last executing test programs: 2m37.361900918s ago: executing program 1 (id=1627): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800234000000004400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000040000a0000000900010073797a31000000000900020073797a310000000020000000000a03000000000000000000050000070900010073797a31000000001400000011000100d5a6c9160eee"], 0xf8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc00}, 0x40) (async) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc00}, 0x40) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000300)='cgroup.freeze\x00', 0x275a, 0xfffe) preadv(r7, &(0x7f0000002c00)=[{0x0}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0x7, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xa}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x850}, 0x4048080) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xa}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x850}, 0x4048080) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x25, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 2m37.122971565s ago: executing program 1 (id=1629): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x10f, 0x85, &(0x7f00000000c0), 0x4) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0xf, 0x6, 0x101, 0x0, 0x0, {0x3}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000004}, 0x90) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @host}, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x3, 0x1, 0x0, 0xf, 0x0, 0x7, [{0x9, 0x3, 0x401}]}]}, {0x0, [0x30, 0x30, 0x5f]}}, &(0x7f00000006c0)=""/262, 0x35, 0x106, 0x9}, 0x28) (async) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x4000890) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000140)={0xffffffffffffffff, r1, 0x7, 0x21, &(0x7f0000000100)="be96092d6647ef8186c5c4ae27479c1254f92da9394cc377ca81907a8b770269fe", 0x3, 0x9, 0x9, 0x3d7e, 0x1, 0x6, 0x7f, 'syz1\x00'}) (async) close(0x3) 2m37.085185034s ago: executing program 1 (id=1631): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000270001003bbd7000fcdbdf"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004844) 2m37.001802684s ago: executing program 1 (id=1632): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0, 0x3d, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000500), &(0x7f0000000580), 0x8, 0x48, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="78010000", @ANYRES16, @ANYBLOB="0100000000000000000001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542080005000000000024010880f000008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691ca400098028000080060001000a0000001c000200fe880000000000000000000000000001050003000300000028000080060001000a0000001400020000000000000000000000000000000001050003000000000028000080060001000a00000014000200fc0200000000000000000080"], 0x178}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000fbffffff000000000000000085000000bc000000850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) recvmsg$unix(r5, &(0x7f0000002a80)={0x0, 0x0, 0x0}, 0x103) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xfe2c, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r7, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000002f, &(0x7f0000000100)="b9ff0f316844268cb89e14f008004ce0050000000000002c77030a89079f03b180004415050300845013f2325f0094090519fa0000880b943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c060000000000005992078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc04308461738190da450296b0ac014968ce23eefc9d4246dd14afbf79a228326c3acc240d7da058fa4806d1f5f7ff40000001600"/249, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 2m36.894901442s ago: executing program 1 (id=1636): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x42000, &(0x7f0000000040)={@align=0x7, {0x6, 0x800, 0x401, 0x8}}, 0x2911, &(0x7f0000000080), &(0x7f00000000c0)=0x36a304be}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000004f0c000004000000fcffffff9500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x5411, &(0x7f0000000100)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe8, 0xe8, 0x4, [@var={0xa, 0x0, 0x0, 0xe, 0x4, 0x2}, @typedef={0xd, 0x0, 0x0, 0x8, 0x1}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x2}, @enum={0x0, 0x9, 0x0, 0x6, 0x4, [{0xa, 0x10001}, {0x9, 0x8}, {0x3, 0x6}, {0x6, 0x8}, {0x5, 0x7}, {0xb, 0x3}, {0x7, 0x6}, {0xd}, {0x0, 0x401}]}, @ptr={0x10, 0x0, 0x0, 0x2, 0x1}, @fwd={0x3}, @enum={0xe, 0x9, 0x0, 0x6, 0x4, [{0x4, 0x3}, {0xf, 0x7}, {0xe, 0x9}, {0x10, 0x7}, {0x4, 0xc}, {0xc, 0x2}, {0x1, 0x3}, {0x0, 0x5}, {0x0, 0x9}]}]}, {0x0, [0x30, 0x30]}}, &(0x7f0000000440), 0x104, 0x0, 0x1, 0xd3dd, 0x10000, @value=r3}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x7, 0x2261, 0x2}, 0x50) r6 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000440)=0x1c, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000680)={@any, 0x2a69, 0x9, 0x9, 0x4, 0x6, "00edca30d1b04b9085790ef1e4bfa939dcf1147820896dc6aae3a0b0d3640bc9d93b66317ed80be1269c6bd3220db8f213cef4442f1a076a3d5dc3419a40dbe5b61a06412d0b88260293b5ad51d9b9634ca159c2679cd8fec34f99dbc4fecdc26f4ca9a0b1a874a12bde2cdf4010f86faaf73b99336d296476d803521f5ed5d4"}) connect$inet6(r6, &(0x7f0000000640)={0xa, 0x4e21, 0xd, @private2={0xfc, 0x2, '\x00', 0x1}, 0x81}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000100), &(0x7f0000000100)=""/13, 0x2}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0xfffffffc, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}]}}}]}, 0x3c}}, 0x4) ioctl$XFS_IOC_GETPARENTS(r5, 0xc028583e, &(0x7f0000000600)={{[0xb66, 0x7, 0x1, 0x2]}, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000540)=[{{@_ha_fsid={[0x8, 0x9]}, {0x7, 0x8001, 0x2, 0x4}}, 0xfffff801, 0x0, '\x00'}, {{@align=0x5, {0xd, 0x1000, 0xa7, 0x4}}, 0xffff, 0x0, '#@}\x00'}, {{@_ha_fsid={[0x2c, 0x5]}, {0x1000, 0xffc0, 0x6f, 0x3}}, 0x2, 0x0, '.#}&*\x00'}, {{@align=0x1, {0x8, 0x20, 0x0, 0xfff}}, 0x0, 0x0, '\x00'}]}) 2m36.688213548s ago: executing program 1 (id=1642): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000270001003bbd7000fcdbdf250600"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004844) 2m27.379093363s ago: executing program 3 (id=1730): r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 2m26.902494606s ago: executing program 2 (id=1739): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r1, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/131}, {&(0x7f0000000100)=""/23}, {&(0x7f0000000240)=""/218}, {&(0x7f0000000180)=""/121}, {&(0x7f0000000340)=""/26}, {&(0x7f0000000380)}, {&(0x7f0000000480)=""/214}, {&(0x7f0000000580)=""/206}, {&(0x7f0000000680)}], 0x0, &(0x7f0000000780)=""/220}, 0x5}, {{&(0x7f0000000880)=@qipcrtr, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000900)=""/231}, {&(0x7f0000000a00)=""/46}, {&(0x7f0000000a40)=""/203}]}, 0x10001}, {{&(0x7f0000000b80)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000c00)=""/4096}], 0x0, &(0x7f0000001c40)=""/197}}, {{&(0x7f0000001d40)=@nfc, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001dc0)=""/223}], 0x0, &(0x7f0000001f00)=""/177}, 0x9}, {{&(0x7f0000001fc0)=@nl, 0x0, &(0x7f0000003100)=[{&(0x7f0000002040)=""/109}, {&(0x7f00000020c0)=""/44}, {&(0x7f0000002100)=""/4096}]}, 0x2}, {{&(0x7f0000003140)=@generic, 0x0, &(0x7f0000003640)=[{&(0x7f00000031c0)=""/130}, {&(0x7f0000003280)=""/131}, {&(0x7f0000003340)=""/108}, {&(0x7f00000033c0)=""/125}, {&(0x7f0000003440)=""/174}, {&(0x7f0000003500)=""/236}, {&(0x7f0000003600)=""/45}], 0x0, &(0x7f00000036c0)=""/234}, 0x1}, {{&(0x7f00000037c0)=@alg, 0x0, &(0x7f0000003f00)=[{&(0x7f0000003840)=""/34}, {&(0x7f0000003880)=""/203}, {&(0x7f0000003980)=""/212}, {&(0x7f0000003a80)=""/32}, {&(0x7f0000003ac0)=""/168}, {&(0x7f0000003b80)=""/227}, {&(0x7f0000003c80)=""/88}, {&(0x7f0000003d00)=""/185}, {&(0x7f0000003dc0)=""/70}, {&(0x7f0000003e40)=""/147}], 0x0, &(0x7f0000003fc0)=""/155}, 0x43f}, {{&(0x7f0000004080)=@generic, 0x0, &(0x7f0000004380)=[{&(0x7f0000004100)=""/111}, {&(0x7f0000004180)=""/170}, {&(0x7f0000004240)=""/50}, {&(0x7f0000004280)=""/151}, {&(0x7f0000004340)=""/25}], 0x0, &(0x7f0000004400)=""/4096}, 0x400}], 0x4000000000001f5, 0x60010000, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_MIIMON={0x8}]}}}]}, 0x44}}, 0x4800) 2m26.754442552s ago: executing program 3 (id=1743): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000e80), 0x0, 0x40000021, 0x0) 2m26.638500515s ago: executing program 2 (id=1744): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="8c000000150041cc25bd7000ffdbdf250a108000", @ANYRES32=0x0, @ANYBLOB="140001000000000000000000000000000000000114000200fe"], 0x8c}}, 0x8c0) socket$inet6(0xa, 0x800, 0x1) 2m26.272481493s ago: executing program 2 (id=1746): r0 = socket$inet6(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008090000000000000000000063112e000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e24, @remote}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000), 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000003c0)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e24, 0x6, @loopback, 0x80000001}], 0x2c) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000180)=@newspdinfo={0x14, 0x24, 0x400, 0x70bd27, 0x25dfdbfb, 0xfffffffd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000090) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_buf(r4, 0x1, 0x27, &(0x7f0000000380)=""/204, &(0x7f0000000480)=0xcc) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, r5, 0x69801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r1, &(0x7f00000001c0)="11eb030086dd", 0x6, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r5, 0x1, 0x4, 0x6, @multicast}, 0x14) 2m25.934782038s ago: executing program 2 (id=1749): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, 0x0, 0x0) close(0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0x20, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000f0ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r2, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000000800"/20], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000740)=@newtaction={0x64, 0x30, 0xb, 0x2, 0x25dfdbff, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80010001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x39}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000001080)={0x2, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x43}}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000380)={0x2, {{0x2, 0x4e21, @multicast1}}, 0x1}, 0x90) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x170, 0x10, 0x633, 0x0, 0x200000, {{@in=@multicast2, @in=@remote, 0xffff, 0x3ffe, 0x4e21, 0x8001, 0x0, 0x20}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d5, 0x32}, @in=@remote, {0x323, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7efffffe}, {0x0, 0x0, 0x4}, {0x3, 0x0, 0x2}, 0x70bd29, 0x3500, 0xa, 0x4, 0x1}, [@algo_crypt={0x48, 0x2, {{'ctr(cast6)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e1e, 0x0, @in6=@private2}}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e21, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x3d}}}]}, 0x170}}, 0x24008800) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="810902000000000000000300000008000100000000001c0007800c000180080001"], 0x38}, 0x1, 0x0, 0x0, 0x2008810}, 0x48080) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 2m25.732134609s ago: executing program 3 (id=1751): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1e, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x10, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24000800}, 0x8000) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x7) socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x51ee2927639cc674}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x8) bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r10, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r11 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc) 2m25.622555472s ago: executing program 2 (id=1753): r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed100000800"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 2m25.518644116s ago: executing program 2 (id=1754): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000270001003bbd7000fcdbdf25060000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004844) 2m25.254907749s ago: executing program 3 (id=1756): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'sit0\x00', {0xff}, 'macvtap0\x00', {0xff}, 0x0, 0x6}}, @common=@srh1={{0x90}, {0x1, 0x1, 0x0, 0xfd, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff000000, 0xffffff00, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], [0xff, 0xffffffff, 0xff], 0x1, 0x1aeeb7877a132935}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x108, 0x170, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x2, 0x427, 0x6e, 0xef, 0x3}}, @common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x4}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x3, 0x2, 0x80000001, '\x00', 'syz1\x00', {0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0015000600142603600e120800060000000401a8000800a400000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f010400000700000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bf9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0xfe62, &(0x7f0000000280)=[{&(0x7f0000004d00)={0x2c, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x14, 0xc, 0x0, 0x0, @ipv6=@empty}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xf6}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x8011}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000100000000000500000a28000000000a030000000000000000000a0000070800024000000073797a31000000002c000000030a010100000000000000000a00000709f14c0000000000000000000900030073797a320001000014000000110001000000000013154d21a6a6b46e96497eb10a909fd016f05f00ead50b302a6924b18cca"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004054}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000200)=0x2dda, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r8, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x58}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x42}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x59}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x67}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c047}, 0x4001) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendfile(r1, r0, 0x0, 0xf03a0005) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000400000000000e1ff95000000000000002ba76bb3019c1341056bd8174b79603123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00aa19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac05c04683712a0b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e468eea3fcfcf498278a315f5b87e1c26433a8acd715f5888b2007f00000000000000000100000000000000010015d60605000053350000000034a70c2ab40c7cf5691db43a5c00000000000000f030007ce2c6f800000000000000e75a89faff01218087560cce39bf405f1e846c1242000000000040cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bef5d7d617da7a6520655a805608df4d431623c850af895abba14f6fbd7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf050000008600a62e96b7cb8e52cbdc2ba9d580609e31c30879d6fce424c2208af6c3784a1975fa657de38a3a32e4fd67ce446adb431d07db79241aca1dd9ba02453bbb5ee8babe1745e645f091231b986e952afdac972f342c6f184777d05d988d6edc71df0100000013a38300cabf2b554380ad215c789bef4cc574109b8df8d9a9db669557b3809d8c396d2c0361629d1822f722ec23812770d72cd00100000078a75dea785be550dbb420287e0789b8c7044f563a1f68d4efe895fdbc463f747c08f4010586903500000000000000e800000000000000000000000000000000000000003ddf4aa4b1c8b8a0ae6fb5425f1d581961471cdb51f8940290e99ccff4123f955267fe4a75c11448741f064fc7ce7e62ee4df874e086287547d4099aeec9f1538ee25a2a5ccf4a9b604e88e12ff25184d4e3c6f7f623559435b2c505fb711300000000040000000000000000000000000000e67ccc02148a4fc43021cce9f24f4b2f9492c32e7a92a557ac2b44b84e88bbf7a49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd029406000000433f5c899119ec0c0acef5385c5a2720caeb68f1e9c05b0591d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad3a042a7097ddefe0671a5767014b09ddbf69b78f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32879d326497e21e041254f06bd7f3a067e147e82e841dba3867da8bfbc101d3960e07d282f483e7b49991be06b950ccd48f4e49833f3c4a02bbd06c84680549f9eb16682ecb722e8ffaca907a3eaaebfc8e0a47c0076d7cc9d32b3cc96aa751d890881c3c33bd91f6ecf45ab3f12f816318346f9b883427b9190024edc1eddd68f34ce3bfedb5fe5d7beae4d3ca561e37570587783f9673e7ab17f5a09efc1114777d2707d2996961203aedff1c52108d9c0d51dc30209872ec602af42eb29d54a37be0fdfdcd74c2d859a566ee5c30677173a2592a4617ae08bec07422d52d2ba7271550a5c20e3a8d1c8c8fd3025ff00607b2249ae9a18391e01b21b36169790b8e96f7955754b6b01a75165d3573d1dec5cf1b08b6115b43203a5654cce2277eb4c02ef4817b4cb989ac178895810eff7b697f2dc9b308aa2460e3cb85cdc4833571a62bf310700000000000000cc7f923284230ada8c756096a66119d4b6b2f159585c3cf8e7bfdd619e294b1d21cd491b8cfd4a253856e485fe29c6ad177a9fb078ca905782b9ed3c30675b89a784bb8031cac0de95178a5acff029a0f0fe972df22b20afe95fba722056f94ab15f1cf605c33df627311f1b614684d77549"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x0, 0x13, 0x0, &(0x7f0000000fc0)="cc9ff4088b00000000000000000000ef1b0ef8", 0xfffffffffffffffd, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m24.651863322s ago: executing program 3 (id=1762): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x2b, &(0x7f0000000440)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @jmp={0x5, 0x0, 0xb, 0x0, 0x9, 0x2, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x7, 0x9, 0x1, 0x8, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10001}], &(0x7f00000005c0)='GPL\x00', 0xd, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0x9, 0x1, 0x3}, 0x10, 0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000680)=[{0x3, 0x3, 0x0, 0x2}, {0x3, 0x4, 0xb, 0x8}, {0x4, 0x5, 0x7, 0xa}]}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{0x1, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x7, 0x3, 0x9, 0x20, 0xffffffffffffffff, 0xa45, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4, 0xd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0x1b, &(0x7f0000000180)=@raw=[@map_idx={0x18, 0x5, 0x5, 0x0, 0x8}, @ldst={0x0, 0x3, 0x0, 0x5, 0x7, 0x20, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1400}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f0000000280)='syzkaller\x00', 0x3, 0xe5, &(0x7f00000002c0)=""/229, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x22, r3, 0x8, &(0x7f0000000400)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, r4, 0x2, &(0x7f00000008c0)=[r5, r6], &(0x7f0000000900)=[{0x5, 0x1, 0x8, 0x7}, {0x1, 0x1, 0xc, 0x1}], 0x10, 0x8}, 0x94) r7 = socket$inet6(0xa, 0x6, 0x401) ioctl$FICLONERANGE(r7, 0x4020940d, &(0x7f0000000a00)={{r6}, 0xc5, 0x8000000000000001, 0x8}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ec0)={r4, 0xe0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000c00)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa5, &(0x7f0000000cc0)=[{}], 0x8, 0x10, &(0x7f0000000d00), &(0x7f0000000d40), 0x8, 0x4e, 0x8, 0x8, &(0x7f0000000d80)}}, 0x10) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001540)={{r5, &(0x7f0000000f00)='\x00', 0x9243189cb008d8f5, &(0x7f0000000f40)={@_ha_fsid={[0x2, 0xd116]}, {0x720, 0x8, 0x8a, 0xfff}}, 0x3, &(0x7f0000000f80)={@_ha_fsid}, &(0x7f0000000fc0)=0x80000001}, 0x5, &(0x7f0000001480)=[{0x1, 0x5, &(0x7f0000001000)='syzkaller\x00', &(0x7f0000001040)="baa6ec2426511d4eabae21e0edbd700ba8c581ae76564452b2fb", 0x1a, 0x12}, {0x2, 0xffffffff, &(0x7f0000001080)='(\'{%+[^R\\(@\x00', &(0x7f00000010c0)="f6dbdbf7d404e0de450bb29c1f3b88b2aabb2d2a1e2fdf1abadf787e6fa7cc490f08b8f87268b84e81d72757d855806d158463fdb9c3fe2dc4f8b5a8e8502b0a1192e490891c8c98e7f9d5639dedaf5612644c4be0254ce21f11bf78d723a3b3c63e7964f564605fd4878e914cc1212cbccfef1521471abe4d1856cbc26327838403aa35d1abf168a8f1e79c6e14eaec7f1fb873c2c5a7af79e5e167ff4b41ae6119ab", 0xa3}, {0x2, 0x100, &(0x7f0000001180)='\x00', &(0x7f00000011c0)="d14ae471b523bc4ba003ec2a51f2f1b91422136d33a1bd4ceda2e3389a048c6a7e63253a7a5fcf2edfed6acfed645e9c473cd504da896802dccaaff79b643515c82a2469637962c6ef378d661f3a9c8abb8fdda35e56764035422d4128a696d55fad7d57a237095cbbdf9c27b2aa80cff75cb35bcd29bfe44844c515742b875927f2a6cbf6a9d2", 0x87, 0x28}, {0x2, 0x8, &(0x7f0000001280)='*\x00', &(0x7f00000012c0)="8c668c7b104f52a1c0e7f4519b0d12d8fa2b8a5f3fbb624f760bb24904fee3ccd43efddcf0a3af8a623cba8ab14eb9e7d3f6b050fb0ddb768b43e4f371c0e7d03d83e04432fb0229e1e628e97f220a414b3898dec05e7af73fd6a4bf0be59819224e9da7a4da083fa9cff2b096d325b09709e5984ea9682bd9c56cc7393b2b141be225d2d8dec7d0b34304d83bbef0e4fb26f7d69c936f89307de6a7352f61c9b141515a3b1a487314129b42b3aca7990fe4bc4a0112d3305559c342db6c26511a1b90f3fa5ad75df53ff351396d68ab014586beb72e7ece6c221ba2b625", 0xde, 0x2}, {0x2, 0x7, &(0x7f00000013c0)='GPL\x00', &(0x7f0000001400)="53d150629e04b470f7342f14194914986dca751096ce99b990aaabf0690c81386664f8675721e1b323fcc8f80ae4279d628a9e856bf850383bb69feed0738317e4a3dadc59ca79b7873a6c88a5c36f60a682e12017fa3489cfc06a7edd223aa05fff0d22d5d180c49c8d", 0x6a, 0x2}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x18, 0x18, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b00)='syzkaller\x00', 0x8, 0x92, &(0x7f0000000b40)=""/146, 0x0, 0x40, '\x00', r8, 0x0, r9, 0x8, &(0x7f00000015c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000001600)={0x1, 0x0, 0x4a7, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001640)=[r1], &(0x7f0000001680)=[{0x4, 0x4, 0xe, 0x8}, {0x3, 0x4, 0x8, 0x9}], 0x10, 0x8}, 0x94) unshare(0x6c6a81b3d0ede1bb) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001780)) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f00000017c0)={'batadv0\x00', 0x0}) sendmsg$nl_netfilter(r9, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x1c, 0x13, 0x2, 0x3, 0x70bd2d, 0x25dfdbfc, {0x5, 0x0, 0x7}, [@typed={0x8, 0xfb, 0x0, 0x0, @u32=0x8001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x1) r12 = ioctl$TUNGETDEVNETNS(r9, 0x54e3, 0x0) ioctl$NS_GET_NSTYPE(r12, 0xb703, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000001900), 0x2040, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001940), 0x624000, 0x0) ioctl$XFS_IOC_BULKSTAT(r13, 0x8040587f, &(0x7f0000002040)={{0x5, 0x3, 0x5, 0x9, 0x2}, &(0x7f0000001980)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002100), r9) sendmsg$ETHTOOL_MSG_RINGS_GET(r9, &(0x7f0000002380)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002340)={&(0x7f0000002140)={0x1c4, r14, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000023c0)) bind$bt_l2cap(r9, &(0x7f0000002400)={0x1f, 0x5a, @none, 0x5, 0x2}, 0xe) socket$kcm(0x29, 0x4, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000002440)={{{@in=@initdev, @in6=@private0}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f0000002540)=0xe8) 2m24.550688281s ago: executing program 3 (id=1763): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000270001003bbd7000fcdbdf25060000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004844) 2m21.595563168s ago: executing program 32 (id=1642): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000270001003bbd7000fcdbdf250600"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004844) 2m10.467458256s ago: executing program 33 (id=1754): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000270001003bbd7000fcdbdf25060000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004844) 2m9.422393274s ago: executing program 34 (id=1763): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000270001003bbd7000fcdbdf25060000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004844) 5.286558929s ago: executing program 5 (id=3127): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x802, 0xfffffffe, 0x3, 0x10001}, 0x10) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)={0x4c, r1, 0x1, 0x0, 0x0, {0x21}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd0, r1, 0x100, 0x70bd2d, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xfb5}, {0x6, 0x16, 0x6}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7ff}, {0x6, 0x16, 0x879}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6}, {0x5}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x6008050}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)={0x14, 0x1, 0x9, 0x101}, 0x14}}, 0x0) 5.154425703s ago: executing program 6 (id=3130): socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@mptcp=@mp_join={0x1e, 0x0, 0x9}, @timestamp={0x5, 0x2, 0x0, 0xb00}, @generic={0x0, 0xffffffffffffff2c, "d58838000391"}]}}}}}}, 0xfd6c) 5.057214s ago: executing program 5 (id=3132): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f00000000c0)=0x1, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000100), 0x10, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r1, @ANYRES64=0x0, @ANYRESHEX, @ANYRES64, @ANYRES32=r1, @ANYBLOB="04ddffdf01001000030000a00307000066d71043df633b92", @ANYRES16=r0, @ANYBLOB="c3093f022236fc9bb3cb60ceb254d87438859097a339d2f475f621f38d0c7a0a3b20960c1e9487a22e58847c76a13fd75626ba8b95fd72a8465528bdb212a4ab829bead85b7383aaa6a18539ecc230b4163fe4c3358a10a9f46dc9994150a4de591412e53484fcccc5df30235193", @ANYRES16=r2, @ANYBLOB="3749c03078a53050d6a2eb03df5003ca545d76e440ef4fe9667e32963b6270f8b819d6bc2ab2338621b83a7d4b828493f5dd51560ee6293f35ce32185f9da837cbd7692560aa5854730a0bd889e47812e78124179f70f22252479b75dce265", @ANYRES16=r2], 0x48}, 0x1, 0x0, 0x0, 0x40c0}, 0x801) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000180001002abd7000ffdbd3250a000000ff0300023600000014000700000000000000000000000000000000010800040001000000"], 0x38}, 0x1, 0x0, 0x0, 0x4044004}, 0x20044884) unshare(0x28000600) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ppoll(&(0x7f0000000000)=[{r3, 0xa0}], 0x1, &(0x7f0000000180), 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e27, @empty}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="697ef8cb85218b04e32438abe19fc4aa361ebaff030549f56f815d5f1db06fb0d5d70733798b82e17be0ff9b08f524c58803c80ce26a4e9a4d96d31d2726a34c3b929d6468c93904e080bd9ca71734bc34c5d7049b7c7083ce8e", 0x5a}, {&(0x7f0000002040)="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", 0x192}, {&(0x7f0000001640)="65dfd12433d1c515464f1d0f6f43e4a04e0f19e5ace2e7312364d010341e76d7e2b9e68492012bef148f72b42f56cdf73d5b06e8597ac46ddf9f1f001cbdba5c48c6b28485df457185b4337f901eb4ed4358f005c0874a80ba11eb5ef40c10c03bec12dbc1e5d9b6743dc9255e3d4a62f56874958ddd35fda382303a5c19370fc478e5d567058d04fed6e2239300fbf8a5fbe958d8c8e8bd", 0x98}, {&(0x7f0000001700)="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", 0xfa}, {&(0x7f0000001800)="3e69212bc3df91cb466b9530320dd2898133f6771ab255037c50ab7c3306bccd3a151e1a1624395dab72391012f6ffd08b756f998a44009c3ab4ecc9578028068eebdae5b13e8e3a4c12b60cdb0bc666ad917a814d540f33b4279f66597b93e28c8f75722dba788df0f1fadd871e933b698b4acbd82f491205bdbbd374dbdefcf8e7b30da484f86e71", 0x89}, {&(0x7f00000018c0)="d5774a67d40319119f556951f42e28d6aad4d31b781e37fee9299ccf88bf3cbcb1094977aefd62d156fb0c1c4a01e1cbb0810aba0c4a14414a9d1dcf5b51ce9f2110769f5763cd75b92bef8dd7b5ff8c1a9f65939fa8e916ef4a0cbaa6a4156232622d4da0b0f222bd9e99f7b431ff58518d266c7c6a492f35e3441464721be04271e8b24977ccd423377155b77d8d8d9a", 0x91}, {&(0x7f0000001980)="842b7291ef8f2b6d620dbc310a033a7d5860872ec51f07c7ee48f3a2bb00afcbb2c253c5141f8954cfe48427dd710e6de5ad363436356a8ed4c3c9a9c7a77e0869d9286d561a528d9af53e28707fd7b909c10064e9cd2d4c0c77d6606e5eff02716e1dac1daf315f1df0c9214c4584c7fc6c7c78ff74019153dbcc5afe34f016548ace293a4da9874f229c7ed70c0ad5a4e771ceed6493efd7d81cbf2668fe7d18807135abb17d28dc8f0c34e54e8d28c13c58e59483fe10ef4a06f9a49bd1b665d608a6335211af89182ef18f7aa5f81a28d71ead0a50c33c503200"/234, 0xea}, {&(0x7f0000001ac0)="274e1d783dc31ee06359745967fa61c9a27a5fb999318485a4a4b6ff2a72c390fe9cd24c77787d9fcb669d9ca74c4bdcbe1f99bbbfdca5bd0197869357c2783d1eabd622dd40420b4762d5def88a66edf4ec537efb2daa20af6454d62cb4b0fd58f82f653e3a28b730cfddbf0615517caf2d261367ebce6faee68ea962440e035b1a2b48d431ffffaa206663b2b619b80e1b0c219c78dfa67cf97500"/165, 0xa5}], 0x9, &(0x7f0000002300)=ANY=[@ANYRES16=r4], 0xd8}}, {{&(0x7f0000001d40)=@hci={0x1f, 0x3, 0x4}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001dc0)="4779a102e00d", 0x6}, {&(0x7f0000001e00)="66636c050e6745e759949385441547476179c20685d01606804a5d0c872016ff118d7b3e49968fd8dc1766e6c4e9e38f249562793e54de857b402bd1787212938fc278feac485539e43f04d4c82bf7ad6e690418e6780d0798ed452bfd5865ab", 0x60}, {&(0x7f0000001e80)="2231d65781acf347804e35b0406ad91bbddb0aedc7491eb3ac6396121a2162cfafe9093b388c8808f29ec5ec186ad181b6ab3fa20eecab1c74f84e9f18f138d59b87c66c2a5226bae090576bf82a9fe14f453f4c8715e0a732a65c25046ae3698e03a944fd32f4ca95843111845247245143328297773c98e464447e3f38adb093d2f584f2d78b72359189d964d05b953790b9493d3db695f4832fcb1fa707dfff3559a386d6ad015441af23ba3d67c499d69fcda6eb263febe0affa72249502adf57dbcec74ec2cc53e789742c6f417173f1d1693c6a2953ae7", 0xda}, {&(0x7f0000001f80)="7bf2ed660f9b805e00bcf6d3d17b5ac7749dc0f2adbaadb08e4f831c3d359cbb232e6dfc9ffc45b66681b8d5ec148baa264411f7c4ce7461de45e84446a39f3429572920db4ee7913fb70be32f729ea178114406f83df3ded151a5af0a296e60c1803e8ff4dd3d4f4524c6", 0x6b}], 0x4, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], 0x208}}], 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x9, 0x7fff, 0x5b}, 0x2c) pipe(&(0x7f0000000000)={0xffffffffffffffff}) unshare(0x2a060400) poll(&(0x7f00000003c0)=[{r6, 0x4200}], 0x1, 0x80000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)=ANY=[@ANYBLOB="8b145ec2", @ANYRES16=r8, @ANYBLOB="010028bd7000fddbdf25090000003c0003800800010001000000140002006272696467655f736c6176655f300000080003000000000014000600fe8000000000000000000000000000aa"], 0xfff3}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) 4.820407926s ago: executing program 0 (id=3134): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x0) close(r1) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xfff2, 0xb}, {0x4, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4c, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0xc97a}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x10}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_TARGET={0x8}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xffff}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_MEMORY={0x8, 0xa, 0xfffffffa}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x3ae}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40088e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000680)='l', 0x1, 0x4009, &(0x7f0000000140)={0x11, 0xf6, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.474062931s ago: executing program 6 (id=3138): r0 = socket(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r2, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}]}, 0x3c}}, 0x4080) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c00000052000101fcffffffffffffff0a"], 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000074) (async, rerun: 64) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) (rerun: 64) 4.199067502s ago: executing program 4 (id=3142): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000001000)=""/16, 0x1030000, 0x1000, 0x5}, 0x20) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e22, 0x3ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x0, 0x0, 0x36, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x200000000000000, 0x0, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000001000)=""/16, 0x1030000, 0x1000, 0x5}, 0x20) (async) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e22, 0x3ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x0, 0x0, 0x36, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) (async) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x200000000000000, 0x0, 0x11) (async) 4.024681519s ago: executing program 5 (id=3143): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, 0x0, 0x4000000) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000000}, 0x40044) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r5, 0x0, 0x24000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2000000015, 0x80005, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r7) setsockopt$sock_int(r7, 0x1, 0x12, &(0x7f00000000c0)=0x80008, 0x4) write(r7, &(0x7f0000000440)="1ce481f35bf8f393d1a524a516e4eb07c00517db0bdadcef046fcb113d03a278d222c84a8ba36cbfb3a02fb0209ec1153e06a1cd507f2f318516a857e7316e97e14dc6306cd2d80dc7609bd847a9887a30afa55800f700d5a3bc08b51b5e7f9b186d16461edb87b186f3be88ac84086f86353006264f9592e0181b65f1595016d664a83a870b723d675aac70c053adc849829decbbb412bb0ab64c4b207d7be52403f61b694e015072b76457af42ed435f92ddfe9b2b7e7267ef657658f984d942179446ce065fe0", 0xc8) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) gettid() pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c002c6d0b1becc1c1efc6d6ea5800000b0601080000000000000000060000020500010007000000240007801800018076000240fe8000000000000000000000000000bb05000300650000000900020073797a3100000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20008041}, 0x24008084) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) 3.949036127s ago: executing program 4 (id=3144): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x4) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="00214717a70700000000030600710a5e31163ceb9d0471200000000500000000000000ffff03425d4d50e7182ce0ab6d0000", 0x32}], 0x1, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='/\x00\x00\x00'], 0x20) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x24004000) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x10c, 0xa, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_USERDATA={0xde, 0xd, 0x1, 0x0, "53028150a0087e28631718f4949f0babc269e0ea84ef9c9bcb4b5fa4b24d37e93536e3c19228c074c45e8bed4833707104e7f77a3355ec6a731681d0b0b1fc24a5a3c3db5f87947082f37c0f99365b33f84c28211de6b193bc7141b7b03923dd4e33a7b69b1bef80cb53212e6ddb5c1cceeb02cb3703d99c0d3fea46a90ad9fd7c9f73568f1d385fb37fdefeb0324b3604d41a15e72b649d36c89368879a08970fa85f8b94ace56a9c14de41db445309cf1606867b3a019460f1dda513527ea3b09f9403e1464eacef48fa1a9078b46b9d69a96a499cadb57987"}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x33}]}, 0x10c}, 0x1, 0x0, 0x0, 0x11}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4804) recvmsg(r9, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x40000002) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="f80000001600010028bd7000fcdbdf25e0000001000000000000da389d6b2a5e425d00000000000000000000000000004e2100034e220000020080a03b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000004d432000000200100000000000000000000000000003a3700000000000004000000000000000200000000000000b80a0000000000000800000000000000010000000000000004000000000000000300000000000000220000000000000003000000000000000400000000000000030000000000000000000000ce000000070000002cbd7000ff340000b0e801002c000000000000000100000002000000"], 0xf8}, 0x1, 0x0, 0x0, 0x48095}, 0x4000014) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000010040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000000180)=r11, 0x4) sendmsg$inet(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="fa82", 0xfdef}], 0x1}, 0x20000000) 3.596173388s ago: executing program 7 (id=3146): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff00000000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x10, [], 0x0, [0x0, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc, 0x0, 0x2], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 3.152326731s ago: executing program 5 (id=3147): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000ff31ffffffffffdf00000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="580000001000030428bd780000000054d11d869f258d0000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000003000128009000100766c616e000000002000028006000100020000000600050088a8000004000380060001000400000008000500", @ANYRES32=r11, @ANYRESOCT=r1], 0x58}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r3, @ANYRES32=r6, @ANYRES32=r9, @ANYRES32=r11, @ANYRES8=r8, @ANYRES16, @ANYRES64=0x0, @ANYRESDEC=r1], 0x58}, 0x1, 0x0, 0x0, 0x20000821}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000005400)=[{&(0x7f0000002200)="636f6e6e656374201689", 0xa}], 0x1) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000700)=@data_frame={@a_msdu=@type11={{0x0, 0x2, 0x6, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x9}, @device_b, @device_b, @random="2eca71db4e48", {0x5, 0x5}, @broadcast}, @random="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"}, 0x391) 1.93224188s ago: executing program 6 (id=3148): unshare(0x26020480) r0 = socket(0x1, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x80}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 1.899234717s ago: executing program 7 (id=3149): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400554014000000", @ANYRESOCT, @ANYRES64], 0x14}, 0x1, 0x0, 0x0, 0x855}, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@call={0x85, 0x0, 0x0, 0xc}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @sock_ops=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x91) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x9b, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x26}], 0xf}, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xf}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xfff1, 0xb}}]}}]}, 0x44}}, 0x44800) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.857358267s ago: executing program 0 (id=3150): sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="021800001b000000000000000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000800120000000000000000000000000006000000000000000000000000000000ac1e0001000000000000000000000000e000000200000000000000000000000005000500000000000a00000000000000fc000000000000000000000000000000000000000000000007001900000000000a"], 0xd8}}, 0x0) 1.769733026s ago: executing program 6 (id=3151): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x35}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x39) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x35}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x39) socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c0000001000030428bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f00000000c0)={0x441, 0x12}, 0x5c) (async) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f00000000c0)={0x441, 0x12}, 0x5c) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x10041}, 0x10) socket$tipc(0x1e, 0x5, 0x0) (async) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x41, 0x1}, 0x3}}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) (async) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}}, 0x884) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r11) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r13, 0x5, 0x14, 0x0, &(0x7f00000001c0)="2e9a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socketpair(0x11, 0x2, 0x8, &(0x7f0000000080)) sendmsg$IEEE802154_LLSEC_GETPARAMS(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x1c, r12, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x40000) r14 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000140)={0x3ac, r14, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x94c4381}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d8f3698}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14405cf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x88}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b268996}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f286026}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x87}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b7efb17}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67f97cd1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14ef6b9}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ae592ea}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37ebaa2f}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56d2bc59}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xba}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a13a28f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2bdab864}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x1a8, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7958}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc55d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f816fed}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ed3a06a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9bef}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xacf7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a2b35a6}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x54f2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x79e0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3893bbe3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e0a7009}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8c4d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5589ca2a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6cf4d7e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfc0b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14f16318}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x93f4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8e55}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x224fa934}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6bf3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4ec3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xccb7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a406117}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd3b0}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d7cb63a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc43c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x647ea693}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdff4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x939}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7b3c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4be56f4e}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x187b78d7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x38d61280}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd9f6f5b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9771}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9134}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x194}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5091becf}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb773}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc7ab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2cfac830}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x257ea584}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x25f98573}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb0ae}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9c65c5f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67f388a6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3fc96185}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b1f1a7a}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xd4, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4488daad}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21087a13}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a85bde}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dc6d3f1}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b04c44d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b50fd6c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc7}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x213a8438}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x68bacc91}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ff83517}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e5f9e51}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4028695a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x40014}, 0x4000) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000140)={0x3ac, r14, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x94c4381}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d8f3698}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14405cf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x88}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b268996}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f286026}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x87}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b7efb17}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67f97cd1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14ef6b9}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ae592ea}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37ebaa2f}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56d2bc59}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xba}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a13a28f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2bdab864}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x1a8, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7958}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc55d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f816fed}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ed3a06a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9bef}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xacf7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a2b35a6}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x54f2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x79e0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3893bbe3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e0a7009}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8c4d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5589ca2a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6cf4d7e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfc0b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14f16318}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x93f4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8e55}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x224fa934}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6bf3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4ec3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xccb7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a406117}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd3b0}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d7cb63a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc43c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x647ea693}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdff4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x939}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7b3c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4be56f4e}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x187b78d7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x38d61280}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd9f6f5b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9771}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9134}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x194}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5091becf}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb773}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc7ab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2cfac830}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x257ea584}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x25f98573}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb0ae}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9c65c5f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67f388a6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3fc96185}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b1f1a7a}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xd4, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4488daad}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21087a13}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a85bde}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dc6d3f1}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b04c44d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b50fd6c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc7}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x213a8438}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x68bacc91}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ff83517}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e5f9e51}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4028695a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x40014}, 0x4000) 1.769074636s ago: executing program 0 (id=3152): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x2, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x36, 0x0, &(0x7f0000000180)="c1188e99b95d02ff4284860186dd8a2cd3818eeedc37a2c4c1480c309b3db488eb304bafbae18b852d7840ee363e02c019d905b4f1d7", 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x36, 0x0, &(0x7f0000000180)="c1188e99b95d02ff4284860186dd8a2cd3818eeedc37a2c4c1480c309b3db488eb304bafbae18b852d7840ee363e02c019d905b4f1d7", 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x9}}, 0x14}}, 0x20006004) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newtaction={0xa8, 0x30, 0xb, 0x5, 0x0, {}, [{0x94, 0x1, [@m_ct={0x90, 0x1, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @local}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8000}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8890}, 0x40) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000180)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x5, 0x4, 0x8, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r6, 0x0, 0x0, 0x4}, 0x20) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000300)={0x0, @private, @local}, &(0x7f0000000340)=0xc) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb5, 0xb5, 0xc, [@enum={0x9, 0x6, 0x0, 0x6, 0x4, [{0x2, 0x66}, {0xd, 0xfffffffb}, {0x2, 0x40}, {0x6, 0xb}, {0xf, 0x2}, {0xd, 0x2}]}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @float={0x5, 0x0, 0x0, 0x10, 0x10}, @typedef={0x10, 0x0, 0x0, 0x8, 0x4}, @const={0x8, 0x0, 0x0, 0xa, 0x3}, @restrict={0x4, 0x0, 0x0, 0xb, 0x4}, @datasec={0x4, 0x4, 0x0, 0xf, 0x1, [{0x2, 0x1e, 0x2}, {0x1, 0x72, 0x8}, {0x3, 0x9, 0x5}, {0x2, 0x13d25523, 0x1}], 'd'}]}, {0x0, [0x5f, 0x0, 0x0, 0x30, 0x2e, 0x30, 0x30, 0x5f, 0x5f, 0x0]}}, &(0x7f0000000480)=""/146, 0xdc, 0x92, 0x1, 0x8, 0x10000}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x7, 0x0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}, {0x85, 0x0, 0x0, 0x27}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) (async) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c000000060a010400000000000000000a0000020900010073797a31000000000900020073797a320000000030000000080a010200000000000000000a0000060900010073797a310000000008000b4000000003080009400000000314000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x7, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xe}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x47}]}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0xcd, &(0x7f0000000200)=""/205, 0x41100, 0x21, '\x00', r7, @fallback=0x9, r8, 0x8, &(0x7f0000000580)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, r9, r0, 0xa, 0x0, &(0x7f0000000600)=[{0x2, 0x2, 0xa}, {0x4, 0x3, 0xb, 0x8}, {0x3, 0x4, 0x7}, {0x2, 0x3, 0xa, 0x6}, {0x2, 0x4, 0x9, 0x5}, {0x0, 0x2, 0x5, 0x6}, {0x3, 0x3, 0xd, 0x9}, {0x4, 0x5, 0x4, 0x6}, {0x5, 0x5, 0x2, 0xc}, {0x4, 0x3, 0xb, 0x3}], 0x10, 0x1ff}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x7, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xe}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x47}]}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0xcd, &(0x7f0000000200)=""/205, 0x41100, 0x21, '\x00', r7, @fallback=0x9, r8, 0x8, &(0x7f0000000580)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, r9, r0, 0xa, 0x0, &(0x7f0000000600)=[{0x2, 0x2, 0xa}, {0x4, 0x3, 0xb, 0x8}, {0x3, 0x4, 0x7}, {0x2, 0x3, 0xa, 0x6}, {0x2, 0x4, 0x9, 0x5}, {0x0, 0x2, 0x5, 0x6}, {0x3, 0x3, 0xd, 0x9}, {0x4, 0x5, 0x4, 0x6}, {0x5, 0x5, 0x2, 0xc}, {0x4, 0x3, 0xb, 0x3}], 0x10, 0x1ff}, 0x94) r11 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r11, 0x1, 0x2, &(0x7f0000000040)=0x8, 0x4) (async) setsockopt$sock_int(r11, 0x1, 0x2, &(0x7f0000000040)=0x8, 0x4) 1.737712012s ago: executing program 4 (id=3153): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0xf1f, 0x1, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x4e20, 0x0, 0x4e23, 0xfffc, 0xa, 0x10, 0x0, 0x2}, {0x8, 0x1, 0x0, 0x0, 0x100, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x600, 0xfffffffffffffffa, 0x4, 0x3}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4) (async) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1a, 0x4, 0x4, 0x10005, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) (async) recvfrom(r2, &(0x7f0000000dc0)=""/228, 0xe4, 0x10000, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r3, &(0x7f0000000080), 0x0}, 0x20) (async, rerun: 32) socket$tipc(0x1e, 0x2, 0x0) (rerun: 32) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000640)=0x63, 0x2) sendmmsg$inet6(r4, &(0x7f00000008c0)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x34}, 0xa}, 0x1c, &(0x7f00000032c0)=[{&(0x7f0000000200)="a2", 0x1}, {&(0x7f00000022c0)="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", 0x1000}], 0x2}}, {{&(0x7f0000000280)={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000002c0)="22e2d82d6c", 0x5}, {&(0x7f0000000300)="30edcb236fef923654c4f7bb1ee15bc669d1c9cb9c58f0bb62fe3994567b9b75178e13807e719805bd2c45d7f70186371fbf45302a38caf767cc1cfe416b8065c055c6ab68da66d67667a40766536c1c5b97170100cfb73f8422aa0a9dc7ca2262def72092628bd317e1edee1df1ed6c33f2ab137dffeed6f931b59e7ad017bc108519b303f432d2d278670e9b404de7f5a0d1df9fb59f03d33b5b3aa367207cf02796b145d00d", 0xa7}, {&(0x7f00000003c0)="6a45ad123b292af29260ae9cd9791197577cf8ac2438c1cc9c4a199320774a29f31a143431089dc07fd3b2c6edb2ed2f89f87b4ee3c528045cf3cddc60f577bf05facfbe4e50dc00000000c00000000000000000", 0x54}, {&(0x7f0000000440)="5bdcc1997f1280a24b00b43631abdcb2a75557d854", 0x15}, {&(0x7f0000000480)="312eb415dcf2c7b371581387dfd76423c54f18e501b6e2fb0db099ec48909b06dedf5c65d39153ed0f8fbc254cba5196383d65c86ac58c3ea20fbbdf0e74caa26b260a1319df8ba3f7efd5957cf666a01c0d8a572ad371384a387b7e54ec763902b359eca7de6695078af1a4aac4b7701414be2fb448accf86d74d35f794037deddd08fdbe5af2dc67f7cc9927a16c6bd5e69e977f25a21bdbee09112435e6b9ac093ce005933326534a13d4c0ea44c74a25e388cce3c4dc08d5cd14f9633ffbad05fe65e6dfa75bb36807e9fe90473c", 0xd0}], 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="000000000000000029000001000000000000000000"]}}, {{&(0x7f00000006c0)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x9}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000700)="f34fb1a0e02b14815ace849998653569b4d7f9b564d339648ac3691d2fe54f4269cb69bfc9c533567422128a559b05fe5d0a3d4b091b4c629a1e3a", 0x3b}], 0x1, &(0x7f0000000780)=[@flowinfo={{0x14, 0x29, 0xb, 0xfffffffe}}, @hopopts={{0xa0, 0x29, 0x36, {0x3c, 0x10, '\x00', [@calipso={0x7, 0x48, {0x3, 0x10, 0xee, 0x2, [0x978, 0x8, 0x7, 0xac3, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000]}}, @pad1, @ra, @ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0xfff4}}, @hao={0xc9, 0x10, @local}]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x2, 0x6, 0x0, [@mcast2, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}], 0x110}}], 0x3, 0xc010) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002c0007012bbd7000ffdbdf25077c0000080001800400fd8008000380"], 0x24}}, 0xc010) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) (async) unshare(0x42050600) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x140, r7, 0x5eae78d9c54e9d3f, 0x2, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_KEY={0xc0, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "25736095af08cbb2ac298956ab53759d"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "2bcf873a8dddefd99e1d77f3c95fecb2"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "20be8c1d28e3d627f67285b03152c74e9fb6969128020630b6a68c26e6497a81"}, @NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5832}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "6a9b30de7567d6777c7627dd3a454df8f90c31d8caa6832e187fc2cf4c80ab90"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0xfffffffffffffe36, 0x2, 0xbe}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b6c07d7f95dfde2883d01b2dcc82e06e45f735855c4e322220a148087ec8da05"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}]}, @NL802154_ATTR_SEC_KEY={0x64, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b6db129943aa352de2414dce9bf5980ea30434f3ea97a26d0a3bcb70eb29ab64"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f94b54cce6396c3599431c882366da01"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x0, 0x2, 0x1}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x40}, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r10, @ANYBLOB="0c000280060012"], 0x24}}, 0x0) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), r1) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000d80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000980)={0x3bc, r11, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_NODE={0x140, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7700000}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "368aca8da554e9c1a2587a3aba54585268f05337b6d7"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xad}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "35117e35c14dee220f589ec447ed15e4fe962af4ba14167d"}}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "95fa88986fc77b1e570b2fcf018ebb326e4e214208f6c8da2939db739d"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "a4c81b303023e78d50e14057960635620139802beb6a0e8a35473cf2cac3"}}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x81}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x160, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xff, 0x3, "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"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "907e3cbb753e9fd175f00425ee615f4f549b288cad80c139191d268b388f2e"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x412}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa2f5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}]}]}, 0x3bc}, 0x1, 0x0, 0x0, 0x48040}, 0x10) (async) getsockopt$bt_hci(r4, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) (async) r12 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r12, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) 1.707818169s ago: executing program 7 (id=3154): socket$inet_icmp(0x2, 0x2, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)=ANY=[@ANYBLOB='*\x00 \x00', @ANYRES16=r1, @ANYBLOB="310725bd7000fddbdf2509000000180001801400020077673000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300068c1) sendmsg$sock(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="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", 0xfb}, {&(0x7f0000000280)="20c394f7dcaac33264a19e054b9e7bcd2f4a3bc9786c2a3ce1c615ba7ba883ebac2257a90decec8f1ad4744e2c162d3f3da420ce544ab6a0d452a3ca119cf62f55dd7c800f4177636be5db0125fa988bfe358f01c4f907f0354c5bdeeb69caca4b786fb03a7805078b9dd90b64c455aa8decb26780a83acbfd4099a0630a6bf457a0e0921559ae96c936470f0732af964724731ab59dfcb3f0c78d32da36f7f90a2aa5a105", 0xa5}, {0x0, 0x1a0}], 0x3}, 0x10) close(0x3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x1, [0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0xfe], 0x0, [0x1, 0x2, 0xfffe, 0x4a88, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x1ff, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}]}}}]}, 0x90}}, 0x20000000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x10000000, 0x1, 0xfff}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r7, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x110400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x881}, 0x41) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.645968037s ago: executing program 5 (id=3155): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2cc00000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030f0000000000000000340000000e9201006e657464657d73696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r3, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x51}}}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x61}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000380)='\x00'/14, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069002600000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xa4, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport}, 0x94) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000200)=0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x134, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x104, 0x2, {{0xfffffffe, 0x2, 0x40, 0xa, 0xe7, 0xcc36}, [@TCA_NETEM_LOSS={0xb8, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x40, 0xf, 0xa, 0x4006559, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0xfffffffa, 0xa, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0xd82c, 0x8, 0x6, 0x0, 0xc5e0}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1000, 0x2, 0x0, 0x8, 0x1}}, @NETEM_LOSS_GI={0x9, 0x1, {0x4, 0x4, 0x9de, 0x9, 0xb502}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x0, 0xfffff001, 0xf6, 0x3}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5b, 0x20000, 0x3, 0xa}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x40003, 0x0, 0x6}}]}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x6}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x40009, 0xae}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x100020}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x1}]}}}]}, 0x134}, 0x1, 0x0, 0x0, 0x4546cfee17049510}, 0x0) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0xfe, r8, 0xe}, 0xc) 1.575452008s ago: executing program 4 (id=3156): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r7, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) r8 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r8, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x80880000}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r10, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x28, r5, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xe, 0x4e}}}}, ["", "", "", "", ""]}, 0x28}}, 0x8004) 1.55898743s ago: executing program 0 (id=3157): pipe(0x0) unshare(0x22020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, 0x0, 0x0, 0xa635c4ca7f0a3408}, 0x20) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket(0x18, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000400)={0x2000201c}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000af8000000060a0b04000000000000000002000009cc0004803c0001800b00010065787468647200002c00028008000440000000030800074000000017080001400000000c080005400000000108000340fffffffd140001800e000100627974656f72646572000000140001800e000100696d6d6564696174f3000000100001800b0001007470726f78790000380001800c000100636f756e74657200280002800c00014000000000000000080c00024000000000000000030c000140000000000000009a100001800b0001005f34aa31657400000c00018008000100667764000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x120}}, 0x0) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000006c0)="9a", 0x1}], 0x1}}], 0x2, 0x4000840) shutdown(r2, 0x1) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r2}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r6, &(0x7f0000000240)={0x0, 0xfffffffffffffc6c, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="13fffff1", @ANYRES16=r7, @ANYBLOB="310728bd70000000000038000000"], 0x14}, 0x1, 0x2}, 0x4c880) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000840)=ANY=[@ANYRES64=r5, @ANYRESDEC], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) socket(0x10, 0x4, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'macvtap0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000200)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20048080) 1.482709367s ago: executing program 6 (id=3158): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) ioctl$XFS_IOC_FSGEOMETRY_V1(r1, 0x80705864, &(0x7f0000000000)) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001000390423bd700000000000000003e4", @ANYRES32=r4, @ANYBLOB="00000000000000001800128008000100736974000c00028006000f0041"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$MRT_TABLE(r3, 0x0, 0xcf, &(0x7f0000000240)=0xfd, 0x4) r5 = socket(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, 0x1e, 0x21, 0x70bd2b, 0x0, {0x7}, [@nested={0x8, 0xf, 0x0, 0x1, [@nested={0x4, 0x143}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2008800}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000000c0)={0x802, 0xfffffffe, 0x3, 0x10001}, 0x10) sendmsg$nl_generic(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYRESOCT=r7, @ANYBLOB="f75e1931d4c86647b9760947803cd7822d318b3d9dd0ec0f9876e5fba49ed590b6704fe60872169ecda0a7cf68ec3a82b511a289c3cf40a311525dbaaca3735c", @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x4) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x38, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x4, 0x2, 0x0, 0x7fffffff, {0x3, 0x6, "7b7f79", 0x4, 0xff, 0x1, @empty, @empty, [], "ea073fefe7252061"}}}}}}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 791.658937ms ago: executing program 7 (id=3159): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2002, 0x40000002, 0x4, 0xa17433da3c5d6980, 0x2, 0x81}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0xfffffff8, 0x40, 0xc, 0xffffffbb, 0x40, 0x1, 0x1}, &(0x7f00000003c0)=0x9c) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000001d00070f000000000000080007000000", @ANYRES32=r2, @ANYBLOB="800072"], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x20000000) 716.596653ms ago: executing program 5 (id=3160): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x0) close(r1) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xfff2, 0xb}, {0x4, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4c, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0xc97a}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x10}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_TARGET={0x8}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xffff}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_MEMORY={0x8, 0xa, 0xfffffffa}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x3ae}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40088e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000680)='l', 0x1, 0x4009, &(0x7f0000000140)={0x11, 0xf6, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 598.985012ms ago: executing program 6 (id=3161): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="170100000000b2000500000000000000850000004700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x244000, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff0016e0", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36) 594.409399ms ago: executing program 7 (id=3162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) (async, rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELCHAIN={0x12c, 0x5, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x91225603a6175c5f}, @NFTA_CHAIN_USERDATA={0xf7, 0xc, "709ee5eb66fd1b94347b324b91c5fb4dfc83d21375db0395d8cdeee27f790e1d0ab13134066fc26d291f5a49bc0c17667629715c3a98da1d6ffcc0df86d5b04f9e57eac1c1eda49a116ef1e1fdea63cc4a10192fc366385cf99213d3ba5abce4e37582e2ea1dc1d4a5f9336dcb934c5c3219d571e8608aa0eb8e7ca42e917a6c69b92de6ed2bff364fc1dad22b2f39f0e5698f9f2354e993f1c3e9035e2f6e2307855c4b6c757eca582bfea949707a7caef8776bb886993d603b6badc629353a079eabbe32e53199632a532d12ac0e9977629eaec74fa5947bd0f75a765c5cf2050a510a46d75291050a86d610895a9ee9fdd6"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x154}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) readv(r2, &(0x7f0000000ac0)=[{&(0x7f0000000900)=""/220, 0xdc}], 0x1) 575.385886ms ago: executing program 4 (id=3163): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r5 = socket$kcm(0x10, 0x100000000002, 0x4) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (async, rerun: 64) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) (rerun: 64) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="ec010000", @ANYRES16=r8, @ANYBLOB="210025bd7200ffffffff3900000008000300", @ANYRES32=r7, @ANYBLOB="d0015a806c0000800c0001"], 0x1ec}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r10, 0x2, 0x70bd27, 0x25dfdbef}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x11) (async) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200), 0x1, 0x0, 0x0, 0xc00e}, 0x44) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000600e8f6ffffffff0000000000000000", @ANYRES32=r0, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r9], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r11}, &(0x7f0000000840), &(0x7f0000000340)=r3}, 0x20) 551.106391ms ago: executing program 0 (id=3164): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb0}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x400000002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000002d0007012bbd7000fedbdf25077c1000080001800400dd80040003803f0002"], 0x60}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f00000004c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10d}, 0x1c) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000200), 0x12) socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, 0x0, 0x0) getsockopt$netlink(r5, 0x10e, 0x9, &(0x7f0000001840)=""/42, &(0x7f0000000100)=0x2a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r4, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), 0x0, 0x0, 0x1000, 0xe4, &(0x7f0000000200)="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", &(0x7f0000001200)="672c4d07c99f57acd5ccc31a7367c3a51025a5f1be908e7f1bef71069b626f9609495b55719b8053449e809341b4be997a32ac14cb6359b17b16bfd02cf6ebd546d2cdc4d67d883d168d792293564b17bf6dc3000d83b061013d5a1502e2d38dca449cf491bf9f9facfdbe636f4c190c6d2a7f7d8a285e472bd4d84f6ed262de21a2531123e640657a96ce6ef46f9cae6dc60055c0cc98fe5a021fd8492e6fa8c3f57291b93d67868d02546f0d9c1d9ce43ef608d665411911bc4c58502c3f7678ec17a45b67387cb5b929fc77a425bb5c06a7f0a459f2ae33864cf7e393c14f02f54605", 0x0, 0x0, 0x5}, 0x50) 348.938061ms ago: executing program 7 (id=3165): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @remote}, 0x1c, 0x0}, 0x4040) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000dc0)={0xe, 0x1, 0x8, 0x9fd9, 0x1, 0x81, 0x1000, 0xd, r1}, &(0x7f0000000e00)=0x20) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x800}}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func_proto={0x2, 0x0, 0x0, 0x13, 0x2}]}, {0x0, [0x0]}}, 0x0, 0x27}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2646], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket(0x10, 0x3, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f0000001a80)=0x1, 0x4) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000090000003c0003801400020062617461647630000000000000000000080001"], 0x50}}, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786e", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x58}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x7fffffff}]}}]}, 0x50}}, 0x0) 265.375µs ago: executing program 0 (id=3166): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r4, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) splice(r2, 0x0, r3, 0x0, 0x10500, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x93}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x80401}]}}}]}, 0x4c}}, 0x80) 0s ago: executing program 4 (id=3167): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r5, 0x10, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) kernel console output (not intermixed with test programs): 0.419046][ T5617] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 310.435556][T13089] syzkaller0: entered promiscuous mode [ 310.455496][T13089] syzkaller0: entered allmulticast mode [ 310.799850][T13098] xt_connbytes: Forcing CT accounting to be enabled [ 310.924973][T13110] bridge0: port 1(vlan0) entered blocking state [ 310.941514][T13110] bridge0: port 1(vlan0) entered disabled state [ 310.950643][T13110] vlan0: entered allmulticast mode [ 310.963720][T13110] geneve0: entered allmulticast mode [ 311.060022][T13111] lo speed is unknown, defaulting to 1000 [ 311.202779][T13086] lo speed is unknown, defaulting to 1000 [ 311.543524][T13128] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 311.582608][T13128] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 311.602395][T13128] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 311.604367][T13132] syzkaller0: entered promiscuous mode [ 311.638572][T13132] syzkaller0: entered allmulticast mode [ 311.672081][ T5617] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 311.690045][ T5617] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 311.709494][ T5617] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 311.733021][ T5617] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 311.740932][ T5617] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 312.236315][T13086] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.243813][T13086] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.251107][T13086] bridge_slave_0: entered allmulticast mode [ 312.260226][T13086] bridge_slave_0: entered promiscuous mode [ 312.274595][T13086] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.282080][T13086] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.289356][T13086] bridge_slave_1: entered allmulticast mode [ 312.297974][T13086] bridge_slave_1: entered promiscuous mode [ 312.368171][T13086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.395274][T13086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.436649][T13086] team0: Port device team_slave_0 added [ 312.453032][T13086] team0: Port device team_slave_1 added [ 312.496423][T13086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.503544][T13086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.530402][ T5624] Bluetooth: hci6: command tx timeout [ 312.550143][T13086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.566204][T13086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.573336][T13086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.599674][T13086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.698832][T13086] hsr_slave_0: entered promiscuous mode [ 312.707228][T13086] hsr_slave_1: entered promiscuous mode [ 312.721993][T13086] debugfs: 'hsr0' already exists in 'hsr' [ 312.731616][T13086] Cannot create hsr debugfs directory [ 312.802711][T13134] lo speed is unknown, defaulting to 1000 [ 312.808600][T13174] lo: Caught tx_queue_len zero misconfig [ 312.872484][T13182] netlink: 'syz.4.1903': attribute type 1 has an invalid length. [ 312.999402][T13182] bond8: entered promiscuous mode [ 313.005070][T13182] 8021q: adding VLAN 0 to HW filter on device bond8 [ 313.346940][T13196] syzkaller0: entered promiscuous mode [ 313.362936][T13196] syzkaller0: entered allmulticast mode [ 313.511046][T13216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1909'. [ 313.580127][T13205] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1909'. [ 313.808576][ T5624] Bluetooth: hci7: command tx timeout [ 314.077359][T13086] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 314.101664][T13086] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 314.110124][T13086] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 314.128298][T13086] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 314.138555][T13086] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 314.149850][T13086] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 314.172154][T13086] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 314.185383][T13086] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 314.418935][T13250] tipc: Enabled bearer , priority 10 [ 314.426933][T13134] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.435575][T13134] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.444712][T13134] bridge_slave_0: entered allmulticast mode [ 314.452807][T13134] bridge_slave_0: entered promiscuous mode [ 314.454482][T13230] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 314.462608][T13134] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.473721][T13230] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 314.489589][T13134] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.497320][T13134] bridge_slave_1: entered allmulticast mode [ 314.506044][T13134] bridge_slave_1: entered promiscuous mode [ 314.517094][T13253] veth0: entered promiscuous mode [ 314.525347][T13256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1918'. [ 314.546260][T13256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1918'. [ 314.559103][T13256] netlink: 'syz.4.1918': attribute type 6 has an invalid length. [ 314.601439][ T5624] Bluetooth: hci6: command tx timeout [ 314.622395][T13251] veth0: left promiscuous mode [ 314.638080][T13134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.648226][T13260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1920'. [ 314.666054][T13134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.676018][T13260] nbd: must specify a size in bytes for the device [ 314.739313][T13264] FAULT_INJECTION: forcing a failure. [ 314.739313][T13264] name failslab, interval 1, probability 0, space 0, times 0 [ 314.755871][T13264] CPU: 1 UID: 0 PID: 13264 Comm: syz.5.1922 Not tainted syzkaller #0 PREEMPT(full) [ 314.755895][T13264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 314.755906][T13264] Call Trace: [ 314.755913][T13264] [ 314.755920][T13264] dump_stack_lvl+0xe8/0x150 [ 314.755953][T13264] should_fail_ex+0x40c/0x560 [ 314.755978][T13264] should_failslab+0xa8/0x100 [ 314.756004][T13264] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 314.756027][T13264] ? skb_clone+0x212/0x3a0 [ 314.756045][T13264] ? skb_clone+0x212/0x3a0 [ 314.756069][T13264] skb_clone+0x212/0x3a0 [ 314.756091][T13264] __netlink_deliver_tap+0x413/0x860 [ 314.756121][T13264] ? netlink_deliver_tap+0x2e/0x1b0 [ 314.756142][T13264] netlink_deliver_tap+0x19c/0x1b0 [ 314.756163][T13264] netlink_unicast+0x77f/0x940 [ 314.756199][T13264] netlink_sendmsg+0x813/0xb40 [ 314.756226][T13264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.756248][T13264] ? aa_sock_msg_perm+0xf1/0x1b0 [ 314.756272][T13264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.756289][T13264] sock_sendmsg_nosec+0x13a/0x180 [ 314.756316][T13264] ____sys_sendmsg+0x54e/0x850 [ 314.756340][T13264] ? __pfx_____sys_sendmsg+0x10/0x10 [ 314.756366][T13264] ? import_iovec+0x73/0xa0 [ 314.756395][T13264] ___sys_sendmsg+0x2a5/0x360 [ 314.756413][T13264] ? __lock_acquire+0x683/0x2cf0 [ 314.756441][T13264] ? __pfx____sys_sendmsg+0x10/0x10 [ 314.756465][T13264] ? kstrtouint+0x6e/0xe0 [ 314.756510][T13264] ? __fget_files+0x2a/0x420 [ 314.756532][T13264] ? __fget_files+0x3a2/0x420 [ 314.756564][T13264] __sys_sendmmsg+0x273/0x4d0 [ 314.756589][T13264] ? __pfx___sys_sendmmsg+0x10/0x10 [ 314.756617][T13264] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 314.756653][T13264] ? ksys_write+0x242/0x270 [ 314.756679][T13264] ? __pfx_ksys_write+0x10/0x10 [ 314.756710][T13264] __x64_sys_sendmmsg+0xa0/0xc0 [ 314.756726][T13264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.756743][T13264] do_syscall_64+0x174/0x580 [ 314.756760][T13264] ? trace_irq_disable+0x3b/0x140 [ 314.756782][T13264] ? clear_bhb_loop+0x40/0x90 [ 314.756804][T13264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.756821][T13264] RIP: 0033:0x7fe66259de99 [ 314.756838][T13264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.756853][T13264] RSP: 002b:00007fe6607f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 314.756879][T13264] RAX: ffffffffffffffda RBX: 00007fe662825fa0 RCX: 00007fe66259de99 [ 314.756892][T13264] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 314.756905][T13264] RBP: 00007fe6607f6090 R08: 0000000000000000 R09: 0000000000000000 [ 314.756916][T13264] R10: 00000000000000fc R11: 0000000000000246 R12: 0000000000000001 [ 314.756926][T13264] R13: 00007fe662826038 R14: 00007fe662825fa0 R15: 00007fff6b2b8018 [ 314.756953][T13264] [ 314.762271][T13134] team0: Port device team_slave_0 added [ 315.052768][T13134] team0: Port device team_slave_1 added [ 315.149096][T13134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.157715][T13134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.186897][T13134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.211892][T13134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.221357][T13134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.250848][T13134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.346765][T13276] geneve1: left promiscuous mode [ 315.445450][T13086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.473564][T13134] hsr_slave_0: entered promiscuous mode [ 315.486840][T13134] hsr_slave_1: entered promiscuous mode [ 315.496945][T13134] debugfs: 'hsr0' already exists in 'hsr' [ 315.503548][T13134] Cannot create hsr debugfs directory [ 315.678173][T13086] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.701927][T13288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1929'. [ 315.702502][T13291] FAULT_INJECTION: forcing a failure. [ 315.702502][T13291] name failslab, interval 1, probability 0, space 0, times 0 [ 315.746935][T13288] netlink: 'syz.0.1929': attribute type 1 has an invalid length. [ 315.753308][T13291] CPU: 1 UID: 0 PID: 13291 Comm: syz.5.1931 Not tainted syzkaller #0 PREEMPT(full) [ 315.753333][T13291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 315.753343][T13291] Call Trace: [ 315.753350][T13291] [ 315.753358][T13291] dump_stack_lvl+0xe8/0x150 [ 315.753390][T13291] should_fail_ex+0x40c/0x560 [ 315.753416][T13291] should_failslab+0xa8/0x100 [ 315.753444][T13291] __kmalloc_cache_noprof+0xa8/0x660 [ 315.753469][T13291] ? rtnl_newlink+0x143/0x1c30 [ 315.753495][T13291] ? rtnl_newlink+0x143/0x1c30 [ 315.753526][T13291] rtnl_newlink+0x143/0x1c30 [ 315.753552][T13291] ? kasan_save_track+0x4f/0x80 [ 315.753573][T13291] ? kasan_save_track+0x3e/0x80 [ 315.753594][T13291] ? __kasan_slab_free+0x5c/0x80 [ 315.753615][T13291] ? kmem_cache_free+0x182/0x650 [ 315.753636][T13291] ? nlmon_xmit+0xb0/0x100 [ 315.753659][T13291] ? dev_hard_start_xmit+0x2cd/0x830 [ 315.753677][T13291] ? __dev_queue_xmit+0x14c0/0x3820 [ 315.753696][T13291] ? __netlink_deliver_tap+0x5b4/0x860 [ 315.753715][T13291] ? netlink_deliver_tap+0x19c/0x1b0 [ 315.753732][T13291] ? netlink_unicast+0x77f/0x940 [ 315.753756][T13291] ? netlink_sendmsg+0x813/0xb40 [ 315.753783][T13291] ? __pfx_rtnl_newlink+0x10/0x10 [ 315.753807][T13291] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 315.753824][T13291] ? do_syscall_64+0x174/0x580 [ 315.753842][T13291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.753893][T13291] ? kasan_quarantine_put+0xbb/0x1f0 [ 315.753914][T13291] ? lockdep_hardirqs_on+0x7a/0x110 [ 315.753936][T13291] ? nlmon_xmit+0xb0/0x100 [ 315.753958][T13291] ? kmem_cache_free+0x182/0x650 [ 315.753991][T13291] ? __lock_acquire+0x683/0x2cf0 [ 315.754021][T13291] ? __dev_queue_xmit+0x29b/0x3820 [ 315.754044][T13291] ? __local_bh_enable_ip+0xd0/0x130 [ 315.754065][T13291] ? lockdep_hardirqs_on+0x7a/0x110 [ 315.754083][T13291] ? __dev_queue_xmit+0x29b/0x3820 [ 315.754101][T13291] ? __local_bh_enable_ip+0xd0/0x130 [ 315.754120][T13291] ? __dev_queue_xmit+0x29b/0x3820 [ 315.754146][T13291] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 315.754172][T13291] ? __pfx_rtnl_newlink+0x10/0x10 [ 315.754210][T13291] ? __pfx_rtnl_newlink+0x10/0x10 [ 315.754233][T13291] rtnetlink_rcv_msg+0x802/0xc00 [ 315.754263][T13291] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 315.754288][T13291] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 315.754313][T13291] ? ref_tracker_free+0x689/0x830 [ 315.754336][T13291] ? __pfx_ref_tracker_free+0x10/0x10 [ 315.754368][T13291] netlink_rcv_skb+0x226/0x4a0 [ 315.754388][T13291] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 315.754415][T13291] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 315.754446][T13291] ? netlink_deliver_tap+0x2e/0x1b0 [ 315.754465][T13291] ? netlink_deliver_tap+0x2e/0x1b0 [ 315.754489][T13291] netlink_unicast+0x7bb/0x940 [ 315.754525][T13291] netlink_sendmsg+0x813/0xb40 [ 315.754552][T13291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.754576][T13291] ? aa_sock_msg_perm+0xf1/0x1b0 [ 315.754601][T13291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.754621][T13291] sock_sendmsg_nosec+0x13a/0x180 [ 315.754647][T13291] ____sys_sendmsg+0x54e/0x850 [ 315.754672][T13291] ? __pfx_____sys_sendmsg+0x10/0x10 [ 315.754698][T13291] ? import_iovec+0x73/0xa0 [ 315.754726][T13291] ___sys_sendmsg+0x2a5/0x360 [ 315.754743][T13291] ? __lock_acquire+0x683/0x2cf0 [ 315.754777][T13291] ? __pfx____sys_sendmsg+0x10/0x10 [ 315.754802][T13291] ? kstrtouint+0x6e/0xe0 [ 315.754845][T13291] ? __fget_files+0x2a/0x420 [ 315.754868][T13291] ? __fget_files+0x3a2/0x420 [ 315.754901][T13291] __sys_sendmmsg+0x273/0x4d0 [ 315.754926][T13291] ? __pfx___sys_sendmmsg+0x10/0x10 [ 315.754953][T13291] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 315.754987][T13291] ? ksys_write+0x242/0x270 [ 315.755017][T13291] ? __pfx_ksys_write+0x10/0x10 [ 315.755050][T13291] __x64_sys_sendmmsg+0xa0/0xc0 [ 315.755069][T13291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.755089][T13291] do_syscall_64+0x174/0x580 [ 315.755108][T13291] ? trace_irq_disable+0x3b/0x140 [ 315.755132][T13291] ? clear_bhb_loop+0x40/0x90 [ 315.755154][T13291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.755173][T13291] RIP: 0033:0x7fe66259de99 [ 315.755190][T13291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.755206][T13291] RSP: 002b:00007fe6607f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 315.755225][T13291] RAX: ffffffffffffffda RBX: 00007fe662825fa0 RCX: 00007fe66259de99 [ 315.755238][T13291] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 315.755251][T13291] RBP: 00007fe6607f6090 R08: 0000000000000000 R09: 0000000000000000 [ 315.755262][T13291] R10: 00000000000000fc R11: 0000000000000246 R12: 0000000000000001 [ 315.755272][T13291] R13: 00007fe662826038 R14: 00007fe662825fa0 R15: 00007fff6b2b8018 [ 315.755301][T13291] [ 315.801600][T13298] sctp: [Deprecated]: syz.4.1930 (pid 13298) Use of struct sctp_assoc_value in delayed_ack socket option. [ 315.801600][T13298] Use struct sctp_sack_info instead [ 315.879291][T13086] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 315.913666][ T5624] Bluetooth: hci7: command tx timeout [ 315.971079][T13086] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 316.297391][T10309] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.304588][T10309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.317970][T10309] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.325159][T10309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.681506][ T5624] Bluetooth: hci6: command tx timeout [ 316.694397][T13317] netlink: 'syz.4.1934': attribute type 1 has an invalid length. [ 316.767289][T13317] 8021q: adding VLAN 0 to HW filter on device bond9 [ 316.806010][T13323] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 316.830204][T13317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1934'. [ 316.883781][T13325] 0ªî{X¹¦: left allmulticast mode [ 317.086251][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.590730][T13325] xfrm0: left allmulticast mode [ 317.766707][T13325] veth0_macvtap: left allmulticast mode [ 317.828236][T13325] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 317.882194][T13325] vlan2: left allmulticast mode [ 317.888393][T13325] bond0: left allmulticast mode [ 317.896638][T13325] bond_slave_1: left allmulticast mode [ 317.903154][T13325] bond2: left promiscuous mode [ 317.907915][T13325] bond2: left allmulticast mode [ 317.920459][T13325] vlan3: left allmulticast mode [ 317.928450][T13325] bond4: left allmulticast mode [ 317.965218][T13325] ip6gre1: left promiscuous mode [ 317.972946][T13325] ip6gre1: left allmulticast mode [ 318.008070][T13325] bond7: left promiscuous mode [ 318.020526][T13325] ip6tnl4: left allmulticast mode [ 318.028613][T13325] macsec1: left promiscuous mode [ 318.038247][T13325] bond8: left promiscuous mode [ 318.044924][ T5624] Bluetooth: hci7: command tx timeout [ 318.059894][T13325] bond8: left allmulticast mode [ 318.071496][T13325] vlan5: left allmulticast mode [ 318.076457][T13325] bond9: left allmulticast mode [ 318.082367][T13325] macvtap1: left allmulticast mode [ 318.113359][T13317] macvlan1: entered promiscuous mode [ 318.118866][T13317] macvlan1: entered allmulticast mode [ 318.188458][ T35] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.221337][ T35] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.291967][ T35] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.338231][ T35] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.375927][T13134] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 318.410630][T13134] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 318.434992][T13134] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 318.486974][T13134] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 318.515257][T13134] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 318.547766][T13134] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 318.566412][T13134] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 318.602125][T13134] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 318.761884][ T5624] Bluetooth: hci6: command tx timeout [ 318.873073][T13378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1945'. [ 318.900385][T13086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.238846][T13134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.299944][T13134] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.341027][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.348303][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.377129][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.384385][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.523944][T13415] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1951'. [ 319.608752][T13421] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1951'. [ 319.716890][T13086] veth0_vlan: entered promiscuous mode [ 319.763441][T13086] veth1_vlan: entered promiscuous mode [ 319.847288][T13086] veth0_macvtap: entered promiscuous mode [ 319.878962][T13086] veth1_macvtap: entered promiscuous mode [ 319.933312][T13086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.966325][T13086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.015549][ T148] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.038664][ T148] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.062112][ T148] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.108437][ T148] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.125404][ T5624] Bluetooth: hci7: command tx timeout [ 320.400482][T10309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.437588][T10309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.518466][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.560769][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.617113][T13464] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20001 [ 320.743105][T13134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.907136][T13479] veth0_to_bridge: entered promiscuous mode [ 320.925435][T13479] veth0_to_bridge: entered allmulticast mode [ 321.096763][T13491] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1960'. [ 321.144143][T13480] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1958'. [ 321.349311][T13504] syzkaller1: entered promiscuous mode [ 321.370419][T13504] syzkaller1: entered allmulticast mode [ 321.495491][T13510] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1965'. [ 321.561349][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 321.621069][T13134] veth0_vlan: entered promiscuous mode [ 321.690455][T13134] veth1_vlan: entered promiscuous mode [ 321.768004][T13134] veth0_macvtap: entered promiscuous mode [ 321.798629][T13134] veth1_macvtap: entered promiscuous mode [ 321.846240][T13134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.874425][T13530] netlink: 'syz.5.1969': attribute type 11 has an invalid length. [ 321.899724][T13134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.936133][T10315] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.973665][T10315] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.989345][T10315] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.013217][T10315] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.235912][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.267845][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.420645][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.438910][T13547] syzkaller1: entered promiscuous mode [ 322.448305][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.471572][T13547] syzkaller1: entered allmulticast mode [ 322.529488][T13546] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1973'. [ 322.554192][T13553] FAULT_INJECTION: forcing a failure. [ 322.554192][T13553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.605206][T13556] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1976'. [ 322.609177][T13553] CPU: 0 UID: 0 PID: 13553 Comm: syz.5.1975 Not tainted syzkaller #0 PREEMPT(full) [ 322.609203][T13553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 322.609213][T13553] Call Trace: [ 322.609222][T13553] [ 322.609228][T13553] dump_stack_lvl+0xe8/0x150 [ 322.609260][T13553] should_fail_ex+0x40c/0x560 [ 322.609287][T13553] _copy_from_user+0x2d/0xb0 [ 322.609314][T13553] ___sys_recvmsg+0x173/0x5a0 [ 322.609339][T13553] ? __pfx____sys_recvmsg+0x10/0x10 [ 322.609363][T13553] ? __fget_files+0x2a/0x420 [ 322.609415][T13553] do_recvmmsg+0x31a/0x7f0 [ 322.609442][T13553] ? __pfx_do_recvmmsg+0x10/0x10 [ 322.609473][T13553] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 322.609494][T13553] ? __fget_files+0x3a2/0x420 [ 322.609526][T13553] __x64_sys_recvmmsg+0x198/0x250 [ 322.609549][T13553] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 322.609577][T13553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.609596][T13553] do_syscall_64+0x174/0x580 [ 322.609614][T13553] ? trace_irq_disable+0x3b/0x140 [ 322.609637][T13553] ? clear_bhb_loop+0x40/0x90 [ 322.609659][T13553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.609677][T13553] RIP: 0033:0x7fe66259de99 [ 322.609698][T13553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.609713][T13553] RSP: 002b:00007fe6607f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 322.609732][T13553] RAX: ffffffffffffffda RBX: 00007fe662825fa0 RCX: 00007fe66259de99 [ 322.609745][T13553] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000004 [ 322.609757][T13553] RBP: 00007fe6607f6090 R08: 0000000000000000 R09: 0000000000000000 [ 322.609768][T13553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 322.609779][T13553] R13: 00007fe662826038 R14: 00007fe662825fa0 R15: 00007fff6b2b8018 [ 322.609808][T13553] [ 322.827990][T13556] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1976'. [ 322.849837][T13556] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1976'. [ 323.023914][T13574] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1979'. [ 323.199663][T13578] macvlan0: entered promiscuous mode [ 323.236821][T13582] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1981'. [ 323.511640][T13601] openvswitch: netlink: Missing key (keys=40, expected=100) [ 323.547979][T13599] openvswitch: netlink: Missing key (keys=40, expected=100) [ 323.754292][T13606] syzkaller0: entered promiscuous mode [ 323.782290][T13606] syzkaller0: entered allmulticast mode [ 324.559098][T13650] IPv6: addrconf: prefix option has invalid lifetime [ 324.587210][ T5280] veth0_macvtap: left promiscuous mode [ 324.664059][ T30] audit: type=1800 audit(1784733575.566:15): pid=13655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1994" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=85 res=0 errno=0 [ 324.825849][T13664] Cannot find del_set index 0 as target [ 325.176681][T13678] syzkaller0: entered promiscuous mode [ 325.194575][T13678] syzkaller0: entered allmulticast mode [ 325.217905][T13685] tipc: MTU too low for tipc bearer [ 325.264871][T13680] __nla_validate_parse: 5 callbacks suppressed [ 325.264890][T13680] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2000'. [ 325.446462][T13701] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2004'. [ 325.457671][T13700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2003'. [ 325.476991][T13700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2003'. [ 325.490003][T13702] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2004'. [ 327.634438][T13718] FAULT_INJECTION: forcing a failure. [ 327.634438][T13718] name failslab, interval 1, probability 0, space 0, times 0 [ 327.647634][T13718] CPU: 1 UID: 0 PID: 13718 Comm: syz.0.2007 Not tainted syzkaller #0 PREEMPT(full) [ 327.647658][T13718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 327.647668][T13718] Call Trace: [ 327.647675][T13718] [ 327.647682][T13718] dump_stack_lvl+0xe8/0x150 [ 327.647716][T13718] should_fail_ex+0x40c/0x560 [ 327.647740][T13718] ? alloc_netdev_mqs+0x8f3/0x12b0 [ 327.647763][T13718] should_failslab+0xa8/0x100 [ 327.647792][T13718] __kvmalloc_node_noprof+0x176/0x860 [ 327.647817][T13718] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 327.647849][T13718] ? alloc_netdev_mqs+0x8f3/0x12b0 [ 327.647872][T13718] ? __asan_memset+0x22/0x50 [ 327.647896][T13718] alloc_netdev_mqs+0x8f3/0x12b0 [ 327.647918][T13718] ? __pfx_macvlan_setup+0x10/0x10 [ 327.647948][T13718] rtnl_create_link+0x321/0xd70 [ 327.647978][T13718] rtnl_newlink_create+0x258/0x7b0 [ 327.648004][T13718] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 327.648028][T13718] ? __pfx___mutex_lock+0x10/0x10 [ 327.648056][T13718] ? ns_capable+0x89/0xe0 [ 327.648090][T13718] rtnl_newlink+0x166d/0x1c30 [ 327.648132][T13718] ? __pfx_rtnl_newlink+0x10/0x10 [ 327.648160][T13718] ? __lock_acquire+0x683/0x2cf0 [ 327.648193][T13718] ? __lock_acquire+0x683/0x2cf0 [ 327.648232][T13718] ? unwind_next_frame+0x8f/0x2550 [ 327.648259][T13718] ? is_bpf_text_address+0x26/0x2b0 [ 327.648296][T13718] ? is_bpf_text_address+0x26/0x2b0 [ 327.648327][T13718] ? __lock_acquire+0x683/0x2cf0 [ 327.648354][T13718] ? kernel_text_address+0xa5/0xe0 [ 327.648383][T13718] ? __kernel_text_address+0xd/0x30 [ 327.648408][T13718] ? unwind_get_return_address+0x4d/0x90 [ 327.648426][T13718] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 327.648449][T13718] ? arch_stack_walk+0xfb/0x150 [ 327.648478][T13718] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 327.648522][T13718] ? __pfx_rtnl_newlink+0x10/0x10 [ 327.648551][T13718] rtnetlink_rcv_msg+0x802/0xc00 [ 327.648577][T13718] ? netlink_sendmsg+0x5d4/0xb40 [ 327.648601][T13718] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 327.648626][T13718] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 327.648655][T13718] ? __lock_acquire+0x683/0x2cf0 [ 327.648693][T13718] netlink_rcv_skb+0x226/0x4a0 [ 327.648714][T13718] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 327.648742][T13718] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 327.648772][T13718] ? netlink_deliver_tap+0x2e/0x1b0 [ 327.648790][T13718] ? netlink_deliver_tap+0x2e/0x1b0 [ 327.648813][T13718] netlink_unicast+0x7bb/0x940 [ 327.648852][T13718] netlink_sendmsg+0x813/0xb40 [ 327.648882][T13718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.648906][T13718] ? aa_sock_msg_perm+0xf1/0x1b0 [ 327.648931][T13718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.648950][T13718] sock_sendmsg_nosec+0x13a/0x180 [ 327.648978][T13718] ____sys_sendmsg+0x54e/0x850 [ 327.649003][T13718] ? __pfx_____sys_sendmsg+0x10/0x10 [ 327.649033][T13718] ? import_iovec+0x73/0xa0 [ 327.649070][T13718] ___sys_sendmsg+0x2a5/0x360 [ 327.649088][T13718] ? __lock_acquire+0x683/0x2cf0 [ 327.649117][T13718] ? __pfx____sys_sendmsg+0x10/0x10 [ 327.649142][T13718] ? kstrtouint+0x6e/0xe0 [ 327.649190][T13718] ? __fget_files+0x2a/0x420 [ 327.649213][T13718] ? __fget_files+0x3a2/0x420 [ 327.649247][T13718] __sys_sendmmsg+0x273/0x4d0 [ 327.649272][T13718] ? __pfx___sys_sendmmsg+0x10/0x10 [ 327.649302][T13718] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 327.649337][T13718] ? ksys_write+0x242/0x270 [ 327.649367][T13718] ? __pfx_ksys_write+0x10/0x10 [ 327.649401][T13718] __x64_sys_sendmmsg+0xa0/0xc0 [ 327.649421][T13718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.649441][T13718] do_syscall_64+0x174/0x580 [ 327.649460][T13718] ? trace_irq_disable+0x3b/0x140 [ 327.649483][T13718] ? clear_bhb_loop+0x40/0x90 [ 327.649506][T13718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.649524][T13718] RIP: 0033:0x7f0e0839de99 [ 327.649542][T13718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.649558][T13718] RSP: 002b:00007f0e09333028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 327.649578][T13718] RAX: ffffffffffffffda RBX: 00007f0e08626090 RCX: 00007f0e0839de99 [ 327.649591][T13718] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 327.649603][T13718] RBP: 00007f0e09333090 R08: 0000000000000000 R09: 0000000000000000 [ 327.649614][T13718] R10: 00000000000000fc R11: 0000000000000246 R12: 0000000000000002 [ 327.649626][T13718] R13: 00007f0e08626128 R14: 00007f0e08626090 R15: 00007fffe7cc7c98 [ 327.649657][T13718] [ 328.150870][T13733] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 328.160530][T13733] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 328.172694][T13733] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 328.241779][T13740] vti0: entered promiscuous mode [ 328.323120][T13747] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2013'. [ 328.323725][T13752] netlink: 'syz.7.2012': attribute type 3 has an invalid length. [ 328.332743][T13747] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2013'. [ 328.382019][T13752] netlink: 'syz.7.2012': attribute type 3 has an invalid length. [ 328.389793][T13752] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2012'. [ 328.411825][T13739] netlink: 'syz.7.2012': attribute type 22 has an invalid length. [ 328.419679][T13739] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2012'. [ 328.645287][T13776] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2017'. [ 328.696086][T13770] gretap0: refused to change device tx_queue_len [ 328.705397][T13778] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 328.736706][T13770] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 328.856456][T13778] block nbd2: server does not support multiple connections per device. [ 328.932549][T13778] block nbd2: shutting down sockets [ 329.170138][T13795] syzkaller0: entered promiscuous mode [ 329.185735][T13795] syzkaller0: entered allmulticast mode [ 329.535691][T13778] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 329.558557][T13778] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 331.250415][T13802] tipc: Enabling of bearer rejected, failed to enable media [ 331.329078][T13778] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 331.358063][T13778] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 331.422953][T13778] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 331.434527][T13829] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 331.434527][T13829] Please contact the netfilter-devel mailing list or update your nftables rules. [ 331.440305][T13778] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 331.845326][T13847] __nla_validate_parse: 2 callbacks suppressed [ 331.845343][T13847] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2036'. [ 331.865068][T13847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2036'. [ 331.874470][T13847] netlink: 'syz.0.2036': attribute type 21 has an invalid length. [ 331.882758][T13847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2036'. [ 331.967866][T13852] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 332.032665][T13847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2036'. [ 332.046130][T13858] netlink: 'syz.6.2041': attribute type 58 has an invalid length. [ 332.057323][T13847] netlink: 'syz.0.2036': attribute type 21 has an invalid length. [ 332.062810][ T35] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.074148][T13847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2036'. [ 332.102780][ T35] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.130047][ T35] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.164109][ T35] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.297179][T13874] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 332.325587][T13874] bond1 (unregistering): Released all slaves [ 332.404379][T13866] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2043'. [ 332.741491][T13895] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2051'. [ 332.795662][T13902] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2051'. [ 332.873542][T13906] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2051'. [ 332.949179][T13911] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2054'. [ 333.040508][T13915] netlink: 'syz.6.2055': attribute type 49 has an invalid length. [ 333.266436][T13895] bridge0: entered allmulticast mode [ 333.294227][T13902] vlan0: left allmulticast mode [ 333.304820][T13902] geneve0: left allmulticast mode [ 333.313108][T13902] bridge0: port 1(vlan0) entered disabled state [ 333.350933][T13925] netlink: 'syz.0.2057': attribute type 13 has an invalid length. [ 333.757101][T13944] netlink: zone id is out of range [ 333.784349][T13944] netlink: zone id is out of range [ 333.790988][T13944] netlink: zone id is out of range [ 333.812245][T13944] netlink: zone id is out of range [ 333.831246][T13944] netlink: zone id is out of range [ 333.857431][T13944] netlink: zone id is out of range [ 333.867875][T13944] netlink: zone id is out of range [ 333.889745][T13944] netlink: zone id is out of range [ 333.915655][T13944] netlink: zone id is out of range [ 333.937414][T13944] netlink: zone id is out of range [ 334.072276][T13969] xt_hashlimit: size too large, truncated to 1048576 [ 334.090146][T13969] xt_hashlimit: max too large, truncated to 1048576 [ 334.425824][T13975] netlink: 'syz.0.2071': attribute type 1 has an invalid length. [ 334.799174][T13999] netlink: 'syz.5.2077': attribute type 1 has an invalid length. [ 334.974367][T13999] 8021q: adding VLAN 0 to HW filter on device bond1 [ 335.263779][T13999] veth3: entered allmulticast mode [ 335.288371][T13999] bond1: (slave veth3): Enslaving as an active interface with an up link [ 335.354543][T14017] bond1 (unregistering): (slave veth3): Releasing backup interface [ 335.407484][T14017] bond1 (unregistering): Released all slaves [ 335.681888][T14043] ip6tnl5: entered promiscuous mode [ 336.047443][T14059] netlink: 'syz.5.2092': attribute type 3 has an invalid length. [ 336.064075][T14062] netlink: 'syz.5.2092': attribute type 3 has an invalid length. [ 336.485317][T14079] gretap0: left promiscuous mode [ 336.520102][T14079] 0·: left allmulticast mode [ 336.549859][T14079] hsr_slave_0: left allmulticast mode [ 336.562178][T14079] hsr_slave_1: left allmulticast mode [ 336.579853][T14079] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 336.593970][T14079] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 336.630903][T14079] bond1: left promiscuous mode [ 336.658862][T14079] bond1: left allmulticast mode [ 336.676828][T14079] geneve3: left promiscuous mode [ 336.745944][T14079] gretap2: left allmulticast mode [ 336.820128][T14079] veth3: left allmulticast mode [ 336.858910][T14079] ip6gre1: left promiscuous mode [ 336.878607][T14079] ip6gre1: left allmulticast mode [ 336.921553][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 336.931510][T14079] macsec1: left promiscuous mode [ 336.951722][T14079] bond5: left promiscuous mode [ 336.958980][T14079] bond5: left allmulticast mode [ 336.975862][T14079] veth5: left allmulticast mode [ 336.988631][T14079] veth7: left allmulticast mode [ 337.010181][T14079] bond7: left promiscuous mode [ 337.027228][T14079] bond7: left allmulticast mode [ 337.058979][T14079] gretap4: left promiscuous mode [ 337.077838][T14079] bond8: left promiscuous mode [ 337.086444][T14079] macvlan1: left promiscuous mode [ 337.100285][T14079] macvlan1: left allmulticast mode [ 337.135438][T14122] __nla_validate_parse: 14 callbacks suppressed [ 337.135458][T14122] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2105'. [ 337.316132][T14124] netlink: 'syz.0.2106': attribute type 2 has an invalid length. [ 337.549205][T14146] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2111'. [ 337.655277][T14150] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2116'. [ 337.678873][T14150] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2116'. [ 337.817780][T14160] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2120'. [ 338.037630][T14181] netlink: 'syz.0.2124': attribute type 1 has an invalid length. [ 338.145141][T14181] 8021q: adding VLAN 0 to HW filter on device bond13 [ 338.256280][T14181] veth3: entered allmulticast mode [ 338.285476][T14181] bond13: (slave veth3): Enslaving as an active interface with an up link [ 338.347877][T14184] bond13 (unregistering): (slave veth3): Releasing backup interface [ 338.382458][T14184] bond13 (unregistering): Released all slaves [ 338.994474][T14228] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2133'. [ 339.140141][T14235] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2134'. [ 339.275636][T14241] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2136'. [ 339.528981][T14257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2140'. [ 339.996762][T14285] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2146'. [ 340.317810][T14293] netlink: 'syz.4.2148': attribute type 1 has an invalid length. [ 340.488949][T14291] veth9: entered allmulticast mode [ 340.537893][T14296] bond9: (slave veth0_to_bond): Releasing active interface [ 340.686374][T14305] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 341.067841][T14322] netlink: 'syz.5.2155': attribute type 16 has an invalid length. [ 341.176799][T14305] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.184271][T14305] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.529824][T14305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.582221][T14305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.684451][T14326] netlink: 'syz.0.2156': attribute type 1 has an invalid length. [ 342.169100][T10309] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.196175][T10309] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.282715][T10309] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.313627][T10309] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.343207][T14341] __nla_validate_parse: 6 callbacks suppressed [ 342.343229][T14341] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2161'. [ 342.464326][T14357] lo: Caught tx_queue_len zero misconfig [ 342.508430][T14362] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2167'. [ 342.535013][T14350] syzkaller0: entered allmulticast mode [ 342.551576][T14367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2168'. [ 342.573578][T14367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2168'. [ 342.678240][T14370] xt_l2tp: v2 sid > 0xffff: 262144 [ 342.717129][T14370] xt_l2tp: unknown flags: 8b [ 343.214085][T14397] 8021q: VLANs not supported on tunl0 [ 343.232896][T14397] netlink: 'syz.5.2176': attribute type 6 has an invalid length. [ 343.255734][T14397] netlink: 'syz.5.2176': attribute type 7 has an invalid length. [ 343.281239][T14397] netlink: 'syz.5.2176': attribute type 8 has an invalid length. [ 343.288503][T14399] net_ratelimit: 165 callbacks suppressed [ 343.288519][T14399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.153314][T14435] netlink: 'syz.5.2188': attribute type 15 has an invalid length. [ 344.178786][T14435] netlink: 666 bytes leftover after parsing attributes in process `syz.5.2188'. [ 344.210732][T14446] lo speed is unknown, defaulting to 1000 [ 344.364428][T14452] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2193'. [ 344.373772][T14452] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2193'. [ 344.565184][T14446] dvmrp0: entered allmulticast mode [ 344.750028][ T35] dvmrp0: left allmulticast mode [ 344.868204][T14480] tipc: Enabling of bearer rejected, failed to enable media [ 345.104500][T14492] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2202'. [ 345.142057][T14492] netlink: 'syz.6.2202': attribute type 27 has an invalid length. [ 345.189958][T14492] veth2: entered allmulticast mode [ 345.612704][T14517] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2210'. [ 345.632717][T14517] erspan0: entered allmulticast mode [ 345.818162][T14527] netlink: 'syz.7.2212': attribute type 1 has an invalid length. [ 345.868318][T14527] bond1: option mode: invalid value (10) [ 345.886122][T14527] bond1 (unregistering): Released all slaves [ 346.218037][T14552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.622540][T14575] netlink: 'syz.6.2228': attribute type 1 has an invalid length. [ 346.704573][T14586] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2231'. [ 346.717814][T14580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.753946][T14575] 8021q: adding VLAN 0 to HW filter on device bond1 [ 346.785084][T14581] bond1: (slave veth3): Enslaving as an active interface with a down link [ 346.820456][T14587] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 346.850361][T14587] bond1: (slave batadv1): making interface the new active one [ 346.881929][T14587] batadv1: entered promiscuous mode [ 346.894600][T14587] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 347.485750][T14634] __nla_validate_parse: 2 callbacks suppressed [ 347.485754][T14631] netlink: 'syz.7.2242': attribute type 7 has an invalid length. [ 347.485770][T14634] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2243'. [ 347.684361][T14640] syzkaller0: entered promiscuous mode [ 347.708186][T14640] syzkaller0: entered allmulticast mode [ 347.734088][T14640] 0: reclassify loop, rule prio 0, protocol 700 [ 348.013812][T14664] netlink: 272 bytes leftover after parsing attributes in process `syz.4.2249'. [ 348.573264][T14677] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2253'. [ 348.583559][T14677] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2253'. [ 348.609751][T14677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2253'. [ 348.664554][T14679] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2254'. [ 348.967177][T14692] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2257'. [ 349.650362][T14728] x_tables: unsorted underflow at hook 3 [ 349.855222][T14738] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2268'. [ 350.146468][T14755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2273'. [ 350.156670][T14750] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2271'. [ 350.769120][T14768] ip6t_srh: unknown srh invflags BA61 [ 350.815885][T14768] ip6t_srh: unknown srh invflags BA61 [ 351.526779][T14794] syzkaller0: entered promiscuous mode [ 351.544340][T14794] syzkaller0: entered allmulticast mode [ 351.560012][T14794] tipc: Started in network mode [ 351.571824][T14794] tipc: Node identity a6db67ba996e, cluster identity 4711 [ 351.586163][T14794] tipc: Enabled bearer , priority 0 [ 351.631556][T14794] tipc: Resetting bearer [ 351.653217][T14793] tipc: Resetting bearer [ 351.737356][T14793] tipc: Disabling bearer [ 351.789514][T14812] netlink: 'syz.6.2290': attribute type 12 has an invalid length. [ 351.797676][T14812] netlink: 'syz.6.2290': attribute type 29 has an invalid length. [ 351.806220][T14812] netlink: 'syz.6.2290': attribute type 1 has an invalid length. [ 351.821213][T14812] netlink: 'syz.6.2290': attribute type 2 has an invalid length. [ 351.833935][T14812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.855926][T14810] vlan6: entered promiscuous mode [ 351.873062][T14810] bridge0: entered promiscuous mode [ 352.338963][T14841] netlink: 'syz.4.2303': attribute type 4 has an invalid length. [ 352.356792][T14840] netlink: 'syz.4.2303': attribute type 4 has an invalid length. [ 352.395860][T14849] netlink: 'syz.6.2305': attribute type 8 has an invalid length. [ 352.423152][T14849] bond0: entered promiscuous mode [ 352.428995][T14849] bond_slave_0: entered promiscuous mode [ 352.438366][T14849] bond_slave_1: entered promiscuous mode [ 352.448769][T14850] netlink: 'syz.6.2305': attribute type 8 has an invalid length. [ 352.450150][T14849] gretap0: entered promiscuous mode [ 352.467110][T14849] bond0: left promiscuous mode [ 352.472142][T14849] bond_slave_0: left promiscuous mode [ 352.477763][T14849] bond_slave_1: left promiscuous mode [ 352.486240][T14849] gretap0: left promiscuous mode [ 352.518001][T14850] bond0: entered promiscuous mode [ 352.526598][T14854] __nla_validate_parse: 13 callbacks suppressed [ 352.526616][T14854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2306'. [ 352.537090][T14850] bond_slave_0: entered promiscuous mode [ 352.565829][T14850] bond_slave_1: entered promiscuous mode [ 352.579161][T14850] gretap0: entered promiscuous mode [ 352.586775][T14861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2306'. [ 352.592926][T14850] bond0: left promiscuous mode [ 352.596372][T14861] netlink: 'syz.0.2306': attribute type 1 has an invalid length. [ 352.611456][T14850] bond_slave_0: left promiscuous mode [ 352.619536][T14850] bond_slave_1: left promiscuous mode [ 352.629610][T14850] gretap0: left promiscuous mode [ 352.641807][T14864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2308'. [ 352.678913][T14852] bond13: entered promiscuous mode [ 352.694280][T14844] lo speed is unknown, defaulting to 1000 [ 352.875377][T14875] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 352.982716][T14887] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2313'. [ 353.032641][T14887] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2313'. [ 353.186124][T14890] netlink: 'syz.6.2314': attribute type 1 has an invalid length. [ 353.297677][T14899] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 353.380068][T14907] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2319'. [ 353.392744][T14907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2319'. [ 353.762776][T14923] syzkaller0: entered promiscuous mode [ 353.768476][T14923] syzkaller0: entered allmulticast mode [ 353.994541][T14932] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2327'. [ 354.039270][T14935] tipc: Enabling of bearer rejected, failed to enable media [ 354.040940][T14938] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2330'. [ 354.060329][T14942] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2327'. [ 354.285658][T14937] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 354.305090][T14937] syzkaller0: entered promiscuous mode [ 354.310699][T14937] syzkaller0: entered allmulticast mode [ 354.776756][T14970] vlan2: entered allmulticast mode [ 354.791177][T14970] bridge3: entered allmulticast mode [ 354.808808][T14970] erspan0: left allmulticast mode [ 354.818278][T14970] bridge3: port 1(erspan0) entered blocking state [ 354.834569][T14970] bridge3: port 1(erspan0) entered disabled state [ 354.851349][T14970] erspan0: entered allmulticast mode [ 354.869397][T14970] erspan0: entered promiscuous mode [ 354.977035][T14975] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.988124][T14975] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.035707][T14982] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 355.115569][T14982] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 355.134221][T14982] bond1 (unregistering): Released all slaves [ 355.715538][T15000] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 355.788103][T15000] syzkaller1: entered promiscuous mode [ 355.806672][T15000] syzkaller1: entered allmulticast mode [ 355.980185][T15020] lo speed is unknown, defaulting to 1000 [ 356.727516][T15069] syzkaller0: entered promiscuous mode [ 356.733264][T15069] syzkaller0: entered allmulticast mode [ 357.185498][T15086] validate_nla: 5 callbacks suppressed [ 357.185515][T15086] netlink: 'syz.4.2368': attribute type 12 has an invalid length. [ 357.200550][T15085] netlink: 'syz.6.2367': attribute type 4 has an invalid length. [ 357.257053][T15090] macsec0: entered promiscuous mode [ 357.280888][T15084] macsec0: left promiscuous mode [ 357.457238][T15106] ip6tnl0: Caught tx_queue_len zero misconfig [ 357.877517][T15131] ip6tnl0: mtu less than device minimum [ 357.960099][T15133] netlink: 'syz.4.2381': attribute type 8 has an invalid length. [ 358.079198][T15138] __nla_validate_parse: 15 callbacks suppressed [ 358.079216][T15138] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2383'. [ 358.159440][T15140] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2384'. [ 358.170500][ T60] batadv1: left promiscuous mode [ 358.280541][T15146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2384'. [ 358.319690][T15150] netlink: 'syz.5.2386': attribute type 3 has an invalid length. [ 358.583618][T15160] syzkaller0: entered promiscuous mode [ 358.589400][T15160] syzkaller0: entered allmulticast mode [ 358.613640][T15163] tipc: Started in network mode [ 358.619086][T15163] tipc: Node identity 8a25fea6dae7, cluster identity 4711 [ 358.627320][T15163] tipc: Enabled bearer , priority 0 [ 358.648848][T15159] tipc: Resetting bearer [ 358.681835][T15158] tipc: Resetting bearer [ 358.702214][ T6032] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 358.734399][T15158] tipc: Disabling bearer [ 358.781034][T15168] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2392'. [ 358.790185][T15170] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2393'. [ 358.792519][T15170] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2393'. [ 359.084525][T15190] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2399'. [ 359.234956][T15202] netlink: 'syz.4.2402': attribute type 3 has an invalid length. [ 359.299024][T15200] 8021q: adding VLAN 0 to HW filter on device bond1 [ 359.319009][T15200] bridge0: port 3(bond1) entered blocking state [ 359.330712][T15200] bridge0: port 3(bond1) entered disabled state [ 359.348968][T15200] bond1: entered allmulticast mode [ 359.353906][T15208] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2405'. [ 359.358681][T15200] bond1: entered promiscuous mode [ 359.379852][T15200] bridge0: port 3(bond1) entered blocking state [ 359.386316][T15200] bridge0: port 3(bond1) entered forwarding state [ 359.425793][T15207] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.2404'. [ 359.484710][ T6032] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 359.496230][T15211] netlink: 228 bytes leftover after parsing attributes in process `syz.6.2406'. [ 359.622927][ T60] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 359.637630][T15222] netlink: 'syz.0.2410': attribute type 1 has an invalid length. [ 359.696390][T15222] 8021q: adding VLAN 0 to HW filter on device bond14 [ 359.894748][T15235] vlan1: entered allmulticast mode [ 359.903260][T15235] bond0: entered allmulticast mode [ 360.239386][T15259] nbd: device at index 64 is going down [ 360.689595][ T9926] udevd[9926]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 360.858613][ T13] bridge0: port 3(bond1) entered disabled state [ 360.882834][ T48] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 360.890991][ T48] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 360.989717][T15283] lo speed is unknown, defaulting to 1000 [ 361.536882][T15312] bond15 (unregistering): Released all slaves [ 361.717685][T15320] lo speed is unknown, defaulting to 1000 [ 361.790781][T15332] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 361.881841][ T6032] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 361.946770][ T48] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.957797][T15336] netlink: 'syz.0.2431': attribute type 13 has an invalid length. [ 361.967484][ T48] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.978153][T15336] netlink: 'syz.0.2431': attribute type 17 has an invalid length. [ 361.987064][ T48] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.128409][T15336] 0ªî{X¹¦: left promiscuous mode [ 362.239939][T15336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.255460][T15336] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.299557][T15336] veth0_to_bridge: left promiscuous mode [ 362.305735][T15336] veth0_to_bridge: left allmulticast mode [ 362.372043][T15336] veth1_vlan: left promiscuous mode [ 362.393300][T15336] veth0_vlan: left promiscuous mode [ 362.401056][T15336] veth0_vlan: entered promiscuous mode [ 362.429859][T15336] veth1_vlan: entered promiscuous mode [ 362.450085][T15336] veth1_macvtap: left promiscuous mode [ 362.457895][T15336] veth0_macvtap: entered promiscuous mode [ 362.479264][T15336] veth1_macvtap: entered promiscuous mode [ 362.513798][T15336] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 362.537680][ T48] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.553065][ T48] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.563251][ T48] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.584134][ T48] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.686542][ T48] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.894926][T15369] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 363.496260][T15398] __nla_validate_parse: 6 callbacks suppressed [ 363.496278][T15398] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2450'. [ 363.762503][T15408] xt_l2tp: invalid flags combination: 0 [ 363.898551][T15414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2454'. [ 364.092656][T15420] xt_CT: You must specify a L4 protocol and not use inversions on it [ 364.105469][T15414] ip6gretap0: entered allmulticast mode [ 364.506554][T15452] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2464'. [ 364.551349][T15454] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2463'. [ 364.566517][T15456] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2464'. [ 364.569065][T15454] netlink: 'syz.5.2463': attribute type 30 has an invalid length. [ 364.602229][T15458] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2463'. [ 364.615274][T15458] netlink: 'syz.5.2463': attribute type 30 has an invalid length. [ 364.639563][T15454] vxlan0: entered promiscuous mode [ 364.649331][T15454] vxlan0: entered allmulticast mode [ 364.687430][T15458] vxlan1: entered promiscuous mode [ 364.695756][T15458] vxlan1: entered allmulticast mode [ 364.715268][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.744002][ T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.820121][ T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.838407][ T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.878140][T15460] netlink: 'syz.0.2465': attribute type 1 has an invalid length. [ 365.086516][T15478] syzkaller1: entered promiscuous mode [ 365.100351][T15478] syzkaller1: entered allmulticast mode [ 365.161319][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 365.279928][T15492] netlink: 'syz.6.2472': attribute type 1 has an invalid length. [ 365.303597][T15492] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2472'. [ 365.492365][T15501] syzkaller0: entered promiscuous mode [ 365.509987][T15501] syzkaller0: entered allmulticast mode [ 365.938134][T15527] syzkaller0: entered promiscuous mode [ 365.951757][T15527] syzkaller0: entered allmulticast mode [ 366.009252][T15538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2482'. [ 366.272264][T15549] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2485'. [ 366.605790][T15565] xfrm0: Caught tx_queue_len zero misconfig [ 366.745427][T15576] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.072633][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807a4a2800: rx timeout, send abort [ 367.151206][T15595] syzkaller1: entered promiscuous mode [ 367.160349][T15595] syzkaller1: entered allmulticast mode [ 367.309963][T15607] syzkaller0: entered promiscuous mode [ 367.318824][T15607] syzkaller0: entered allmulticast mode [ 367.577487][T15618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.586471][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807a4a2800: abort rx timeout. Force session deactivation [ 367.732776][T15629] FAULT_INJECTION: forcing a failure. [ 367.732776][T15629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.759917][T15629] CPU: 0 UID: 0 PID: 15629 Comm: syz.6.2512 Not tainted syzkaller #0 PREEMPT(full) [ 367.759944][T15629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 367.759963][T15629] Call Trace: [ 367.759970][T15629] [ 367.759978][T15629] dump_stack_lvl+0xe8/0x150 [ 367.760011][T15629] should_fail_ex+0x40c/0x560 [ 367.760038][T15629] _copy_from_user+0x2d/0xb0 [ 367.760066][T15629] ___sys_sendmsg+0x1c6/0x360 [ 367.760085][T15629] ? __lock_acquire+0x683/0x2cf0 [ 367.760114][T15629] ? __pfx____sys_sendmsg+0x10/0x10 [ 367.760145][T15629] ? kstrtouint+0x6e/0xe0 [ 367.760191][T15629] ? __fget_files+0x2a/0x420 [ 367.760214][T15629] ? __fget_files+0x3a2/0x420 [ 367.760247][T15629] __sys_sendmmsg+0x273/0x4d0 [ 367.760272][T15629] ? __pfx___sys_sendmmsg+0x10/0x10 [ 367.760301][T15629] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 367.760336][T15629] ? ksys_write+0x242/0x270 [ 367.760365][T15629] ? __pfx_ksys_write+0x10/0x10 [ 367.760397][T15629] __x64_sys_sendmmsg+0xa0/0xc0 [ 367.760415][T15629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.760434][T15629] do_syscall_64+0x174/0x580 [ 367.760453][T15629] ? trace_irq_disable+0x3b/0x140 [ 367.760476][T15629] ? clear_bhb_loop+0x40/0x90 [ 367.760499][T15629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.760517][T15629] RIP: 0033:0x7fe05b39de99 [ 367.760535][T15629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.760551][T15629] RSP: 002b:00007fe05c2f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 367.760571][T15629] RAX: ffffffffffffffda RBX: 00007fe05b625fa0 RCX: 00007fe05b39de99 [ 367.760585][T15629] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 367.760598][T15629] RBP: 00007fe05c2f1090 R08: 0000000000000000 R09: 0000000000000000 [ 367.760610][T15629] R10: 00000000000000fc R11: 0000000000000246 R12: 0000000000000001 [ 367.760621][T15629] R13: 00007fe05b626038 R14: 00007fe05b625fa0 R15: 00007ffcb015b958 [ 367.760649][T15629] [ 368.175832][T15650] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2518'. [ 368.399774][T15662] tipc: Started in network mode [ 368.435829][T15662] tipc: Node identity 4246, cluster identity 1 [ 368.452283][T15662] tipc: Node number set to 16966 [ 368.735403][T15693] netlink: 'syz.0.2526': attribute type 13 has an invalid length. [ 368.793605][T15696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2523'. [ 368.838668][ T6040] IPVS: starting estimator thread 0... [ 368.845388][T15702] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 368.951228][T15703] IPVS: using max 33 ests per chain, 79200 per kthread [ 368.999417][T15708] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2531'. [ 369.080340][T15699] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 369.252647][T15719] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2533'. [ 369.348986][T15719] syzkaller0: entered promiscuous mode [ 369.377357][T15719] syzkaller0: entered allmulticast mode [ 370.060043][T15776] netlink: 'syz.4.2547': attribute type 1 has an invalid length. [ 370.133567][T15776] bond11: entered promiscuous mode [ 370.139412][T15776] 8021q: adding VLAN 0 to HW filter on device bond11 [ 370.166378][T15776] bond11: (slave bridge4): making interface the new active one [ 370.166604][T15774] block nbd0: NBD_DISCONNECT [ 370.174343][T15776] bridge4: entered promiscuous mode [ 370.185357][T15776] bond11: (slave bridge4): Enslaving as an active interface with an up link [ 370.196367][T15774] block nbd0: Send disconnect failed -32 [ 370.225482][T15774] block nbd0: shutting down sockets [ 370.271060][T15786] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 370.441903][T15794] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2554'. [ 370.466339][T15794] macvlan0: entered promiscuous mode [ 370.834510][T15803] lo speed is unknown, defaulting to 1000 [ 370.939088][T15815] netlink: 'syz.4.2559': attribute type 3 has an invalid length. [ 371.020834][T15818] syzkaller1: entered promiscuous mode [ 371.056844][T15818] syzkaller1: entered allmulticast mode [ 371.218357][T15824] ieee802154 phy1 wpan1: encryption failed: -22 [ 371.346510][T15829] tipc: Enabled bearer , priority 0 [ 371.376195][T15829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2563'. [ 371.434534][T15830] syzkaller0: entered promiscuous mode [ 371.441378][T15830] syzkaller0: entered allmulticast mode [ 371.533581][T15841] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2563'. [ 371.561441][T15841] geneve1: Caught tx_queue_len zero misconfig [ 371.595382][T15829] tipc: Resetting bearer [ 371.645531][T15828] tipc: Resetting bearer [ 371.658117][T15845] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2567'. [ 371.680268][T15846] netlink: 'syz.7.2568': attribute type 1 has an invalid length. [ 371.690060][T15828] tipc: Disabling bearer [ 371.696055][T15846] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2568'. [ 371.728860][T15849] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2569'. [ 371.738050][T15850] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2567'. [ 372.048263][T15856] netlink: 'syz.4.2571': attribute type 1 has an invalid length. [ 372.099166][T15865] hsr0: entered allmulticast mode [ 372.115220][T15865] hsr_slave_0: entered allmulticast mode [ 372.147212][T15865] hsr_slave_1: entered allmulticast mode [ 372.183479][T15856] gretap5: entered allmulticast mode [ 372.224101][T15862] syzkaller1: entered promiscuous mode [ 372.241884][T15862] syzkaller1: entered allmulticast mode [ 372.267533][T15865] hsr_slave_0: left promiscuous mode [ 372.275374][T15865] hsr_slave_1: left promiscuous mode [ 372.291604][T15865] hsr0 (unregistering): left allmulticast mode [ 372.679885][T15883] netlink: 'syz.4.2576': attribute type 15 has an invalid length. [ 372.806029][T15896] openvswitch: netlink: Missing valid actions attribute. [ 372.847465][T15896] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.090373][T15908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.138191][T15915] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 373.343135][ T6032] IPVS: starting estimator thread 0... [ 373.451525][T15924] IPVS: using max 27 ests per chain, 64800 per kthread [ 374.041483][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 374.109663][T15951] lo speed is unknown, defaulting to 1000 [ 374.185836][ T6040] IPVS: starting estimator thread 0... [ 374.204081][T15963] netlink: 'syz.6.2599': attribute type 1 has an invalid length. [ 374.302871][T15967] IPVS: using max 36 ests per chain, 86400 per kthread [ 374.357669][T15963] bond3: entered promiscuous mode [ 374.370828][T15963] 8021q: adding VLAN 0 to HW filter on device bond3 [ 374.599760][T15963] __nla_validate_parse: 14 callbacks suppressed [ 374.599779][T15963] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2599'. [ 374.952327][T16002] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2604'. [ 375.057098][T16007] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2605'. [ 375.211944][T15999] netlink: 'syz.7.2604': attribute type 1 has an invalid length. [ 375.774001][T16052] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2614'. [ 375.862303][T16052] vlan2: entered allmulticast mode [ 375.879329][T16052] bridge2: entered allmulticast mode [ 375.934014][T16058] batadv1: entered promiscuous mode [ 375.949447][T16058] batadv1: entered allmulticast mode [ 376.075588][T16074] bridge2: port 1(erspan0) entered blocking state [ 376.102337][T16074] bridge2: port 1(erspan0) entered disabled state [ 376.123435][T16074] erspan0: entered allmulticast mode [ 376.136822][T16074] erspan0: entered promiscuous mode [ 376.143407][T16074] bridge2: port 1(erspan0) entered blocking state [ 376.149984][T16074] bridge2: port 1(erspan0) entered forwarding state [ 376.158290][T16052] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2614'. [ 376.486926][T16095] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2621'. [ 376.688332][T16108] netlink: 'syz.0.2626': attribute type 1 has an invalid length. [ 376.778181][T16109] af_packet: tpacket_rcv: packet too big, clamped from 68 to 4294967272. macoff=96 [ 377.465710][T16103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.511903][T16103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.713039][T16103] macvlan0: left promiscuous mode [ 377.922430][T16103] vlan2: left allmulticast mode [ 377.931233][T16103] bridge3: left allmulticast mode [ 377.971801][T16103] bond3: left promiscuous mode [ 378.043795][T16108] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 378.081749][T16128] bridge0: port 3(dummy0) entered blocking state [ 378.119376][T16128] bridge0: port 3(dummy0) entered disabled state [ 378.126655][T16128] dummy0: entered allmulticast mode [ 378.135104][T16128] dummy0: entered promiscuous mode [ 378.149049][ T48] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.173461][ T48] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.190112][T16137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2633'. [ 378.202212][T16135] tipc: Enabling of bearer rejected, failed to enable media [ 378.220720][ T48] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.246951][ T48] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.464724][T16152] netlink: 1712 bytes leftover after parsing attributes in process `syz.5.2634'. [ 378.523332][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.587487][T16167] netlink: 'syz.6.2638': attribute type 10 has an invalid length. [ 378.607209][T16167] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 378.942540][T16188] gretap0: entered promiscuous mode [ 379.079259][T16188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.127338][T16188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.147919][T16204] netlink: 'syz.7.2644': attribute type 1 has an invalid length. [ 379.277613][T16188] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 379.313115][T16188] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 379.364116][T16188] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 379.390717][ T5827] lo speed is unknown, defaulting to 1000 [ 379.419625][ T5827] syz2: Port: 1 Link ACTIVE [ 379.484388][T16204] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 379.917344][T16238] netlink: 'syz.4.2651': attribute type 10 has an invalid length. [ 379.984522][T16238] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 380.004912][T16238] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 380.033169][T16244] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2652'. [ 380.052294][T16238] bond0: (slave netdevsim1): Enslaving as an active interface with a down link [ 380.129442][T16248] netlink: 'syz.6.2654': attribute type 1 has an invalid length. [ 380.340020][T16248] macvlan2: entered promiscuous mode [ 380.369880][T16248] macvlan2: entered allmulticast mode [ 380.448287][T16261] netlink: 'syz.0.2658': attribute type 1 has an invalid length. [ 380.594197][T16261] 8021q: adding VLAN 0 to HW filter on device bond15 [ 380.654664][T16268] syzkaller0: entered promiscuous mode [ 380.676501][T16268] syzkaller0: entered allmulticast mode [ 380.722929][T16272] tipc: Enabled bearer , priority 0 [ 380.765765][T16271] tipc: Enabling of bearer rejected, already enabled [ 380.787455][T10309] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.804473][T10309] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.821899][T16261] lo speed is unknown, defaulting to 1000 [ 380.853490][T16288] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2666'. [ 380.916840][T10309] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.927724][T10309] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.936914][T16271] tipc: Resetting bearer [ 380.975253][T16271] tipc: Disabling bearer [ 381.101775][T16284] syzkaller0: create flow: hash 3756402729 index 1 [ 381.410302][T16310] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2670'. [ 381.433234][T16310] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2670'. [ 381.459907][T16310] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2670'. [ 381.484044][T16310] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2670'. [ 381.498399][T16310] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2670'. [ 381.510820][T16310] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2670'. [ 381.520838][T16310] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2670'. [ 381.531875][T16310] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2670'. [ 381.552362][T16283] syzkaller0: delete flow: hash 3756402729 index 1 [ 382.019422][T16338] netlink: 'syz.6.2675': attribute type 1 has an invalid length. [ 383.557271][T16338] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 383.848440][T16355] tipc: Enabling of bearer rejected, failed to enable media [ 383.895948][T16355] syzkaller0: entered promiscuous mode [ 383.906415][T16355] syzkaller0: entered allmulticast mode [ 383.932279][T16355] tipc: Enabled bearer , priority 0 [ 383.987598][T16355] tipc: Resetting bearer [ 384.121631][T16355] tipc: Disabling bearer [ 384.530017][T16387] tun0: tun_chr_ioctl cmd 1074025675 [ 384.536686][T16387] tun0: persist enabled [ 384.543297][T16387] tun0: tun_chr_ioctl cmd 1074025675 [ 384.548852][T16387] tun0: persist disabled [ 384.573293][T16391] xt_CT: You must specify a L4 protocol and not use inversions on it [ 384.612091][T16394] syzkaller0: entered promiscuous mode [ 384.625900][T16394] syzkaller0: entered allmulticast mode [ 384.947157][T16404] macvlan0: left promiscuous mode [ 384.958302][T16404] netlink: 'syz.7.2693': attribute type 1 has an invalid length. [ 384.977367][T16404] netlink: 'syz.7.2693': attribute type 2 has an invalid length. [ 385.136019][T16410] netlink: 'syz.0.2695': attribute type 27 has an invalid length. [ 385.216859][T16410] veth4: entered allmulticast mode [ 385.370854][T16428] __nla_validate_parse: 27 callbacks suppressed [ 385.370872][T16428] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2700'. [ 385.492573][T16428] ipvlan2: entered allmulticast mode [ 385.535088][T16428] dummy0: entered allmulticast mode [ 385.720127][T16442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.771017][ T5617] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 385.786122][ T5617] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 385.795582][ T5617] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 385.806735][ T5617] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 385.817195][ T5617] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 385.851581][ T5624] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 385.865070][ T5624] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 385.874453][ T5624] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 385.883142][ T5624] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 385.890743][ T5624] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 386.255038][ T5625] syz_tun (unregistering): left allmulticast mode [ 386.329089][T16461] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2709'. [ 386.757664][T16476] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2714'. [ 386.785782][T16444] lo speed is unknown, defaulting to 1000 [ 386.909286][T16484] netlink: 'syz.0.2715': attribute type 1 has an invalid length. [ 387.001501][T16484] 8021q: adding VLAN 0 to HW filter on device bond16 [ 387.037072][T16478] bond16: (slave geneve3): making interface the new active one [ 387.046261][T16478] bond16: (slave geneve3): Enslaving as an active interface with an up link [ 387.259027][T16497] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2719'. [ 387.453458][T16444] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.462674][T16444] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.481033][T16444] bridge_slave_0: entered allmulticast mode [ 387.498606][T16444] bridge_slave_0: entered promiscuous mode [ 387.511605][T16444] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.518898][T16444] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.526858][T16444] bridge_slave_1: entered allmulticast mode [ 387.535548][T16444] bridge_slave_1: entered promiscuous mode [ 387.645725][T16444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.673934][T16444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.780611][T16444] team0: Port device team_slave_0 added [ 387.815547][T16444] team0: Port device team_slave_1 added [ 387.856841][T16444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.871199][T16444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.931378][T16444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.957528][T16444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.964898][T16444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.972327][ T5617] Bluetooth: hci8: command tx timeout [ 387.993629][T16444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.112593][T16444] hsr_slave_0: entered promiscuous mode [ 388.132577][T16444] hsr_slave_1: entered promiscuous mode [ 388.146492][T16444] debugfs: 'hsr0' already exists in 'hsr' [ 388.165945][T16444] Cannot create hsr debugfs directory [ 388.717495][T16552] sch_fq: defrate 8 ignored. [ 388.736263][T16552] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2736'. [ 388.761378][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 388.829359][T16555] dvmrp8: entered allmulticast mode [ 388.964442][T16444] bond0: (slave netdevsim1): Releasing backup interface [ 388.975480][T16557] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2738'. [ 388.987675][T16557] siw: device registration error -23 [ 389.010447][T16557] smbdirect: ib_dev[syz2] removed [ 389.021705][T16444] netdevsim netdevsim4 netdevsim1 (unregistering): left allmulticast mode [ 389.475383][T16574] tipc: New replicast peer: 255.255.255.255 [ 389.512046][T16574] tipc: Enabled bearer , priority 10 [ 389.706357][T16444] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 389.730814][T16444] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 389.741555][T16444] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 389.756949][T16444] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 389.776087][T16444] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 389.795758][T16444] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 389.824173][T16598] netlink: 'syz.5.2747': attribute type 1 has an invalid length. [ 389.856796][T16598] 8021q: adding VLAN 0 to HW filter on device bond2 [ 389.866470][T16444] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 389.884738][T16596] netlink: 'syz.7.2748': attribute type 1 has an invalid length. [ 389.886554][T16444] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 389.962933][T16598] bond2: (slave geneve3): making interface the new active one [ 389.975650][T16598] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 389.997409][T16601] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2749'. [ 390.052874][ T5617] Bluetooth: hci8: command tx timeout [ 390.285092][T16444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.439554][T16444] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.466605][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.473820][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.557732][T10313] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.564974][T10313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.757869][T16645] vlan3: entered promiscuous mode [ 390.769912][T16645] bond_slave_1: entered promiscuous mode [ 390.778382][T16649] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2759'. [ 390.890242][T16648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.938927][T16648] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.975792][T16648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.039132][T16648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.056191][T16648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.804689][T16648] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 391.816178][T16648] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 391.839792][T16648] veth1_vlan: left promiscuous mode [ 391.846144][T16648] veth0_vlan: left promiscuous mode [ 391.852718][T16648] veth0_vlan: entered promiscuous mode [ 391.860085][T16648] veth1_vlan: entered promiscuous mode [ 391.869461][T16648] veth1_macvtap: left promiscuous mode [ 391.875974][T16648] veth0_macvtap: left promiscuous mode [ 391.882710][T16648] veth0_macvtap: entered promiscuous mode [ 391.889405][T16648] veth1_macvtap: entered promiscuous mode [ 391.898715][T16648] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 391.907066][T16648] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 391.915224][T16648] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 391.923864][T16648] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 391.934877][T16648] 8021q: adding VLAN 0 to HW filter on device bond1 [ 391.945179][T16648] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 391.953814][T16648] 8021q: adding VLAN 0 to HW filter on device bond2 [ 391.985004][T16648] 8021q: adding VLAN 0 to HW filter on device bond3 [ 391.998583][ T3267] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.005871][ T3267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.016917][ T3267] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.024093][ T3267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.107746][ T60] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.121479][ T5617] Bluetooth: hci8: command tx timeout [ 392.134153][ T60] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 392.157401][ T148] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.212153][ T148] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.233496][ T148] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.359259][T16680] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2764'. [ 392.386247][T16680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.417484][T16680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.602654][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 392.689052][T16695] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2768'. [ 392.730503][T16698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.737063][T16696] netlink: 'syz.5.2767': attribute type 3 has an invalid length. [ 392.830455][T16444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.026008][T16716] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2772'. [ 393.318296][T16730] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2775'. [ 393.514394][T16741] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2778'. [ 393.555555][T16741] netlink: 'syz.5.2778': attribute type 1 has an invalid length. [ 393.692226][T16741] 8021q: adding VLAN 0 to HW filter on device bond3 [ 393.929991][T16444] veth0_vlan: entered promiscuous mode [ 393.993433][T16444] veth1_vlan: entered promiscuous mode [ 394.094925][T16444] veth0_macvtap: entered promiscuous mode [ 394.119164][T16444] veth1_macvtap: entered promiscuous mode [ 394.161720][T16777] ip6t_srh: unknown srh invflags 4000 [ 394.188336][T16444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.201631][ T5617] Bluetooth: hci8: command tx timeout [ 394.243404][T16444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.290692][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.317078][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.346828][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.357332][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.575705][T10309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.614436][T10309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.659340][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.669249][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.339398][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 395.354976][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 395.363359][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 395.375952][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 395.387368][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 395.478011][T16829] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2799'. [ 395.576383][T16825] erspan0: entered promiscuous mode [ 395.588286][T16825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2798'. [ 395.727731][ T9073] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 395.903282][ T9073] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 396.186626][T16857] netlink: 9 bytes leftover after parsing attributes in process `syz.7.2804'. [ 396.278130][T16863] sctp: [Deprecated]: syz.6.2806 (pid 16863) Use of int in maxseg socket option. [ 396.278130][T16863] Use struct sctp_assoc_value instead [ 396.677638][T16887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2813'. [ 396.853706][T16897] netlink: 'syz.4.2816': attribute type 12 has an invalid length. [ 396.922930][T16901] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2817'. [ 396.946070][T16901] netlink: 'syz.7.2817': attribute type 25 has an invalid length. [ 396.958526][T16901] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2817'. [ 397.179344][T16911] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2819'. [ 397.199303][T16919] FAULT_INJECTION: forcing a failure. [ 397.199303][T16919] name failslab, interval 1, probability 0, space 0, times 0 [ 397.216491][T16919] CPU: 0 UID: 0 PID: 16919 Comm: syz.5.2821 Not tainted syzkaller #0 PREEMPT(full) [ 397.216516][T16919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 397.216526][T16919] Call Trace: [ 397.216534][T16919] [ 397.216540][T16919] dump_stack_lvl+0xe8/0x150 [ 397.216573][T16919] should_fail_ex+0x40c/0x560 [ 397.216599][T16919] should_failslab+0xa8/0x100 [ 397.216627][T16919] __kmalloc_cache_noprof+0xa8/0x660 [ 397.216649][T16919] ? rtnl_newlink+0x143/0x1c30 [ 397.216673][T16919] ? rtnl_newlink+0x143/0x1c30 [ 397.216704][T16919] rtnl_newlink+0x143/0x1c30 [ 397.216731][T16919] ? kasan_save_track+0x4f/0x80 [ 397.216751][T16919] ? kasan_save_track+0x3e/0x80 [ 397.216773][T16919] ? __kasan_slab_free+0x5c/0x80 [ 397.216803][T16919] ? kmem_cache_free+0x182/0x650 [ 397.216824][T16919] ? nlmon_xmit+0xb0/0x100 [ 397.216846][T16919] ? dev_hard_start_xmit+0x2cd/0x830 [ 397.216864][T16919] ? __dev_queue_xmit+0x14c0/0x3820 [ 397.216883][T16919] ? __netlink_deliver_tap+0x5b4/0x860 [ 397.216902][T16919] ? netlink_deliver_tap+0x19c/0x1b0 [ 397.216919][T16919] ? netlink_unicast+0x77f/0x940 [ 397.216943][T16919] ? netlink_sendmsg+0x813/0xb40 [ 397.216963][T16919] ? __pfx_rtnl_newlink+0x10/0x10 [ 397.216987][T16919] ? do_syscall_64+0x174/0x580 [ 397.217006][T16919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.217053][T16919] ? kasan_quarantine_put+0xbb/0x1f0 [ 397.217073][T16919] ? lockdep_hardirqs_on+0x7a/0x110 [ 397.217095][T16919] ? nlmon_xmit+0xb0/0x100 [ 397.217120][T16919] ? kmem_cache_free+0x182/0x650 [ 397.217154][T16919] ? __lock_acquire+0x683/0x2cf0 [ 397.217182][T16919] ? __dev_queue_xmit+0x29b/0x3820 [ 397.217206][T16919] ? __local_bh_enable_ip+0xd0/0x130 [ 397.217227][T16919] ? lockdep_hardirqs_on+0x7a/0x110 [ 397.217243][T16919] ? __dev_queue_xmit+0x29b/0x3820 [ 397.217261][T16919] ? __local_bh_enable_ip+0xd0/0x130 [ 397.217280][T16919] ? __dev_queue_xmit+0x29b/0x3820 [ 397.217304][T16919] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 397.217329][T16919] ? __pfx_rtnl_newlink+0x10/0x10 [ 397.217364][T16919] ? __pfx_rtnl_newlink+0x10/0x10 [ 397.217386][T16919] rtnetlink_rcv_msg+0x802/0xc00 [ 397.217415][T16919] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 397.217439][T16919] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 397.217461][T16919] ? ref_tracker_free+0x689/0x830 [ 397.217485][T16919] ? __pfx_ref_tracker_free+0x10/0x10 [ 397.217514][T16919] netlink_rcv_skb+0x226/0x4a0 [ 397.217533][T16919] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 397.217561][T16919] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 397.217592][T16919] ? netlink_deliver_tap+0x2e/0x1b0 [ 397.217611][T16919] ? netlink_deliver_tap+0x2e/0x1b0 [ 397.217635][T16919] netlink_unicast+0x7bb/0x940 [ 397.217672][T16919] netlink_sendmsg+0x813/0xb40 [ 397.217700][T16919] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.217724][T16919] ? aa_sock_msg_perm+0xf1/0x1b0 [ 397.217748][T16919] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.217767][T16919] sock_sendmsg_nosec+0x13a/0x180 [ 397.217799][T16919] ____sys_sendmsg+0x54e/0x850 [ 397.217824][T16919] ? __pfx_____sys_sendmsg+0x10/0x10 [ 397.217852][T16919] ? import_iovec+0x73/0xa0 [ 397.217882][T16919] ___sys_sendmsg+0x2a5/0x360 [ 397.217899][T16919] ? __lock_acquire+0x683/0x2cf0 [ 397.217927][T16919] ? __pfx____sys_sendmsg+0x10/0x10 [ 397.217978][T16919] ? __fget_files+0x2a/0x420 [ 397.218001][T16919] ? __fget_files+0x3a2/0x420 [ 397.218033][T16919] __x64_sys_sendmsg+0x1b1/0x290 [ 397.218054][T16919] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 397.218085][T16919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.218103][T16919] do_syscall_64+0x174/0x580 [ 397.218120][T16919] ? trace_irq_disable+0x3b/0x140 [ 397.218142][T16919] ? clear_bhb_loop+0x40/0x90 [ 397.218164][T16919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.218181][T16919] RIP: 0033:0x7fe66259de99 [ 397.218196][T16919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.218211][T16919] RSP: 002b:00007fe6607f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 397.218229][T16919] RAX: ffffffffffffffda RBX: 00007fe662825fa0 RCX: 00007fe66259de99 [ 397.218240][T16919] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 397.218251][T16919] RBP: 00007fe6607f6090 R08: 0000000000000000 R09: 0000000000000000 [ 397.218260][T16919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.218270][T16919] R13: 00007fe662826038 R14: 00007fe662825fa0 R15: 00007fff6b2b8018 [ 397.218295][T16919] [ 397.224558][T16821] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.502778][ T5617] Bluetooth: hci2: command tx timeout [ 397.507290][T16821] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.682633][T16821] bridge_slave_0: entered allmulticast mode [ 397.690334][T16821] bridge_slave_0: entered promiscuous mode [ 397.734323][T16821] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.747860][T16821] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.780251][T16821] bridge_slave_1: entered allmulticast mode [ 397.800582][T16821] bridge_slave_1: entered promiscuous mode [ 397.839059][T16929] IPVS: Scheduler module ip_vs_sip not found [ 397.929952][T16821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.962876][T16821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.064370][T16821] team0: Port device team_slave_0 added [ 398.083574][T16821] team0: Port device team_slave_1 added [ 398.187217][T16821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.202602][T16821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.228955][T16940] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2824'. [ 398.239602][T16821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.255788][T16821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.263542][T16821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.293158][T16821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.374254][T16821] hsr_slave_0: entered promiscuous mode [ 398.380871][T16821] hsr_slave_1: entered promiscuous mode [ 398.390811][T16821] debugfs: 'hsr0' already exists in 'hsr' [ 398.396854][T16821] Cannot create hsr debugfs directory [ 398.656321][T16963] xt_CT: You must specify a L4 protocol and not use inversions on it [ 398.789116][T16821] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.910527][T16821] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.001254][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 399.063190][T16821] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.126764][T16985] netlink: 4356 bytes leftover after parsing attributes in process `syz.6.2839'. [ 399.139423][T16985] netlink: 4356 bytes leftover after parsing attributes in process `syz.6.2839'. [ 399.249841][T16821] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.315888][T16991] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2841'. [ 399.333352][T16995] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2841'. [ 399.519617][T17000] xfrm0: entered allmulticast mode [ 399.562240][ T5617] Bluetooth: hci2: command tx timeout [ 399.770321][T17002] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 399.798066][T16821] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 399.806810][T17002] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 399.836220][T16821] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 399.859862][T16821] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 399.881918][T16992] netlink: 'syz.6.2842': attribute type 1 has an invalid length. [ 399.895720][T16821] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 399.903891][T16821] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 399.920417][T16821] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 399.928786][T16821] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 399.941681][T16821] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 399.955301][T17008] tipc: Enabling of bearer rejected, failed to enable media [ 400.072955][T17020] sctp: [Deprecated]: syz.5.2848 (pid 17020) Use of int in maxseg socket option. [ 400.072955][T17020] Use struct sctp_assoc_value instead [ 400.248795][T17028] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 400.696518][T16821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.772705][T16821] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.786234][T17052] netlink: 'syz.6.2853': attribute type 4 has an invalid length. [ 400.806241][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.813496][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.863817][T17054] netlink: 'syz.6.2853': attribute type 4 has an invalid length. [ 400.891142][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.898313][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.126285][T17054] bridge3: port 1(erspan0) entered disabled state [ 401.203557][T17054] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.210969][T17054] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.421480][T17054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.450619][T17054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.641620][ T5617] Bluetooth: hci2: command tx timeout [ 401.839568][T10309] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.857057][T10309] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.886195][T10309] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.912270][T10309] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.985783][T10309] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.995151][T10309] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.009909][T17075] __nla_validate_parse: 67 callbacks suppressed [ 402.009925][T17075] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2858'. [ 402.013008][T10309] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.035060][T10309] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.910955][T16821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.014033][T16821] veth0_vlan: entered promiscuous mode [ 403.061770][T16821] veth1_vlan: entered promiscuous mode [ 403.156811][T16821] veth0_macvtap: entered promiscuous mode [ 403.197160][T16821] veth1_macvtap: entered promiscuous mode [ 403.223252][T17134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2869'. [ 403.238022][T16821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.254946][T16821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.295658][ T5788] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.301718][T17139] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2870'. [ 403.306111][ T5788] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.384643][ T5788] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.395470][ T5788] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.682613][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.696216][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.721539][ T5617] Bluetooth: hci2: command tx timeout [ 403.742475][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.750854][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.986970][T17165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2876'. [ 404.303937][T17177] syz_tun: entered promiscuous mode [ 404.333605][T17179] netlink: 'syz.4.2879': attribute type 1 has an invalid length. [ 404.362255][T17179] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2879'. [ 404.398406][T17179] netlink: 'syz.4.2879': attribute type 1 has an invalid length. [ 404.424695][T17185] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 404.444715][T17179] netlink: 29 bytes leftover after parsing attributes in process `syz.4.2879'. [ 404.482610][T17181] netlink: 'syz.4.2879': attribute type 1 has an invalid length. [ 404.502261][T17181] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2879'. [ 404.534748][T17181] netlink: 'syz.4.2879': attribute type 1 has an invalid length. [ 404.549922][T17181] netlink: 29 bytes leftover after parsing attributes in process `syz.4.2879'. [ 404.960431][T17208] sctp: [Deprecated]: syz.5.2889 (pid 17208) Use of int in maxseg socket option. [ 404.960431][T17208] Use struct sctp_assoc_value instead [ 404.990198][T17203] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2887'. [ 405.179543][T17216] netlink: 2 bytes leftover after parsing attributes in process `syz.7.2885'. [ 405.566095][ T148] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 405.640010][T17249] syzkaller1: entered promiscuous mode [ 405.645015][T17254] netlink: 'syz.0.2898': attribute type 32 has an invalid length. [ 405.646178][T17249] syzkaller1: entered allmulticast mode [ 406.076067][T17276] netlink: 'syz.4.2900': attribute type 1 has an invalid length. [ 406.109419][T17276] bond1: (slave dummy0): making interface the new active one [ 406.126251][T17276] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 406.286376][T17241] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 406.786042][T17276] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.793831][T17276] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.080227][T17298] atomic_op ffff888079e7f998 conn xmit_atomic 0000000000000000 [ 407.267051][T17276] bond1: (slave dummy0): Releasing active interface [ 407.393226][T17276] bridge_slave_0: left allmulticast mode [ 407.398894][T17276] bridge_slave_0: left promiscuous mode [ 407.411473][T17276] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.439308][T17276] bridge_slave_1: left allmulticast mode [ 407.451737][T17276] bridge_slave_1: left promiscuous mode [ 407.457680][T17276] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.496114][T17276] bond0: (slave bond_slave_0): Releasing backup interface [ 407.535276][T17276] bond0: (slave bond_slave_1): Releasing backup interface [ 407.572916][T17276] team0: Port device team_slave_0 removed [ 407.606536][T17276] team0: Port device team_slave_1 removed [ 407.623212][T17276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.647299][T17276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.670604][T17276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.692993][T17276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.745419][T17276] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 408.038020][T17312] __nla_validate_parse: 2 callbacks suppressed [ 408.038037][T17312] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2908'. [ 408.135854][T17312] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2908'. [ 408.202977][T17312] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2908'. [ 408.203539][T17309] bond1 (unregistering): Released all slaves [ 408.287653][T17312] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2908'. [ 408.426810][T17312] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2908'. [ 408.438283][T17328] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2912'. [ 408.459314][T17335] x_tables: ip_tables: sctp match: only valid for protocol 132 [ 408.546469][T17312] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2908'. [ 408.705178][T17312] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2908'. [ 408.864714][T17345] netlink: 'syz.5.2916': attribute type 15 has an invalid length. [ 409.192117][T17363] syzkaller0: entered allmulticast mode [ 409.932589][T17387] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2928'. [ 410.307782][T17409] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2934'. [ 410.550758][T17418] atomic_op ffff888026e09998 conn xmit_atomic 0000000000000000 [ 411.121348][T17448] syzkaller0: entered promiscuous mode [ 411.127004][T17448] syzkaller0: entered allmulticast mode [ 413.126976][T17469] netlink: 'syz.6.2949': attribute type 13 has an invalid length. [ 413.153839][T17469] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 414.031250][T17441] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 414.304146][T17485] __nla_validate_parse: 8 callbacks suppressed [ 414.304163][T17485] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2954'. [ 414.324422][T17479] netlink: 'syz.0.2951': attribute type 49 has an invalid length. [ 414.347653][T17485] lo speed is unknown, defaulting to 1000 [ 414.374451][T17485] lo speed is unknown, defaulting to 1000 [ 414.397068][T17485] lo speed is unknown, defaulting to 1000 [ 414.407725][T17489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.420344][T17485] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 414.446124][T17485] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 414.476814][T17485] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 414.584029][T17494] netlink: 1696 bytes leftover after parsing attributes in process `syz.4.2955'. [ 414.619071][T17485] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 414.636406][T17498] Cannot find set identified by id 65534 to match [ 414.642965][T17494] netlink: 1696 bytes leftover after parsing attributes in process `syz.4.2955'. [ 414.689951][T17499] Cannot find set identified by id 65534 to match [ 414.721448][T17485] lo speed is unknown, defaulting to 1000 [ 414.731661][T17499] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2958'. [ 414.751044][T17485] lo speed is unknown, defaulting to 1000 [ 414.797350][T17485] lo speed is unknown, defaulting to 1000 [ 414.850616][T17485] lo speed is unknown, defaulting to 1000 [ 414.868142][T17485] lo speed is unknown, defaulting to 1000 [ 414.900409][T17485] lo speed is unknown, defaulting to 1000 [ 414.937050][T17485] lo speed is unknown, defaulting to 1000 [ 415.014175][T17485] lo speed is unknown, defaulting to 1000 [ 415.015036][T17509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.075937][T17485] lo speed is unknown, defaulting to 1000 [ 415.098391][T17485] lo speed is unknown, defaulting to 1000 [ 415.236881][T17515] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2963'. [ 415.488569][T17518] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 416.071723][T17471] Set syz1 is full, maxelem 65536 reached [ 418.387740][T17584] tunl0: Caught tx_queue_len zero misconfig [ 418.432850][T17586] netlink: 'syz.0.2973': attribute type 1 has an invalid length. [ 418.462435][T17586] netlink: 'syz.0.2973': attribute type 6 has an invalid length. [ 418.483691][T17586] netlink: 'syz.0.2973': attribute type 3 has an invalid length. [ 418.926689][T17617] netlink: 'syz.6.2983': attribute type 11 has an invalid length. [ 419.013816][T17619] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2983'. [ 419.027883][T17621] sctp: [Deprecated]: syz.7.2982 (pid 17621) Use of int in max_burst socket option. [ 419.027883][T17621] Use struct sctp_assoc_value instead [ 419.312391][T17619] xfrm0: entered allmulticast mode [ 419.333498][T17633] netlink: 279 bytes leftover after parsing attributes in process `syz.4.2987'. [ 419.351258][T17633] veth0_to_bond: default FDB implementation only supports local addresses [ 419.360256][T17634] netlink: 279 bytes leftover after parsing attributes in process `syz.4.2987'. [ 419.399196][T17634] veth0_to_bond: default FDB implementation only supports local addresses [ 419.518402][T17631] lo speed is unknown, defaulting to 1000 [ 419.529443][T17638] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2988'. [ 419.552622][T17638] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2988'. [ 419.578276][T17638] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2988'. [ 419.878655][T17654] netlink: 'syz.6.2993': attribute type 49 has an invalid length. [ 420.043498][T17660] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2996'. [ 420.169681][T17660] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2996'. [ 420.212145][T17660] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2996'. [ 420.274370][T17631] dvmrp0: entered allmulticast mode [ 420.296857][T17675] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2997'. [ 420.312344][T17675] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2997'. [ 420.343632][T17572] dvmrp0: left allmulticast mode [ 420.856323][T17697] tc action pedit unable to extract header offset for header type (0x5) [ 420.865986][T17697] tc action pedit unable to extract header offset for header type (0x5) [ 420.874413][T17697] tc action pedit unable to extract header offset for header type (0x5) [ 420.882809][T17697] tc action pedit unable to extract header offset for header type (0x5) [ 420.891212][T17697] tc action pedit unable to extract header offset for header type (0x5) [ 420.899555][T17697] tc action pedit unable to extract header offset for header type (0x5) [ 420.907950][T17697] tc action pedit unable to extract header offset for header type (0x5) [ 420.916334][T17697] tc action pedit unable to extract header offset for header type (0x5) [ 420.924731][T17697] tc action pedit unable to extract header offset for header type (0x5) [ 420.933113][T17697] tc action pedit unable to extract header offset for header type (0x5) [ 420.941520][T17697] 0: reclassify loop, rule prio 0, protocol 800 [ 420.949730][T17665] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 421.467145][T17730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.509354][T17730] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.550015][T17730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.653214][T17730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.663697][T17730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.676196][T17730] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 421.690674][T17730] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 421.709492][T17730] veth1_vlan: left promiscuous mode [ 421.719453][T17730] veth0_vlan: left promiscuous mode [ 421.739278][T17730] veth0_vlan: entered promiscuous mode [ 421.749537][T17730] veth1_vlan: entered promiscuous mode [ 421.760424][T17730] veth1_macvtap: left promiscuous mode [ 421.772838][T17730] veth0_macvtap: left promiscuous mode [ 421.781570][T17730] veth0_macvtap: entered promiscuous mode [ 421.805216][T17730] veth1_macvtap: entered promiscuous mode [ 421.818310][T17730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 421.829373][T17730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 421.841032][T17730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 421.850653][T17730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 421.863122][T17730] 8021q: adding VLAN 0 to HW filter on device bond1 [ 421.873756][T17730] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 421.884083][T17730] 8021q: adding VLAN 0 to HW filter on device bond2 [ 421.938083][T17730] 8021q: adding VLAN 0 to HW filter on device bond3 [ 421.950520][T17730] erspan1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 422.016701][T15280] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.023937][T15280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.037235][T15280] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.044445][T15280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.130550][T17579] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.145539][T17579] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.188366][T17579] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.200189][T17579] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.235543][T17579] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.262012][T17579] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.272455][T17579] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.292160][T17579] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.110194][T17723] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 424.389356][T17792] netlink: 'syz.7.3024': attribute type 9 has an invalid length. [ 424.455277][T17794] __nla_validate_parse: 3 callbacks suppressed [ 424.455296][T17794] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3027'. [ 424.480393][T17795] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3024'. [ 424.498945][T17796] netlink: 'syz.0.3027': attribute type 4 has an invalid length. [ 424.563830][T17794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3027'. [ 424.589024][T17791] lo speed is unknown, defaulting to 1000 [ 424.595738][T17800] xfrm0: entered allmulticast mode [ 424.784869][T17805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3031'. [ 424.811676][T17805] openvswitch: netlink: Missing key (keys=40, expected=80) [ 424.942368][T17813] tipc: Enabled bearer , priority 0 [ 425.012921][T17819] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3034'. [ 425.059915][T17813] syzkaller0: entered promiscuous mode [ 425.065716][T17813] syzkaller0: entered allmulticast mode [ 425.075549][T17813] tipc: Resetting bearer [ 425.113283][T17809] tipc: Resetting bearer [ 425.174519][T17824] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3035'. [ 425.240015][T17824] netlink: 'syz.5.3035': attribute type 7 has an invalid length. [ 425.257691][T17824] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3035'. [ 427.296539][T17809] tipc: Disabling bearer [ 427.447842][ T6044] tipc: Node number set to 1068853178 [ 427.600862][T17841] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.622034][T17843] IPVS: set_ctl: invalid protocol: 51 100.1.1.0:20004 [ 427.657037][T17848] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3041'. [ 427.802000][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 428.083197][T17871] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3044'. [ 428.163400][T17875] RDS: rds_bind could not find a transport for ::8000:0:20:0, load rds_tcp or rds_rdma? [ 428.245694][T17871] syzkaller0: entered promiscuous mode [ 428.252440][T17871] syzkaller0: entered allmulticast mode [ 428.409255][T17890] ieee802154 phy1 wpan1: encryption failed: -22 [ 428.424542][T17890] netlink: 'syz.7.3048': attribute type 2 has an invalid length. [ 429.321868][T17923] netlink: 'syz.0.3056': attribute type 1 has an invalid length. [ 431.027656][T17890] ´: entered promiscuous mode [ 431.386372][T17946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.450041][T17946] RDS: rds_bind could not find a transport for ::800:0:8000:0:20:0, load rds_tcp or rds_rdma? [ 431.723846][T17970] netlink: 'syz.6.3069': attribute type 4 has an invalid length. [ 431.743383][T17970] netlink: 3581 bytes leftover after parsing attributes in process `syz.6.3069'. [ 431.924330][T17977] tipc: Enabled bearer , priority 0 [ 431.943559][T17977] syzkaller0: entered promiscuous mode [ 431.959774][T17977] syzkaller0: entered allmulticast mode [ 431.983309][T17977] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 432.067169][T17977] tipc: Resetting bearer [ 432.090960][T17974] tipc: Resetting bearer [ 432.144365][T17974] tipc: Disabling bearer [ 432.723731][T18024] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3085'. [ 433.070228][T18046] netlink: 'syz.6.3088': attribute type 2 has an invalid length. [ 433.097215][T18046] netlink: 'syz.6.3088': attribute type 2 has an invalid length. [ 433.188376][T18048] netlink: 'syz.4.3092': attribute type 16 has an invalid length. [ 433.210544][T18048] netlink: 'syz.4.3092': attribute type 17 has an invalid length. [ 433.285628][T18048] erspan0: left promiscuous mode [ 433.348093][T18048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.366268][T18048] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.392765][T18048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.478781][T18048] xfrm0: left allmulticast mode [ 433.536568][T18048] 8021q: adding VLAN 0 to HW filter on device bond1 [ 433.749405][T18079] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3101'. [ 433.903366][T18082] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3103'. [ 433.934399][T18083] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3102'. [ 434.077038][T18093] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.285191][T18101] netlink: 'syz.4.3110': attribute type 12 has an invalid length. [ 434.339111][T18108] lo speed is unknown, defaulting to 1000 [ 434.486477][T18121] erspan0: left allmulticast mode [ 434.493595][T18121] erspan0: left promiscuous mode [ 434.499057][T18121] bridge3: port 1(erspan0) entered disabled state [ 434.527552][T18121] bond0: (slave bridge0): Releasing backup interface [ 434.563319][T18121] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.570896][T18121] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.600377][T18130] netlink: 'syz.4.3117': attribute type 142 has an invalid length. [ 434.603788][T18121] bridge_slave_0: left allmulticast mode [ 434.625021][T18121] bridge_slave_0: left promiscuous mode [ 434.643118][T18121] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.672118][T18121] bridge_slave_1: left allmulticast mode [ 434.677835][T18121] bridge_slave_1: left promiscuous mode [ 434.696660][T18121] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.714440][T18121] bond0: (slave bond_slave_0): Releasing backup interface [ 434.737094][T18121] bond0: (slave bond_slave_1): Releasing backup interface [ 434.778426][T18121] team0: Port device team_slave_0 removed [ 434.812973][T18121] team0: Port device team_slave_1 removed [ 434.835352][T18121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.847466][T18121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.856580][T18121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.864434][T18121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.874016][T18121] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 434.903287][T18116] lo speed is unknown, defaulting to 1000 [ 434.939691][T18137] netlink: 'syz.0.3121': attribute type 29 has an invalid length. [ 434.963587][T18137] ieee802154 phy1 wpan1: encryption failed: -22 [ 435.064718][T18137] syzkaller0: entered promiscuous mode [ 435.070407][T18137] syzkaller0: entered allmulticast mode [ 435.080661][T18146] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 435.185865][T18154] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3124'. [ 435.303911][T18152] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 435.652313][T18171] bond1: entered allmulticast mode [ 435.686158][T18171] 8021q: adding VLAN 0 to HW filter on device bond1 [ 435.715447][T18184] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 435.724510][T18184] IPv6: NLM_F_CREATE should be set when creating new route [ 435.762411][T18177] syzkaller0: entered promiscuous mode [ 435.791557][T18177] syzkaller0: entered allmulticast mode [ 435.824342][T18175] syzkaller1: entered promiscuous mode [ 435.846681][T18175] syzkaller1: entered allmulticast mode [ 436.113317][T18189] syzkaller0: entered promiscuous mode [ 436.129677][T18189] syzkaller0: entered allmulticast mode [ 436.287749][T18212] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3138'. [ 436.716533][T18226] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.990377][T18245] IPVS: ip_vs_edit_dest(): server weight less than zero [ 437.089542][T18251] netlink: 'syz.7.3146': attribute type 11 has an invalid length. [ 437.634170][T18254] netlink: 'syz.5.3147': attribute type 1 has an invalid length. [ 437.685508][T18255] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3147'. [ 437.865443][T18258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.929424][T18257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.803336][T18254] 8021q: adding VLAN 0 to HW filter on device bond5 [ 438.950594][T18269] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3151'. [ 439.065790][T18281] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3155'. [ 439.119983][T18269] 8021q: adding VLAN 0 to HW filter on device bond4 [ 439.200515][T18291] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3157'. [ 439.279174][T18289] erspan0: entered promiscuous mode [ 439.964676][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.171721][T18302] syzkaller0: entered promiscuous mode [ 440.187944][T18302] syzkaller0: entered allmulticast mode [ 440.253795][T18316] netlink: 'syz.0.3164': attribute type 2 has an invalid length. [ 440.414628][T18322] netlink: 'syz.7.3165': attribute type 1 has an invalid length. [ 441.246987][ T31] INFO: task syz.2.1754:12533 blocked for more than 143 seconds. [ 441.255211][ T31] Not tainted syzkaller #0 [ 441.260178][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 441.268927][ T31] task:syz.2.1754 state:D stack:27320 pid:12533 tgid:12532 ppid:5615 task_flags:0x400140 flags:0x00080002 [ 441.281031][ T31] Call Trace: [ 441.284578][ T31] [ 441.287553][ T31] __schedule+0x17d9/0x56c0 [ 441.292109][ T31] ? __lock_acquire+0x683/0x2cf0 [ 441.297058][ T31] ? __lock_acquire+0x683/0x2cf0 [ 441.302230][ T31] ? __pfx___schedule+0x10/0x10 [ 441.307205][ T31] ? schedule+0x90/0x2b0 [ 441.311645][ T31] schedule+0x164/0x2b0 [ 441.315898][ T31] schedule_preempt_disabled+0x13/0x30 [ 441.321730][ T31] __mutex_lock+0x7bf/0x1550 [ 441.326412][ T31] ? __mutex_lock+0x5d4/0x1550 [ 441.331297][ T31] ? nfsd_nl_listener_set_doit+0x135/0x1750 [ 441.337272][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 441.342394][ T31] ? __asan_memset+0x22/0x50 [ 441.346991][ T31] ? __nla_validate_parse+0x2429/0x2d50 [ 441.352601][ T31] nfsd_nl_listener_set_doit+0x135/0x1750 [ 441.358347][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 441.364207][ T31] ? rcu_is_watching+0x15/0xb0 [ 441.369006][ T31] ? trace_kmalloc+0x2a/0xf0 [ 441.373732][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 441.379896][ T31] ? __nla_parse+0x40/0x60 [ 441.384364][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 441.390706][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 441.397230][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 441.403057][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 441.409156][ T31] ? bpf_lsm_capable+0x9/0x20 [ 441.413884][ T31] ? security_capable+0x7e/0x2c0 [ 441.418839][ T31] genl_rcv_msg+0x614/0x7a0 [ 441.423481][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 441.428566][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 441.434794][ T31] netlink_rcv_skb+0x226/0x4a0 [ 441.439569][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 441.444711][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 441.450062][ T31] ? down_read+0x2be/0x330 [ 441.454588][ T31] genl_rcv+0x28/0x40 [ 441.458583][ T31] netlink_unicast+0x7bb/0x940 [ 441.463448][ T31] netlink_sendmsg+0x813/0xb40 [ 441.468240][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.473604][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 441.478545][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.484001][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 441.489058][ T31] ____sys_sendmsg+0x54e/0x850 [ 441.493887][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 441.499184][ T31] ? import_iovec+0x73/0xa0 [ 441.503886][ T31] ___sys_sendmsg+0x2a5/0x360 [ 441.508592][ T31] ? __lock_acquire+0x683/0x2cf0 [ 441.513573][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 441.518778][ T31] ? futex_wait+0x2a2/0x390 [ 441.523412][ T31] ? __fget_files+0x2a/0x420 [ 441.528029][ T31] ? __fget_files+0x3a2/0x420 [ 441.532866][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 441.537829][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 441.543331][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.549422][ T31] do_syscall_64+0x174/0x580 [ 441.554081][ T31] ? trace_irq_disable+0x3b/0x140 [ 441.559123][ T31] ? clear_bhb_loop+0x40/0x90 [ 441.563915][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.569853][ T31] RIP: 0033:0x7f47de19de99 [ 441.574343][ T31] RSP: 002b:00007f47df10b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.582815][ T31] RAX: ffffffffffffffda RBX: 00007f47de425fa0 RCX: 00007f47de19de99 [ 441.590797][ T31] RDX: 0000000020004844 RSI: 0000200000000100 RDI: 0000000000000004 [ 441.599296][ T31] RBP: 00007f47de233eaf R08: 0000000000000000 R09: 0000000000000000 [ 441.607502][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 441.615641][ T31] R13: 00007f47de426038 R14: 00007f47de425fa0 R15: 00007ffef5181bc8 [ 441.623828][ T31] [ 441.626914][ T31] INFO: task syz.3.1763:12576 blocked for more than 143 seconds. [ 441.644525][ T31] Not tainted syzkaller #0 [ 441.649516][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 441.658225][ T31] task:syz.3.1763 state:D stack:27200 pid:12576 tgid:12575 ppid:5629 task_flags:0x400140 flags:0x00080002 [ 441.670212][ T31] Call Trace: [ 441.673546][ T31] [ 441.676491][ T31] __schedule+0x17d9/0x56c0 [ 441.681005][ T31] ? __lock_acquire+0x683/0x2cf0 [ 441.686046][ T31] ? __lock_acquire+0x683/0x2cf0 [ 441.691021][ T31] ? __pfx___schedule+0x10/0x10 [ 441.695920][ T31] ? schedule+0x90/0x2b0 [ 441.700166][ T31] schedule+0x164/0x2b0 [ 441.704511][ T31] schedule_preempt_disabled+0x13/0x30 [ 441.710015][ T31] __mutex_lock+0x7bf/0x1550 [ 441.714688][ T31] ? __mutex_lock+0x5d4/0x1550 [ 441.719467][ T31] ? nfsd_nl_listener_set_doit+0x135/0x1750 [ 441.726413][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 441.731673][ T31] ? __asan_memset+0x22/0x50 [ 441.736291][ T31] ? __nla_validate_parse+0x2429/0x2d50 [ 441.741927][ T31] nfsd_nl_listener_set_doit+0x135/0x1750 [ 441.747652][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 441.753587][ T31] ? rcu_is_watching+0x15/0xb0 [ 441.758560][ T31] ? trace_kmalloc+0x2a/0xf0 [ 441.763246][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 441.769423][ T31] ? __nla_parse+0x40/0x60 [ 441.773906][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 441.780245][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 441.786647][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 441.792254][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 441.798321][ T31] ? bpf_lsm_capable+0x9/0x20 [ 441.803438][ T31] ? security_capable+0x7e/0x2c0 [ 441.808398][ T31] genl_rcv_msg+0x614/0x7a0 [ 441.812986][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 441.818027][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 441.824248][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 441.829632][ T31] netlink_rcv_skb+0x226/0x4a0 [ 441.834595][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 441.839645][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 441.845223][ T31] ? down_read+0x2be/0x330 [ 441.849680][ T31] genl_rcv+0x28/0x40 [ 441.853928][ T31] netlink_unicast+0x7bb/0x940 [ 441.858799][ T31] netlink_sendmsg+0x813/0xb40 [ 441.863716][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.869028][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 441.874016][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.879324][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 441.885020][ T31] ____sys_sendmsg+0x54e/0x850 [ 441.889843][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 441.895208][ T31] ? import_iovec+0x73/0xa0 [ 441.899789][ T31] ___sys_sendmsg+0x2a5/0x360 [ 441.904615][ T31] ? __lock_acquire+0x683/0x2cf0 [ 441.909586][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 441.915609][ T31] ? futex_wait+0x2a2/0x390 [ 441.920175][ T31] ? __fget_files+0x2a/0x420 [ 441.924853][ T31] ? __fget_files+0x3a2/0x420 [ 441.929584][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 441.934588][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 441.940066][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.946305][ T31] do_syscall_64+0x174/0x580 [ 441.950930][ T31] ? trace_irq_disable+0x3b/0x140 [ 441.956028][ T31] ? clear_bhb_loop+0x40/0x90 [ 441.960713][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.966864][ T31] RIP: 0033:0x7f0c6b99de99 [ 441.973044][ T31] RSP: 002b:00007f0c6c91d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.982120][ T31] RAX: ffffffffffffffda RBX: 00007f0c6bc25fa0 RCX: 00007f0c6b99de99 [ 441.990120][ T31] RDX: 0000000020004844 RSI: 0000200000000100 RDI: 0000000000000004 [ 441.998155][ T31] RBP: 00007f0c6ba33eaf R08: 0000000000000000 R09: 0000000000000000 [ 442.006249][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.014276][ T31] R13: 00007f0c6bc26038 R14: 00007f0c6bc25fa0 R15: 00007ffffb1d2678 [ 442.022382][ T31] [ 442.035129][ T31] [ 442.035129][ T31] Showing all locks held in the system: [ 442.043014][ T31] 1 lock held by rcu_exp_gp_kthr/18: [ 442.048318][ T31] #0: ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 442.058526][ T31] 1 lock held by khungtaskd/31: [ 442.063419][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 442.073327][ T31] 2 locks held by getty/5372: [ 442.077999][ T31] #0: ffff8880369d60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 442.088061][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 442.098258][ T31] 2 locks held by syz.1.1642/12103: [ 442.104482][ T31] #0: ffffffff9009d8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 442.112821][ T31] #1: ffffffff8ee8e5e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 442.123360][ T31] 2 locks held by syz.2.1754/12533: [ 442.128586][ T31] #0: ffffffff9009d8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 442.137530][ T31] #1: ffffffff8ee8e5e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 442.147767][ T31] 2 locks held by syz.3.1763/12576: [ 442.153457][ T31] #0: ffffffff9009d8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 442.162504][ T31] #1: ffffffff8ee8e5e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 442.172762][ T31] 3 locks held by kworker/u8:23/17572: [ 442.178218][ T31] #0: ffff8880326c4940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 442.189841][ T31] #1: ffffc900032bfc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 442.203974][ T31] #2: ffffffff9002d040 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 442.213622][ T31] 3 locks held by kworker/u8:29/17579: [ 442.219087][ T31] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 442.230851][ T31] #1: ffffc90000ba7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 442.242368][ T31] #2: ffffffff9002d040 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 442.251485][ T31] 2 locks held by syz.5.3160/18301: [ 442.256805][ T31] #0: ffffffff9002d040 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 442.265988][ T31] #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 442.277189][ T31] 1 lock held by syz.6.3161/18303: [ 442.283023][ T31] #0: ffffffff9002d040 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 442.292034][ T31] 1 lock held by syz.6.3161/18313: [ 442.297252][ T31] #0: ffffffff9002d040 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 442.306230][ T31] 2 locks held by syz.7.3165/18322: [ 442.312616][ T31] #0: ffffffff9057bfc0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 442.322316][ T31] #1: ffffffff9002d040 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 442.331441][ T31] 1 lock held by syz.7.3165/18326: [ 442.336645][ T31] #0: ffffffff9002d040 (rtnl_mutex){+.+.}-{4:4}, at: bpf_xdp_link_attach+0x120/0x990 [ 442.346256][ T31] 2 locks held by syz.7.3165/18331: [ 442.352113][ T31] #0: ffffffff9009d8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 442.360345][ T31] #1: ffffffff9009d6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 442.369559][ T31] 2 locks held by syz.7.3165/18335: [ 442.374820][ T31] #0: ffffffff9009d8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 442.383310][ T31] #1: ffffffff9009d6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 442.392358][ T31] 1 lock held by syz.7.3165/18338: [ 442.397590][ T31] #0: ffffffff9002d040 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 442.407192][ T31] 1 lock held by syz.4.3167/18324: [ 442.412353][ T31] #0: ffffffff9002d040 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 442.423022][ T31] 3 locks held by syz.4.3167/18330: [ 442.428256][ T31] #0: ffffffff9009d8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 442.437162][ T31] #1: ffffffff9009d6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 442.446251][ T31] #2: ffffffff9002d040 (rtnl_mutex){+.+.}-{4:4}, at: tipc_nl_compat_doit+0x22a/0x650 [ 442.456022][ T31] 1 lock held by syz.4.3167/18333: [ 442.461203][ T31] #0: ffffffff9002d040 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x2fb/0x1c50 [ 442.470514][ T31] 2 locks held by syz.4.3167/18336: [ 442.475815][ T31] #0: ffffffff9000de40 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x5eb/0x7e0 [ 442.485582][ T31] #1: ffffffff9002d040 (rtnl_mutex){+.+.}-{4:4}, at: vlan_ioctl_handler+0xf0/0x630 [ 442.495233][ T31] 2 locks held by syz.0.3166/18327: [ 442.500682][ T31] #0: ffff88807fbff460 (&pipe->mutex){+.+.}-{4:4}, at: splice_to_socket+0x14c/0x12a0 [ 442.510386][ T31] #1: ffffffff9002d040 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 442.519856][ T31] 2 locks held by syz.0.3166/18329: [ 442.526096][ T31] #0: ffffffff90594be0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 442.535979][ T31] #1: ffffffff9002d040 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 442.545332][ T31] [ 442.556938][ T31] ============================================= [ 442.556938][ T31] [ 442.573151][ T31] NMI backtrace for cpu 1 [ 442.573168][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 442.573187][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 442.573197][ T31] Call Trace: [ 442.573205][ T31] [ 442.573212][ T31] dump_stack_lvl+0xe8/0x150 [ 442.573244][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 442.573270][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 442.573287][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 442.573303][ T31] sys_info+0x135/0x170 [ 442.573316][ T31] watchdog+0xfd7/0x1030 [ 442.573332][ T31] ? watchdog+0x1c7/0x1030 [ 442.573347][ T31] kthread+0x388/0x470 [ 442.573362][ T31] ? __pfx_watchdog+0x10/0x10 [ 442.573373][ T31] ? __pfx_kthread+0x10/0x10 [ 442.573390][ T31] ret_from_fork+0x514/0xb70 [ 442.573406][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 442.573420][ T31] ? __switch_to+0xc89/0x1420 [ 442.573433][ T31] ? __pfx_kthread+0x10/0x10 [ 442.573448][ T31] ret_from_fork_asm+0x1a/0x30 [ 442.573464][ T31] [ 442.573469][ T31] Sending NMI from CPU 1 to CPUs 0: [ 442.683620][ C0] NMI backtrace for cpu 0 [ 442.683637][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 442.683655][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 442.683665][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 442.683689][ C0] Code: ec 7f 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 9a 19 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 442.683703][ C0] RSP: 0018:ffffffff8e807de0 EFLAGS: 00000246 [ 442.683719][ C0] RAX: 0000000000173de1 RBX: ffffffff819ab450 RCX: 0000000080000001 [ 442.683732][ C0] RDX: 0000000000000001 RSI: ffffffff8e22d598 RDI: ffffffff8c4bda80 [ 442.683744][ C0] RBP: ffffffff8e807eb8 R08: ffff8880b86338db R09: 1ffff110170c671b [ 442.683757][ C0] R10: dffffc0000000000 R11: ffffed10170c671c R12: 0000000000000000 [ 442.683769][ C0] R13: 1ffffffff1d11de8 R14: 1ffffffff1d00fc4 R15: dffffc0000000000 [ 442.683781][ C0] FS: 0000000000000000(0000) GS:ffff888124f58000(0000) knlGS:0000000000000000 [ 442.683795][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 442.683807][ C0] CR2: 000000110c396a15 CR3: 0000000055baa000 CR4: 00000000003526f0 [ 442.683822][ C0] Call Trace: [ 442.683828][ C0] [ 442.683834][ C0] default_idle+0x9/0x20 [ 442.683854][ C0] default_idle_call+0x72/0xb0 [ 442.683873][ C0] do_idle+0x2e0/0x540 [ 442.683896][ C0] ? __pfx_do_idle+0x10/0x10 [ 442.683923][ C0] cpu_startup_entry+0x43/0x60 [ 442.683944][ C0] rest_init+0x2de/0x300 [ 442.683966][ C0] start_kernel+0x392/0x3e0 [ 442.683987][ C0] x86_64_start_reservations+0x24/0x30 [ 442.684011][ C0] x86_64_start_kernel+0x137/0x1b0 [ 442.684035][ C0] common_startup_64+0x13e/0x157 [ 442.684062][ C0] [ 442.858981][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 442.865844][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 442.874963][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 442.885010][ T31] Call Trace: [ 442.888276][ T31] [ 442.891191][ T31] vpanic+0x56c/0xa60 [ 442.895170][ T31] ? __pfx___schedule+0x10/0x10 [ 442.900015][ T31] ? __pfx_vpanic+0x10/0x10 [ 442.904514][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 442.910666][ T31] panic+0xc5/0xd0 [ 442.914384][ T31] ? __pfx_panic+0x10/0x10 [ 442.918790][ T31] ? preempt_schedule_common+0x82/0xd0 [ 442.924235][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 442.929601][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 442.935762][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 442.941914][ T31] watchdog+0x1030/0x1030 [ 442.946239][ T31] ? watchdog+0x1c7/0x1030 [ 442.950646][ T31] kthread+0x388/0x470 [ 442.954706][ T31] ? __pfx_watchdog+0x10/0x10 [ 442.959393][ T31] ? __pfx_kthread+0x10/0x10 [ 442.963991][ T31] ret_from_fork+0x514/0xb70 [ 442.968586][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 442.973696][ T31] ? __switch_to+0xc89/0x1420 [ 442.978376][ T31] ? __pfx_kthread+0x10/0x10 [ 442.982961][ T31] ret_from_fork_asm+0x1a/0x30 [ 442.987723][ T31] [ 442.991005][ T31] Kernel Offset: disabled [ 442.995316][ T31] Rebooting in 86400 seconds..