 0x0, 0x0, 0x2, 0x0, 0x9, 0xa}, &(0x7f0000001700)=0x20) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0) 919.736348ms ago: executing program 0 (id=1165): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x110, 0xffffffffffffffff, 0x4000) r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000000)) (async) ioctl$SIOCGETLINKNAME(r0, 0x89e0, 0x0) 799.669558ms ago: executing program 0 (id=1166): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) sendto$packet(r2, &(0x7f0000000280)="0f", 0x1, 0x0, 0x0, 0x0) (async) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x88) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@deltaction={0x6c, 0x31, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff9}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x488d0}, 0x0) 728.5997ms ago: executing program 1 (id=1167): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a0000000400000004000000095a1b67e4ff3d96ffde66d227b600000000000000", @ANYRES32, @ANYBLOB="000000000000000000000011000000", @ANYRES64, @ANYRES32, @ANYBLOB="0000000000000000000000000000003ed200"/30], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070400008500000021000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r1}) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f6870000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r3, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) bind$xdp(r1, &(0x7f00000000c0)={0x2c, 0x6, 0x0, 0x31, r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 700.65091ms ago: executing program 5 (id=1168): r0 = socket$netlink(0x10, 0x3, 0x1) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x54, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0x10}, {0xffff, 0xffff}, {0x2, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x3}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x40ffff}]}}]}, 0x54}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x0, 'dh\x00'}, 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000010000000fcffffffffdb000400c6dd00", @ANYRES32=0x0, @ANYBLOB="000000000000000009000100"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x0) 692.054027ms ago: executing program 3 (id=1169): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xed27c9fa5277b9b7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0xd}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xfffffff8}]}}]}, 0x44}}, 0x20008000) 576.688589ms ago: executing program 2 (id=1170): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x3, 0xffffffff}]}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300002000000085000000c800000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0xff6, &(0x7f0000001e00)=""/4086}, 0x90) 532.451902ms ago: executing program 0 (id=1171): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}, @CTA_NAT_SRC={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff00000000000000114242"], 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x8000000, 0x0, 0x0, 0x8000000}, 0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) ioctl$TUNSETLINK(r4, 0x400454cd, 0x207) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x145202, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000001c0)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000b40)={{r9}, 0x0, 0x8, @inherit={0x60, &(0x7f0000000040)={0x0, 0x3, 0x2, 0x6, {0x34, 0x7, 0x0, 0xfffffffffffffff6}, [0xb, 0x93, 0xc]}}, @devid=r10}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r13, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r12, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e) bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 483.586955ms ago: executing program 1 (id=1172): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f0000070000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) socket(0x1e, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="68000000100001000000", @ANYRES32=r2, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x140) sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="ad446050e878"}, 0x14) 408.336799ms ago: executing program 3 (id=1173): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x90) (async) 407.772964ms ago: executing program 5 (id=1174): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x9}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x8c}}, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r5, 0xa00, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xc, 0x7f}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)={@void, @val={0x2, 0x1, 0x4, 0x14ce, 0x73}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x0, 0x84, 0x0, @rand_addr=0x640100fd, @local}, {{0x200, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x3f, 0x1, 0x0, 0x19, {[@mptcp=@generic={0xa3, 0x9, "0fe0e8cb896776"}]}}}}}}, 0x3e) r6 = socket(0x6, 0x3, 0x1) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="850000001b000000040000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r6, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000040)=0x2c) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3c, 0x0, 0xffffffffffffffff}, {0x5, 0x0, 0x0, 0x100000000, 0xca8}, {0x3}, 0x0, 0x0, 0x1}, [@tmpl={0x144, 0x5, [{{@in=@multicast2, 0x4d5, 0x3c}, 0x0, @in6=@mcast2}, {{@in6=@remote, 0x4d4, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0xec, 0x800, 0x0, 0x1}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@local, 0x0, 0x33}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3, 0x0, 0x0, 0x81}, {{@in6=@mcast1, 0x0, 0x6d}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x2}]}]}, 0x1fc}}, 0x0) 307.907353ms ago: executing program 3 (id=1175): r0 = socket$inet(0x2, 0x80001, 0x84) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet(0x2, 0x80001, 0x84) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000380), &(0x7f0000000400)=0x60) (async) r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000380), &(0x7f0000000400)=0x60) accept$nfc_llcp(r1, &(0x7f0000000440), &(0x7f00000004c0)=0x60) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) bind$inet(r0, &(0x7f00000005c0)={0x2, 0x4e23, @multicast1}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000080)={0x2, 0x1, @loopback}, 0x10) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000040)=0x1e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x15, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcff2000000000000034e58085000000a0000000850000009e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x100b, &(0x7f0000001680)=""/4107}, 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000004700)={0x1ca4, r5, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0xc, 0x11}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x68, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0x64, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x2a74}, {0x8, 0x0, 0x8}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x9}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x6}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2581}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x108}, @NL80211_ATTR_SCAN_SSIDS={0x24, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0x6, 0x0, @random="d271"}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x4, 0x7}}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x310, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x2a4, 0x12, 0x0, 0x1, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x1}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7fff}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x6}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x6}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x268, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc4, 0x3, "a7bb2eb589a8306c5937a5d0101c85d8589be9991e9b3480b141756307edc85a2d1605a2fa0a3dbc1efb5fca35f1f2361817d251faba5d88541dc25e39b3a757110ebe7cab3677dd6bad1d68101c88f226678e8acc432697d5d6f54578e0eba18ec77d1e049bdf7011f71b8443ad26e7a3910c050f9069cc3e86534ef93f23832eb4f3cc1b8472569fddb56cd8994cf73ed45689f454756dc531ff5a8c2b6454b4e0be64a042f89512b177df564e22ca5ea96b14d1687a13719ae502b5068e10"}, @NL80211_BAND_2GHZ={0x80, 0x0, "36b0ebb96f6d1598b603e67a419c7053c6608e1a0ec3ec41598e29036c98d07d7ea59bf36b6335db30e03b4b5a96cd985661e2d346426ee5024519fcfb1e1becea45d9be7052849c98de860d203065b9473b7c232b17f01176ad6ed64c3a7b070190bda3c034521cd94c9956609d6621dc4428a192e1e77a75162628"}, @NL80211_BAND_2GHZ={0x15, 0x0, "b6feda880b82c0805934baec1ac8d9b579"}, @NL80211_BAND_5GHZ={0xd1, 0x1, "460dc3ffc5338e0faff0b48f3354fd979f266bfa2dc18d7be8a4df913d75abcdbf6c81643bbd21033d07ad174036f79cce15edde956a9032e594f721e89a2bd12b273cc644d77a12cd5ec2cb80441732457854abdc7205438ba63cd927a8556d1ec6932dedc37dfd4231b4e2bc712049b3a65d9785b5759c7733abfc966f5851d5d5583f7612f60cb859bfbb8e9c29403df6a8a20e6cb31207ee397f551a12b4143010f9ebdc5f33fa51415dee934bc93cb491507b387957322ecf5cfe70cc8b37502da7493c6af6141bbcea85"}, @NL80211_BAND_2GHZ={0x33, 0x0, "ca55afae706c77523c5658a78138d59dbc465abd60b1cdef175a3380d329bd291c20fa839e93d6d0c9b2341542683c"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}]}]}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x1c, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_WAKE_MASK={0x15, 0xb, "fc55a7788a77cf9e6cf4bb4cf515a0c113"}]}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x30, 0x12, 0x0, 0x1, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="aeda7aaa0240"}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xb887}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x74c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xc, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x3}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x72c, 0x4, 0x0, 0x1, [{0x1d4, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x97, 0x1, "b5c69288fd11e8a35408446130b8c10df672af7851755483c2c01cd4cf3d10b0d2983c7e2d4a3bc88502dbfc94a378689a29b30a28cc3b55e818d52fbb4f8faa2ce133cb8763d1e9581947ba017df51eb40c4350644825b96619d6a33ddc13bd9c25ca535673a594374413f4215c7b01c1e21ff76f2a42ec9d3c729726cf71b192ca189d02cb852e2a7fd6c6e3f190f46ac79a"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}, @NL80211_PKTPAT_MASK={0x33, 0x1, "3489deb11f42851332854036c5ed25b947370ce5c8785247234d4eccf3c8755cb84ffddb86b0561737e47b8b14a6fc"}, @NL80211_PKTPAT_MASK={0xfb, 0x1, "cc63b19b6bb3fa69f01b17c974171443723b76e59141a47d090fc130ad83472c5f56355118d2b55da8e397c08452a596e7c0edaa4092d3692bbc937bf92097ad029d33885c42f8cfdf2c0724343cf33a1a3415ff36c7a28ea992140e565d816a51e9e0c638d39863b866472f93433c0e613376d1b20001e776cb7070b9aede54c294b5d85e5fec46f649c9907e4893f0ef61928dc12b115ba2a6ea89e8475098a55976f4b5333ed502d99947989493e65dede833abcbe8fca5c9f108dc0ea9bb2444eab81bff0720e7389678334ee4354346df37d183e69db9cd7d1a10e912ab7184e301c5d10a737a7e76347fb16317f747af459319d9"}]}, {0xac, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xa5, 0x1, "6c409cc147e27c12d5c682e18796ce6f1fa007f41234333f8ed75d243177c6106252d1181114cd3b322be22b3021db033020e7862d151d992fcedb54ce87d88206b557c0a7caf94b2319b1dc612f579e68b5caa8799abc860c3afd5c33858d1d1ededc2e9daa8964e86473057107dac51af631ba1622463f8cd0d1fb74b1d9a11392a8d6d61efa7a2c9203f8b6bfc6f7169cfa3a8e18ae53edbc7809d0bee873b1"}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1c00000}]}, {0xe4, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x400005}, @NL80211_PKTPAT_MASK={0xd5, 0x1, "ab24d464727aa57d5e32731c7dfc3e9b45dac998960aeea95fb5db0e60f95b55f3476e665db740a8c9f6f6e72d86743b61952beedba603948321ddb9e94bb6d6c03543f686791fcceb1662a43973707c9d61550fdba22e52d611397d9af1b76fc2613cd551ba4b2494d8124fd702f2f47962ee10f9992d4a536d365321de93f6e71dd93054372e9a3e9ad34bbb71f57955f1d63e58fbbb5004207ea3e38bd79dd6ae147176f8c89404701dd31bb398261912f64d9e6630fa6c0e036f74ca2ad74c5524a10b989a8ebed33aaa3f49b60da7"}]}, {0x268, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x41, 0x2, "325ef7da5b11f0b5fd0ad91c88b15877051f11b4208495858a7fe47441f1942688ad8f1d85cc96908ecfc202b216b8be654e9143184264d2b2b9340e5a"}, @NL80211_PKTPAT_MASK={0x78, 0x1, "45082cc3235d88856c813720e1ec6a02a046dfdb8fbeff0310b79c7e2a34bc305f0d83f92abfd53894ecc72fedc5b68e15a7df9d43ecb2abbd0a84071669c420ac07f4d1af3a451ee80e8aa7951f1b53bf348ad34b4e81c23f2e2659aa1cc251806829f9145127f0e0dd90e6870f5765d4b09cdb"}, @NL80211_PKTPAT_PATTERN={0x72, 0x2, "36ffe2b6c7cd47bbfc37796c0dc81b5b58f832b2d6221aaffbfae08c37865a1b651d8132a057e5c40944431729a19750e2f33b198d0efaf8b2a024ab798d9f4fe57e7b05a38b6dd0bf83ed53e7022b19f54773d7eee50414596e233b8a27f8fb64e0f6218f84f9199389078c6445"}, @NL80211_PKTPAT_MASK={0x4c, 0x1, "cfed1bee57c80b426770d6955aed8fdc5fc9bed51c3a1b9278b04aab55904ba90eb66101813593e245fc378e309ab2490e7678df6de7f12249612e6c0a8cc901ebfacd615ad4ba8b"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}, @NL80211_PKTPAT_MASK={0xb7, 0x1, "01b56657281c3cf824936503bcf1e1be69464434c847c465b5f61976a9b37cf83aa806c16a08251c40d7a2368de2fe54e8eff82b8564ff6da0705b0d3b95e5dfd25e4740c2908499a31b29374ae41d5147550f3b1af16d9275cda48d91dc1038cf314682abeff4776c5934934b5f27f7553cb156eceabe18465cf72004e1168bd079e3a828ddeab8c936769804c2c296c2454fa2522f3973ea5663c682dac36edf993353bbfd6b82b312d427ab122b8ad7a5f3"}, @NL80211_PKTPAT_PATTERN={0x1f, 0x2, "1e13f9c468437b6a16db02fe94699597cf2616d7656140ca7e55dc"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}]}, {0x13c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x75, 0x2, "06bea31f003015769109809af8ea62894e91c495526790e6998176a2269e65bae975b27ed8cd588707aa0ce8b4041bf1ccb0b60068a55220f9b9bc888e0bb639ab167907874f51fd07014310dc2814be288c174c94ec3357fe70b51b3229cc8509044a47979a02683cd63e3fb5cd8b8c73"}, @NL80211_PKTPAT_MASK={0xb5, 0x1, "912064c11bb05c8650f486b1d1489e942eabb5fc74583b497d2d92347cd145289ec2cbd0a0bdee59f16f87165eddcc6e9104be5400f93b03cf0e6afeab276c26c0787d757ed4a4fa16208e6f211aedb45469b9ecb4576ea200468ae5215fb490a92d0df177086726e4a47a51e412e49a3b5a93e696e94e94b18180f5d0301769b18ea5fd6be11571bdc5b35ee9c8dec82f5654dc2a867d7fd6b6052816cbab78e464adf7d763032ccafa24271f83e244f0"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x40000008}]}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x18, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1194, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x1180, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x94, 0x84, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xd, 0x1, @random="4d1557a57c7aaf36fa"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0xc7f3}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x79}, @NL80211_BAND_LC={0x8, 0x5, 0xffff}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x2}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xb, 0x1, @random="a2ccb71fd05a56"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xb7c0}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}]}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0xd}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x5e0}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10bc, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1004, 0x1, "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"}, @NL80211_BAND_5GHZ={0xb3, 0x1, "c7083090e453fe8046fce40bf473dfaff82cd79e0a03be4170c66ae93e601986c7e1775ceaa9ff205ec7f1c9e79bb1e3da7218ab8d853eca3dbe6ee9946d0d42ccf98beb494ddd8cddc49cdb8dc9895bf1d5847d62ae83c08024009c6e0ac2e3d51e9a89eb7f1890101888dd7e05f7c833edda07c46fdce0f5b70f8e36302e2e6ebcce26bb231ca07bbd9d7c521637913b3e5ba790a3995cdcd518e2b71bffad6718ce0341bd6831f6bba764e4add6"}]}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}]}, 0x1ca4}}, 0x1004) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) (async) sendmsg$IPSET_CMD_SWAP(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) writev(r7, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}, {&(0x7f00000002c0)='\f', 0x1}], 0x2) ioctl$sock_inet_SIOCSIFBRDADDR(r7, 0x891a, &(0x7f0000002a40)={'veth1_virt_wifi\x00', {0x2, 0x4e21, @empty}}) (async) ioctl$sock_inet_SIOCSIFBRDADDR(r7, 0x891a, &(0x7f0000002a40)={'veth1_virt_wifi\x00', {0x2, 0x4e21, @empty}}) sendmsg$rds(r4, &(0x7f0000002a00)={&(0x7f0000000580)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000015c0)=[{&(0x7f00000005c0)}, {&(0x7f0000000600)=""/17, 0x11}, {&(0x7f0000000640)=""/86, 0x56}, {&(0x7f00000006c0)=""/171, 0xab}, {&(0x7f0000000780)=""/84, 0x54}, {&(0x7f00000013c0)=""/47, 0x2f}, {&(0x7f0000001400)=""/109, 0x6d}, {&(0x7f0000001480)=""/17, 0x11}, {&(0x7f00000014c0)=""/217, 0xd9}], 0x9, &(0x7f0000002940)=[@rdma_dest={0x18, 0x114, 0x2, {0x1, 0x9}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xb7a}, @rdma_dest={0x18, 0x114, 0x2, {0x10000, 0x3}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000026c0)=""/249, 0xf9}, &(0x7f00000027c0), 0x48}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x10000}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000002800)=""/236, 0xec}, &(0x7f0000002900), 0x50}}], 0xc0, 0x4004000}, 0x14040810) (async) sendmsg$rds(r4, &(0x7f0000002a00)={&(0x7f0000000580)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000015c0)=[{&(0x7f00000005c0)}, {&(0x7f0000000600)=""/17, 0x11}, {&(0x7f0000000640)=""/86, 0x56}, {&(0x7f00000006c0)=""/171, 0xab}, {&(0x7f0000000780)=""/84, 0x54}, {&(0x7f00000013c0)=""/47, 0x2f}, {&(0x7f0000001400)=""/109, 0x6d}, {&(0x7f0000001480)=""/17, 0x11}, {&(0x7f00000014c0)=""/217, 0xd9}], 0x9, &(0x7f0000002940)=[@rdma_dest={0x18, 0x114, 0x2, {0x1, 0x9}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xb7a}, @rdma_dest={0x18, 0x114, 0x2, {0x10000, 0x3}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000026c0)=""/249, 0xf9}, &(0x7f00000027c0), 0x48}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x10000}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000002800)=""/236, 0xec}, &(0x7f0000002900), 0x50}}], 0xc0, 0x4004000}, 0x14040810) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000100), &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4048801}, 0x0) 244.879002ms ago: executing program 1 (id=1176): ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x3d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x11}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) 160.701176ms ago: executing program 2 (id=1177): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000072009fb300000000ffdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="050001"], 0x20}}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0xc}, {0x6}]}, 0x10) setsockopt$packet_buf(r0, 0x107, 0x5, &(0x7f00000001c0)="9fd27b2e9c18751142d642ee209acc733448b8e20a32c9707f67cf221e401417b280430b5ca7b4d92b03afa54494df6e4d9942e93bebb717014d55266042bd5b0557a72830028c9d2ec6abb3f9256d6aef1129b9961a0b5af2bbd466ffce8fe233a22ced55dfc8c2defb57709f26c1c619d1e4e5b7758d1a54c84588746dd0994fa59e35df8dc0c10be9132e9c04feec8fd64786b4a425229cf42fd1699038d005f7990fcd83c4bd17b76f3f95acf694d0ffd6e866d12d8d8baa47c9b3eb7231d08739da9c46483fa8c200c2a0b96a69335d30f3b054a3615efec5df3fe6840b8d5077da9f0d5334b975ee8e", 0xec) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x16, 0x7, 0x2, 0x6, 0x10120, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x2}, 0x50) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x2, 0x2, 0x1}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000780)={{r0}, 0x0, 0x4, @inherit={0x88, &(0x7f00000002c0)={0x1, 0x8, 0x0, 0x1a, {0x10, 0x800, 0x4, 0x3, 0x7fff}, [0x70000000, 0x8000000000000000, 0x6, 0xa6ef, 0x80000001, 0x101, 0x5, 0x4bb]}}, @devid=r3}) 160.526881ms ago: executing program 3 (id=1178): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) (async, rerun: 32) r1 = socket(0x2a, 0x2, 0x0) (rerun: 32) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x37, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x13, 0x18, 0x1f, 0x4, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xe, 0x7}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0x8}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004804}, 0x4000) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) 135.693129ms ago: executing program 1 (id=1179): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000140)=0x9, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x404) r3 = socket$inet(0x2, 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) close(0x3) socket(0x2, 0x2, 0x1) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000740)='bridge0\x00', 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0xc000, @multicast1}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r6, 0x0, 0xdb, 0xb6, &(0x7f0000000380)="e126762a442d6d65f165ec0eb603461b5cca2de690f166ab289912cdc567bcbe8190702c2507390e6eb7400d54fe8e615ebf22f47f7544b38cf775564b21da010aeb0c47b64583d10f9f8d2222953612c94c77d77f055eaa37eeeb9233d9b7a38a6250895422437433025f7416d90294b6a384cd2ac5044b77cda7e43be7be1c3ac8946943cdd7983f1e2be1aab1432314ff049611d2634965ed1f3eaf93c87887f661a8d1c18b527ba6f6142d1257b12015d9834029d7c05125680f0c0e1fad078173dc0e75f45cd7e32ad9c5a7cca8605b1924050f67480670f4", &(0x7f0000000480)=""/182, 0x17b6dbc6, 0x0, 0x9, 0x10, &(0x7f0000000200)="114e6c076004b87ead", &(0x7f0000000540)="baa712281812a8d7287ab6e502546e82", 0x3, 0x0, 0x5}, 0x50) syz_emit_ethernet(0x6a, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @address_request}}}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40000) sendto$inet6(r0, &(0x7f0000000040)='H', 0x34000, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x9, @loopback}, 0x1c) 0s ago: executing program 5 (id=1180): r0 = socket(0x2a, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x42, 0x20, 0x70bd25, 0x25dfdbfb, {0x4}, [@generic="1ca484cf47b478edecd4a586413e06aa9ce08479aff7dce772ac137d710915db192032a7e765870144"]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffb, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x80004b}]}}]}, 0x3c}}, 0x24000000) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.184' (ED25519) to the list of known hosts. [ 82.937758][ T5851] cgroup: Unknown subsys name 'net' [ 83.114733][ T5851] cgroup: Unknown subsys name 'cpuset' [ 83.124472][ T5851] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.885054][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.403979][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.419276][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.439813][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.459010][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.468929][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.613104][ T5184] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.622266][ T5184] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.630556][ T5184] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.649264][ T5869] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.657689][ T5869] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.666201][ T5869] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.674023][ T5869] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.682664][ T5869] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.691132][ T5869] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.719174][ T5871] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.809375][ T5184] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.817535][ T5869] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.825338][ T5869] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.833822][ T5869] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.839564][ T5184] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.841790][ T5869] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.856930][ T5871] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.869323][ T5871] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.880427][ T5871] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.888258][ T5871] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.210203][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 88.445918][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.454240][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.461915][ T5861] bridge_slave_0: entered allmulticast mode [ 88.469436][ T5861] bridge_slave_0: entered promiscuous mode [ 88.478712][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.486223][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.493522][ T5861] bridge_slave_1: entered allmulticast mode [ 88.500929][ T5861] bridge_slave_1: entered promiscuous mode [ 88.555878][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.623715][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.814670][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 88.828484][ T5861] team0: Port device team_slave_0 added [ 88.858229][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 88.877371][ T5861] team0: Port device team_slave_1 added [ 88.884616][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 88.997470][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.004921][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.031485][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.083414][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.090695][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.116999][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.176243][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 89.310845][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.317994][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.329069][ T5867] bridge_slave_0: entered allmulticast mode [ 89.336453][ T5867] bridge_slave_0: entered promiscuous mode [ 89.352054][ T5861] hsr_slave_0: entered promiscuous mode [ 89.358387][ T5861] hsr_slave_1: entered promiscuous mode [ 89.380572][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.387737][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.395522][ T5865] bridge_slave_0: entered allmulticast mode [ 89.404798][ T5865] bridge_slave_0: entered promiscuous mode [ 89.433978][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.441282][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.448499][ T5872] bridge_slave_0: entered allmulticast mode [ 89.456792][ T5872] bridge_slave_0: entered promiscuous mode [ 89.465017][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.472321][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.479708][ T5872] bridge_slave_1: entered allmulticast mode [ 89.486971][ T5872] bridge_slave_1: entered promiscuous mode [ 89.494291][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.501740][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.509321][ T5867] bridge_slave_1: entered allmulticast mode [ 89.516502][ T5867] bridge_slave_1: entered promiscuous mode [ 89.539930][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.547082][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.554911][ T5865] bridge_slave_1: entered allmulticast mode [ 89.558247][ T51] Bluetooth: hci0: command tx timeout [ 89.562981][ T5865] bridge_slave_1: entered promiscuous mode [ 89.675319][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.702297][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.715883][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.716923][ T51] Bluetooth: hci2: command tx timeout [ 89.757730][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.783454][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.790348][ T51] Bluetooth: hci1: command tx timeout [ 89.832656][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.901369][ T5867] team0: Port device team_slave_0 added [ 89.920866][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.928067][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.935757][ T5873] bridge_slave_0: entered allmulticast mode [ 89.943303][ T5873] bridge_slave_0: entered promiscuous mode [ 89.950123][ T5871] Bluetooth: hci3: command tx timeout [ 89.953363][ T5872] team0: Port device team_slave_0 added [ 89.955913][ T51] Bluetooth: hci4: command tx timeout [ 89.965433][ T5872] team0: Port device team_slave_1 added [ 89.988409][ T5867] team0: Port device team_slave_1 added [ 89.996099][ T5865] team0: Port device team_slave_0 added [ 90.003387][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.010700][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.017898][ T5873] bridge_slave_1: entered allmulticast mode [ 90.025086][ T5873] bridge_slave_1: entered promiscuous mode [ 90.077204][ T5865] team0: Port device team_slave_1 added [ 90.127366][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.134659][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.161124][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.174182][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.181981][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.208356][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.263820][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.270906][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.296892][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.313839][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.344936][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.355692][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.381738][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.393986][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.401392][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.427438][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.442002][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.476610][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.483992][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.510119][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.553594][ T5873] team0: Port device team_slave_0 added [ 90.600893][ T5873] team0: Port device team_slave_1 added [ 90.630831][ T5872] hsr_slave_0: entered promiscuous mode [ 90.637548][ T5872] hsr_slave_1: entered promiscuous mode [ 90.644421][ T5872] debugfs: 'hsr0' already exists in 'hsr' [ 90.650736][ T5872] Cannot create hsr debugfs directory [ 90.784570][ T5867] hsr_slave_0: entered promiscuous mode [ 90.791844][ T5867] hsr_slave_1: entered promiscuous mode [ 90.797934][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 90.803791][ T5867] Cannot create hsr debugfs directory [ 90.828698][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.835734][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.861685][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.879123][ T5865] hsr_slave_0: entered promiscuous mode [ 90.885517][ T5865] hsr_slave_1: entered promiscuous mode [ 90.892891][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 90.898631][ T5865] Cannot create hsr debugfs directory [ 90.936735][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.943925][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.970005][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.119600][ T5873] hsr_slave_0: entered promiscuous mode [ 91.126227][ T5873] hsr_slave_1: entered promiscuous mode [ 91.133675][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 91.139498][ T5873] Cannot create hsr debugfs directory [ 91.145326][ T5861] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.194019][ T5861] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.275078][ T5861] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.335703][ T5861] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.629288][ T51] Bluetooth: hci0: command tx timeout [ 91.672530][ T5867] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.683922][ T5867] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.697896][ T5867] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.737661][ T5867] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.789888][ T51] Bluetooth: hci2: command tx timeout [ 91.823199][ T5872] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.836663][ T5872] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.855014][ T5872] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.868976][ T51] Bluetooth: hci1: command tx timeout [ 91.881983][ T5872] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.962452][ T984] cfg80211: failed to load regulatory.db [ 92.023227][ T5865] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.040494][ T51] Bluetooth: hci4: command tx timeout [ 92.041312][ T5871] Bluetooth: hci3: command tx timeout [ 92.062312][ T5865] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.105120][ T5865] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.120937][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.127861][ T5865] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.231480][ T5873] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.266205][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.278094][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.289510][ T5873] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.305120][ T5873] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.324333][ T5873] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.372019][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.379343][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.415617][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.446262][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.453462][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.500381][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.507578][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.517495][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.524634][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.547323][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.672579][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.738060][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.750015][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.757210][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.816637][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.823878][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.904784][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.961285][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.976526][ T1042] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.983738][ T1042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.058550][ T1042] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.065801][ T1042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.142749][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.248258][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.255526][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.272944][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.280291][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.313998][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.335560][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.607931][ T5861] veth0_vlan: entered promiscuous mode [ 93.668781][ T5861] veth1_vlan: entered promiscuous mode [ 93.685245][ T5867] veth0_vlan: entered promiscuous mode [ 93.711997][ T5871] Bluetooth: hci0: command tx timeout [ 93.751633][ T5867] veth1_vlan: entered promiscuous mode [ 93.785912][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.864464][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.871920][ T5871] Bluetooth: hci2: command tx timeout [ 93.938277][ T5865] veth0_vlan: entered promiscuous mode [ 93.952586][ T5871] Bluetooth: hci1: command tx timeout [ 93.982569][ T5861] veth0_macvtap: entered promiscuous mode [ 94.007446][ T5861] veth1_macvtap: entered promiscuous mode [ 94.052445][ T5867] veth0_macvtap: entered promiscuous mode [ 94.062101][ T5865] veth1_vlan: entered promiscuous mode [ 94.075589][ T5872] veth0_vlan: entered promiscuous mode [ 94.091371][ T5867] veth1_macvtap: entered promiscuous mode [ 94.109920][ T5871] Bluetooth: hci4: command tx timeout [ 94.110062][ T51] Bluetooth: hci3: command tx timeout [ 94.116264][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.133321][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.147184][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.199844][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.215902][ T5872] veth1_vlan: entered promiscuous mode [ 94.230569][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.262337][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.276726][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.293765][ T5865] veth0_macvtap: entered promiscuous mode [ 94.313805][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.355979][ T5865] veth1_macvtap: entered promiscuous mode [ 94.383162][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.455041][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.464423][ T1042] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.502876][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.534198][ T1042] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.545427][ T1042] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.556267][ T5872] veth0_macvtap: entered promiscuous mode [ 94.586821][ T1042] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.596274][ T1042] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.615591][ T5872] veth1_macvtap: entered promiscuous mode [ 94.651827][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.664654][ T1042] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.676145][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.727246][ T1042] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.769361][ T1042] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.815582][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.833900][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.842273][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.851903][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.876287][ T1042] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.920797][ T1042] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.934027][ T1042] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.946755][ T1042] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.979367][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.996984][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.027221][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.040206][ T5861] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.050094][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.112052][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.123567][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.195743][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.231921][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.318439][ T5873] veth0_vlan: entered promiscuous mode [ 95.352698][ T5976] netlink: 'syz.0.1': attribute type 21 has an invalid length. [ 95.363873][ T5976] netlink: 'syz.0.1': attribute type 22 has an invalid length. [ 95.374550][ T5976] netlink: 'syz.0.1': attribute type 23 has an invalid length. [ 95.407351][ T5873] veth1_vlan: entered promiscuous mode [ 95.431018][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.443484][ T5976] netlink: 'syz.0.1': attribute type 25 has an invalid length. [ 95.473841][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.500523][ T5976] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1'. [ 95.702949][ T5873] veth0_macvtap: entered promiscuous mode [ 95.723857][ T5873] veth1_macvtap: entered promiscuous mode [ 95.789880][ T51] Bluetooth: hci0: command tx timeout [ 95.805018][ T5991] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.844710][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.876501][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.942717][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.953302][ T51] Bluetooth: hci2: command tx timeout [ 96.029558][ T51] Bluetooth: hci1: command tx timeout [ 96.094056][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.132724][ T6001] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10'. [ 96.189305][ T51] Bluetooth: hci3: command tx timeout [ 96.189315][ T5871] Bluetooth: hci4: command tx timeout [ 96.198342][ T1321] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.267139][ T1321] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.294992][ T6007] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12'. [ 96.496729][ T6015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14'. [ 96.540985][ T1321] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.553830][ T1321] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.645230][ T6019] Zero length message leads to an empty skb [ 96.923883][ T6028] syz.3.16 uses obsolete (PF_INET,SOCK_PACKET) [ 97.083870][ T6037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18'. [ 97.097100][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.133388][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.395252][ T1321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.433128][ T1321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.459775][ T6047] netlink: 256 bytes leftover after parsing attributes in process `syz.3.21'. [ 97.693237][ T6054] netlink: 'syz.3.23': attribute type 4 has an invalid length. [ 97.760035][ T6059] netlink: 'syz.3.23': attribute type 4 has an invalid length. [ 97.788171][ T6058] netlink: 'syz.3.23': attribute type 4 has an invalid length. [ 98.274479][ T6077] warning: `syz.4.30' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.327853][ T6076] tipc: Started in network mode [ 98.329030][ T6082] netlink: 'syz.4.30': attribute type 32 has an invalid length. [ 98.333183][ T6076] tipc: Node identity 4ed3e6fcb8f2, cluster identity 4711 [ 98.354015][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30'. [ 98.366360][ T6081] netlink: 'syz.0.31': attribute type 1 has an invalid length. [ 98.376184][ T6076] tipc: Enabled bearer , priority 0 [ 98.402319][ T6080] netlink: 16 bytes leftover after parsing attributes in process `syz.2.29'. [ 98.433837][ T6080] netlink: 6 bytes leftover after parsing attributes in process `syz.2.29'. [ 98.438151][ T6086] netlink: 24 bytes leftover after parsing attributes in process `syz.4.30'. [ 98.521981][ T6084] syzkaller0: entered promiscuous mode [ 98.548919][ T6084] syzkaller0: entered allmulticast mode [ 98.583377][ T6080] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.617187][ T6082] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 98.636428][ T6082] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 98.748699][ T6091] tipc: Resetting bearer [ 98.831457][ T6076] bridge1: entered promiscuous mode [ 98.848821][ T6076] bridge1: entered allmulticast mode [ 98.950263][ T6072] tipc: Resetting bearer [ 99.062213][ T6072] tipc: Disabling bearer [ 99.147870][ T6107] netlink: 'syz.2.35': attribute type 10 has an invalid length. [ 99.236023][ T6113] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 99.393793][ T6107] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 99.487191][ T6133] vxcan1: tx address claim with dlc 0 [ 99.492309][ T6119] bridge_slave_0: left allmulticast mode [ 99.524284][ T6119] bridge_slave_0: left promiscuous mode [ 99.560023][ T6119] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.597037][ T6119] bridge_slave_1: left allmulticast mode [ 99.602963][ T6119] bridge_slave_1: left promiscuous mode [ 99.611111][ T6119] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.642138][ T6119] bond0: (slave bond_slave_0): Releasing backup interface [ 99.674177][ T6119] bond0: (slave bond_slave_1): Releasing backup interface [ 99.731802][ T6119] team0: Port device team_slave_0 removed [ 99.761262][ T6119] team0: Port device team_slave_1 removed [ 99.768699][ T6119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.787917][ T6119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.804871][ T6119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.814217][ T6119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.850705][ T6128] bridge0: port 3(ip6gretap1) entered blocking state [ 99.857977][ T6128] bridge0: port 3(ip6gretap1) entered disabled state [ 99.874878][ T6128] ip6gretap1: entered allmulticast mode [ 99.901627][ T6128] ip6gretap1: entered promiscuous mode [ 99.952430][ T6141] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 100.033204][ T6144] veth3: entered promiscuous mode [ 100.524987][ T6164] IPVS: set_ctl: invalid protocol: 41 100.1.1.0:20002 [ 100.955429][ T59] nci: nci_ntf_packet: unsupported ntf opcode 0xf05 [ 101.004341][ T6186] __nla_validate_parse: 3 callbacks suppressed [ 101.004362][ T6186] netlink: 28 bytes leftover after parsing attributes in process `syz.1.55'. [ 101.483693][ T6183] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 101.696660][ T6207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.61'. [ 101.795486][ T6214] netlink: 24 bytes leftover after parsing attributes in process `syz.2.62'. [ 101.882976][ T6211] netlink: 56 bytes leftover after parsing attributes in process `syz.1.63'. [ 102.254857][ T6232] validate_nla: 2 callbacks suppressed [ 102.254877][ T6232] netlink: 'syz.3.67': attribute type 2 has an invalid length. [ 102.278964][ T6232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.67'. [ 102.405297][ T6247] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.480077][ T5863] udevd[5863]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 102.558683][ T5863] udevd[5863]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 102.577980][ T6250] bond0: entered allmulticast mode [ 102.707133][ T6254] netlink: 16 bytes leftover after parsing attributes in process `syz.3.72'. [ 103.005238][ T6266] netlink: 'syz.4.76': attribute type 1 has an invalid length. [ 103.275280][ T6273] ip6gre1: entered allmulticast mode [ 103.283062][ T6275] netlink: 20 bytes leftover after parsing attributes in process `syz.0.79'. [ 103.402345][ T6273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.78'. [ 103.426985][ T6281] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 103.491338][ T6281] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 103.623092][ T6280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.78'. [ 103.673814][ T6287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.80'. [ 103.912696][ T6280] team0: Port device team_slave_1 removed [ 104.139004][ T5863] udevd[5863]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 105.093584][ T6349] netlink: 'syz.0.93': attribute type 32 has an invalid length. [ 105.129467][ T6349] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 105.207206][ T6355] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 105.239668][ T6355] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 105.280507][ T6359] netlink: 'syz.1.94': attribute type 10 has an invalid length. [ 105.419586][ T6359] batadv0: entered promiscuous mode [ 105.432853][ T6359] batadv0: entered allmulticast mode [ 105.459718][ T6359] bridge0: port 3(batadv0) entered blocking state [ 105.466351][ T6359] bridge0: port 3(batadv0) entered disabled state [ 105.503160][ T6369] netlink: 'syz.3.98': attribute type 11 has an invalid length. [ 105.525700][ T6359] bridge0: port 3(batadv0) entered blocking state [ 105.532540][ T6359] bridge0: port 3(batadv0) entered forwarding state [ 105.544571][ T36] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 105.554034][ T36] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 106.015130][ T6397] __nla_validate_parse: 9 callbacks suppressed [ 106.015152][ T6397] netlink: 44 bytes leftover after parsing attributes in process `syz.1.103'. [ 106.982139][ T6386] netlink: 'syz.0.104': attribute type 1 has an invalid length. [ 107.004432][ T6386] netlink: 224 bytes leftover after parsing attributes in process `syz.0.104'. [ 107.084095][ T6396] vlan2: entered allmulticast mode [ 107.102244][ T6396] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 107.687735][ T6428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.116'. [ 107.706124][ T6418] can: request_module (can-proto-5) failed. [ 108.115721][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.119'. [ 108.211890][ T6449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.119'. [ 108.347230][ T6457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.122'. [ 108.424931][ T6457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.122'. [ 108.925662][ T6490] netlink: 'syz.1.131': attribute type 16 has an invalid length. [ 108.933485][ T6490] netlink: 'syz.1.131': attribute type 17 has an invalid length. [ 108.955589][ T6490] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 109.735554][ T6501] vlan2: entered promiscuous mode [ 109.811133][ T6501] vlan2: entered allmulticast mode [ 109.856495][ T6501] hsr_slave_1: entered allmulticast mode [ 109.945360][ T6511] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 110.001206][ T6502] syz.0.134 (6502) used greatest stack depth: 17864 bytes left [ 110.340562][ T6523] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.481651][ T6529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.142'. [ 110.626982][ T6523] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.801490][ T6523] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.925727][ T6555] trusted_key: syz.3.150 sent an empty control message without MSG_MORE. [ 110.927604][ T6523] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.111598][ T1042] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.151609][ T59] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.185612][ T59] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.220905][ T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.487841][ T6576] netlink: 20 bytes leftover after parsing attributes in process `syz.4.158'. [ 111.786423][ T6588] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 111.866659][ T6592] pim6reg: entered allmulticast mode [ 111.917889][ T6595] netlink: 'syz.3.162': attribute type 1 has an invalid length. [ 111.974892][ T6592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.162'. [ 112.061248][ T6589] netlink: 'syz.1.161': attribute type 5 has an invalid length. [ 112.204293][ T6604] netlink: 360 bytes leftover after parsing attributes in process `syz.1.166'. [ 112.529019][ T6614] netlink: 72 bytes leftover after parsing attributes in process `syz.1.169'. [ 112.595459][ T6614] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}z' [ 112.666015][ T6614] CPU: 1 UID: 0 PID: 6614 Comm: syz.1.169 Not tainted syzkaller #0 PREEMPT(full) [ 112.666045][ T6614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 112.666057][ T6614] Call Trace: [ 112.666065][ T6614] [ 112.666074][ T6614] dump_stack_lvl+0x189/0x250 [ 112.666111][ T6614] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.666136][ T6614] ? __pfx__printk+0x10/0x10 [ 112.666173][ T6614] ? kernfs_path_from_node+0x2f/0x290 [ 112.666196][ T6614] ? kernfs_path_from_node+0x250/0x290 [ 112.666212][ T6614] ? kernfs_path_from_node+0x2f/0x290 [ 112.666233][ T6614] sysfs_warn_dup+0x8e/0xa0 [ 112.666254][ T6614] sysfs_do_create_link_sd+0xc0/0x110 [ 112.666279][ T6614] device_add_class_symlinks+0x1cf/0x240 [ 112.666307][ T6614] device_add+0x475/0xb50 [ 112.666334][ T6614] wiphy_register+0x1ba6/0x28d0 [ 112.666386][ T6614] ? __pfx_wiphy_register+0x10/0x10 [ 112.666414][ T6614] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 112.666448][ T6614] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 112.666477][ T6614] ieee80211_register_hw+0x3484/0x4100 [ 112.666522][ T6614] ? ieee80211_register_hw+0x1481/0x4100 [ 112.666558][ T6614] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 112.666588][ T6614] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 112.666626][ T6614] ? __hrtimer_setup+0x187/0x210 [ 112.666644][ T6614] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 112.666678][ T6614] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 112.666742][ T6614] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 112.666765][ T6614] ? trace_kmalloc+0x1f/0xd0 [ 112.666786][ T6614] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 112.666812][ T6614] ? kstrndup+0xbf/0x160 [ 112.666846][ T6614] hwsim_new_radio_nl+0xea4/0x1b10 [ 112.666876][ T6614] ? __pfx___nla_validate_parse+0x10/0x10 [ 112.666924][ T6614] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 112.667066][ T6614] ? __nla_parse+0x40/0x60 [ 112.667103][ T6614] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 112.667141][ T6614] genl_family_rcv_msg_doit+0x215/0x300 [ 112.667183][ T6614] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 112.667221][ T6614] ? bpf_lsm_capable+0x9/0x20 [ 112.667246][ T6614] ? security_capable+0x7e/0x2e0 [ 112.667287][ T6614] genl_rcv_msg+0x60e/0x790 [ 112.667321][ T6614] ? __pfx_genl_rcv_msg+0x10/0x10 [ 112.667344][ T6614] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 112.667390][ T6614] netlink_rcv_skb+0x208/0x470 [ 112.667419][ T6614] ? __lock_acquire+0xab9/0xd20 [ 112.667449][ T6614] ? __pfx_genl_rcv_msg+0x10/0x10 [ 112.667475][ T6614] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 112.667529][ T6614] ? down_read+0x1ad/0x2e0 [ 112.667554][ T6614] genl_rcv+0x28/0x40 [ 112.667575][ T6614] netlink_unicast+0x82c/0x9e0 [ 112.667615][ T6614] ? __pfx_netlink_unicast+0x10/0x10 [ 112.667646][ T6614] ? netlink_sendmsg+0x642/0xb30 [ 112.667662][ T6614] ? skb_put+0x11b/0x210 [ 112.667687][ T6614] netlink_sendmsg+0x805/0xb30 [ 112.667718][ T6614] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.667742][ T6614] ? aa_sock_msg_perm+0xf1/0x1d0 [ 112.667764][ T6614] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 112.667784][ T6614] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.667804][ T6614] __sock_sendmsg+0x21c/0x270 [ 112.667836][ T6614] ____sys_sendmsg+0x505/0x830 [ 112.667866][ T6614] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.667901][ T6614] ? import_iovec+0x74/0xa0 [ 112.667930][ T6614] ___sys_sendmsg+0x21f/0x2a0 [ 112.667966][ T6614] ? __pfx____sys_sendmsg+0x10/0x10 [ 112.668037][ T6614] ? __fget_files+0x2a/0x420 [ 112.668066][ T6614] ? __fget_files+0x3a0/0x420 [ 112.668110][ T6614] __x64_sys_sendmsg+0x19b/0x260 [ 112.668137][ T6614] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 112.668173][ T6614] ? rcu_is_watching+0x15/0xb0 [ 112.668201][ T6614] ? do_syscall_64+0xbe/0x3b0 [ 112.668224][ T6614] do_syscall_64+0xfa/0x3b0 [ 112.668240][ T6614] ? lockdep_hardirqs_on+0x9c/0x150 [ 112.668268][ T6614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.668288][ T6614] ? clear_bhb_loop+0x60/0xb0 [ 112.668312][ T6614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.668332][ T6614] RIP: 0033:0x7f95dbf8ebe9 [ 112.668353][ T6614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.668369][ T6614] RSP: 002b:00007f95dce94038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.668392][ T6614] RAX: ffffffffffffffda RBX: 00007f95dc1c5fa0 RCX: 00007f95dbf8ebe9 [ 112.668406][ T6614] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 112.668418][ T6614] RBP: 00007f95dc011e19 R08: 0000000000000000 R09: 0000000000000000 [ 112.668430][ T6614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.668441][ T6614] R13: 00007f95dc1c6038 R14: 00007f95dc1c5fa0 R15: 00007ffc6726ea48 [ 112.668477][ T6614] [ 113.277218][ T6621] netlink: 248 bytes leftover after parsing attributes in process `syz.0.171'. [ 113.566573][ T6633] netlink: 'syz.1.173': attribute type 4 has an invalid length. [ 113.631404][ T6636] netlink: 20 bytes leftover after parsing attributes in process `syz.2.177'. [ 113.652745][ T6638] netlink: 'syz.1.173': attribute type 4 has an invalid length. [ 113.860898][ T6645] netlink: 'syz.3.180': attribute type 6 has an invalid length. [ 113.870387][ T6645] netlink: 'syz.3.180': attribute type 6 has an invalid length. [ 113.882965][ T6645] netlink: 'syz.3.180': attribute type 3 has an invalid length. [ 114.077911][ T6657] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 114.345900][ T6669] netlink: 'syz.1.189': attribute type 4 has an invalid length. [ 114.386112][ T6669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.189'. [ 114.401210][ T6669] netlink: 60 bytes leftover after parsing attributes in process `syz.1.189'. [ 114.412601][ T6668] netlink: 60 bytes leftover after parsing attributes in process `syz.3.190'. [ 114.749286][ T6683] Driver unsupported XDP return value 0 on prog (id 26) dev N/A, expect packet loss! [ 114.821519][ T6681] netlink: 28 bytes leftover after parsing attributes in process `syz.2.194'. [ 115.181997][ T6698] unknown channel width for channel at 909000KHz? [ 115.189011][ T6698] unknown channel width for channel at 909000KHz? [ 115.298393][ T6706] batadv_slave_0: entered promiscuous mode [ 115.335760][ T6705] batadv_slave_0: left promiscuous mode [ 115.841337][ T6694] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 115.896600][ T6726] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.997692][ T6732] bridge_slave_0: left allmulticast mode [ 116.036649][ T6732] bridge_slave_0: left promiscuous mode [ 116.058195][ T6732] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.128178][ T6732] bridge_slave_1: left allmulticast mode [ 116.134276][ T6732] bridge_slave_1: left promiscuous mode [ 116.141633][ T6732] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.157696][ T6732] bond0: (slave bond_slave_0): Releasing backup interface [ 116.170741][ T6732] bond0: (slave bond_slave_1): Releasing backup interface [ 116.192231][ T6732] team0: Port device team_slave_0 removed [ 116.203473][ T6732] team0: Port device team_slave_1 removed [ 116.211821][ T6732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.219766][ T6732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.228368][ T6732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.236154][ T6732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.480520][ T6741] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 116.517338][ T6741] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 116.536981][ T6741] gretap1: entered promiscuous mode [ 116.542730][ T6741] gretap1: entered allmulticast mode [ 117.069055][ T51] Bluetooth: hci0: command 0x080f tx timeout [ 117.160326][ T6771] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.168256][ T6771] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.423180][ T6771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.471700][ T6771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.705977][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.736203][ T1042] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.764148][ T1042] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.810985][ T1042] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.932172][ T6779] netlink: 'syz.1.221': attribute type 1 has an invalid length. [ 117.935129][ T6780] __nla_validate_parse: 5 callbacks suppressed [ 117.935146][ T6780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.220'. [ 117.940090][ T6779] netlink: 128 bytes leftover after parsing attributes in process `syz.1.221'. [ 117.948983][ T6780] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 117.973337][ T6779] netlink: 'syz.1.221': attribute type 2 has an invalid length. [ 117.985789][ T6779] netlink: 'syz.1.221': attribute type 1 has an invalid length. [ 118.630038][ T6773] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 118.694171][ T6804] netlink: 16 bytes leftover after parsing attributes in process `syz.0.227'. [ 118.727173][ T6804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.227'. [ 118.786387][ T6806] netlink: 16 bytes leftover after parsing attributes in process `syz.3.228'. [ 119.086325][ T6814] openvswitch: netlink: Message has 218 unknown bytes. [ 119.321266][ T6818] netlink: 'syz.1.234': attribute type 21 has an invalid length. [ 119.356067][ T6818] netlink: 152 bytes leftover after parsing attributes in process `syz.1.234'. [ 119.410597][ T6823] netlink: 'syz.1.234': attribute type 1 has an invalid length. [ 119.449637][ T6818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.234'. [ 119.688341][ T6834] netlink: 'syz.1.239': attribute type 10 has an invalid length. [ 119.719270][ T6835] netlink: 20 bytes leftover after parsing attributes in process `syz.3.238'. [ 119.869429][ T6834] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 120.058479][ T6842] netlink: 28 bytes leftover after parsing attributes in process `syz.0.242'. [ 120.116004][ T6847] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 122.310478][ T6863] netlink: 'syz.2.248': attribute type 1 has an invalid length. [ 122.338947][ T6863] netlink: 128 bytes leftover after parsing attributes in process `syz.2.248'. [ 122.358783][ T6863] netlink: 'syz.2.248': attribute type 2 has an invalid length. [ 122.366476][ T6863] netlink: 'syz.2.248': attribute type 1 has an invalid length. [ 122.644274][ T6868] netlink: 'syz.2.249': attribute type 1 has an invalid length. [ 123.339835][ T6873] netlink: 28 bytes leftover after parsing attributes in process `syz.3.250'. [ 123.385249][ T6873] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 124.242162][ T6909] vlan0: entered allmulticast mode [ 124.266609][ T6909] bond0: entered allmulticast mode [ 124.289305][ T6909] bond_slave_0: entered allmulticast mode [ 124.299010][ T6909] bond_slave_1: entered allmulticast mode [ 124.410577][ T6914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.264'. [ 124.508624][ T6914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.264'. [ 124.546480][ T59] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.566395][ T59] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.614420][ T59] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.636796][ T59] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.870222][ T6936] team0: Device ip6gre1 is of different type [ 125.058076][ T6941] tipc: Started in network mode [ 125.113914][ T6941] tipc: Node identity 2e79208436ae, cluster identity 4711 [ 125.132144][ T6941] tipc: Enabled bearer , priority 0 [ 125.178952][ T6945] tipc: Started in network mode [ 125.183872][ T6945] tipc: Node identity be927608ece7, cluster identity 4711 [ 125.199503][ T6945] tipc: Enabled bearer , priority 0 [ 125.274281][ T6941] tipc: Disabling bearer [ 125.332664][ T6945] syzkaller0: entered promiscuous mode [ 125.338215][ T6945] syzkaller0: entered allmulticast mode [ 125.412669][ T6945] tipc: Resetting bearer [ 125.477248][ T6944] tipc: Resetting bearer [ 125.504966][ T6944] tipc: Disabling bearer [ 125.912892][ T6969] netlink: 'syz.3.282': attribute type 9 has an invalid length. [ 126.091762][ T6968] netlink: 'syz.0.283': attribute type 16 has an invalid length. [ 126.113598][ T6968] netlink: 'syz.0.283': attribute type 3 has an invalid length. [ 126.161066][ T6968] netlink: 132 bytes leftover after parsing attributes in process `syz.0.283'. [ 126.314027][ T6986] batadv_slave_1: entered promiscuous mode [ 126.342039][ T6985] sctp: [Deprecated]: syz.3.288 (pid 6985) Use of int in maxseg socket option. [ 126.342039][ T6985] Use struct sctp_assoc_value instead [ 126.435805][ T6986] batadv_slave_1: left promiscuous mode [ 126.542828][ T6995] vlan0: entered promiscuous mode [ 126.586611][ T6995] veth1_macvtap: left promiscuous mode [ 126.631171][ T6995] macsec0: entered promiscuous mode [ 126.649856][ T6995] macsec0: entered allmulticast mode [ 126.694468][ T6997] netlink: 16 bytes leftover after parsing attributes in process `syz.3.292'. [ 126.729610][ T6998] veth1_macvtap: entered promiscuous mode [ 126.735454][ T6998] veth1_macvtap: entered allmulticast mode [ 126.742434][ T6998] macsec0: left promiscuous mode [ 126.747540][ T6998] macsec0: left allmulticast mode [ 126.782294][ T6998] veth1_macvtap: left allmulticast mode [ 127.366564][ T6994] vlan0: left promiscuous mode [ 127.734995][ T5871] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 127.746666][ T5871] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 127.760505][ T5871] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 127.771243][ T5871] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 127.779704][ T5871] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 127.911289][ T7044] netlink: 'syz.0.302': attribute type 2 has an invalid length. [ 128.365222][ T7044] : entered promiscuous mode [ 128.671264][ T7043] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 128.761233][ T7057] gtp0: entered promiscuous mode [ 128.766244][ T7057] gtp0: entered allmulticast mode [ 128.914614][ T7065] netlink: 16 bytes leftover after parsing attributes in process `syz.0.307'. [ 129.174326][ T7076] FAULT_INJECTION: forcing a failure. [ 129.174326][ T7076] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 129.209174][ T7076] CPU: 1 UID: 0 PID: 7076 Comm: syz.1.310 Not tainted syzkaller #0 PREEMPT(full) [ 129.209201][ T7076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 129.209211][ T7076] Call Trace: [ 129.209219][ T7076] [ 129.209227][ T7076] dump_stack_lvl+0x189/0x250 [ 129.209257][ T7076] ? __pfx____ratelimit+0x10/0x10 [ 129.209284][ T7076] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.209307][ T7076] ? __pfx__printk+0x10/0x10 [ 129.209347][ T7076] should_fail_ex+0x414/0x560 [ 129.209377][ T7076] _copy_to_user+0x31/0xb0 [ 129.209401][ T7076] simple_read_from_buffer+0xe1/0x170 [ 129.209434][ T7076] proc_fail_nth_read+0x1b3/0x220 [ 129.209461][ T7076] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 129.209484][ T7076] ? rw_verify_area+0x2a6/0x4d0 [ 129.209507][ T7076] ? __lock_acquire+0xab9/0xd20 [ 129.209532][ T7076] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 129.209555][ T7076] vfs_read+0x1fd/0xa30 [ 129.209576][ T7076] ? fdget_pos+0x247/0x320 [ 129.209597][ T7076] ? __pfx___mutex_lock+0x10/0x10 [ 129.209615][ T7076] ? __pfx_vfs_read+0x10/0x10 [ 129.209640][ T7076] ? __fget_files+0x2a/0x420 [ 129.209672][ T7076] ? __fget_files+0x3a0/0x420 [ 129.209697][ T7076] ? __fget_files+0x2a/0x420 [ 129.209733][ T7076] ksys_read+0x145/0x250 [ 129.209748][ T7078] netlink: 24 bytes leftover after parsing attributes in process `syz.0.311'. [ 129.209759][ T7076] ? __pfx_ksys_read+0x10/0x10 [ 129.209780][ T7076] ? rcu_is_watching+0x15/0xb0 [ 129.209801][ T7076] ? do_syscall_64+0xbe/0x3b0 [ 129.209829][ T7076] do_syscall_64+0xfa/0x3b0 [ 129.209843][ T7076] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.209865][ T7076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.209882][ T7076] ? clear_bhb_loop+0x60/0xb0 [ 129.209903][ T7076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.209919][ T7076] RIP: 0033:0x7f95dbf8d5fc [ 129.209935][ T7076] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 129.209949][ T7076] RSP: 002b:00007f95dce94030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 129.209968][ T7076] RAX: ffffffffffffffda RBX: 00007f95dc1c5fa0 RCX: 00007f95dbf8d5fc [ 129.209980][ T7076] RDX: 000000000000000f RSI: 00007f95dce940a0 RDI: 0000000000000004 [ 129.209990][ T7076] RBP: 00007f95dce94090 R08: 0000000000000000 R09: 0000000000000000 [ 129.210000][ T7076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.210018][ T7076] R13: 00007f95dc1c6038 R14: 00007f95dc1c5fa0 R15: 00007ffc6726ea48 [ 129.210048][ T7076] [ 129.776724][ T7087] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 129.869448][ T51] Bluetooth: hci0: command 0x080f tx timeout [ 129.875675][ T51] Bluetooth: hci5: command tx timeout [ 129.944684][ T7039] chnl_net:caif_netlink_parms(): no params data found [ 130.182429][ T7102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.316'. [ 130.544354][ T7039] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.581264][ T7039] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.622470][ T7039] bridge_slave_0: entered allmulticast mode [ 130.655078][ T7039] bridge_slave_0: entered promiscuous mode [ 130.696936][ T7121] Bluetooth: MGMT ver 1.23 [ 131.033750][ T7116] team0 (unregistering): Port device team_slave_0 removed [ 131.072368][ T7116] team0 (unregistering): Port device team_slave_1 removed [ 131.138316][ T7118] macvlan2: entered allmulticast mode [ 131.147423][ T7118] bond0: (slave macvlan2): Opening slave failed [ 131.168255][ T7039] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.201213][ T7039] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.239439][ T7039] bridge_slave_1: entered allmulticast mode [ 131.251967][ T7039] bridge_slave_1: entered promiscuous mode [ 131.420876][ T7039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.450138][ T7141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.328'. [ 131.474278][ T7039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.602903][ T7145] openvswitch: netlink: Missing key (keys=40, expected=100) [ 131.780474][ T7152] netlink: 28 bytes leftover after parsing attributes in process `syz.0.332'. [ 131.950326][ T51] Bluetooth: hci5: command tx timeout [ 132.025010][ T7039] team0: Port device team_slave_0 added [ 132.075957][ T7039] team0: Port device team_slave_1 added [ 132.290620][ T7039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.318368][ T7039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.439335][ T7039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.532202][ T7039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.546355][ T7039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.652717][ T7039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.915148][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.926501][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.954967][ T7192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.345'. [ 132.972134][ T7194] netlink: 'syz.0.343': attribute type 1 has an invalid length. [ 133.014825][ T7192] netlink: 176 bytes leftover after parsing attributes in process `syz.1.345'. [ 133.029016][ T7192] netlink: 'syz.1.345': attribute type 5 has an invalid length. [ 133.046561][ T7039] hsr_slave_0: entered promiscuous mode [ 133.058335][ T7039] hsr_slave_1: entered promiscuous mode [ 133.077990][ T7039] debugfs: 'hsr0' already exists in 'hsr' [ 133.096574][ T7200] netlink: 28 bytes leftover after parsing attributes in process `syz.0.343'. [ 133.098821][ T7039] Cannot create hsr debugfs directory [ 133.131086][ T7201] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 133.163961][ T7201] netlink: 20 bytes leftover after parsing attributes in process `syz.2.346'. [ 133.243243][ T7197] bond2 (unregistering): Released all slaves [ 133.345643][ T7200] bond1: entered promiscuous mode [ 133.353403][ T7200] bond1: entered allmulticast mode [ 133.359389][ T7200] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.394364][ T7215] netlink: 60 bytes leftover after parsing attributes in process `syz.1.350'. [ 133.414966][ T7212] syzkaller1: entered promiscuous mode [ 133.423175][ T7212] syzkaller1: entered allmulticast mode [ 133.511023][ T7219] netlink: 'syz.0.351': attribute type 11 has an invalid length. [ 133.526011][ T7219] netlink: 'syz.0.351': attribute type 18 has an invalid length. [ 133.621329][ T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.636093][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.665582][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.706423][ T36] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.987501][ T7226] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 134.016715][ T7226] __nla_validate_parse: 4 callbacks suppressed [ 134.016733][ T7226] netlink: 184 bytes leftover after parsing attributes in process `syz.3.354'. [ 134.033382][ T51] Bluetooth: hci5: command tx timeout [ 134.253413][ T7039] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 134.303024][ T7039] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 134.345649][ T7039] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 134.394835][ T7039] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 134.632292][ T7225] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 134.638416][ T7225] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 134.743842][ T7225] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 134.757003][ T7225] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 134.782195][ T7225] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 134.788324][ T7225] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 134.802387][ T7039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.837513][ T7225] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 134.840148][ T7039] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.868342][ T1042] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.875633][ T1042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.884353][ T7225] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 134.920406][ T7267] netlink: set zone limit has 8 unknown bytes [ 134.932426][ T7225] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 134.942017][ T7225] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 135.000136][ T7272] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.051157][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.058332][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.422059][ T7282] netlink: 44 bytes leftover after parsing attributes in process `syz.1.370'. [ 135.551379][ T7225] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 135.567894][ T7225] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 135.930084][ T7306] netlink: 'syz.2.377': attribute type 10 has an invalid length. [ 136.008011][ T7306] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 136.025302][ T7306] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 136.090465][ T7311] netlink: 12 bytes leftover after parsing attributes in process `syz.3.378'. [ 136.153762][ T7316] netlink: 'syz.0.380': attribute type 4 has an invalid length. [ 136.170133][ T7313] netlink: 48 bytes leftover after parsing attributes in process `syz.1.379'. [ 136.201710][ T7315] netlink: 'syz.0.380': attribute type 4 has an invalid length. [ 136.413358][ T7039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.008380][ T7039] veth0_vlan: entered promiscuous mode [ 137.072915][ T7039] veth1_vlan: entered promiscuous mode [ 137.167566][ T7362] netlink: 20 bytes leftover after parsing attributes in process `syz.2.392'. [ 137.181057][ T7039] veth0_macvtap: entered promiscuous mode [ 137.210532][ T7039] veth1_macvtap: entered promiscuous mode [ 137.261846][ T7363] netlink: 28 bytes leftover after parsing attributes in process `syz.1.391'. [ 137.293372][ T7039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.334727][ T7039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.431372][ T7366] sctp: [Deprecated]: syz.3.393 (pid 7366) Use of int in maxseg socket option. [ 137.431372][ T7366] Use struct sctp_assoc_value instead [ 137.491551][ T1042] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.533361][ T1042] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.598881][ T1042] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.637026][ T1042] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.649270][ T7376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.397'. [ 137.707097][ T7376] xfrm1: entered promiscuous mode [ 137.745666][ T7378] netlink: 16 bytes leftover after parsing attributes in process `syz.1.398'. [ 137.757418][ T7381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.397'. [ 137.768998][ T7376] xfrm1: entered allmulticast mode [ 137.972327][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.401'. [ 138.193769][ T6313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.228793][ T6313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.348597][ T7401] netlink: 'syz.0.405': attribute type 10 has an invalid length. [ 138.357155][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.364556][ T7401] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 138.373520][ T7401] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 138.382075][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.855404][ T7424] team0: Device ip6gre1 is up. Set it down before adding it as a team port [ 139.125192][ T7436] netlink: 'syz.2.416': attribute type 10 has an invalid length. [ 139.143687][ T7443] __nla_validate_parse: 3 callbacks suppressed [ 139.143710][ T7443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.418'. [ 139.199097][ T7443] netlink: 'syz.3.418': attribute type 20 has an invalid length. [ 139.219853][ T7436] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 139.277205][ T1042] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.302109][ T7443] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (65547) [ 139.324192][ T7443] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 139.373241][ T1042] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.414922][ T7454] tipc: Started in network mode [ 139.422620][ T7458] netlink: 'syz.2.423': attribute type 21 has an invalid length. [ 139.436303][ T7454] tipc: Node identity a2110746cd8d, cluster identity 4711 [ 139.445085][ T7454] tipc: Enabled bearer , priority 0 [ 139.455059][ T1042] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.487075][ T1042] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.534896][ T7458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.423'. [ 139.555901][ T7469] netlink: 28 bytes leftover after parsing attributes in process `syz.3.425'. [ 139.568170][ T7454] tipc: Disabling bearer [ 139.586688][ T7464] tipc: Started in network mode [ 139.591977][ T7464] tipc: Node identity 080211000001, cluster identity 4711 [ 139.599880][ T7464] tipc: Enabled bearer , priority 0 [ 139.623659][ T7460] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 139.675687][ T7464] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 139.690159][ T7464] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 139.817240][ T7473] tipc: Resetting bearer [ 139.877915][ T7460] tipc: Enabled bearer , priority 0 [ 140.098479][ T7488] netlink: 52 bytes leftover after parsing attributes in process `syz.0.430'. [ 140.174560][ T7488] netlink: 52 bytes leftover after parsing attributes in process `syz.0.430'. [ 140.221400][ T7488] netlink: 52 bytes leftover after parsing attributes in process `syz.0.430'. [ 140.267715][ T7457] tipc: Disabling bearer [ 140.296320][ T7488] netlink: 52 bytes leftover after parsing attributes in process `syz.0.430'. [ 140.396053][ T7488] netlink: 52 bytes leftover after parsing attributes in process `syz.0.430'. [ 140.476395][ T7488] netlink: 52 bytes leftover after parsing attributes in process `syz.0.430'. [ 140.557235][ T7488] netlink: 52 bytes leftover after parsing attributes in process `syz.0.430'. [ 140.566718][ T7507] veth0: entered promiscuous mode [ 140.633303][ T7507] netlink: 'syz.2.435': attribute type 11 has an invalid length. [ 140.697236][ T7513] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 140.722628][ T983] tipc: Node number set to 134418688 [ 141.271303][ T7505] veth0: left promiscuous mode [ 141.290918][ T7529] openvswitch: netlink: Unknown nsh attribute 0 [ 141.338833][ T7529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.504345][ T7533] openvswitch: netlink: Message has 4 unknown bytes. [ 141.539306][ T7533] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.701315][ T7545] netlink: 'syz.2.447': attribute type 1 has an invalid length. [ 142.561440][ T7575] netlink: 'syz.3.453': attribute type 2 has an invalid length. [ 142.574768][ T7576] netlink: 'syz.0.456': attribute type 64 has an invalid length. [ 142.606392][ T7564] netlink: 'syz.3.453': attribute type 2 has an invalid length. [ 142.890183][ T7584] netlink: 'syz.1.457': attribute type 2 has an invalid length. [ 142.932232][ T7583] netlink: 'syz.2.459': attribute type 1 has an invalid length. [ 143.185160][ T7592] tipc: Enabling of bearer rejected, media not registered [ 143.538986][ T7602] tipc: Invalid UDP bearer configuration [ 143.539054][ T7602] tipc: Enabling of bearer rejected, failed to enable media [ 144.224305][ T7640] __nla_validate_parse: 79 callbacks suppressed [ 144.224327][ T7640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.477'. [ 144.257033][ T7636] syzkaller1: entered promiscuous mode [ 144.278846][ T7636] syzkaller1: entered allmulticast mode [ 144.288252][ T7640] netlink: 'syz.2.477': attribute type 11 has an invalid length. [ 144.296367][ T7640] netlink: 228 bytes leftover after parsing attributes in process `syz.2.477'. [ 144.344586][ T7643] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 144.495827][ T7649] bridge0: port 3(batadv0) entered disabled state [ 144.550849][ T7649] bridge_slave_0: left allmulticast mode [ 144.571650][ T7649] bridge_slave_0: left promiscuous mode [ 144.586747][ T7649] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.604331][ T7649] bridge_slave_1: left allmulticast mode [ 144.611469][ T7649] bridge_slave_1: left promiscuous mode [ 144.620637][ T7649] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.654213][ T7649] bond0: (slave bond_slave_0): Releasing backup interface [ 144.694360][ T7649] bond0: (slave bond_slave_1): Releasing backup interface [ 144.715819][ T7663] netlink: 36 bytes leftover after parsing attributes in process `syz.3.481'. [ 144.737220][ T7649] team0: Port device team_slave_0 removed [ 144.803352][ T7649] team0: Port device team_slave_1 removed [ 144.835839][ T7649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.855711][ T7649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.887860][ T7649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.918127][ T7667] netlink: 44 bytes leftover after parsing attributes in process `syz.3.481'. [ 144.943469][ T7649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.996404][ T7649] bond0: (slave wlan1): Releasing backup interface [ 145.093592][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.484'. [ 145.276458][ T7674] netlink: 'syz.0.484': attribute type 1 has an invalid length. [ 145.308274][ T7677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.487'. [ 145.331895][ T7674] netlink: 'syz.0.484': attribute type 2 has an invalid length. [ 145.342270][ T7680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.489'. [ 145.353379][ T7677] netlink: 20 bytes leftover after parsing attributes in process `syz.2.487'. [ 145.414292][ T7681] netlink: 8 bytes leftover after parsing attributes in process `syz.5.488'. [ 145.551566][ T7686] netlink: 40 bytes leftover after parsing attributes in process `syz.0.491'. [ 145.765933][ T7684] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 145.966705][ T7697] bond2: entered promiscuous mode [ 146.008925][ T7697] bond2: entered allmulticast mode [ 146.035608][ T7697] 8021q: adding VLAN 0 to HW filter on device bond2 [ 146.589018][ T5930] IPVS: starting estimator thread 0... [ 146.678929][ T7729] IPVS: using max 24 ests per chain, 57600 per kthread [ 147.416005][ T7756] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 147.526200][ T7765] IPVS: length: 255 != 24 [ 147.848414][ T7775] nbd: couldn't find a device at index -373156329 [ 147.910221][ T7772] syzkaller1: entered promiscuous mode [ 147.915737][ T7772] syzkaller1: entered allmulticast mode [ 147.936170][ T5863] udevd[5863]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 148.133719][ T7772] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.611692][ T7772] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.901391][ T7772] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.130275][ T7772] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.316930][ T7815] ieee802154 phy1 wpan1: encryption failed: -22 [ 149.538227][ T6313] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.727674][ T1321] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.750432][ T5863] udevd[5863]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 149.764130][ T1321] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.814270][ T1321] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.579964][ T7853] __nla_validate_parse: 14 callbacks suppressed [ 150.579986][ T7853] netlink: 20 bytes leftover after parsing attributes in process `syz.0.539'. [ 151.024585][ T7867] netlink: 596 bytes leftover after parsing attributes in process `syz.0.544'. [ 151.274837][ T5863] udevd[5863]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 151.484451][ T7875] team0: Mode "" not found [ 151.494587][ T7886] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 151.544595][ T7886] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 151.586103][ T7886] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 151.801979][ T7901] netlink: 20 bytes leftover after parsing attributes in process `syz.3.554'. [ 151.923814][ T7907] vxcan3: entered allmulticast mode [ 151.942697][ T7909] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 151.980120][ T7908] vxcan5: entered allmulticast mode [ 152.170425][ T7920] Bluetooth: MGMT ver 1.23 [ 152.223761][ T5876] udevd[5876]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 152.276157][ T5863] udevd[5863]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 152.325354][ T7925] netlink: 100 bytes leftover after parsing attributes in process `syz.0.562'. [ 152.339881][ T7925] netlink: 52 bytes leftover after parsing attributes in process `syz.0.562'. [ 152.475196][ T7931] netlink: 'syz.3.563': attribute type 2 has an invalid length. [ 152.484430][ T7931] netlink: 'syz.3.563': attribute type 8 has an invalid length. [ 152.492689][ T7931] netlink: 1148 bytes leftover after parsing attributes in process `syz.3.563'. [ 152.910183][ T7952] netlink: 28 bytes leftover after parsing attributes in process `syz.2.570'. [ 153.170239][ T7965] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20002 [ 153.200659][ T7965] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20002 [ 153.215303][ T7965] raw_sendmsg: syz.5.574 forgot to set AF_INET. Fix it! [ 153.250302][ T7965] IPVS: set_ctl: invalid protocol: 41 172.20.20.14:20002 [ 153.275453][ T7965] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20000 [ 153.296022][ T7965] IPVS: set_ctl: invalid protocol: 98 172.20.20.187:20001 [ 153.322508][ T7965] sctp: [Deprecated]: syz.5.574 (pid 7965) Use of int in maxseg socket option. [ 153.322508][ T7965] Use struct sctp_assoc_value instead [ 153.391502][ T7975] netlink: 696 bytes leftover after parsing attributes in process `syz.1.577'. [ 153.588330][ T7945] netlink: 16 bytes leftover after parsing attributes in process `syz.3.567'. [ 153.598647][ T7980] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 153.622242][ T7945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.567'. [ 153.682348][ T7982] netlink: 'syz.5.580': attribute type 10 has an invalid length. [ 153.751170][ T7982] team0: Device hsr_slave_0 failed to register rx_handler [ 153.753820][ T7987] netlink: 'syz.2.581': attribute type 1 has an invalid length. [ 153.765918][ T7980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.766770][ T7987] netlink: 'syz.2.581': attribute type 3 has an invalid length. [ 153.784083][ T7987] NCSI netlink: No device for ifindex 813332851 [ 154.446484][ T8015] FAULT_INJECTION: forcing a failure. [ 154.446484][ T8015] name failslab, interval 1, probability 0, space 0, times 1 [ 154.525737][ T8015] CPU: 0 UID: 0 PID: 8015 Comm: syz.0.592 Not tainted syzkaller #0 PREEMPT(full) [ 154.525765][ T8015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 154.525776][ T8015] Call Trace: [ 154.525783][ T8015] [ 154.525791][ T8015] dump_stack_lvl+0x189/0x250 [ 154.525820][ T8015] ? __pfx____ratelimit+0x10/0x10 [ 154.525849][ T8015] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.525872][ T8015] ? __pfx__printk+0x10/0x10 [ 154.525902][ T8015] ? __pfx___might_resched+0x10/0x10 [ 154.525926][ T8015] should_fail_ex+0x414/0x560 [ 154.525955][ T8015] should_failslab+0xa8/0x100 [ 154.525984][ T8015] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 154.526008][ T8015] ? __alloc_skb+0x112/0x2d0 [ 154.526031][ T8015] __alloc_skb+0x112/0x2d0 [ 154.526053][ T8015] netlink_sendmsg+0x5c6/0xb30 [ 154.526084][ T8015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.526106][ T8015] ? aa_sock_msg_perm+0xf1/0x1d0 [ 154.526125][ T8015] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 154.526145][ T8015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.526163][ T8015] __sock_sendmsg+0x21c/0x270 [ 154.526191][ T8015] ____sys_sendmsg+0x505/0x830 [ 154.526219][ T8015] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.526251][ T8015] ? import_iovec+0x74/0xa0 [ 154.526278][ T8015] ___sys_sendmsg+0x21f/0x2a0 [ 154.526302][ T8015] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.526365][ T8015] ? __fget_files+0x2a/0x420 [ 154.526392][ T8015] ? __fget_files+0x3a0/0x420 [ 154.526432][ T8015] __x64_sys_sendmsg+0x19b/0x260 [ 154.526456][ T8015] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 154.526489][ T8015] ? __pfx_ksys_write+0x10/0x10 [ 154.526511][ T8015] ? rcu_is_watching+0x15/0xb0 [ 154.526537][ T8015] ? do_syscall_64+0xbe/0x3b0 [ 154.526560][ T8015] do_syscall_64+0xfa/0x3b0 [ 154.526575][ T8015] ? lockdep_hardirqs_on+0x9c/0x150 [ 154.526601][ T8015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.526620][ T8015] ? clear_bhb_loop+0x60/0xb0 [ 154.526652][ T8015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.526669][ T8015] RIP: 0033:0x7fe05ef8ebe9 [ 154.526687][ T8015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.526703][ T8015] RSP: 002b:00007fe05fdc9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.526725][ T8015] RAX: ffffffffffffffda RBX: 00007fe05f1c5fa0 RCX: 00007fe05ef8ebe9 [ 154.526739][ T8015] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 154.526751][ T8015] RBP: 00007fe05fdc9090 R08: 0000000000000000 R09: 0000000000000000 [ 154.526767][ T8015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.526779][ T8015] R13: 00007fe05f1c6038 R14: 00007fe05f1c5fa0 R15: 00007fff9e260698 [ 154.526812][ T8015] [ 155.428513][ T8042] netlink: 'syz.5.601': attribute type 1 has an invalid length. [ 155.473398][ T8042] netlink: 'syz.5.601': attribute type 1 has an invalid length. [ 155.484068][ T8038] macvlan2: entered promiscuous mode [ 155.493730][ T8042] netlink: 'syz.5.601': attribute type 2 has an invalid length. [ 155.509644][ T8038] macvlan2: entered allmulticast mode [ 155.516747][ T8038] veth1_to_bond: entered promiscuous mode [ 155.523742][ T8038] veth1_to_bond: entered allmulticast mode [ 155.538249][ T8038] team0: Port device macvlan2 added [ 155.655475][ T8050] __nla_validate_parse: 8 callbacks suppressed [ 155.655495][ T8050] netlink: 248 bytes leftover after parsing attributes in process `syz.5.604'. [ 157.500033][ T8128] netlink: 20 bytes leftover after parsing attributes in process `syz.3.625'. [ 157.664654][ T8139] netlink: 84 bytes leftover after parsing attributes in process `syz.2.630'. [ 157.682157][ T8139] nbd: must specify at least one socket [ 157.792891][ T8146] vlan0: entered promiscuous mode [ 157.798333][ T8146] vlan0: entered allmulticast mode [ 157.833306][ T8146] veth0_vlan: entered allmulticast mode [ 157.922621][ T8150] netlink: 16 bytes leftover after parsing attributes in process `syz.5.635'. [ 157.932458][ T8150] netlink: 32 bytes leftover after parsing attributes in process `syz.5.635'. [ 157.977424][ T8150] gretap1: entered promiscuous mode [ 157.996205][ T8150] gretap1: entered allmulticast mode [ 158.190872][ T983] IPVS: starting estimator thread 0... [ 158.218073][ T8161] gtp0: entered promiscuous mode [ 158.227742][ T8161] gtp0: entered allmulticast mode [ 158.252607][ T8161] tipc: Enabled bearer , priority 10 [ 158.299587][ T8163] IPVS: using max 25 ests per chain, 60000 per kthread [ 158.465683][ T8165] netlink: 'syz.0.640': attribute type 10 has an invalid length. [ 158.493588][ T8173] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 158.505242][ T8173] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 158.756653][ T8190] netlink: 8 bytes leftover after parsing attributes in process `syz.5.647'. [ 159.326964][ T8199] netlink: 28 bytes leftover after parsing attributes in process `syz.1.648'. [ 159.348160][ T8203] IPVS: Error joining to the multicast group [ 159.354122][ T8199] netlink: 'syz.1.648': attribute type 7 has an invalid length. [ 159.364795][ T8199] netlink: 'syz.1.648': attribute type 8 has an invalid length. [ 159.373576][ T984] tipc: Node number set to 1872496454 [ 159.374690][ T8205] IPVS: Error joining to the multicast group [ 159.380325][ T8199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.648'. [ 159.413567][ T8199] erspan0: entered promiscuous mode [ 159.439450][ T8199] erspan0: left promiscuous mode [ 159.517282][ T8208] only policy match revision 0 supported [ 159.517305][ T8208] unable to load match [ 159.553333][ T8208] netlink: 40 bytes leftover after parsing attributes in process `syz.2.651'. [ 159.922771][ T8228] netlink: 20 bytes leftover after parsing attributes in process `syz.2.658'. [ 160.223603][ T8234] lo speed is unknown, defaulting to 1000 [ 160.255166][ T8234] lo speed is unknown, defaulting to 1000 [ 160.281986][ T8234] lo speed is unknown, defaulting to 1000 [ 160.288963][ T5863] udevd[5863]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 160.357125][ T8234] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 160.424281][ T8234] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 160.491453][ T8244] netlink: 'syz.1.662': attribute type 3 has an invalid length. [ 160.551148][ T8234] lo speed is unknown, defaulting to 1000 [ 160.588313][ T8234] lo speed is unknown, defaulting to 1000 [ 160.656388][ T8234] lo speed is unknown, defaulting to 1000 [ 160.672075][ T8234] lo speed is unknown, defaulting to 1000 [ 160.706143][ T8234] lo speed is unknown, defaulting to 1000 [ 160.723495][ T8234] lo speed is unknown, defaulting to 1000 [ 161.457503][ T8284] vlan2: entered allmulticast mode [ 161.480899][ T8288] __nla_validate_parse: 2 callbacks suppressed [ 161.480917][ T8288] netlink: 72 bytes leftover after parsing attributes in process `syz.2.673'. [ 161.498316][ T8284] hsr0: entered allmulticast mode [ 161.504638][ T8284] hsr_slave_0: entered allmulticast mode [ 161.510920][ T8284] hsr_slave_1: entered allmulticast mode [ 161.543219][ T8286] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.634210][ T8289] team0: Device vti0 is of different type [ 161.814980][ T8286] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.985425][ T8286] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.024444][ T8315] netlink: 20 bytes leftover after parsing attributes in process `syz.0.679'. [ 162.034812][ T8315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.679'. [ 162.084062][ T8317] netlink: 'syz.1.680': attribute type 1 has an invalid length. [ 162.116010][ T8286] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.271755][ T8317] veth3: entered promiscuous mode [ 162.349855][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.425903][ T1042] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.488202][ T59] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.549344][ T59] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.618462][ T8338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.686'. [ 162.637173][ T1321] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.642516][ T8340] netlink: 72 bytes leftover after parsing attributes in process `syz.2.687'. [ 162.679325][ T8338] openvswitch: netlink: nsh attribute has 65520 unknown bytes. [ 162.697840][ T8338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.724645][ T8338] tipc: Enabled bearer , priority 0 [ 162.732429][ T8338] syzkaller0: entered promiscuous mode [ 162.738016][ T8338] syzkaller0: entered allmulticast mode [ 162.748504][ T8338] tipc: Resetting bearer [ 162.797447][ T8338] tipc: Disabling bearer [ 162.887162][ T8352] netlink: 'syz.2.690': attribute type 10 has an invalid length. [ 162.920537][ T8346] netlink: 12 bytes leftover after parsing attributes in process `syz.5.689'. [ 162.934774][ T8352] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.943938][ T8355] netlink: 'syz.2.690': attribute type 10 has an invalid length. [ 162.964996][ T8352] team0: entered allmulticast mode [ 162.979181][ T8352] bond0: (slave team0): Enslaving as an active interface with an up link [ 163.145843][ T8363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.165659][ T8355] syz_tun: entered allmulticast mode [ 163.180279][ T8355] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 163.367293][ T8352] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.404383][ T8359] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 163.412174][ T8359] syz_tun: entered promiscuous mode [ 163.426348][ T8359] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 163.443854][ T8359] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 163.464462][ T8373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.693'. [ 163.479028][ T8350] lo speed is unknown, defaulting to 1000 [ 163.750195][ T8387] netlink: 72 bytes leftover after parsing attributes in process `syz.0.700'. [ 163.875052][ T8385] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.905077][ T8385] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.163419][ T8385] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.204166][ T8385] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.357663][ T8413] netlink: 212388 bytes leftover after parsing attributes in process `syz.3.706'. [ 164.447490][ T8385] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.464097][ T8413] openvswitch: netlink: Message has 5 unknown bytes. [ 164.479128][ T8385] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.521733][ T8415] netlink: 'syz.2.708': attribute type 29 has an invalid length. [ 164.530341][ T8419] netlink: 'syz.2.708': attribute type 29 has an invalid length. [ 164.532068][ T8420] netlink: 500 bytes leftover after parsing attributes in process `syz.2.708'. [ 164.648855][ T8385] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.663206][ T8385] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.987857][ T1042] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.029907][ T1042] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.159141][ T1321] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.218227][ T1321] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.417696][ T5974] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.444227][ T5974] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.487907][ T5974] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.517673][ T5974] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.654138][ T8458] netlink: 'syz.0.719': attribute type 64 has an invalid length. [ 166.456971][ T8501] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 167.017989][ T8532] tipc: Enabling of bearer rejected, already enabled [ 167.355946][ T8543] : renamed from bridge_slave_0 (while UP) [ 167.909510][ T8566] __nla_validate_parse: 7 callbacks suppressed [ 167.909531][ T8566] netlink: 24 bytes leftover after parsing attributes in process `syz.5.752'. [ 168.041305][ T8568] netlink: 12 bytes leftover after parsing attributes in process `syz.2.753'. [ 168.056333][ T8571] netlink: 16 bytes leftover after parsing attributes in process `syz.1.754'. [ 168.256141][ T8580] netlink: 'syz.0.757': attribute type 24 has an invalid length. [ 168.298109][ T8582] netlink: 108 bytes leftover after parsing attributes in process `syz.0.757'. [ 168.315017][ T8587] netlink: 84 bytes leftover after parsing attributes in process `syz.1.759'. [ 168.338975][ T8587] nbd: must specify at least one socket [ 168.498778][ T8589] veth0: entered promiscuous mode [ 168.524034][ T8588] veth0: left promiscuous mode [ 168.530563][ T8594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.542518][ T8596] FAULT_INJECTION: forcing a failure. [ 168.542518][ T8596] name failslab, interval 1, probability 0, space 0, times 0 [ 168.578795][ T8596] CPU: 1 UID: 0 PID: 8596 Comm: syz.3.763 Not tainted syzkaller #0 PREEMPT(full) [ 168.578824][ T8596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 168.578835][ T8596] Call Trace: [ 168.578843][ T8596] [ 168.578852][ T8596] dump_stack_lvl+0x189/0x250 [ 168.578880][ T8596] ? __pfx____ratelimit+0x10/0x10 [ 168.578908][ T8596] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.578930][ T8596] ? __pfx__printk+0x10/0x10 [ 168.578959][ T8596] ? __pfx___might_resched+0x10/0x10 [ 168.578976][ T8596] ? fs_reclaim_acquire+0x7d/0x100 [ 168.579007][ T8596] should_fail_ex+0x414/0x560 [ 168.579038][ T8596] should_failslab+0xa8/0x100 [ 168.579067][ T8596] __kmalloc_noprof+0xcb/0x4f0 [ 168.579090][ T8596] ? kernfs_fop_write_iter+0x158/0x4f0 [ 168.579121][ T8596] kernfs_fop_write_iter+0x158/0x4f0 [ 168.579156][ T8596] vfs_write+0x5c9/0xb30 [ 168.579186][ T8596] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 168.579212][ T8596] ? __pfx_vfs_write+0x10/0x10 [ 168.579248][ T8596] ? __fget_files+0x2a/0x420 [ 168.579286][ T8596] ksys_write+0x145/0x250 [ 168.579314][ T8596] ? __pfx_ksys_write+0x10/0x10 [ 168.579334][ T8596] ? rcu_is_watching+0x15/0xb0 [ 168.579358][ T8596] ? do_syscall_64+0xbe/0x3b0 [ 168.579380][ T8596] do_syscall_64+0xfa/0x3b0 [ 168.579395][ T8596] ? lockdep_hardirqs_on+0x9c/0x150 [ 168.579420][ T8596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.579438][ T8596] ? clear_bhb_loop+0x60/0xb0 [ 168.579461][ T8596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.579479][ T8596] RIP: 0033:0x7f0186d8ebe9 [ 168.579505][ T8596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.579520][ T8596] RSP: 002b:00007f0187cc2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 168.579541][ T8596] RAX: ffffffffffffffda RBX: 00007f0186fc5fa0 RCX: 00007f0186d8ebe9 [ 168.579553][ T8596] RDX: 0000000000000012 RSI: 0000200000000c40 RDI: 0000000000000004 [ 168.579565][ T8596] RBP: 00007f0187cc2090 R08: 0000000000000000 R09: 0000000000000000 [ 168.579576][ T8596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.579586][ T8596] R13: 00007f0186fc6038 R14: 00007f0186fc5fa0 R15: 00007ffcf91839a8 [ 168.579620][ T8596] [ 169.326513][ T8625] netlink: 84 bytes leftover after parsing attributes in process `syz.5.774'. [ 169.347433][ T8625] nbd: must specify at least one socket [ 169.358559][ T8628] Unsupported ieee802154 address type: 0 [ 169.365385][ T8629] netlink: 12 bytes leftover after parsing attributes in process `syz.3.772'. [ 169.387131][ T8630] Unsupported ieee802154 address type: 0 [ 169.550230][ T8639] netlink: 8 bytes leftover after parsing attributes in process `syz.5.776'. [ 169.559483][ T8639] netlink: 4 bytes leftover after parsing attributes in process `syz.5.776'. [ 169.561275][ T8613] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 169.585036][ T8613] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 169.596412][ T8613] gretap1: entered promiscuous mode [ 169.622117][ T8613] gretap1: entered allmulticast mode [ 169.693532][ T959] syzkaller1: tun_net_xmit 90 [ 169.827297][ T8645] tipc: Enabled bearer , priority 0 [ 169.881447][ T8645] syzkaller0: entered promiscuous mode [ 169.886967][ T8645] syzkaller0: entered allmulticast mode [ 169.976515][ T8649] netlink: 248 bytes leftover after parsing attributes in process `syz.0.780'. [ 170.021469][ T8645] tipc: Resetting bearer [ 170.052882][ T8644] tipc: Resetting bearer [ 170.076970][ T8644] tipc: Disabling bearer [ 170.280502][ T8664] netlink: 'syz.1.785': attribute type 3 has an invalid length. [ 171.216190][ T8710] gretap0: entered promiscuous mode [ 171.248538][ T8710] gretap0: left promiscuous mode [ 171.415957][ T8721] netlink: 'syz.3.803': attribute type 1 has an invalid length. [ 171.423904][ T8721] netlink: 'syz.3.803': attribute type 2 has an invalid length. [ 171.431771][ T8721] netlink: 'syz.3.803': attribute type 1 has an invalid length. [ 171.905849][ T8743] syzkaller0: entered promiscuous mode [ 171.912977][ T8743] syzkaller0: entered allmulticast mode [ 171.920697][ T8743] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 172.188171][ T8761] unsupported nlmsg_type 40 [ 172.323628][ T8768] netlink: 'syz.5.817': attribute type 1 has an invalid length. [ 172.670390][ T8780] netlink: 'syz.1.822': attribute type 1 has an invalid length. [ 172.739037][ T8785] netlink: 'syz.5.824': attribute type 3 has an invalid length. [ 172.780986][ T8786] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 172.810730][ T8786] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 172.963683][ T8780] gretap2: entered promiscuous mode [ 172.977763][ T8780] bond1: (slave gretap2): making interface the new active one [ 173.000539][ T8780] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 173.355266][ T8810] __nla_validate_parse: 12 callbacks suppressed [ 173.355287][ T8810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.832'. [ 173.639609][ T8816] macvlan2: left allmulticast mode [ 173.644813][ T8816] veth1_to_bond: left allmulticast mode [ 173.646815][ T8825] netlink: 146780 bytes leftover after parsing attributes in process `syz.0.836'. [ 173.685097][ T8816] veth1_to_bond: left promiscuous mode [ 173.723973][ T8816] team0: Port device macvlan2 removed [ 174.016488][ T8839] netlink: 'syz.2.840': attribute type 1 has an invalid length. [ 174.059214][ T8838] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 174.070165][ T8839] netlink: 184 bytes leftover after parsing attributes in process `syz.2.840'. [ 174.125678][ T8839] netlink: 'syz.2.840': attribute type 1 has an invalid length. [ 174.246206][ T8846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.842'. [ 174.293602][ T8846] bridge_slave_1: left allmulticast mode [ 174.355977][ T8846] bridge_slave_1: left promiscuous mode [ 174.379477][ T8846] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.417273][ T8853] netlink: 28 bytes leftover after parsing attributes in process `syz.3.845'. [ 174.437620][ T8846] bridge_slave_0: left allmulticast mode [ 174.444674][ T8846] bridge_slave_0: left promiscuous mode [ 174.469083][ T8846] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.701719][ T8876] netlink: 'syz.1.848': attribute type 1 has an invalid length. [ 174.846962][ T8876] 8021q: adding VLAN 0 to HW filter on device bond2 [ 174.932743][ T8879] bond2: (slave veth3): Enslaving as an active interface with a down link [ 175.201136][ T8885] syzkaller0: entered promiscuous mode [ 175.206878][ T8885] syzkaller0: entered allmulticast mode [ 175.273824][ T49] syzkaller0: tun_net_xmit 48 [ 175.289117][ T8885] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 175.302594][ T8885] syzkaller0: Linktype set failed because interface is up [ 175.409847][ T8901] netlink: 68 bytes leftover after parsing attributes in process `syz.0.855'. [ 177.245266][ T8937] lo speed is unknown, defaulting to 1000 [ 177.458251][ T8949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.869'. [ 178.017499][ T8971] netlink: 'syz.0.876': attribute type 10 has an invalid length. [ 178.045714][ T8971] netlink: 40 bytes leftover after parsing attributes in process `syz.0.876'. [ 178.092532][ T8971] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 178.176459][ T8976] bridge_slave_0: entered promiscuous mode [ 178.510568][ T8987] nbd1: detected capacity change from 0 to 127 [ 178.527070][ T51] block nbd1: Receive control failed (result -32) [ 178.528152][ T5863] block nbd1: Send control failed (result -32) [ 178.563589][ T5863] block nbd1: Request send failed, requeueing [ 178.588198][ T96] block nbd1: Dead connection, failed to find a fallback [ 178.596633][ T96] block nbd1: shutting down sockets [ 178.603233][ T96] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.613321][ T96] Buffer I/O error on dev nbd1, logical block 0, async page read [ 178.621828][ T5863] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.639164][ T5863] Buffer I/O error on dev nbd1, logical block 1, async page read [ 178.647403][ T5863] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.658250][ T5863] Buffer I/O error on dev nbd1, logical block 2, async page read [ 178.666327][ T5863] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.675757][ T5863] Buffer I/O error on dev nbd1, logical block 3, async page read [ 178.684131][ T5863] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.693538][ T5863] Buffer I/O error on dev nbd1, logical block 0, async page read [ 178.701621][ T5863] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.710814][ T5863] Buffer I/O error on dev nbd1, logical block 1, async page read [ 178.719303][ T5863] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.728430][ T5863] Buffer I/O error on dev nbd1, logical block 2, async page read [ 178.731122][ T8997] netlink: 176956 bytes leftover after parsing attributes in process `syz.3.884'. [ 178.736492][ T5863] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.783296][ T5863] Buffer I/O error on dev nbd1, logical block 3, async page read [ 178.805421][ T5863] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.842228][ T5863] Buffer I/O error on dev nbd1, logical block 0, async page read [ 178.861102][ T5863] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.883309][ T5863] Buffer I/O error on dev nbd1, logical block 1, async page read [ 178.930608][ T5863] ldm_validate_partition_table(): Disk read failed. [ 178.964589][ T5863] Dev nbd1: unable to read RDB block 0 [ 178.978112][ T5863] nbd1: unable to read partition table [ 179.071284][ T9006] netlink: 40 bytes leftover after parsing attributes in process `syz.5.887'. [ 179.105478][ T5863] ldm_validate_partition_table(): Disk read failed. [ 179.132745][ T5863] Dev nbd1: unable to read RDB block 0 [ 179.162843][ T5863] nbd1: unable to read partition table [ 179.207687][ T5863] ldm_validate_partition_table(): Disk read failed. [ 179.252441][ T5863] Dev nbd1: unable to read RDB block 0 [ 179.252951][ T9025] netlink: 'syz.3.892': attribute type 2 has an invalid length. [ 179.276921][ T5863] nbd1: unable to read partition table [ 179.326003][ T5863] ldm_validate_partition_table(): Disk read failed. [ 179.347041][ T9026] netlink: 96 bytes leftover after parsing attributes in process `syz.5.894'. [ 179.356901][ T9026] 8021q: VLANs not supported on sit0 [ 179.380867][ T5863] Dev nbd1: unable to read RDB block 0 [ 179.415945][ T9029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.892'. [ 179.419410][ T5863] nbd1: unable to read partition table [ 179.524490][ T9029] veth0_macvtap: left promiscuous mode [ 180.018665][ T9051] netlink: zone id is out of range [ 180.035226][ T9051] netlink: zone id is out of range [ 180.082044][ T9051] netlink: zone id is out of range [ 180.096494][ T9057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.904'. [ 180.099916][ T9051] netlink: zone id is out of range [ 180.159133][ T9051] netlink: zone id is out of range [ 180.164305][ T9051] netlink: zone id is out of range [ 180.182963][ T9056] tipc: Cannot configure node identity twice [ 180.265281][ T9051] netlink: zone id is out of range [ 180.304783][ T9051] netlink: zone id is out of range [ 180.333610][ T9051] netlink: del zone limit has 4 unknown bytes [ 180.804949][ T9085] tipc: Enabled bearer , priority 0 [ 180.921453][ T9090] netlink: 'syz.5.912': attribute type 2 has an invalid length. [ 180.951429][ T9085] tipc: Disabling bearer [ 180.984631][ T9090] netlink: 'syz.5.912': attribute type 2 has an invalid length. [ 181.142999][ T9097] netlink: 36 bytes leftover after parsing attributes in process `syz.0.913'. [ 181.421915][ T9104] tipc: Enabling of bearer rejected, already enabled [ 181.614966][ T9113] bridge0: port 3(syz_tun) entered blocking state [ 181.639375][ T9113] bridge0: port 3(syz_tun) entered disabled state [ 181.659723][ T9113] syz_tun: entered allmulticast mode [ 181.665236][ T9115] netlink: 76 bytes leftover after parsing attributes in process `syz.1.919'. [ 181.690932][ T9113] syz_tun: entered promiscuous mode [ 181.720062][ T9113] bridge0: port 3(syz_tun) entered blocking state [ 181.726845][ T9113] bridge0: port 3(syz_tun) entered forwarding state [ 181.974666][ T9130] netlink: 28 bytes leftover after parsing attributes in process `syz.3.922'. [ 181.997215][ T9129] ipvlan2: entered promiscuous mode [ 182.093370][ T9130] netlink: 'syz.3.922': attribute type 1 has an invalid length. [ 182.357756][ T9142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.929'. [ 182.460166][ T9156] netlink: 20 bytes leftover after parsing attributes in process `syz.0.932'. [ 183.066590][ T9183] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 183.243529][ T9188] tipc: Enabled bearer , priority 0 [ 183.289805][ T9189] tipc: Resetting bearer [ 183.328497][ T9198] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 183.412087][ T9185] tipc: Disabling bearer [ 183.641622][ T5876] udevd[5876]: inotify_add_watch(7, /dev/nbd3, 10) failed: No such file or directory [ 183.736342][ T5974] nci: nci_rx_work: unknown MT 0x1 [ 183.867412][ T9224] __nla_validate_parse: 4 callbacks suppressed [ 183.867432][ T9224] netlink: 40 bytes leftover after parsing attributes in process `syz.1.953'. [ 183.923121][ T9220] netlink: 20 bytes leftover after parsing attributes in process `syz.3.951'. [ 184.257086][ T9249] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.617320][ T9261] netlink: 40 bytes leftover after parsing attributes in process `syz.2.962'. [ 184.828299][ T9269] syzkaller1: entered promiscuous mode [ 184.842719][ T9269] syzkaller1: entered allmulticast mode [ 184.867404][ T9269] netlink: 'syz.2.966': attribute type 1 has an invalid length. [ 184.964988][ T9269] bond2: entered promiscuous mode [ 184.975508][ T9269] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.985584][ T9278] netlink: 'syz.5.968': attribute type 10 has an invalid length. [ 184.996039][ T9278] netlink: 40 bytes leftover after parsing attributes in process `syz.5.968'. [ 185.022727][ T9273] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.052062][ T9273] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 185.062929][ T9273] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 185.085977][ T9273] bond2: (slave wireguard0): making interface the new active one [ 185.103677][ T9283] openvswitch: netlink: Missing key (keys=40, expected=100) [ 185.106598][ T9273] wireguard0: entered promiscuous mode [ 185.124638][ T9273] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 185.174095][ T9278] team0: Port device geneve0 added [ 186.029942][ T9338] netlink: 'syz.1.988': attribute type 10 has an invalid length. [ 186.053962][ T9331] netlink: 'syz.5.985': attribute type 13 has an invalid length. [ 186.063931][ T9331] lo: entered promiscuous mode [ 186.068598][ T983] IPVS: starting estimator thread 0... [ 186.069604][ T9331] lo: entered allmulticast mode [ 186.078611][ T9333] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 186.085546][ T9331] tunl0: entered promiscuous mode [ 186.095540][ T9331] tunl0: entered allmulticast mode [ 186.106496][ T9331] gre0: entered promiscuous mode [ 186.116361][ T9331] gre0: entered allmulticast mode [ 186.146344][ T9331] gretap0: entered promiscuous mode [ 186.159173][ T9331] gretap0: entered allmulticast mode [ 186.165948][ T9345] netlink: 'syz.1.988': attribute type 10 has an invalid length. [ 186.180734][ T9331] gretap0: refused to change device tx_queue_len [ 186.181580][ T9342] IPVS: using max 26 ests per chain, 62400 per kthread [ 186.187344][ T9331] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 186.308634][ T9338] team0: Port device dummy0 added [ 186.411758][ T9354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.991'. [ 186.463864][ T9355] netlink: 20 bytes leftover after parsing attributes in process `syz.5.992'. [ 186.876590][ T9345] team0: Port device dummy0 removed [ 186.950797][ T9345] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 187.270139][ T9384] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1000'. [ 187.478412][ T9394] Unsupported ieee802154 address type: 0 [ 187.502717][ T9396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1002'. [ 187.514575][ T9398] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1005'. [ 187.534848][ T9398] nbd: illegal input index 65508 [ 187.729977][ T9411] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1011'. [ 187.742043][ T5930] IPVS: starting estimator thread 0... [ 187.752740][ T9411] xt_policy: neither incoming nor outgoing policy selected [ 187.857958][ T9415] IPVS: using max 27 ests per chain, 64800 per kthread [ 188.453287][ T9448] nbd: illegal input index -28 [ 188.679282][ T9463] netlink: 'syz.3.1026': attribute type 24 has an invalid length. [ 189.143540][ T9479] netlink: 'syz.3.1030': attribute type 1 has an invalid length. [ 189.489623][ T9490] __nla_validate_parse: 4 callbacks suppressed [ 189.489644][ T9490] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1033'. [ 189.576847][ T9493] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1035'. [ 189.588006][ T9497] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1033'. [ 189.613318][ T9494] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1036'. [ 190.192949][ T5863] udevd[5863]: inotify_add_watch(7, /dev/nbd8256, 10) failed: No such file or directory [ 190.296898][ T5863] udevd[5863]: inotify_add_watch(7, /dev/nbd8256, 10) failed: No such file or directory [ 190.412032][ T9530] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 190.523045][ T9541] netlink: 'syz.3.1047': attribute type 4 has an invalid length. [ 190.534835][ T9540] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1049'. [ 190.576625][ T9537] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 190.615373][ T5930] lo speed is unknown, defaulting to 1000 [ 190.948231][ T9555] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.057212][ T5863] udevd[5863]: inotify_add_watch(7, /dev/nbd16192, 10) failed: No such file or directory [ 191.494146][ T9590] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 191.511662][ T9590] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:0 [ 191.607544][ T9597] tipc: Enabled bearer , priority 0 [ 191.654088][ T9597] syzkaller0: entered promiscuous mode [ 191.700710][ T9597] syzkaller0: entered allmulticast mode [ 191.787726][ T9597] tipc: Resetting bearer [ 191.835866][ T9595] tipc: Resetting bearer [ 191.906777][ T9595] tipc: Disabling bearer [ 192.008361][ T9623] rdma_op ffff88802f9929f0 conn xmit_rdma 0000000000000000 [ 192.099004][ T9628] syzkaller1: entered promiscuous mode [ 192.114654][ T9628] syzkaller1: entered allmulticast mode [ 192.201921][ T9633] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1073'. [ 192.780517][ T9660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1082'. [ 193.155301][ T9688] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.315702][ T9691] netlink: 'syz.2.1089': attribute type 1 has an invalid length. [ 193.352413][ T9691] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1089'. [ 193.545103][ T9696] netdevsim netdevsim0 : renamed from netdevsim0 [ 193.596529][ T9696] netdevsim netdevsim0 : left promiscuous mode [ 193.888295][ T9718] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1099'. [ 193.988975][ T9721] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1100'. [ 193.989059][ T9725] netlink: 'syz.3.1100': attribute type 23 has an invalid length. [ 194.356959][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.675822][ T9753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1111'. [ 194.683975][ T9754] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1110'. [ 194.685570][ T9744] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1107'. [ 194.703055][ T9753] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1111'. [ 194.865281][ T9763] netlink: 'syz.1.1114': attribute type 21 has an invalid length. [ 194.885252][ T9763] netlink: 'syz.1.1114': attribute type 22 has an invalid length. [ 194.903365][ T9763] netlink: 'syz.1.1114': attribute type 23 has an invalid length. [ 194.937837][ T9763] netlink: 'syz.1.1114': attribute type 25 has an invalid length. [ 194.944789][ T9767] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1114'. [ 194.951288][ T9763] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1114'. [ 195.295696][ T9775] netlink: 'syz.0.1118': attribute type 10 has an invalid length. [ 195.337859][ T9775] netlink: 'syz.0.1118': attribute type 17 has an invalid length. [ 195.371529][ T9775] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 195.535735][ T9793] syzkaller1: entered promiscuous mode [ 195.553113][ T9793] syzkaller1: entered allmulticast mode [ 195.584041][ T9798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1123'. [ 195.768506][ T9806] bond0: (slave wlan1): Releasing backup interface [ 195.791956][ T9806] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 195.809620][ T9806] batman_adv: batadv0: Adding interface: wlan1 [ 195.815827][ T9806] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.849708][ T9806] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 196.335610][ T9837] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1133'. [ 196.555427][ T9845] pim6reg1: entered promiscuous mode [ 196.589099][ T9845] pim6reg1: entered allmulticast mode [ 196.662540][ T9852] ip6gre2: entered allmulticast mode [ 196.715994][ T9855] netlink: 198244 bytes leftover after parsing attributes in process `syz.2.1139'. [ 197.215538][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1148'. [ 197.238446][ T9887] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 197.253125][ T9887] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 197.713250][ T5974] nci: nci_rx_work: unknown MT 0x1 [ 197.884572][ T9911] syzkaller1: left promiscuous mode [ 197.903093][ T9911] syzkaller1: left allmulticast mode [ 198.791352][ T9959] tipc: Enabled bearer , priority 0 [ 198.800924][ T9959] syzkaller0: entered promiscuous mode [ 198.806436][ T9959] syzkaller0: entered allmulticast mode [ 198.846956][ T9959] tipc: Resetting bearer [ 198.885292][ T9958] tipc: Resetting bearer [ 198.935495][ T9958] tipc: Disabling bearer [ 198.975258][ T9961] pim6reg1: entered promiscuous mode [ 198.995042][ T9961] pim6reg1: entered allmulticast mode [ 199.218214][ T9983] ================================================================== [ 199.226347][ T9983] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400 [ 199.234273][ T9983] Read of size 1 at addr ffff888076d00bb0 by task syz.1.1179/9983 [ 199.242127][ T9983] [ 199.244589][ T9983] CPU: 0 UID: 0 PID: 9983 Comm: syz.1.1179 Not tainted syzkaller #0 PREEMPT(full) [ 199.244617][ T9983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 199.244629][ T9983] Call Trace: [ 199.244637][ T9983] [ 199.244646][ T9983] dump_stack_lvl+0x189/0x250 [ 199.244676][ T9983] ? __kasan_check_byte+0x12/0x40 [ 199.244704][ T9983] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.244727][ T9983] ? lock_release+0x4b/0x3e0 [ 199.244757][ T9983] ? __virt_addr_valid+0x4a5/0x5c0 [ 199.244782][ T9983] print_report+0xca/0x240 [ 199.244800][ T9983] ? xfrm_state_find+0x2cf2/0x5400 [ 199.244819][ T9983] kasan_report+0x118/0x150 [ 199.244847][ T9983] ? xfrm_state_find+0x2cf2/0x5400 [ 199.244870][ T9983] xfrm_state_find+0x2cf2/0x5400 [ 199.244889][ T9983] ? __lock_acquire+0xab9/0xd20 [ 199.244927][ T9983] ? xfrm_state_find+0x1da/0x5400 [ 199.244948][ T9983] ? __pfx_xfrm_state_find+0x10/0x10 [ 199.244976][ T9983] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 199.245014][ T9983] ? xfrm_policy_lookup_bytype+0x2a7/0x1250 [ 199.245040][ T9983] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 199.245066][ T9983] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 199.245090][ T9983] ? xfrm_policy_lookup_bytype+0x11ef/0x1250 [ 199.245128][ T9983] ? xfrm_expand_policies+0x41f/0x6a0 [ 199.245159][ T9983] xfrm_lookup_with_ifid+0x58a/0x1a70 [ 199.245186][ T9983] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 199.245210][ T9983] ? __pfx_call_rcu+0x10/0x10 [ 199.245228][ T9983] ? percpu_counter_add_batch+0xea/0x1e0 [ 199.245253][ T9983] xfrm_lookup_route+0x3c/0x1c0 [ 199.245275][ T9983] tcp_v4_connect+0x846/0x1a00 [ 199.245306][ T9983] ? __pfx_tcp_v4_connect+0x10/0x10 [ 199.245335][ T9983] __inet_stream_connect+0x2ae/0xe80 [ 199.245363][ T9983] ? __local_bh_enable_ip+0x12d/0x1c0 [ 199.245382][ T9983] ? __pfx___inet_stream_connect+0x10/0x10 [ 199.245404][ T9983] ? __local_bh_enable_ip+0x12d/0x1c0 [ 199.245420][ T9983] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 199.245443][ T9983] inet_stream_connect+0x66/0xa0 [ 199.245467][ T9983] __sys_connect+0x316/0x440 [ 199.245496][ T9983] ? __pfx___sys_connect+0x10/0x10 [ 199.245527][ T9983] ? rcu_is_watching+0x15/0xb0 [ 199.245546][ T9983] __x64_sys_connect+0x7a/0x90 [ 199.245571][ T9983] do_syscall_64+0xfa/0x3b0 [ 199.245586][ T9983] ? lockdep_hardirqs_on+0x9c/0x150 [ 199.245610][ T9983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.245629][ T9983] ? clear_bhb_loop+0x60/0xb0 [ 199.245648][ T9983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.245665][ T9983] RIP: 0033:0x7f95dbf8ebe9 [ 199.245682][ T9983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.245698][ T9983] RSP: 002b:00007f95dce94038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 199.245720][ T9983] RAX: ffffffffffffffda RBX: 00007f95dc1c5fa0 RCX: 00007f95dbf8ebe9 [ 199.245734][ T9983] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000005 [ 199.245747][ T9983] RBP: 00007f95dc011e19 R08: 0000000000000000 R09: 0000000000000000 [ 199.245759][ T9983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.245771][ T9983] R13: 00007f95dc1c6038 R14: 00007f95dc1c5fa0 R15: 00007ffc6726ea48 [ 199.245792][ T9983] [ 199.245799][ T9983] [ 199.562632][ T9983] Allocated by task 6563: [ 199.566960][ T9983] kasan_save_track+0x3e/0x80 [ 199.571650][ T9983] __kasan_slab_alloc+0x6c/0x80 [ 199.576501][ T9983] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 199.581968][ T9983] xfrm_state_alloc+0x24/0x2f0 [ 199.586739][ T9983] __find_acq_core+0x8a7/0x1c00 [ 199.591591][ T9983] xfrm_find_acq+0x78/0xa0 [ 199.596005][ T9983] xfrm_alloc_userspi+0x6b3/0xc90 [ 199.601032][ T9983] xfrm_user_rcv_msg+0x7a3/0xab0 [ 199.605971][ T9983] netlink_rcv_skb+0x208/0x470 [ 199.610735][ T9983] xfrm_netlink_rcv+0x79/0x90 [ 199.615414][ T9983] netlink_unicast+0x82c/0x9e0 [ 199.620187][ T9983] netlink_sendmsg+0x805/0xb30 [ 199.624949][ T9983] __sock_sendmsg+0x21c/0x270 [ 199.629632][ T9983] ____sys_sendmsg+0x505/0x830 [ 199.634404][ T9983] ___sys_sendmsg+0x21f/0x2a0 [ 199.639086][ T9983] __x64_sys_sendmsg+0x19b/0x260 [ 199.644033][ T9983] do_syscall_64+0xfa/0x3b0 [ 199.648554][ T9983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.654470][ T9983] [ 199.656801][ T9983] Freed by task 48: [ 199.660610][ T9983] kasan_save_track+0x3e/0x80 [ 199.665297][ T9983] kasan_save_free_info+0x46/0x50 [ 199.670325][ T9983] __kasan_slab_free+0x5b/0x80 [ 199.675092][ T9983] kmem_cache_free+0x18f/0x400 [ 199.679859][ T9983] xfrm_state_gc_task+0x52d/0x6b0 [ 199.684891][ T9983] process_scheduled_works+0xae1/0x17b0 [ 199.690434][ T9983] worker_thread+0x8a0/0xda0 [ 199.695023][ T9983] kthread+0x70e/0x8a0 [ 199.699093][ T9983] ret_from_fork+0x3f9/0x770 [ 199.703678][ T9983] ret_from_fork_asm+0x1a/0x30 [ 199.708438][ T9983] [ 199.710760][ T9983] The buggy address belongs to the object at ffff888076d00880 [ 199.710760][ T9983] which belongs to the cache xfrm_state of size 928 [ 199.724724][ T9983] The buggy address is located 816 bytes inside of [ 199.724724][ T9983] freed 928-byte region [ffff888076d00880, ffff888076d00c20) [ 199.738536][ T9983] [ 199.740857][ T9983] The buggy address belongs to the physical page: [ 199.747263][ T9983] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888076d01100 pfn:0x76d00 [ 199.757321][ T9983] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 199.765817][ T9983] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 199.773355][ T9983] page_type: f5(slab) [ 199.777333][ T9983] raw: 00fff00000000040 ffff888142eda8c0 dead000000000122 0000000000000000 [ 199.785909][ T9983] raw: ffff888076d01100 00000000800f000c 00000000f5000000 0000000000000000 [ 199.794507][ T9983] head: 00fff00000000040 ffff888142eda8c0 dead000000000122 0000000000000000 [ 199.803198][ T9983] head: ffff888076d01100 00000000800f000c 00000000f5000000 0000000000000000 [ 199.811868][ T9983] head: 00fff00000000002 ffffea0001db4001 00000000ffffffff 00000000ffffffff [ 199.820538][ T9983] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 199.829205][ T9983] page dumped because: kasan: bad access detected [ 199.835615][ T9983] page_owner tracks the page as allocated [ 199.841324][ T9983] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6369, tgid 6368 (syz.3.98), ts 105552255736, free_ts 105532494798 [ 199.860424][ T9983] post_alloc_hook+0x240/0x2a0 [ 199.865195][ T9983] get_page_from_freelist+0x21e4/0x22c0 [ 199.870734][ T9983] __alloc_frozen_pages_noprof+0x181/0x370 [ 199.876534][ T9983] alloc_pages_mpol+0x232/0x4a0 [ 199.881410][ T9983] allocate_slab+0x8a/0x370 [ 199.885910][ T9983] ___slab_alloc+0xbeb/0x1410 [ 199.890586][ T9983] kmem_cache_alloc_noprof+0x283/0x3c0 [ 199.896045][ T9983] xfrm_state_alloc+0x24/0x2f0 [ 199.900813][ T9983] xfrm_add_sa+0x17d1/0x4070 [ 199.905400][ T9983] xfrm_user_rcv_msg+0x7a3/0xab0 [ 199.910334][ T9983] netlink_rcv_skb+0x208/0x470 [ 199.915097][ T9983] xfrm_netlink_rcv+0x79/0x90 [ 199.919770][ T9983] netlink_unicast+0x82c/0x9e0 [ 199.924537][ T9983] netlink_sendmsg+0x805/0xb30 [ 199.929296][ T9983] __sock_sendmsg+0x21c/0x270 [ 199.933974][ T9983] ____sys_sendmsg+0x505/0x830 [ 199.938734][ T9983] page last free pid 6359 tgid 6353 stack trace: [ 199.945061][ T9983] __free_frozen_pages+0xbc4/0xd30 [ 199.950184][ T9983] stack_depot_save_flags+0x436/0x860 [ 199.955560][ T9983] kasan_save_track+0x4f/0x80 [ 199.960234][ T9983] __kasan_kmalloc+0x93/0xb0 [ 199.964824][ T9983] __kmalloc_cache_noprof+0x230/0x3d0 [ 199.970193][ T9983] ref_tracker_alloc+0x133/0x460 [ 199.975131][ T9983] switchdev_deferred_enqueue+0x111/0x240 [ 199.980851][ T9983] br_set_state+0x356/0x710 [ 199.985350][ T9983] br_make_forwarding+0xfd/0x1f0 [ 199.990282][ T9983] br_port_state_selection+0x198/0x5e0 [ 199.995741][ T9983] br_stp_enable_port+0x175/0x250 [ 200.000765][ T9983] br_add_if+0xbb9/0xec0 [ 200.005003][ T9983] do_set_master+0x530/0x6d0 [ 200.009595][ T9983] do_setlink+0xcf0/0x41c0 [ 200.014006][ T9983] rtnl_setlink+0x604/0x900 [ 200.018508][ T9983] rtnetlink_rcv_msg+0x7cc/0xb70 [ 200.023446][ T9983] [ 200.025763][ T9983] Memory state around the buggy address: [ 200.031392][ T9983] ffff888076d00a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 200.039450][ T9983] ffff888076d00b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 200.047509][ T9983] >ffff888076d00b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 200.055560][ T9983] ^ [ 200.061230][ T9983] ffff888076d00c00: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 200.069297][ T9983] ffff888076d00c80: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 200.077349][ T9983] ================================================================== [ 200.103033][ T9983] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 200.110278][ T9983] CPU: 0 UID: 0 PID: 9983 Comm: syz.1.1179 Not tainted syzkaller #0 PREEMPT(full) [ 200.119582][ T9983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 200.129653][ T9983] Call Trace: [ 200.132938][ T9983] [ 200.135868][ T9983] dump_stack_lvl+0x99/0x250 [ 200.140466][ T9983] ? __asan_memcpy+0x40/0x70 [ 200.145060][ T9983] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.150265][ T9983] ? __pfx__printk+0x10/0x10 [ 200.154874][ T9983] vpanic+0x281/0x750 [ 200.158865][ T9983] ? preempt_schedule+0xae/0xc0 [ 200.163731][ T9983] ? __pfx_vpanic+0x10/0x10 [ 200.168231][ T9983] ? preempt_schedule_common+0x83/0xd0 [ 200.173691][ T9983] ? preempt_schedule+0xae/0xc0 [ 200.178634][ T9983] ? __pfx_preempt_schedule+0x10/0x10 [ 200.184015][ T9983] panic+0xb9/0xc0 [ 200.187736][ T9983] ? __pfx_panic+0x10/0x10 [ 200.192150][ T9983] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 200.198065][ T9983] ? xfrm_state_find+0x2cf2/0x5400 [ 200.203223][ T9983] check_panic_on_warn+0x89/0xb0 [ 200.208213][ T9983] ? xfrm_state_find+0x2cf2/0x5400 [ 200.213335][ T9983] end_report+0x78/0x160 [ 200.217587][ T9983] kasan_report+0x129/0x150 [ 200.222104][ T9983] ? xfrm_state_find+0x2cf2/0x5400 [ 200.227223][ T9983] xfrm_state_find+0x2cf2/0x5400 [ 200.232155][ T9983] ? __lock_acquire+0xab9/0xd20 [ 200.237021][ T9983] ? xfrm_state_find+0x1da/0x5400 [ 200.242085][ T9983] ? __pfx_xfrm_state_find+0x10/0x10 [ 200.247375][ T9983] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 200.253541][ T9983] ? xfrm_policy_lookup_bytype+0x2a7/0x1250 [ 200.259439][ T9983] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 200.266032][ T9983] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 200.271931][ T9983] ? xfrm_policy_lookup_bytype+0x11ef/0x1250 [ 200.277935][ T9983] ? xfrm_expand_policies+0x41f/0x6a0 [ 200.283310][ T9983] xfrm_lookup_with_ifid+0x58a/0x1a70 [ 200.288690][ T9983] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 200.294505][ T9983] ? __pfx_call_rcu+0x10/0x10 [ 200.299190][ T9983] ? percpu_counter_add_batch+0xea/0x1e0 [ 200.304823][ T9983] xfrm_lookup_route+0x3c/0x1c0 [ 200.309678][ T9983] tcp_v4_connect+0x846/0x1a00 [ 200.314451][ T9983] ? __pfx_tcp_v4_connect+0x10/0x10 [ 200.319652][ T9983] __inet_stream_connect+0x2ae/0xe80 [ 200.324940][ T9983] ? __local_bh_enable_ip+0x12d/0x1c0 [ 200.330307][ T9983] ? __pfx___inet_stream_connect+0x10/0x10 [ 200.336125][ T9983] ? __local_bh_enable_ip+0x12d/0x1c0 [ 200.341502][ T9983] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 200.347231][ T9983] inet_stream_connect+0x66/0xa0 [ 200.352173][ T9983] __sys_connect+0x316/0x440 [ 200.356772][ T9983] ? __pfx___sys_connect+0x10/0x10 [ 200.361889][ T9983] ? rcu_is_watching+0x15/0xb0 [ 200.366653][ T9983] __x64_sys_connect+0x7a/0x90 [ 200.371515][ T9983] do_syscall_64+0xfa/0x3b0 [ 200.376027][ T9983] ? lockdep_hardirqs_on+0x9c/0x150 [ 200.381254][ T9983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.387338][ T9983] ? clear_bhb_loop+0x60/0xb0 [ 200.392025][ T9983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.397924][ T9983] RIP: 0033:0x7f95dbf8ebe9 [ 200.402339][ T9983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.421948][ T9983] RSP: 002b:00007f95dce94038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 200.430366][ T9983] RAX: ffffffffffffffda RBX: 00007f95dc1c5fa0 RCX: 00007f95dbf8ebe9 [ 200.438342][ T9983] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000005 [ 200.446309][ T9983] RBP: 00007f95dc011e19 R08: 0000000000000000 R09: 0000000000000000 [ 200.454278][ T9983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.462248][ T9983] R13: 00007f95dc1c6038 R14: 00007f95dc1c5fa0 R15: 00007ffc6726ea48 [ 200.470232][ T9983] [ 200.473387][ T9983] Kernel Offset: disabled [ 200.477699][ T9983] Rebooting in 86400 seconds..