last executing test programs: 6m39.865916134s ago: executing program 3 (id=3130): getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x0, 0x80, @local, 0x46}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="80003724090000ce", 0x8, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0xfffffffc, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10000003}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x24) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1100000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@getlink={0x5c, 0x12, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x11020, 0x500eb}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x377c1}, @IFLA_MASTER={0x8}, @IFLA_NET_NS_FD={0x8}, @IFLA_IFALIAS={0x14, 0x14, 'veth0_macvtap\x00'}, @IFLA_MASTER={0x8}, @IFLA_CARRIER={0x5, 0x21, 0x81}]}, 0x5c}}, 0x600490d4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3, 0xffffffffffffffff, 0x500}, 0x57) 6m39.296764065s ago: executing program 3 (id=3132): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000600)=ANY=[@ANYBLOB="28000000ad48a207410a082be4d3e261ee0f3749db045992d7bb9fa8f4185833326e00a1e3383d6b5e4e4c559610b659b4b1744844fa28c5b8b323d6624c0332541cb7448a5d8b3a27e809acfa2ef5a8eca0f1e065ac888552864ab99309df52494e7233df68726e56d9f9cce37b6f2d1dce539dee8ef20c854a53525fd16f73216952c2fb4bcc931a0dafdc", @ANYRES16=r1, @ANYBLOB="192c2cbd7000ffdbdf251500000008000100", @ANYRES32=0x0, @ANYBLOB="0900140023292e2d21000000"], 0x28}, 0x1, 0x0, 0x0, 0x100040c0}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0500000004000000060000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00ac5a32ca6d1722ad3fa79c76c64ce23114d9000000000000b4c9c03ed4cebb3715da62789c0e6351e3cdf7b20c442a31617b2184c0ba367b42aeea53ab66a61e783fc0"], 0x50) unshare(0x20400) pipe(&(0x7f0000000180)={0xffffffffffffffff}) tee(r3, 0xffffffffffffffff, 0x3, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendto$inet6(r4, &(0x7f00000005c0)="04", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffff9, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x1, 0x4}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="80851ebf9dbfe888c7d625f8363560c04d5aa2d6520e53b95e576947921a95a372d97a9ac38021bf29c6a80d237e9fb15592dfa543c1a888b3511cc5a74c59cb037234867a86635b", @ANYRES16=r2], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x9, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd05"], 0xfdef) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x4e24, 0x4, @mcast1, 0x3}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={r8}, &(0x7f0000000000)=0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000980)={0x1f0, r10, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x21b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf57}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc2b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xac}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_MEDIA={0xe8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x293}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3a3d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9b}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x4}]}, 0x1f0}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r5}, 0xc) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000080)={0x1f, 0x1, 0x1}, 0x6) 6m39.295047928s ago: executing program 3 (id=3135): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="f90506000a000200aaaaaaaaaa1c0000f801d3ffa73788cc55e0f65f20668ab8b2c50c29ae834457bf0fd32dd23199e5c78582f72c5c6e3fd73f5068e1130835ef12fd816be9dc31c02e5df970c0fd539c251eb5"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r6, 0x0, 0x7, 0x5) close(r5) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) write$cgroup_netprio_ifpriomap(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xd) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r10}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x2, 0x0, r6, 0x8a89, '\x00', r3, r6, 0x1, 0x1, 0x2}, 0x50) r11 = socket$caif_stream(0x25, 0x1, 0x1) recvmmsg(r11, &(0x7f00000064c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40010140, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x25dfdbfb, {{@in=@dev={0xac, 0x14, 0x14, 0x2d}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0}, {0x0, 0x4, 0x0, 0x0, 0x3ff, 0x2, 0xfffffffffffffffd}, {0x0, 0x5, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@private1, 0x4d4, 0x2b}, 0xa, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0xcc}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0xa0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r12, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet(r7, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r7, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) write$cgroup_int(r6, 0x0, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000540)="b5", 0x1}], 0x1) 6m38.521656659s ago: executing program 3 (id=3146): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000000)={0x80fb, 0x1}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="59cf6d08929b00000000080000001400018006000100458986be080005"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x58}}, 0x880) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x800) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000011000010000000000000000000000000a20000000000a03000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797ae61d73fc00090002007379c8fd7eaf30b486e96fe12877075f5dac580000400003802c00038004000100766c616e31000000000000000000000014000100776c616e310000000c6bdd387b0000000000ff0001400000000008000200000000000000000000000000d2dbf3fb7fecf8d62f1008d91379b9e8ae3440961f4a5e8b22a767b04a616b1ab88c1da1c282287ab994ec6268e030c0b89cc12835dcc43e343a"], 0xfc}, 0x1, 0x0, 0x0, 0x2400c0c0}, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3}}}, 0x108) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x42004100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="740000001e0020002cbd7000fbdbdf25070000009d429418257c442322863f6920d08f0f0126a918e2c569187e19c8d2397174ed9da073bfa662351ed6497b67b72d4e4f0a1ed97737725456a460af4fcfb35134efb074", @ANYRES32=0x0, @ANYBLOB="0004010040120400080025000400000034001a80300002802c00018008001700ffffffff08000900080000000800130004000000080000000008000008001f00090000001800348014003500626f6e645f736c6176655f3000000000"], 0x74}, 0x1, 0x0, 0x0, 0x24000000}, 0x4040100) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000080041801000020206e2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000888500000073000000850000000e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m38.037195721s ago: executing program 3 (id=3153): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000200005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r3], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 6m37.80812202s ago: executing program 3 (id=3155): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r2 = socket$kcm(0x10, 0x2, 0x4) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000380)="580000001400add427323b672545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7308b330000ffffffffffffffffffe70000000016000200000000000000", 0x58}], 0x1) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$packet(0x11, 0x2, 0x300) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0700000004000000080000000300000000000000b450827186087e4bd82e005357183b82add7d448421e6021b5f23745bdf8d93200739a61530e7d55ee45f34d29e79c49a01f844d419fbe0fe1420ffd104420d5eb37c05c1e628aa7a4ae9e610cfa58a0342a1f8d91211780"], 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r6, 0x0, 0xfaf}, 0x18) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r8, 0x0, 0xfaf}, 0x18) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100000000000000040006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000130001000000000000000000075c8f00", @ANYRES32=r10, @ANYBLOB="00000000000000000c001a800800048004000a"], 0x2c}, 0x1, 0x0, 0x0, 0x2008000}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$can_j1939(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x1d, r12, 0x2, {0x2}}, 0x18, &(0x7f00000001c0)={&(0x7f0000000180)}, 0x1, 0x0, 0x0, 0x4008001}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000080)={'syztnl1\x00', r12, 0x10, 0x700, 0x7, 0x2, {{0x6, 0x4, 0x3, 0x2, 0x18, 0x68, 0x0, 0x4, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x37}, {[@ra={0x94, 0x4}]}}}}}) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000440000000800000001", @ANYRES16], 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r13, r13, 0x2f, 0x2028, 0x4, @void, @void, @value=r14}, 0x20) 6m22.569891254s ago: executing program 32 (id=3155): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r2 = socket$kcm(0x10, 0x2, 0x4) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000380)="580000001400add427323b672545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7308b330000ffffffffffffffffffe70000000016000200000000000000", 0x58}], 0x1) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$packet(0x11, 0x2, 0x300) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0700000004000000080000000300000000000000b450827186087e4bd82e005357183b82add7d448421e6021b5f23745bdf8d93200739a61530e7d55ee45f34d29e79c49a01f844d419fbe0fe1420ffd104420d5eb37c05c1e628aa7a4ae9e610cfa58a0342a1f8d91211780"], 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r6, 0x0, 0xfaf}, 0x18) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r8, 0x0, 0xfaf}, 0x18) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100000000000000040006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000130001000000000000000000075c8f00", @ANYRES32=r10, @ANYBLOB="00000000000000000c001a800800048004000a"], 0x2c}, 0x1, 0x0, 0x0, 0x2008000}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$can_j1939(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x1d, r12, 0x2, {0x2}}, 0x18, &(0x7f00000001c0)={&(0x7f0000000180)}, 0x1, 0x0, 0x0, 0x4008001}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000080)={'syztnl1\x00', r12, 0x10, 0x700, 0x7, 0x2, {{0x6, 0x4, 0x3, 0x2, 0x18, 0x68, 0x0, 0x4, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x37}, {[@ra={0x94, 0x4}]}}}}}) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000440000000800000001", @ANYRES16], 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r13, r13, 0x2f, 0x2028, 0x4, @void, @void, @value=r14}, 0x20) 3.052745454s ago: executing program 0 (id=7398): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x14, 0x17, 0x301, 0x0, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="1818c1f446786b2fb205163750568eb6a385bbfaa0ad26c950367090e4d4ad87885cd8bce8d48ac60b256f2c8b809f9b3a1126a064ad00365f48b55379489dcac324d8def575da13647038db526b7fb4bb37f7ef07a53ce042ecd57c1dc81508432f1ede4f727552de6d81d7703b2dc8441d8387a9fff016eb1bcd296893fde57283a91b19c31d6dfb5402a650f1a539e4795ed23af8bea4eb8c700de66843883011df87be493e20931e1fee9899b3971f44248c402e9ab961da918cd9d5b01d8c3212c7b41fd54324ccf1334946573279f6d2e2f25cbc381fd7932f307c8851436ee1f3da2986c6a0f557e795f2ffbdef44", 0xf2}, {&(0x7f0000000300)="6d4adac45acf29189a806c1eab990df4e574de3b969f41bb0f4a79e9b4d21380109b012a060fbb718c0e2d26b7e1eeb10270193b01ae2fdf5186cb8289cacf3f19525aedf15507cd1e9f477b8767d48ac6c21ae53c392b18b0f397df0e63966e4482ef46c5d1a1523c87fcc2a37b8bfc7b19782393e0c62846b836707df24f7b9bd11a728237e15230f6b9b9447fe1b01c22c4d981cb37135fe9308a29a3a848e9dac4ea907544134ccb8c34c42944ed915078aada97ff9e15b7478268df09dd0141218055bdafb057", 0xc9}], 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) 2.665784694s ago: executing program 5 (id=7404): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000240)=@ccm_128={{0x303}, "44be51ced4880d9c", "ee0fa6bb69c140552d1598fdaa6c329a", "bb9f5bd1", "6b2db25d2d1b977d"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl(r1, 0x9, &(0x7f0000000040)="e21066765af91d24fc58560a8c26270eaa34c797c77ea96cbd34ce7064c072cde052b1569238ecd8ab47e78b49a15d51a259b7052f1a407aa7fc8e02b136eec44695033e8d47f15bf13d486cd7bc77080dbe27cec64a8e82d7eaf2b01eb467cdb8231fac908b006d13f61b12c0bfdc2b7d312b666ea230947bcf004e2fedd8747e7bb0025cc386e7e7662a141c3e5856b5db267f354a9db298dfd21dbf4abce7fc68ecc91f2131982289e33203b7e544efb6773f5bd5ada1a73f65673c055601b2ed23b615838d233dfb2bf9e2582fcde290556ab5563f175e") (async, rerun: 32) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32) sendmsg$sock(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=[@mark={{0x14, 0x1, 0x24, 0x6}}], 0x18}, 0x80) 2.642402195s ago: executing program 0 (id=7405): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f00000016c0)=[{&(0x7f0000000180)=""/250, 0xfa}, {0x0}, {0x0}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x29, 0x30, 0x90, 0x1, 0x43, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @mcast2, 0x40, 0x700, 0x0, 0x5}}) 2.585800685s ago: executing program 1 (id=7407): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40800) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) pipe(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_emit_ethernet(0x62, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000a4ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) socket$vsock_stream(0x28, 0x1, 0x28) 2.488873666s ago: executing program 1 (id=7409): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000002002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300005500000085000000d000000095"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) 2.370068221s ago: executing program 1 (id=7410): socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x3, @local}, 0x67) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) vmsplice(r1, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000180)="015a3c52eb64d54e06f9eea919637b3e88b9ebd0f3009f8d8b4dcee4206375efba00cf25b23693f9700a1984", 0x2c}, {&(0x7f00000003c0)="b89cfb0c51b202735f37413c36fbdac3c3bfb01cdec6ce4f07ce10d9bf71b4acc66e25f8495e367866c50997bfc0667d2f0ebd1c042ef7c9d54d774c74ea1411339fa70258fd85ca9d497bb66adc9240d791c3a51bb70fda873e0639f104c098081bd92590afe839200a71befc4706ab26621af90758cb4a286d49adadf1ef64dfb3fe5eb97e50ec20fb61604a72c568a3d550b716a3be", 0x97}, {0x0}], 0x4, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r4, 0x0, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x100001, 0x1}, 0x50) 2.028315032s ago: executing program 4 (id=7417): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000040)={@multicast2, @loopback, @broadcast}, 0xc) r1 = socket$inet(0x2, 0x1, 0x2) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000011c0)={{0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'none\x00', 0x8, 0x3d, 0x35}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x2, 0xb, 0x400, 0xe4c5}}, 0x44) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0d030000000000000000130000001c0009"], 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x7c, r4, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x63}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe39e}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001140)={&(0x7f0000001000)={0x10c, r4, 0x2, 0x2, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xd4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7b5e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x10c}}, 0x8004) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c0013"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffef3, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) 1.942116607s ago: executing program 2 (id=7418): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7fe0000010000006a0af2fe000000008500000042000000b700000000000010950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836801ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d09a0a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a504a0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e4a9f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x4e) 1.863707775s ago: executing program 2 (id=7419): socketpair(0x22, 0x5, 0x1, &(0x7f0000000280)) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x503, 0x70bd3b, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x800) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) 1.825948804s ago: executing program 0 (id=7420): socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r3, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, 0x0, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void}, 0x2e) nanosleep(0x0, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002e0001b7b70000000000000001"], 0x114}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40000000, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000580)=ANY=[], 0x27) socket$kcm(0x2, 0x1000000000000002, 0x0) 1.64618093s ago: executing program 2 (id=7421): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000102002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300005500000085000000d000000095"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) 1.630444687s ago: executing program 5 (id=7422): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x8, 0xc}, 0x50) socketpair(0x2c, 0x803, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xa4, 0x9, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3337}, @IPSET_ATTR_DATA={0x74, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x68}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x52}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x81}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1e6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x48, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x24040805}, 0x40000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x58, &(0x7f0000000180)}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000300000000000004000000080002000500000006000b0002"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="78fcff18bdb024ef0e493950175a72ce43deeafb493da7d3c9b1ad1c061d2a5e36e8a5378148e7c656a0897a59e0a76c4c3906", @ANYRES16=r5, @ANYBLOB="100028bd7000ffdbdf250300000008000800ac1414aa14000500fc00000000000000000000000000000008000400030000001400060020010000000000000000000000000001080002000300000008000c000100000014000600fc0000000000000000000000000000010800040001000000"], 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.437331978s ago: executing program 2 (id=7423): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum={0x2}]}, {0x0, [0x5f]}}, 0x0, 0x27}, 0x28) (async) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000008c0)={&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000380)}, {&(0x7f00000003c0)="48cc4b188831a573a1aa7ec47e41f3e590554176edaef228dffeaa7ca5856e33f871493dfb63ffd463fb9ead524a84e060e6078727da2147e1d82fdf3b0ab2d48a222218e305316a826605151a1553b05941f4fd40180afac4a3ea4e9422c884db4f6ca840c52563439f837d576dba20a7494c0e2ec86373669c4c3532c202642dc0c22a44e64aec8b178bbfb909fe909193808b31e25c17f0b29104194891ca7868a7660cef6f86a6a0", 0xaa}, {&(0x7f0000000480)="7ff88c92e8c4340bf18eb89704bc882dab682ce121b48095e29813d9434d648143456c86f488326c4bd0494ff97f3f6a917756", 0x33}, {&(0x7f00000004c0)="bd0e01be85e473599dbc1b3319110246c41f5dc8b62889eed8b13108f3175274600c9638f451cc0e9887ba6cbaa40d0409dcd4f2ec01867cba61c81433c0f489d9cabed8478a9c9808d06ba6d9b38076bc97acd686c2c9e0f661497db4e45b0ef3f3b3d8ac87f2924c83c5be44a0b4c9a55b3f3a0cb28020c20f695aeb705492ec96d503b950573784167e6ded371e2725e47d28c9aa5dbb8e62c8cf9d31e99811e4e071046a1e1c8d352507f99649640baf266785ee90db5a5d7f0872ca30f42a76669941dde05f66f51750ad7a829da55ac0ac0c46e61bbb570da4e3383b2c6ddd8a9eed5d", 0xe6}, {&(0x7f00000005c0)="dc30b1b90b939ff30bb08c8b11e3dec2d0293b44f20472af1d1460a6ae", 0x1d}, {&(0x7f0000000600)="585f4857d827eae1651b43fc61dd4aafd73f60f3562e3b8137b131f7a749e6afb84d2e3ed09b4187611268ce135c51436a3a26ce89a71a7c07dd515a436d7fe85c5e2c5eb9ad3e3218c1ced2220c49db9d4f3cf072622d4593f7ef68807d02abf66e41c86a78d9a54f8c95c337afd87319f2700711ebcc51d601b3dcb730459e04024eeb40b2cb7f9a88fee2b8fbd3dc0a84b1665e815c2389e4518cc4480b0dd9e7a930843870bfeb062853dc99fe5898e7f9911cb9614810e190eaebf4a5f66fb12f61b3bf2e354280605ee5c72ef3", 0xd0}, {&(0x7f0000000780)="2bfde72bde6a7f24efacc9647328122d4b2d844a5b3640fe0489a9ba10dfde95de7acebee4d9569d18a29ca398cccebaccd8728fa391792c505840a03418e929c0c07f8df7d1d4a1e99c04d07d2fcfcbf3db1b624673c669c9fc64d2135b217a1060851bd769f925411261c1d386afa7acc312d986c8d826a154c2ade97ad3b5a5549f6b4d34d746b3467baa05f7d0684df3b8264ca35bad17f26f56", 0x9c}], 0x7, &(0x7f0000000700), 0x0, 0x5880}, 0x20008000) (async) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x40, r2, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xafd2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nfc\x00'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000081) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) (async, rerun: 32) socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) write$nci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="6103060506029509010f01"], 0xb) 1.345983197s ago: executing program 4 (id=7424): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x7, 0x8000, 0x1}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x5, 0x8, 0x40, 0x42}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c) listen(r1, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000005c0)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000002c0)={0x8, {{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x39}, 0x74}}}, 0x90) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, r4, 0x0, @inherit={0x78, &(0x7f0000000180)={0x1, 0x6, 0x8, 0x7, {0x20, 0x8, 0x2, 0xff, 0x1263eb7}, [0x9, 0x3, 0x5, 0x7ff, 0x309, 0x9]}}, @name="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"}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f00000016c0)={{r3}, r4, 0x16, @unused=[0xfffffffffffffff7, 0x5, 0x8, 0x8], @devid}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x4}]}}, {"83c28bcb1ad8b8d36292345e51d7592f06063c3723788e3752d56c88a684d46b5445f44c1e547600"/50}}}}}}, 0x0) 1.168118233s ago: executing program 4 (id=7425): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x8c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x22}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5fffffff}]}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x97}]}}}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}}, 0x0) 1.055354021s ago: executing program 5 (id=7426): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a80)={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(ecb(twofish),rmd160)\x00'}, 0x58) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r1, 0x4030582b, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket$inet6(0xa, 0x3, 0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000007000000000000000300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000200)="449d060721b9e6bb51f2f6f20504", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x605, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x9c, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffff7fff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff2}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5e3db7f8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x110}, 0x1, 0x0, 0x0, 0x24008815}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYRES16=r0], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='rcu_utilization\x00', 0xffffffffffffffff, 0x0, 0x200000000}, 0x18) unshare(0x62040200) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500002c00000000002f9078ac1c0001e000000100006558001890780400000000000000be04000000"], 0x3e) r7 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r7, 0x5452, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r8}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) 950.086092ms ago: executing program 2 (id=7427): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xf303000000000000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 949.696433ms ago: executing program 4 (id=7428): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000025c0)=@delchain={0x638, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0x0, 0xe}, {0x6, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x608, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0x170, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x120, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x68, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x7}, "645809825d93df900fa8fae387fbed6313a639f20b0238ccdd4da9fde2f0be34e659ba729925eff5ebd76dec200e0c6b209649b549944fb335b53ad7e5b0f72af98dbb05ee1778a3e952122289a807cd7b48f87fa52a56b8fa"}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x4}, {0x4, 0x1, 0x6, "eb"}}}, @TCF_EM_CONTAINER={0x18, 0x3, 0x0, 0x0, {{0x4, 0x0, 0xb}, "d0fa3d16cd50d147ba"}}, @TCF_EM_META={0x88, 0x2, 0x0, 0x0, {{0xbe0, 0x4, 0x7}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x9, 0x2}, {0x1000, 0x3, 0x1}}}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x7, 0x1}, {0x7, 0x97, 0x2}}}, @TCA_EM_META_RVALUE={0x2e, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="230fb355f715", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="c3f4be5ef3de51", @TCF_META_TYPE_VAR="b78850fcae", @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="bd5577acf3", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="7e181233dc49", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="80e1d0"]}]}}]}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xffd3, 0x8, 0x8}, {0x3, 0x6}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xf0a, 0x3, 0x6c0}, {0x5, 0x0, 0x3, 0x7ff}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xf, 0x7, 0x7f}, {{0x4, 0x1, 0x0, 0x1}, {0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x46c, 0x9, 0x0, 0x1, [@m_gact={0x140, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x9d, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2ca8b8d7ec1784b0, 0x2680, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1abe}}]}, {0xed, 0x6, "f2984ea5ae0b0909ca5198b5e56548da1af4efe458d68e8346a5ad6fa8d75b3efbcec03667694b23e57efb5dea177c9fec912eda500f92ad241d4a3e1eb9b05c2461a1e89e99a22f43eb3b64257b78512c9df802c3ea23ede5e978e8db3be47630f9b48cdfcee2130369da2ce7473e6324d4fc0342cb38a9e544eb6f4e0148acb294b877f68eb4b6b13e38196c311c9ebb06d7a5ee9ead5689128fa35472611715963d35fb43d3014ff74e144932866ca97f5c001aab6053dd7ce7d38a407074614c2a21063cc49a687085d3ab9d042fcc913d8377863381be46ad8fade1f71945e9d5053fd5d1123d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0xb4, 0x1b, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0xffff}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010101}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x30}}]}, {0x69, 0x6, "effbbfbb9975b98b391b34602a99202c04f8aff0f475c3649e7f9024793790e685860edfb7d78570905ca6acc9165a1fb42c399f209c0f00a8f4866f081cd17e904ddc3210cc30ec49b70f2b1fb3ead1fe143d5356ac58b602d03fa75b270e66d3b14a3b76"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbmod={0x108, 0x1f, 0x0, 0x0, {{0xb}, {0x4}, {0xd9, 0x6, "364a95306a0125f7c7762d651b8604a6d91ec4567f627089ed8d3453859a3d2c79d3d70f085dca8af621c4a5da976ca910f38151f1a68c0e0730e7273e6af4eab8e2ea5df8cb0f6ab249f7561ea8c0dd3e562e5e6a1db3a546a7f7c5f1d0ae94557d9f43b53f0c2e3edaf804191d2d3a1cbdae068d8e342ed2d4e751b25b639e2536238fb6a4824a50b9c6bb62944110874faeed2eb2a6db4dfa6ff7d67302260dd8c80e3c4c3a3a11f1d204106eec615119eaaa73bd0bb3e2d774039d9c7e0d445019a712cc0c16707a7b8505b7c94133ceccee82"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0x8c, 0x3, 0x0, 0x0, {{0xf}, {0x5c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010101}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x54, 0xffffffffffffffff, 0x10, 0xfffff001}, 0x2}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x80000000}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0xffffffff, 0x10000000, 0x3, 0x3ff}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_xt={0xe0, 0xe, 0x0, 0x0, {{0x7}, {0x4}, {0xb5, 0x6, "2a0caebad864038ff40a5d287f3088600ceb92031a440f806744f2c29cd762b34d1c3e200652a37a380abee23790e6050e067b4335afeb4ae4a0dfe9fa72cc1df85464324a30272ee56c17d0913025ba5b385f50249552b3d0baa66c6ffc89df47949c8e52874be2547d84a88eaf65c1a57f44be2ac8409dc80a1286dc54b446bceacb288bceeb018feed674cd3991cf602a4e1e2de9b27bb4036b0ac3e4a6048cdd4ebfc8b92c63ac0f4245eecd529108"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x638}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4040) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004005}, 0x4804) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 724.13253ms ago: executing program 2 (id=7429): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x6}, @NFTA_SET_ELEM_EXPRESSIONS={0x1c, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xdc}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRES64=r3, @ANYRES8=r9], 0x20}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) recvmmsg$unix(r8, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r13}, 0x10) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {0x0, 0x6}, {0x13}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f10ce0630fc60", 0x14}], 0x1}, 0x0) 669.479006ms ago: executing program 4 (id=7430): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000000)={0x80fb, 0x1}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="59cf6d08929b00000000080000001400018006000100458986be080005"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x58}}, 0x880) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x800) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000011000010000000000000000000000000a20000000000a03000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797ae61d73fc00090002007379c8fd7eaf30b486e96fe12877075f5dac580000400003802c00038004000100766c616e31000000000000000000000014000100776c616e310000000c6bdd387b0000000000ff0001400000000008000200000000000000000000000000d2dbf3fb7fecf8d62f1008d91379b9e8ae3440961f4a5e8b22a767b04a616b1ab88c1da1c282287ab994ec6268e030c0b89cc12835dcc43e343a"], 0xfc}, 0x1, 0x0, 0x0, 0x2400c0c0}, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3}}}, 0x108) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x42004100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="740000001e0020002cbd7000fbdbdf25070000009d429418257c442322863f6920d08f0f0126a918e2c569187e19c8d2397174ed9da073bfa662351ed6497b67b72d4e4f0a1ed97737725456a460af4fcfb35134efb074", @ANYRES32=0x0, @ANYBLOB="0004010040120400080025000400000034001a80300002802c00018008001700ffffffff08000900080000000800130004000000080000000008000008001f00090000001800348014003500626f6e645f736c6176655f3000000000"], 0x74}, 0x1, 0x0, 0x0, 0x24000000}, 0x4040100) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000007fffffff001801000020206e2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000888500000073000000850000000e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 550.251964ms ago: executing program 5 (id=7431): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f0000000180)=0x10) 465.59787ms ago: executing program 5 (id=7432): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_newneigh={0x24, 0x1c, 0x114236db3b607435, 0x70bd28, 0x25dfd3fe, {0x2, 0x0, 0x0, r1, 0x40, 0x80, 0x4}, [@NDA_DST_IPV4={0x8, 0x1, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040001}, 0x80c0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000540)={0x14, r5, 0x1, 0x70bd2b, 0xfffffffe}, 0x14}, 0x1, 0x0, 0x0, 0x40008090}, 0x2048044) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r6, 0x5760, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x8c, r5, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf88}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, 'NLBL_MGMT\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10c}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '-:\x81'}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x804) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x70bd26, 0x0, {0xa, 0x20, 0x20, 0x8}}, 0x1c}}, 0x8041) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x44, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x44}}, 0x0) recvmsg(r8, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000440)=""/106, 0x6a}, {&(0x7f00000004c0)=""/115, 0x73}, {&(0x7f0000000200)}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/230, 0xe6}], 0x5, &(0x7f0000000380)=""/16, 0x10}, 0x2161) 353.865978ms ago: executing program 0 (id=7433): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000240)=0xc) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x11, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x1, 0x0, 0x2, 0x7, 0x5, 0x6}, @generic={0x4, 0xc, 0x6, 0x9, 0x8000}]}, &(0x7f0000000300)='GPL\x00', 0x100, 0x7e, &(0x7f00000005c0)=""/126, 0x41000, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x2, 0xfffffffe, 0xfffff61f}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000640)=[{0x2, 0x4, 0xc, 0xb}, {0x1, 0x4, 0x0, 0xc}, {0x1, 0x3, 0x5, 0x8}, {0x2, 0x2, 0x2, 0x4}, {0x2, 0x4, 0x1, 0x6}, {0x5, 0x4, 0x5}, {0x1, 0x2, 0x0, 0xb}], 0x10, 0x7}, 0x94) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000000040)=0x7) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f00000006c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit, @exit, @jmp={0x5, 0x0, 0x9, 0x7, 0x9, 0x100, 0x1}]}, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xffffffff}, 0x10}, 0x94) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x58f2fdae, '\x00', 0x0, r9, 0x2, 0x3, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x12, 0x14, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x24}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@call={0x85, 0x0, 0x0, 0x53}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x479f, 0x0, 0x0, 0x41000, 0x20, '\x00', r6, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0xb, 0x1, 0xad0}, 0x10, 0xffffffffffffffff, r7, 0x3, &(0x7f0000000800)=[r10, 0xffffffffffffffff, r11], &(0x7f0000000840)=[{0x2, 0x2, 0xe, 0x4}, {0x3, 0x5, 0x4}, {0x5, 0x3, 0xa, 0x5}], 0x10, 0xe}, 0x94) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x3c, r2, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x11}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x3c}}, 0x0) r12 = socket(0x2, 0x80805, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmmsg$inet_sctp(r12, &(0x7f00000032c0)=[{&(0x7f0000000940)=@in6={0xa, 0x4e21, 0x7, @private2, 0x1}, 0x1c, &(0x7f00000004c0)}], 0x1, 0x20000090) r13 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r13, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5e687a8a6a003300020100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3dac00001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500000000010000000affff02dfccebf6ba00085d024f0298e9e90554062a", 0xb8) sendmmsg$inet_sctp(r12, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) 349.841461ms ago: executing program 1 (id=7434): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) listen(r0, 0x7fffffff) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000680)=r1, 0x4) 191.464623ms ago: executing program 1 (id=7435): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x7, 0x8000, 0x1}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x5, 0x8, 0x40, 0x42}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c) listen(r1, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000005c0)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000002c0)={0x8, {{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x39}, 0x74}}}, 0x90) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f00000006c0)={0x0, "2c1a2c3c689e1c386c681447aeaf524e"}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f00000016c0)={{r3}, r4, 0x16, @unused=[0xfffffffffffffff7, 0x5, 0x8, 0x8], @devid=r5}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x4}]}}, {"83c28bcb1ad8b8d36292345e51d7592f06063c3723788e3752d56c88a684d46b5445f44c1e547600"/50}}}}}}, 0x0) 184.540472ms ago: executing program 5 (id=7436): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r1, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000600)=@newsa={0x140, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@local, @in=@loopback, 0x4e23, 0x0, 0x2000, 0x8000, 0x0, 0x20, 0x0, 0xc}, {@in=@rand_addr=0x64010101, 0x20, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, {0xfffffffffffffffe, 0x0, 0x0, 0x800000000000001, 0x10000000002c8, 0x6, 0x4000000000000}, {0x1fffffffffff, 0x8, 0x0, 0x4}, {0x0, 0x9}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) r2 = socket$inet6(0xa, 0x3, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000003c0), &(0x7f0000000800)=0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r5}, 0x18) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x84, 0x9, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @remote}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x3}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xe}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3ff}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r3, &(0x7f00000002c0), 0x220, 0x100, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x5}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}}, 0xe8) 122.253719ms ago: executing program 0 (id=7437): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="0203f30216000000001c00000000000002001b0008000000e9000000000000000300060000000000020000000000000000100000000000000200010000000000000003fcff000020030005000000000002000000ac1414aa00000000000000000a001800"], 0xb0}, 0x1, 0x7}, 0x0) 78.910126ms ago: executing program 0 (id=7438): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) recvmmsg(r0, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}, 0x103}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000600)=""/179, 0xb3}, {&(0x7f0000009a40)=""/268, 0x10c}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000009b80)=""/4112, 0x1010}, {&(0x7f00000017c0)=""/227, 0xe3}, {&(0x7f0000000340)=""/219, 0xdb}], 0x6}, 0x80000000}], 0x4, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x812, r1, 0xffffd000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES32], &(0x7f0000001f80)=""/226, 0x26, 0xe2}, 0x28) 60.95974ms ago: executing program 4 (id=7439): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) syz_init_net_socket$ax25(0x3, 0x3, 0x123) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f0000000100)=0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000040)={@any, 0x2bdad1b4}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r4, &(0x7f0000000180)="8ec6b1ee58", &(0x7f0000000740)=""/4096}, 0x20) r5 = socket(0x21, 0x1, 0x4000000) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r5, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000400)={@mcast1, 0x62, r7}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r6, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES16=r6], 0x38}, 0x1, 0x0, 0x0, 0x8c1}, 0x20000004) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000100039042cbd7000eaffffff000003e4", @ANYRES32=r7, @ANYBLOB="03000000cb1507003800128008000100736974002c00028008000100", @ANYRES32, @ANYBLOB="08000300ac"], 0x58}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000040) 0s ago: executing program 1 (id=7440): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'macvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="840000001000030500000004000000000000007f", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000000600020001000000100005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r1, @ANYBLOB="08000a00fb"], 0x84}}, 0x20008040) kernel console output (not intermixed with test programs): 24386] RAX: ffffffffffffffda RBX: 00007f02757b5fa0 RCX: 00007f027558ebe9 [ 751.361891][T24386] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 751.361921][T24386] RBP: 00007f02764b5090 R08: 0000000000000000 R09: 0000000000000000 [ 751.361933][T24386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 751.361943][T24386] R13: 00007f02757b6038 R14: 00007f02757b5fa0 R15: 00007ffea682c5a8 [ 751.361971][T24386] [ 751.654250][ T5864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 751.690370][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 751.698894][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 751.778110][T24383] wg1 speed is unknown, defaulting to 1000 [ 752.219831][T24408] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5984'. [ 752.244045][T24408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5984'. [ 752.688296][T24383] chnl_net:caif_netlink_parms(): no params data found [ 752.710488][T24428] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5986'. [ 752.947665][T12034] tipc: Resetting bearer [ 753.069807][T12034] tipc: Disabling bearer [ 753.092993][T24442] FAULT_INJECTION: forcing a failure. [ 753.092993][T24442] name failslab, interval 1, probability 0, space 0, times 0 [ 753.119399][T24442] CPU: 1 UID: 0 PID: 24442 Comm: syz.5.5991 Not tainted syzkaller #0 PREEMPT(full) [ 753.119431][T24442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 753.119446][T24442] Call Trace: [ 753.119464][T24442] [ 753.119475][T24442] dump_stack_lvl+0x189/0x250 [ 753.119507][T24442] ? __pfx____ratelimit+0x10/0x10 [ 753.119538][T24442] ? __pfx_dump_stack_lvl+0x10/0x10 [ 753.119564][T24442] ? __pfx__printk+0x10/0x10 [ 753.119611][T24442] should_fail_ex+0x414/0x560 [ 753.119646][T24442] should_failslab+0xa8/0x100 [ 753.119680][T24442] __kmalloc_cache_noprof+0x70/0x3d0 [ 753.119709][T24442] ? sctp_add_bind_addr+0x8c/0x370 [ 753.119743][T24442] sctp_add_bind_addr+0x8c/0x370 [ 753.119782][T24442] sctp_copy_local_addr_list+0x30b/0x4e0 [ 753.119815][T24442] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 753.119845][T24442] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 753.119876][T24442] ? sctp_v6_is_any+0x64/0x80 [ 753.119908][T24442] ? sctp_copy_one_addr+0x93/0x360 [ 753.119950][T24442] sctp_bind_addr_copy+0xb3/0x3c0 [ 753.119986][T24442] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 753.120020][T24442] sctp_connect_new_asoc+0x2e0/0x690 [ 753.120046][T24442] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 753.120069][T24442] ? __local_bh_enable_ip+0x12d/0x1c0 [ 753.120104][T24442] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 753.120130][T24442] ? security_sctp_bind_connect+0x7e/0x2e0 [ 753.120162][T24442] sctp_sendmsg+0x155c/0x2810 [ 753.120214][T24442] ? __pfx_sctp_sendmsg+0x10/0x10 [ 753.120252][T24442] ? aa_sk_perm+0x81e/0x950 [ 753.120289][T24442] ? __pfx_aa_sk_perm+0x10/0x10 [ 753.120325][T24442] ? sock_rps_record_flow+0x19/0x410 [ 753.120359][T24442] ? inet_sendmsg+0x2f4/0x370 [ 753.120391][T24442] __sock_sendmsg+0x19c/0x270 [ 753.120423][T24442] __sys_sendto+0x3bd/0x520 [ 753.120487][T24442] ? __pfx___sys_sendto+0x10/0x10 [ 753.120518][T24442] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 753.120571][T24442] ? __fget_files+0x3a0/0x420 [ 753.120627][T24442] ? ksys_write+0x22a/0x250 [ 753.120661][T24442] ? __pfx_ksys_write+0x10/0x10 [ 753.120692][T24442] ? rcu_is_watching+0x15/0xb0 [ 753.120722][T24442] __x64_sys_sendto+0xde/0x100 [ 753.120760][T24442] do_syscall_64+0xfa/0x3b0 [ 753.120792][T24442] ? lockdep_hardirqs_on+0x9c/0x150 [ 753.120821][T24442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.120843][T24442] ? clear_bhb_loop+0x60/0xb0 [ 753.120870][T24442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.120892][T24442] RIP: 0033:0x7fb03878ebe9 [ 753.120912][T24442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 753.120931][T24442] RSP: 002b:00007fb0395b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 753.120954][T24442] RAX: ffffffffffffffda RBX: 00007fb0389b5fa0 RCX: 00007fb03878ebe9 [ 753.120971][T24442] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 753.120999][T24442] RBP: 00007fb0395b4090 R08: 000020000005ffe4 R09: 000000000000001c [ 753.121013][T24442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 753.121026][T24442] R13: 00007fb0389b6038 R14: 00007fb0389b5fa0 R15: 00007ffc55208838 [ 753.121062][T24442] [ 753.611991][T24450] netlink: 'syz.1.5994': attribute type 2 has an invalid length. [ 753.619905][T24450] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5994'. [ 753.742452][ T5868] Bluetooth: hci0: command tx timeout [ 754.164380][T12034] bond1 (unregistering): Released all slaves [ 754.179108][T12034] bond2 (unregistering): Released all slaves [ 754.287895][T12034] bond3 (unregistering): Released all slaves [ 754.305026][T12034] bond4 (unregistering): Released all slaves [ 754.412203][T12034] bond5 (unregistering): Released all slaves [ 754.533292][T12034] bond6 (unregistering): (slave veth3): Releasing active interface [ 754.543464][T12034] bond6 (unregistering): Released all slaves [ 754.558095][T12034] bond0 (unregistering): Released all slaves [ 754.574154][T12034] bond7 (unregistering): Released all slaves [ 754.591056][T12034] bond8 (unregistering): Released all slaves [ 754.614052][T12034] bond9 (unregistering): Released all slaves [ 754.630583][T24434] tipc: Enabling of bearer rejected, failed to enable media [ 754.854974][T24461] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5997'. [ 754.888852][T12034] tipc: Left network mode [ 754.890055][T24383] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.912467][T24466] netlink: 'syz.2.5996': attribute type 7 has an invalid length. [ 754.928842][T24383] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.959671][T24383] bridge_slave_0: entered allmulticast mode [ 754.980638][T24383] bridge_slave_0: entered promiscuous mode [ 755.013870][T24383] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.041207][T24383] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.054611][T24383] bridge_slave_1: entered allmulticast mode [ 755.080417][T24383] bridge_slave_1: entered promiscuous mode [ 755.234819][T24478] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6001'. [ 755.277111][T24476] wg1 speed is unknown, defaulting to 1000 [ 755.288026][T24473] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6000'. [ 755.317606][T24383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.398792][T24383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 755.458017][T24492] netlink: 'syz.5.6000': attribute type 2 has an invalid length. [ 755.471002][T24492] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6000'. [ 755.654590][T24383] team0: Port device team_slave_0 added [ 755.700463][T24383] team0: Port device team_slave_1 added [ 755.746927][T12034] batadv0: left promiscuous mode [ 755.767261][T12034] hsr_slave_0: left promiscuous mode [ 755.782934][T12034] hsr_slave_1: left promiscuous mode [ 755.803026][T24503] Bluetooth: MGMT ver 1.23 [ 755.816857][T24505] netlink: 'syz.4.6009': attribute type 1 has an invalid length. [ 755.831768][ T5868] Bluetooth: hci0: command tx timeout [ 756.248652][T24516] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input8 [ 756.445866][T24521] FAULT_INJECTION: forcing a failure. [ 756.445866][T24521] name failslab, interval 1, probability 0, space 0, times 0 [ 756.465563][T24521] CPU: 0 UID: 0 PID: 24521 Comm: syz.5.6016 Not tainted syzkaller #0 PREEMPT(full) [ 756.465593][T24521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 756.465606][T24521] Call Trace: [ 756.465615][T24521] [ 756.465625][T24521] dump_stack_lvl+0x189/0x250 [ 756.465656][T24521] ? __pfx____ratelimit+0x10/0x10 [ 756.465685][T24521] ? __pfx_dump_stack_lvl+0x10/0x10 [ 756.465710][T24521] ? __pfx__printk+0x10/0x10 [ 756.465755][T24521] ? __pfx___might_resched+0x10/0x10 [ 756.465780][T24521] should_fail_ex+0x414/0x560 [ 756.465809][T24521] ? map_get_next_key+0x22a/0x5f0 [ 756.465835][T24521] should_failslab+0xa8/0x100 [ 756.465866][T24521] __kvmalloc_node_noprof+0x161/0x5f0 [ 756.465894][T24521] ? map_get_next_key+0x22a/0x5f0 [ 756.465920][T24521] ? _copy_from_user+0x94/0xb0 [ 756.465947][T24521] map_get_next_key+0x22a/0x5f0 [ 756.465974][T24521] ? bpf_lsm_bpf+0x9/0x20 [ 756.466004][T24521] __sys_bpf+0x65e/0x870 [ 756.466032][T24521] ? __pfx___sys_bpf+0x10/0x10 [ 756.466072][T24521] ? ksys_write+0x22a/0x250 [ 756.466101][T24521] ? __pfx_ksys_write+0x10/0x10 [ 756.466125][T24521] ? rcu_is_watching+0x15/0xb0 [ 756.466160][T24521] __x64_sys_bpf+0x7c/0x90 [ 756.466184][T24521] do_syscall_64+0xfa/0x3b0 [ 756.466230][T24521] ? lockdep_hardirqs_on+0x9c/0x150 [ 756.466258][T24521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.466280][T24521] ? clear_bhb_loop+0x60/0xb0 [ 756.466307][T24521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.466327][T24521] RIP: 0033:0x7fb03878ebe9 [ 756.466351][T24521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 756.466370][T24521] RSP: 002b:00007fb0395b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 756.466393][T24521] RAX: ffffffffffffffda RBX: 00007fb0389b5fa0 RCX: 00007fb03878ebe9 [ 756.466409][T24521] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 0000000000000004 [ 756.466423][T24521] RBP: 00007fb0395b4090 R08: 0000000000000000 R09: 0000000000000000 [ 756.466436][T24521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 756.466449][T24521] R13: 00007fb0389b6038 R14: 00007fb0389b5fa0 R15: 00007ffc55208838 [ 756.466483][T24521] [ 756.807289][T24530] netlink: 596 bytes leftover after parsing attributes in process `syz.1.6019'. [ 756.822987][T24530] netlink: 'syz.1.6019': attribute type 13 has an invalid length. [ 756.843716][T24530] netlink: 'syz.1.6019': attribute type 17 has an invalid length. [ 757.128072][T24539] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6021'. [ 757.335969][T24505] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 757.339781][T24383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 757.391569][T24383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 757.422416][T24383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 757.435749][T24383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 757.443031][T24383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 757.540031][T24383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 757.565326][T24546] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6024'. [ 757.598407][T24546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6024'. [ 757.747412][T24546] bond10: entered promiscuous mode [ 757.752921][T24546] bond10: entered allmulticast mode [ 757.758716][T24546] 8021q: adding VLAN 0 to HW filter on device bond10 [ 757.788512][T24383] hsr_slave_0: entered promiscuous mode [ 757.801216][T24558] sock: sock_set_timeout: `syz.4.6028' (pid 24558) tries to set negative timeout [ 757.805823][T24383] hsr_slave_1: entered promiscuous mode [ 757.817585][T24383] debugfs: 'hsr0' already exists in 'hsr' [ 757.823555][T24383] Cannot create hsr debugfs directory [ 757.834809][T24561] netlink: 'syz.4.6028': attribute type 7 has an invalid length. [ 757.852387][T24561] sctp: [Deprecated]: syz.4.6028 (pid 24561) Use of int in max_burst socket option deprecated. [ 757.852387][T24561] Use struct sctp_assoc_value instead [ 757.879026][T24560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6027'. [ 757.891805][T24559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6027'. [ 757.901308][ T5868] Bluetooth: hci0: command tx timeout [ 758.011220][T24556] wg1 speed is unknown, defaulting to 1000 [ 758.147921][T12034] IPVS: stop unused estimator thread 0... [ 758.223444][ T13] nci: nci_rx_work: unknown MT 0x1 [ 758.276903][T24579] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6032'. [ 758.347699][T24582] macvlan2: entered allmulticast mode [ 758.357300][T24582] veth1_vlan: entered allmulticast mode [ 758.365585][T24582] veth1_vlan: left allmulticast mode [ 758.626026][T24586] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 758.972741][T24383] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 758.999378][T24383] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 759.052627][T24383] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 759.076321][T24383] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 759.263768][T24383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 759.323151][T24383] 8021q: adding VLAN 0 to HW filter on device team0 [ 759.352132][T12034] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.359301][T12034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 759.399759][T12034] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.407090][T12034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 759.487950][T24612] tipc: Enabled bearer , priority 0 [ 759.500460][T24612] syzkaller0: entered promiscuous mode [ 759.508942][T24612] syzkaller0: entered allmulticast mode [ 759.587330][T24611] tipc: Resetting bearer [ 759.651960][T24618] FAULT_INJECTION: forcing a failure. [ 759.651960][T24618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 759.671691][T24618] CPU: 0 UID: 0 PID: 24618 Comm: syz.5.6044 Not tainted syzkaller #0 PREEMPT(full) [ 759.671724][T24618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 759.671738][T24618] Call Trace: [ 759.671748][T24618] [ 759.671758][T24618] dump_stack_lvl+0x189/0x250 [ 759.671790][T24618] ? __pfx____ratelimit+0x10/0x10 [ 759.671820][T24618] ? __pfx_dump_stack_lvl+0x10/0x10 [ 759.671845][T24618] ? __pfx__printk+0x10/0x10 [ 759.671889][T24618] should_fail_ex+0x414/0x560 [ 759.671923][T24618] _copy_to_user+0x31/0xb0 [ 759.671951][T24618] simple_read_from_buffer+0xe1/0x170 [ 759.671999][T24618] proc_fail_nth_read+0x1b3/0x220 [ 759.672028][T24618] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 759.672057][T24618] ? rw_verify_area+0x2a6/0x4d0 [ 759.672084][T24618] ? __lock_acquire+0xab9/0xd20 [ 759.672115][T24618] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 759.672142][T24618] vfs_read+0x200/0xa30 [ 759.672169][T24618] ? fdget_pos+0x247/0x320 [ 759.672194][T24618] ? __pfx___mutex_lock+0x10/0x10 [ 759.672225][T24618] ? __pfx_vfs_read+0x10/0x10 [ 759.672254][T24618] ? __fget_files+0x2a/0x420 [ 759.672290][T24618] ? __fget_files+0x3a0/0x420 [ 759.672320][T24618] ? __fget_files+0x2a/0x420 [ 759.672362][T24618] ksys_read+0x145/0x250 [ 759.672391][T24618] ? __pfx_ksys_read+0x10/0x10 [ 759.672415][T24618] ? rcu_is_watching+0x15/0xb0 [ 759.672443][T24618] ? do_syscall_64+0xbe/0x3b0 [ 759.672479][T24618] do_syscall_64+0xfa/0x3b0 [ 759.672509][T24618] ? lockdep_hardirqs_on+0x9c/0x150 [ 759.672539][T24618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.672561][T24618] ? clear_bhb_loop+0x60/0xb0 [ 759.672588][T24618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.672609][T24618] RIP: 0033:0x7fb03878d5fc [ 759.672629][T24618] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 759.672649][T24618] RSP: 002b:00007fb0395b4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 759.672672][T24618] RAX: ffffffffffffffda RBX: 00007fb0389b5fa0 RCX: 00007fb03878d5fc [ 759.672688][T24618] RDX: 000000000000000f RSI: 00007fb0395b40a0 RDI: 0000000000000004 [ 759.672701][T24618] RBP: 00007fb0395b4090 R08: 0000000000000000 R09: 0000000000000000 [ 759.672715][T24618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 759.672728][T24618] R13: 00007fb0389b6038 R14: 00007fb0389b5fa0 R15: 00007ffc55208838 [ 759.672763][T24618] [ 759.673152][T24611] tipc: Disabling bearer [ 759.992116][ T5868] Bluetooth: hci0: command tx timeout [ 760.158504][T24383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 760.266094][T24636] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 760.337481][T24383] veth0_vlan: entered promiscuous mode [ 760.359756][T24383] veth1_vlan: entered promiscuous mode [ 760.474265][T24640] wg1 speed is unknown, defaulting to 1000 [ 760.475001][T24383] veth0_macvtap: entered promiscuous mode [ 760.556217][T24383] veth1_macvtap: entered promiscuous mode [ 760.649944][T24650] vlan0: entered allmulticast mode [ 760.656964][T24650] bridge0: entered allmulticast mode [ 760.690503][T24653] __nla_validate_parse: 3 callbacks suppressed [ 760.690522][T24653] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6053'. [ 760.714859][T24383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 760.754374][T24652] tipc: Enabled bearer , priority 0 [ 760.766126][T24652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6055'. [ 760.778851][T24383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 760.797039][T24652] tipc: Resetting bearer [ 760.814987][T24651] tipc: Disabling bearer [ 760.827934][T12034] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.837362][T12034] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.854881][T12034] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.866326][T12034] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.981841][T12034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 760.989713][T12034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.146785][T24662] tipc: Enabled bearer , priority 0 [ 761.157925][ T6910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.176278][ T6910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.214626][T24657] syzkaller0: entered promiscuous mode [ 761.224514][T24657] syzkaller0: entered allmulticast mode [ 761.305744][T24656] tipc: Resetting bearer [ 761.364148][T24656] tipc: Disabling bearer [ 761.611611][T24672] netlink: 'syz.5.6060': attribute type 13 has an invalid length. [ 761.620229][T24672] netlink: 'syz.5.6060': attribute type 17 has an invalid length. [ 761.824622][T24672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 761.856187][T24678] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6061'. [ 761.884582][T24672] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 762.102003][T24677] wg1 speed is unknown, defaulting to 1000 [ 762.262695][T21213] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 762.279312][T21213] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 762.289856][T21213] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 762.305924][T21213] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 762.314225][T21213] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 762.379758][T24693] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6065'. [ 762.479626][T24691] wg1 speed is unknown, defaulting to 1000 [ 762.614941][T24698] netlink: 'syz.5.6076': attribute type 1 has an invalid length. [ 763.068800][T24707] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6068'. [ 763.160213][T24691] chnl_net:caif_netlink_parms(): no params data found [ 763.320701][T24715] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6070'. [ 763.421231][ T5864] Bluetooth: hci0: command 0x0405 tx timeout [ 763.447376][T12036] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 763.487825][T12036] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 763.814440][T24720] tipc: Started in network mode [ 763.821468][T24720] tipc: Node identity 929584db475c, cluster identity 4711 [ 763.830928][T24720] tipc: Enabled bearer , priority 0 [ 763.886696][T12036] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 763.915932][T12036] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 763.947829][T24709] wg1 speed is unknown, defaulting to 1000 [ 763.997380][T24724] syzkaller0: entered promiscuous mode [ 764.003882][T24724] syzkaller0: entered allmulticast mode [ 764.019040][T24720] tipc: Resetting bearer [ 764.029246][T24728] syzkaller0: entered promiscuous mode [ 764.035120][T24728] syzkaller0: entered allmulticast mode [ 764.059906][T12036] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 764.070123][T12036] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 764.087418][T24714] tipc: Resetting bearer [ 764.103565][T24714] tipc: Disabling bearer [ 764.170545][T12036] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 764.182658][T12036] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 764.263842][T24691] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.295253][T24691] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.319297][T24691] bridge_slave_0: entered allmulticast mode [ 764.337063][T24691] bridge_slave_0: entered promiscuous mode [ 764.353900][T24691] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.381312][ T5868] Bluetooth: hci3: command tx timeout [ 764.417516][T24691] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.436169][T24691] bridge_slave_1: entered allmulticast mode [ 764.447729][T24691] bridge_slave_1: entered promiscuous mode [ 764.493685][T24752] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6074'. [ 764.668411][T24691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 764.733389][T24691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 764.841049][T24762] netlink: 'syz.2.6079': attribute type 10 has an invalid length. [ 764.848946][T24762] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6079'. [ 764.919496][T24691] team0: Port device team_slave_0 added [ 764.944639][T24691] team0: Port device team_slave_1 added [ 764.964255][T24762] team0: entered promiscuous mode [ 764.972067][T24762] team_slave_0: entered promiscuous mode [ 764.978133][T24762] team_slave_1: entered promiscuous mode [ 764.984446][T24762] bridge0: port 3(team0) entered blocking state [ 764.995902][T24762] bridge0: port 3(team0) entered disabled state [ 765.003459][T24762] team0: entered allmulticast mode [ 765.008818][T24762] team_slave_0: entered allmulticast mode [ 765.019926][T24762] team_slave_1: entered allmulticast mode [ 765.031982][T24762] bridge0: port 3(team0) entered blocking state [ 765.038558][T24762] bridge0: port 3(team0) entered forwarding state [ 765.073733][T24765] 8021q: VLANs not supported on gre0 [ 765.238237][T24769] wg1 speed is unknown, defaulting to 1000 [ 765.240428][T24691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 765.287595][T24691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 765.349923][T24691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 765.850535][T24783] netlink: 192 bytes leftover after parsing attributes in process `syz.5.6087'. [ 765.871473][T24783] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6087'. [ 766.037555][T24797] FAULT_INJECTION: forcing a failure. [ 766.037555][T24797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 766.051324][T24797] CPU: 0 UID: 0 PID: 24797 Comm: syz.2.6092 Not tainted syzkaller #0 PREEMPT(full) [ 766.051352][T24797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 766.051364][T24797] Call Trace: [ 766.051373][T24797] [ 766.051382][T24797] dump_stack_lvl+0x189/0x250 [ 766.051409][T24797] ? __pfx____ratelimit+0x10/0x10 [ 766.051436][T24797] ? __pfx_dump_stack_lvl+0x10/0x10 [ 766.051459][T24797] ? __pfx__printk+0x10/0x10 [ 766.051498][T24797] should_fail_ex+0x414/0x560 [ 766.051528][T24797] _copy_to_user+0x31/0xb0 [ 766.051552][T24797] map_get_next_key+0x48b/0x5f0 [ 766.051579][T24797] ? map_get_next_key+0x269/0x5f0 [ 766.051607][T24797] __sys_bpf+0x65e/0x870 [ 766.051634][T24797] ? __pfx___sys_bpf+0x10/0x10 [ 766.051671][T24797] ? ksys_write+0x22a/0x250 [ 766.051700][T24797] ? __pfx_ksys_write+0x10/0x10 [ 766.051722][T24797] ? rcu_is_watching+0x15/0xb0 [ 766.051748][T24797] __x64_sys_bpf+0x7c/0x90 [ 766.051771][T24797] do_syscall_64+0xfa/0x3b0 [ 766.051797][T24797] ? lockdep_hardirqs_on+0x9c/0x150 [ 766.051822][T24797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.051840][T24797] ? clear_bhb_loop+0x60/0xb0 [ 766.051863][T24797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.051881][T24797] RIP: 0033:0x7f027558ebe9 [ 766.051900][T24797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 766.051916][T24797] RSP: 002b:00007f02764b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 766.051937][T24797] RAX: ffffffffffffffda RBX: 00007f02757b5fa0 RCX: 00007f027558ebe9 [ 766.051951][T24797] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 0000000000000004 [ 766.051963][T24797] RBP: 00007f02764b5090 R08: 0000000000000000 R09: 0000000000000000 [ 766.051975][T24797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 766.051986][T24797] R13: 00007f02757b6038 R14: 00007f02757b5fa0 R15: 00007ffea682c5a8 [ 766.052016][T24797] [ 766.268180][T12036] bond4 (unregistering): (slave gretap1): Releasing active interface [ 766.335797][T12036] dvmrp0 (unregistering): left allmulticast mode [ 766.379617][T12036] bond3 (unregistering): (slave geneve2): Releasing active interface [ 766.474766][ T5868] Bluetooth: hci3: command tx timeout [ 766.654330][T12036] bond0 (unregistering): left promiscuous mode [ 766.660552][T12036] bond_slave_0: left promiscuous mode [ 766.668446][T12036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 766.680272][T12036] bond_slave_0: left allmulticast mode [ 766.689429][T12036] bond0 (unregistering): Released all slaves [ 766.816535][T12036] bond1 (unregistering): Released all slaves [ 766.957262][T12036] bond2 (unregistering): Released all slaves [ 766.972963][T12036] bond3 (unregistering): Released all slaves [ 767.100418][T12036] bond4 (unregistering): Released all slaves [ 767.116287][T12036] bond5 (unregistering): Released all slaves [ 767.133507][T12036] bond6 (unregistering): Released all slaves [ 767.165867][T12036] bond7 (unregistering): Released all slaves [ 767.188274][T12036] bond8 (unregistering): Released all slaves [ 767.204529][T12036] bond9 (unregistering): Released all slaves [ 767.327753][T12036] bond10 (unregistering): Released all slaves [ 767.350167][T24691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 767.359040][T24691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 767.387198][T24691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 767.532247][T24811] netlink: 'syz.0.6095': attribute type 10 has an invalid length. [ 767.546231][T24811] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6095'. [ 767.557306][T24811] team0: entered promiscuous mode [ 767.562699][T24811] team_slave_0: entered promiscuous mode [ 767.568823][T24811] team_slave_1: entered promiscuous mode [ 767.576488][T24811] bridge0: port 3(team0) entered blocking state [ 767.594291][T24811] bridge0: port 3(team0) entered disabled state [ 767.602048][T24811] team0: entered allmulticast mode [ 767.607352][T24811] team_slave_0: entered allmulticast mode [ 767.617131][T24811] team_slave_1: entered allmulticast mode [ 767.627382][T24811] bridge0: port 3(team0) entered blocking state [ 767.633916][T24811] bridge0: port 3(team0) entered forwarding state [ 767.648819][T12036] : left promiscuous mode [ 767.741519][T24801] wg1 speed is unknown, defaulting to 1000 [ 767.806166][T24691] hsr_slave_0: entered promiscuous mode [ 767.820709][T24691] hsr_slave_1: entered promiscuous mode [ 767.839534][T24691] debugfs: 'hsr0' already exists in 'hsr' [ 767.851400][T24691] Cannot create hsr debugfs directory [ 767.915435][T12036] tipc: Left network mode [ 768.292101][T24834] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6105'. [ 768.329264][T24836] netlink: 192 bytes leftover after parsing attributes in process `syz.0.6106'. [ 768.445592][T24838] openvswitch: netlink: Multiple metadata blocks provided [ 768.472070][T24838] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 768.482557][T24838] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 768.499282][T24838] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 768.544394][ T5868] Bluetooth: hci3: command tx timeout [ 768.606733][T24842] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6109'. [ 768.618914][T24842] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6109'. [ 769.075264][T24858] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6113'. [ 769.253474][T12036] batadv0: left promiscuous mode [ 769.315332][T12036] hsr_slave_0: left promiscuous mode [ 769.331641][T12036] hsr_slave_1: left promiscuous mode [ 769.339923][T12036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 769.348415][T12036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 769.369445][T12036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 769.388419][T12036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 769.444953][T12036] veth1_macvtap: left promiscuous mode [ 769.463092][T12036] veth0_macvtap: left promiscuous mode [ 769.475997][T12036] veth1_vlan: left promiscuous mode [ 769.486446][T12036] veth0_vlan: left promiscuous mode [ 769.737941][T24884] FAULT_INJECTION: forcing a failure. [ 769.737941][T24884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 769.784067][T24884] CPU: 1 UID: 0 PID: 24884 Comm: syz.5.6121 Not tainted syzkaller #0 PREEMPT(full) [ 769.784098][T24884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 769.784113][T24884] Call Trace: [ 769.784122][T24884] [ 769.784132][T24884] dump_stack_lvl+0x189/0x250 [ 769.784164][T24884] ? __pfx____ratelimit+0x10/0x10 [ 769.784193][T24884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 769.784219][T24884] ? __pfx__printk+0x10/0x10 [ 769.784262][T24884] should_fail_ex+0x414/0x560 [ 769.784294][T24884] _copy_to_user+0x31/0xb0 [ 769.784321][T24884] simple_read_from_buffer+0xe1/0x170 [ 769.784358][T24884] proc_fail_nth_read+0x1b3/0x220 [ 769.784386][T24884] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 769.784413][T24884] ? rw_verify_area+0x2a6/0x4d0 [ 769.784438][T24884] ? __lock_acquire+0xab9/0xd20 [ 769.784467][T24884] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 769.784492][T24884] vfs_read+0x200/0xa30 [ 769.784519][T24884] ? fdget_pos+0x247/0x320 [ 769.784543][T24884] ? __pfx___mutex_lock+0x10/0x10 [ 769.784575][T24884] ? __pfx_vfs_read+0x10/0x10 [ 769.784605][T24884] ? __fget_files+0x2a/0x420 [ 769.784641][T24884] ? __fget_files+0x3a0/0x420 [ 769.784674][T24884] ? __fget_files+0x2a/0x420 [ 769.784715][T24884] ksys_read+0x145/0x250 [ 769.784746][T24884] ? __pfx_ksys_read+0x10/0x10 [ 769.784769][T24884] ? rcu_is_watching+0x15/0xb0 [ 769.784799][T24884] ? do_syscall_64+0xbe/0x3b0 [ 769.784845][T24884] do_syscall_64+0xfa/0x3b0 [ 769.784876][T24884] ? lockdep_hardirqs_on+0x9c/0x150 [ 769.784904][T24884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.784925][T24884] ? clear_bhb_loop+0x60/0xb0 [ 769.784952][T24884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.784973][T24884] RIP: 0033:0x7fb03878d5fc [ 769.784993][T24884] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 769.785012][T24884] RSP: 002b:00007fb0395b4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 769.785035][T24884] RAX: ffffffffffffffda RBX: 00007fb0389b5fa0 RCX: 00007fb03878d5fc [ 769.785050][T24884] RDX: 000000000000000f RSI: 00007fb0395b40a0 RDI: 0000000000000006 [ 769.785064][T24884] RBP: 00007fb0395b4090 R08: 0000000000000000 R09: 0000000000000000 [ 769.785078][T24884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 769.785091][T24884] R13: 00007fb0389b6038 R14: 00007fb0389b5fa0 R15: 00007ffc55208838 [ 769.785125][T24884] [ 770.182570][T24895] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6122'. [ 770.623319][ T5868] Bluetooth: hci3: command tx timeout [ 771.221993][T24874] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6118'. [ 771.235920][T24874] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6118'. [ 771.341220][T24691] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 771.386229][T24691] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 771.440141][T24691] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 771.507465][T24691] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 771.745329][T12036] IPVS: stop unused estimator thread 0... [ 772.029990][T24691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 772.152976][T24691] 8021q: adding VLAN 0 to HW filter on device team0 [ 772.190051][T12031] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.197307][T12031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 772.229018][T24955] tipc: Enabled bearer , priority 0 [ 772.240528][T24955] syzkaller0: entered promiscuous mode [ 772.256442][T24955] syzkaller0: entered allmulticast mode [ 772.285508][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.292720][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 772.309756][T24961] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6141'. [ 772.366593][T24964] tipc: Resetting bearer [ 772.379317][T24954] tipc: Resetting bearer [ 772.401590][T24954] tipc: Disabling bearer [ 772.639590][T24976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6146'. [ 772.887210][T24691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 772.977082][T24691] veth0_vlan: entered promiscuous mode [ 773.009077][T24691] veth1_vlan: entered promiscuous mode [ 773.092754][T24691] veth0_macvtap: entered promiscuous mode [ 773.114255][T24691] veth1_macvtap: entered promiscuous mode [ 773.154229][T24691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 773.202977][T24691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 773.244447][T12031] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.269700][T24998] netlink: 'syz.4.6154': attribute type 2 has an invalid length. [ 773.283067][T12031] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.300892][T24998] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6154'. [ 773.316359][T12031] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.331281][T12031] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.565093][T12031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 773.598516][T12031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.678529][T12034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 773.688283][T12034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.975519][T25026] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6059'. [ 774.118631][T25030] 8021q: VLANs not supported on gre0 [ 774.452179][T25035] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6168'. [ 774.928688][ T5864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 774.939886][ T5864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 774.950322][ T5864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 774.960606][ T5864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 774.968863][ T5864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 775.025176][T25058] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6176'. [ 775.050387][T25052] netlink: 'syz.1.6175': attribute type 10 has an invalid length. [ 775.094389][T25060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6177'. [ 775.113702][T25060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6177'. [ 775.126508][T25060] netlink: 'syz.0.6177': attribute type 20 has an invalid length. [ 775.128437][T25053] wg1 speed is unknown, defaulting to 1000 [ 775.171980][T25060] netlink: 'syz.0.6177': attribute type 20 has an invalid length. [ 775.196065][T12036] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 775.215715][T12036] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 775.283783][T25069] netlink: 'syz.1.6180': attribute type 1 has an invalid length. [ 775.290413][T12036] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 775.303854][T25070] netlink: 'syz.5.6179': attribute type 39 has an invalid length. [ 775.319147][T12036] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 775.943049][T25053] chnl_net:caif_netlink_parms(): no params data found [ 776.268963][T25053] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.292564][T25053] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.316183][T25053] bridge_slave_0: entered allmulticast mode [ 776.333245][T25053] bridge_slave_0: entered promiscuous mode [ 776.346201][T25053] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.354645][T25053] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.362359][T25053] bridge_slave_1: entered allmulticast mode [ 776.375843][T25053] bridge_slave_1: entered promiscuous mode [ 776.413242][T25115] 8021q: VLANs not supported on gre0 [ 776.474028][T25053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 776.494968][T25053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 776.629485][T25053] team0: Port device team_slave_0 added [ 776.656497][T25053] team0: Port device team_slave_1 added [ 776.738365][T25053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 776.754265][T25053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 776.789194][T25053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 776.818663][T25053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 776.835266][T25053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 776.888948][T25053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 776.957506][T25126] IPv6: sit1: Disabled Multicast RS [ 776.965759][T25126] sit1: entered allmulticast mode [ 777.021000][ T5864] Bluetooth: hci2: command tx timeout [ 777.091565][T25053] hsr_slave_0: entered promiscuous mode [ 777.098421][T25053] hsr_slave_1: entered promiscuous mode [ 777.105830][T25053] debugfs: 'hsr0' already exists in 'hsr' [ 777.111839][T25053] Cannot create hsr debugfs directory [ 777.239625][T25138] __nla_validate_parse: 3 callbacks suppressed [ 777.239645][T25138] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6203'. [ 777.252449][T25137] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6204'. [ 777.296916][T25137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6204'. [ 777.583731][T25053] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.600141][T25146] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6206'. [ 777.762968][T25053] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.879115][T25053] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.907633][T25167] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6217'. [ 777.978987][T25053] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.053366][T25169] tipc: Enabled bearer , priority 0 [ 778.083841][T25169] syzkaller0: entered promiscuous mode [ 778.100271][T25169] syzkaller0: entered allmulticast mode [ 778.149399][T25169] tipc: Resetting bearer [ 778.183052][T25168] tipc: Resetting bearer [ 778.202081][T25168] tipc: Disabling bearer [ 778.280666][T25053] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 778.319765][T25053] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 778.347062][T25181] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6220'. [ 778.357192][T25181] veth0: entered promiscuous mode [ 778.369342][T25053] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 778.384895][T25053] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 778.417919][T25182] 8021q: VLANs not supported on gre0 [ 778.740439][T25053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.787126][T25053] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.805324][T12036] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.812543][T12036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 778.885593][T12036] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.892845][T12036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 778.967932][T25173] veth0: left promiscuous mode [ 779.057155][T25211] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6231'. [ 779.076938][T25211] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6231'. [ 779.102052][ T5864] Bluetooth: hci2: command tx timeout [ 779.118929][T25211] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6231'. [ 779.157345][T25211] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6231'. [ 779.446062][T25053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 779.525084][T25225] wg1 speed is unknown, defaulting to 1000 [ 780.119963][T25249] netlink: 'syz.5.6244': attribute type 1 has an invalid length. [ 780.128847][T25249] netlink: 'syz.5.6244': attribute type 2 has an invalid length. [ 780.138179][T25251] nftables ruleset with unbound chain [ 780.174544][T25249] netlink: 'syz.5.6244': attribute type 1 has an invalid length. [ 780.194082][T25254] netlink: 'syz.5.6244': attribute type 1 has an invalid length. [ 780.202949][T25254] netlink: 'syz.5.6244': attribute type 2 has an invalid length. [ 780.246468][T25254] netlink: 'syz.5.6244': attribute type 1 has an invalid length. [ 780.260346][T25257] netlink: 'syz.1.6245': attribute type 1 has an invalid length. [ 780.395148][T25053] veth0_vlan: entered promiscuous mode [ 780.410509][T25053] veth1_vlan: entered promiscuous mode [ 780.488615][T25053] veth0_macvtap: entered promiscuous mode [ 780.516974][T25265] 8021q: VLANs not supported on gre0 [ 780.525688][T25053] veth1_macvtap: entered promiscuous mode [ 780.587898][T25053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 780.639010][T25053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 780.642361][T25267] netlink: 'syz.5.6249': attribute type 1 has an invalid length. [ 780.684915][T12036] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.698451][T12036] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.719454][T12036] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.734117][T25273] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20001 [ 780.739643][T12036] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.028661][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 781.056665][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 781.127186][T12031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 781.154894][T12031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 781.181251][ T5864] Bluetooth: hci2: command tx timeout [ 781.320416][T25300] tipc: Enabled bearer , priority 0 [ 781.335849][T25300] syzkaller0: entered promiscuous mode [ 781.360967][T25300] syzkaller0: entered allmulticast mode [ 781.413020][T25300] tipc: Resetting bearer [ 781.696430][T25299] tipc: Resetting bearer [ 781.800495][T25299] tipc: Disabling bearer [ 782.054999][T25337] netlink: 'syz.0.6275': attribute type 1 has an invalid length. [ 782.167325][T25347] netlink: 'syz.1.6279': attribute type 2 has an invalid length. [ 782.208841][T25345] bond1: (slave geneve2): making interface the new active one [ 782.217573][T25345] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 782.234950][T12036] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 782.290987][T12036] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 782.299846][T12036] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 782.330378][T25352] macvlan2: entered allmulticast mode [ 782.336087][T25352] veth1_vlan: entered allmulticast mode [ 782.344477][T25352] veth1_vlan: left allmulticast mode [ 782.429136][T12036] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 782.541339][T25366] __nla_validate_parse: 15 callbacks suppressed [ 782.541360][T25366] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6285'. [ 782.659676][T25374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6288'. [ 782.919458][T25374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6288'. [ 783.039361][T25387] tipc: Started in network mode [ 783.044995][T25387] tipc: Node identity 4, cluster identity 4711 [ 783.087238][T25387] tipc: Node number set to 4 [ 783.266376][ T5864] Bluetooth: hci2: command tx timeout [ 783.845145][T21213] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 783.854462][T21213] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 783.865745][T21213] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 783.875209][T21213] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 783.884102][T21213] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 783.984555][T25413] nbd: must specify a device to reconfigure [ 784.653469][T25420] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.661298][T25420] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.830099][T25420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 784.848707][T25420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 785.188942][T25415] tipc: Started in network mode [ 785.194517][T25415] tipc: Node identity 8a37d169c28e, cluster identity 4711 [ 785.212800][T25415] tipc: Enabled bearer , priority 0 [ 785.231245][T25429] syzkaller0: entered promiscuous mode [ 785.236845][T25429] syzkaller0: entered allmulticast mode [ 785.317436][T25446] syzkaller0: mtu greater than device maximum [ 785.371071][T25412] tipc: Resetting bearer [ 785.453533][T25412] tipc: Disabling bearer [ 785.474450][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.494503][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.552622][T25452] macvlan2: entered allmulticast mode [ 785.564602][T25452] veth1_vlan: entered allmulticast mode [ 785.573638][T25456] validate_nla: 3 callbacks suppressed [ 785.573660][T25456] netlink: 'syz.2.6310': attribute type 1 has an invalid length. [ 785.588987][T25452] veth1_vlan: left allmulticast mode [ 785.627993][ T1143] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.638506][ T1143] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.658121][T25410] wg1 speed is unknown, defaulting to 1000 [ 785.733605][T25456] 8021q: adding VLAN 0 to HW filter on device bond1 [ 785.750543][T25459] ipvlan2: entered allmulticast mode [ 785.762999][T25459] bond1: entered allmulticast mode [ 785.799890][T25456] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6310'. [ 785.862525][T25461] bond1: (slave gretap1): making interface the new active one [ 785.882702][T25461] gretap1: entered allmulticast mode [ 785.893150][T25461] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 785.982718][ T5864] Bluetooth: hci4: command tx timeout [ 786.148596][T25474] vlan2: entered promiscuous mode [ 786.151032][T25476] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6315'. [ 786.154499][T25474] bridge0: entered promiscuous mode [ 786.192131][T25484] netlink: 19 bytes leftover after parsing attributes in process `syz.4.6317'. [ 786.434710][T25496] netlink: 'syz.4.6323': attribute type 2 has an invalid length. [ 786.443115][T25496] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6323'. [ 786.448241][T12036] team0: left allmulticast mode [ 786.457725][T12036] C: left allmulticast mode [ 786.462337][T12036] team_slave_1: left allmulticast mode [ 786.468015][T12036] team0: left promiscuous mode [ 786.473238][T12036] C: left promiscuous mode [ 786.477856][T12036] team_slave_1: left promiscuous mode [ 786.485522][T12036] bridge0: port 3(team0) entered disabled state [ 786.495294][T12036] bridge_slave_1: left allmulticast mode [ 786.501931][T12036] bridge_slave_1: left promiscuous mode [ 786.507649][T12036] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.519776][T12036] bridge_slave_0: left allmulticast mode [ 786.526350][T12036] bridge_slave_0: left promiscuous mode [ 786.537408][T12036] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.784665][T12036] bond2 (unregistering): (slave geneve2): Releasing active interface [ 787.104840][T12036] bond0 (unregistering): left promiscuous mode [ 787.112087][T12036] bond_slave_0: left promiscuous mode [ 787.119855][T12036] bond_slave_1: left promiscuous mode [ 787.133506][T12036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 787.147323][T12036] bond_slave_0: left allmulticast mode [ 787.156996][T12036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 787.181235][T12036] bond_slave_1: left allmulticast mode [ 787.187499][T12036] bond0 (unregistering): Released all slaves [ 787.208012][T12036] bond1 (unregistering): Released all slaves [ 787.255682][T12036] bond2 (unregistering): Released all slaves [ 787.332313][T12036] bond3 (unregistering): Released all slaves [ 787.384242][T12036] bond4 (unregistering): Released all slaves [ 787.428268][T12036] bond5 (unregistering): Released all slaves [ 787.450302][T12036] bond6 (unregistering): Released all slaves [ 787.489502][T12036] bond7 (unregistering): Released all slaves [ 787.509592][T12036] bond8 (unregistering): Released all slaves [ 787.697598][T12036] bond9 (unregistering): Released all slaves [ 787.719485][T12036] bond10 (unregistering): Released all slaves [ 788.049598][T25535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6331'. [ 788.061120][ T5864] Bluetooth: hci4: command tx timeout [ 788.073346][T12036] tipc: Left network mode [ 788.240177][T25410] chnl_net:caif_netlink_parms(): no params data found [ 788.265883][T25540] tipc: Enabled bearer , priority 0 [ 788.284524][T25540] syzkaller0: entered promiscuous mode [ 788.290127][T25540] syzkaller0: entered allmulticast mode [ 788.367302][T25540] tipc: Resetting bearer [ 788.380067][T25540] tipc: Resetting bearer [ 788.401384][T25540] tipc: Disabling bearer [ 788.498302][T25543] tipc: Enabling of bearer rejected, failed to enable media [ 788.643999][T25410] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.667860][T25410] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.685442][T25410] bridge_slave_0: entered allmulticast mode [ 788.703345][T25410] bridge_slave_0: entered promiscuous mode [ 788.770276][T25410] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.807840][T25410] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.841049][T25410] bridge_slave_1: entered allmulticast mode [ 788.876719][T25410] bridge_slave_1: entered promiscuous mode [ 788.904655][T12036] batadv0: left promiscuous mode [ 788.925854][T12036] hsr_slave_0: left promiscuous mode [ 788.956065][T12036] hsr_slave_1: left promiscuous mode [ 788.964976][T12036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 789.083978][T12036] pimreg (unregistering): left allmulticast mode [ 789.239212][T25571] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6339'. [ 789.543085][T25578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6346'. [ 789.654590][T25584] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6346'. [ 789.759202][T25586] netlink: 'syz.4.6348': attribute type 1 has an invalid length. [ 789.825970][T25587] netlink: 'syz.4.6348': attribute type 10 has an invalid length. [ 790.043166][T12036] team0 (unregistering): Port device team_slave_1 removed [ 790.112141][T12036] team0 (unregistering): Port device C removed [ 790.145151][ T5864] Bluetooth: hci4: command tx timeout [ 790.208170][T25596] netlink: 'syz.1.6352': attribute type 2 has an invalid length. [ 790.216245][T25596] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6352'. [ 790.602248][T25589] team0: left allmulticast mode [ 790.607324][T25589] team_slave_0: left allmulticast mode [ 790.618518][T25589] team_slave_1: left allmulticast mode [ 790.626282][T25589] bridge0: port 3(team0) entered disabled state [ 790.658924][T25589] bridge_slave_0: left allmulticast mode [ 790.665088][T25589] bridge_slave_0: left promiscuous mode [ 790.671079][T25589] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.695748][T25589] bridge_slave_1: left allmulticast mode [ 790.708729][T25589] bridge_slave_1: left promiscuous mode [ 790.716974][T25589] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.730272][T25589] bond0: (slave bond_slave_0): Releasing backup interface [ 790.742308][T25589] bond0: (slave bond_slave_1): Releasing backup interface [ 790.758929][T25589] team_slave_0: left promiscuous mode [ 790.783055][T25589] team0: Port device team_slave_0 removed [ 790.790097][T25589] team_slave_1: left promiscuous mode [ 790.816950][T25589] team0: Port device team_slave_1 removed [ 790.825939][T25589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 790.834869][T25600] netlink: 'syz.2.6354': attribute type 11 has an invalid length. [ 790.843721][T25600] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6354'. [ 790.865241][T25589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 790.885474][T25589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 790.898761][T25589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 790.937588][T25589] bond1: (slave geneve2): Releasing active interface [ 790.954731][T25605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6353'. [ 790.992524][T25592] bridge0: entered promiscuous mode [ 791.004692][T25607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6355'. [ 791.056662][T25609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6355'. [ 791.141621][T25601] mac80211_hwsim hwsim71 wlan0: entered promiscuous mode [ 791.148866][T25601] macsec1: entered promiscuous mode [ 791.176191][T25601] macsec1: entered allmulticast mode [ 791.191654][T25601] mac80211_hwsim hwsim71 wlan0: entered allmulticast mode [ 791.208573][T12034] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 791.220000][T12034] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 791.236937][T25610] delete_channel: no stack [ 791.240119][T25410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 791.261090][ T1143] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 791.271423][ T1143] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 791.293800][T25410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 791.403655][T25410] team0: Port device team_slave_0 added [ 791.419500][T25410] team0: Port device team_slave_1 added [ 791.480829][T25622] netlink: 'syz.0.6359': attribute type 2 has an invalid length. [ 791.488872][T25622] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6359'. [ 791.503972][T25410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 791.512257][T25410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 791.539105][T25410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 791.559851][T25410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 791.575299][T25410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 791.609613][T25410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 791.754333][T25410] hsr_slave_0: entered promiscuous mode [ 791.782987][T25410] hsr_slave_1: entered promiscuous mode [ 791.803862][T25410] debugfs: 'hsr0' already exists in 'hsr' [ 791.850850][T25410] Cannot create hsr debugfs directory [ 791.908849][T25633] tipc: Enabled bearer , priority 0 [ 791.947842][T25634] syzkaller0: entered promiscuous mode [ 791.956814][T25634] syzkaller0: entered allmulticast mode [ 792.020210][T25634] tipc: Resetting bearer [ 792.052442][T25637] ip6erspan0: entered allmulticast mode [ 792.080560][T25630] tipc: Resetting bearer [ 792.105518][T25630] tipc: Disabling bearer [ 792.223957][ T5864] Bluetooth: hci4: command tx timeout [ 792.704173][T25410] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 792.742370][T25410] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 792.787506][T25410] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 792.795902][T25662] netlink: 'syz.0.6375': attribute type 2 has an invalid length. [ 792.811408][T25410] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 792.865372][T25664] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 792.897928][T25664] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 792.926971][T25664] bond0: (slave ipvlan3): Error -95 calling set_mac_address [ 793.249499][T25684] __nla_validate_parse: 2 callbacks suppressed [ 793.249519][T25684] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6379'. [ 793.252976][T25410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 793.337285][T25687] netlink: 'syz.0.6379': attribute type 1 has an invalid length. [ 793.500019][T25687] 8021q: adding VLAN 0 to HW filter on device bond2 [ 793.604230][T25684] bond2: (slave gretap1): making interface the new active one [ 793.616315][T25684] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 793.709140][T25410] 8021q: adding VLAN 0 to HW filter on device team0 [ 793.763399][T12036] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.770635][T12036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 793.836875][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.844099][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 793.986119][T25723] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 793.995753][T20488] IPVS: starting estimator thread 0... [ 794.091030][T25725] IPVS: using max 27 ests per chain, 64800 per kthread [ 794.190322][T25734] netlink: 248 bytes leftover after parsing attributes in process `syz.0.6396'. [ 794.653524][T25410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 794.664479][T25752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6399'. [ 794.677722][T25752] netlink: 'syz.4.6399': attribute type 16 has an invalid length. [ 794.685914][T25752] netlink: 'syz.4.6399': attribute type 17 has an invalid length. [ 794.755017][T25752] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 795.192254][T25768] macvlan2: entered allmulticast mode [ 795.213718][T25768] veth1_vlan: entered allmulticast mode [ 795.224544][T25768] veth1_vlan: left allmulticast mode [ 795.450964][T25410] veth0_vlan: entered promiscuous mode [ 795.495874][T25410] veth1_vlan: entered promiscuous mode [ 795.564321][T25774] wg1 speed is unknown, defaulting to 1000 [ 795.607966][T25776] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 795.643369][T25410] veth0_macvtap: entered promiscuous mode [ 795.765186][T25779] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6405'. [ 795.825129][T25410] veth1_macvtap: entered promiscuous mode [ 795.917075][T25410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 795.973842][T25410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 796.083919][T12031] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.105492][T12031] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.140771][T12031] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.149930][T12031] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.300564][T25789] gtp0: entered promiscuous mode [ 796.332000][T25789] gtp0: entered allmulticast mode [ 796.346705][T25792] 8021q: VLANs not supported on gre0 [ 796.595790][T25797] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6410'. [ 796.661686][T12034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.669568][T12034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.759218][T25806] netlink: 'syz.1.6415': attribute type 1 has an invalid length. [ 796.774271][T25802] netlink: 'syz.0.6413': attribute type 13 has an invalid length. [ 796.892447][T25816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6413'. [ 796.897013][T25802] gretap0: refused to change device tx_queue_len [ 796.908025][T25802] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 796.946939][T12031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.966889][T12031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.977958][T25809] bond1: (slave geneve2): making interface the new active one [ 796.988805][T25809] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 797.007617][T12036] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 797.027382][T12036] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 797.074129][T12036] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 797.100010][T12036] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 797.342356][T25831] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6294'. [ 797.395070][T25835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6421'. [ 797.445510][T25835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6421'. [ 797.474735][T25835] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6421'. [ 797.975007][T25867] netlink: 'syz.1.6434': attribute type 1 has an invalid length. [ 797.985513][T25864] wg1 speed is unknown, defaulting to 1000 [ 798.240227][T25874] netlink: 'syz.2.6436': attribute type 7 has an invalid length. [ 798.270879][T25874] __nla_validate_parse: 2 callbacks suppressed [ 798.270902][T25874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6436'. [ 798.455940][T25872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6435'. [ 798.643172][T25888] macvlan2: entered allmulticast mode [ 798.648785][T25888] veth1_vlan: entered allmulticast mode [ 798.677242][T25888] veth1_vlan: left allmulticast mode [ 798.745431][T25892] macvlan2: entered allmulticast mode [ 798.751935][T25892] veth1_vlan: entered allmulticast mode [ 798.755323][T25895] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6441'. [ 798.763085][T25892] veth1_vlan: left allmulticast mode [ 798.833541][T25890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6439'. [ 798.864751][T25890] netlink: 'syz.2.6439': attribute type 19 has an invalid length. [ 798.873996][T25890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6439'. [ 798.902405][ T6910] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.911620][ T6910] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.920476][ T6910] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.985309][ T6910] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 799.003564][T25899] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6443'. [ 799.328921][T25909] 8021q: VLANs not supported on gre0 [ 799.466549][T25923] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6449'. [ 800.100453][T25941] macvlan2: entered allmulticast mode [ 800.170266][T25941] veth1_vlan: entered allmulticast mode [ 800.176724][T25945] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6458'. [ 800.204755][T25941] veth1_vlan: left allmulticast mode [ 800.218355][T25945] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6458'. [ 800.581865][T25966] netlink: 'syz.2.6466': attribute type 1 has an invalid length. [ 800.595096][T25960] netlink: 'syz.5.6463': attribute type 10 has an invalid length. [ 800.635576][T25960] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6463'. [ 800.653633][T25971] netlink: 'syz.0.6467': attribute type 1 has an invalid length. [ 800.659669][T25960] batman_adv: batadv0: Adding interface: virt_wifi0 [ 800.668618][T25960] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 800.694810][T25960] batman_adv: batadv0: Interface activated: virt_wifi0 [ 800.715271][T25972] bond2: (slave geneve2): making interface the new active one [ 800.724083][T25972] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 800.779383][ T59] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 800.958752][ T59] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 800.983578][ T59] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 801.013181][ T59] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 801.086059][T25985] syzkaller1: entered promiscuous mode [ 801.117200][T25985] syzkaller1: entered allmulticast mode [ 801.675541][T26012] macvlan2: entered allmulticast mode [ 801.731013][T26012] veth1_vlan: entered allmulticast mode [ 801.748339][T26012] veth1_vlan: left allmulticast mode [ 802.277205][T26034] IPv6: sit1: Disabled Multicast RS [ 802.289500][T26034] sit1: entered allmulticast mode [ 802.479495][T26051] netlink: 'syz.0.6491': attribute type 2 has an invalid length. [ 803.606938][T26103] __nla_validate_parse: 4 callbacks suppressed [ 803.606969][T26103] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6511'. [ 803.682610][T26103] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6511'. [ 803.702715][T26103] netlink: 'syz.0.6511': attribute type 4 has an invalid length. [ 803.794327][T26115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6513'. [ 803.936146][T26121] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6514'. [ 803.946645][T26115] bond0: (slave bond_slave_1): Releasing backup interface [ 803.966156][T26122] netlink: 'syz.0.6516': attribute type 1 has an invalid length. [ 804.022810][T26126] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6514'. [ 804.130238][T26134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6518'. [ 804.195563][T26136] raw_sendmsg: syz.4.6518 forgot to set AF_INET. Fix it! [ 804.256256][T26116] wg1 speed is unknown, defaulting to 1000 [ 804.557768][T26138] wg1 speed is unknown, defaulting to 1000 [ 804.666508][T26149] netlink: 'syz.1.6523': attribute type 2 has an invalid length. [ 804.685789][T26146] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 804.696708][T26149] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6523'. [ 804.702185][T26152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6524'. [ 804.836097][T26158] 8021q: VLANs not supported on gre0 [ 804.904545][T26156] pim6reg: entered allmulticast mode [ 804.928636][T26156] pim6reg: left allmulticast mode [ 804.998424][T26164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6527'. [ 805.100041][T26138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6520'. [ 805.111028][T26138] netlink: 'syz.0.6520': attribute type 13 has an invalid length. [ 805.118884][T26138] netlink: 'syz.0.6520': attribute type 17 has an invalid length. [ 805.138477][T26138] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 805.162031][T26170] netlink: 'syz.1.6530': attribute type 1 has an invalid length. [ 805.740546][T26192] tipc: Started in network mode [ 805.748528][T26192] tipc: Node identity 2e9c2b567cd1, cluster identity 4711 [ 805.765376][T26192] tipc: Enabled bearer , priority 0 [ 805.780337][T26192] syzkaller0: entered promiscuous mode [ 805.789423][T26192] syzkaller0: entered allmulticast mode [ 805.868524][T26192] syzkaller0: mtu less than device minimum [ 806.118260][T26190] tipc: Resetting bearer [ 806.156666][T26190] tipc: Disabling bearer [ 806.191958][T26207] 8021q: VLANs not supported on gre0 [ 806.407161][T26227] netlink: 'syz.2.6546': attribute type 3 has an invalid length. [ 806.586541][T26237] openvswitch: netlink: EtherType 0 is less than min 600 [ 806.666784][T26237] netlink: 'syz.4.6549': attribute type 10 has an invalid length. [ 806.697823][T26239] siw: device registration error -23 [ 806.732834][T26237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 806.750552][T26237] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 807.008408][T26255] 8021q: VLANs not supported on gre0 [ 807.145271][T26260] netlink: 'syz.4.6559': attribute type 23 has an invalid length. [ 807.509792][T26277] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.534375][T26277] bond0: (slave team0): Enslaving as an active interface with an up link [ 807.990303][T26294] validate_nla: 1 callbacks suppressed [ 807.990323][T26294] netlink: 'syz.1.6569': attribute type 1 has an invalid length. [ 808.249125][T26318] netlink: 'syz.1.6576': attribute type 2 has an invalid length. [ 808.617046][T26338] __nla_validate_parse: 14 callbacks suppressed [ 808.617069][T26338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6584'. [ 808.706183][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 809.074294][T26363] netlink: 'syz.0.6591': attribute type 2 has an invalid length. [ 809.135393][T26363] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6591'. [ 809.466140][T26378] macvlan2: entered allmulticast mode [ 809.471818][T26378] veth1_vlan: entered allmulticast mode [ 809.480678][T26378] veth1_vlan: left allmulticast mode [ 809.726746][T26386] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6598'. [ 809.756296][T26386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6598'. [ 809.781056][T26386] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6598'. [ 809.834114][T26386] gretap3: entered promiscuous mode [ 810.327197][T26418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6606'. [ 810.344959][T26420] macvlan2: entered allmulticast mode [ 810.350476][T26420] veth1_vlan: entered allmulticast mode [ 810.363170][T26420] veth1_vlan: left allmulticast mode [ 810.400553][T26418] vlan3: entered promiscuous mode [ 810.406614][T26418] batadv0: entered promiscuous mode [ 810.437008][T26427] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6605'. [ 810.776250][T26449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6614'. [ 810.917749][T26453] ..@ÿ: renamed from bond_slave_0 (while UP) [ 811.248662][T26467] macvlan2: entered allmulticast mode [ 811.269792][T26467] veth1_vlan: entered allmulticast mode [ 811.287726][T26467] veth1_vlan: left allmulticast mode [ 811.469506][T26481] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6625'. [ 811.915441][T26510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6636'. [ 812.021509][T26510] syzkaller0: entered promiscuous mode [ 812.027204][T26510] syzkaller0: entered allmulticast mode [ 813.918175][T26540] 8021q: VLANs not supported on gre0 [ 814.199367][T26561] __nla_validate_parse: 1 callbacks suppressed [ 814.199388][T26561] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6652'. [ 814.238273][T26560] netlink: 'syz.2.6651': attribute type 7 has an invalid length. [ 814.740830][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 814.816943][T26580] veth1_to_bond: entered allmulticast mode [ 814.862118][T26580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6659'. [ 814.987602][T26585] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6660'. [ 815.041487][T26580] veth1_to_bond (unregistering): left allmulticast mode [ 815.400017][T26591] siw: device registration error -23 [ 815.502330][T26596] netlink: 'syz.4.6665': attribute type 2 has an invalid length. [ 815.510323][T26596] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6665'. [ 815.726157][T26603] tipc: Enabled bearer , priority 0 [ 815.740525][T26603] syzkaller0: entered promiscuous mode [ 815.748051][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 815.794942][T26603] syzkaller0: entered allmulticast mode [ 815.871300][T26604] tipc: Resetting bearer [ 815.923750][T26602] tipc: Resetting bearer [ 815.986570][T26602] tipc: Disabling bearer [ 816.071655][T26628] macvlan2: entered allmulticast mode [ 816.077110][T26628] veth1_vlan: entered allmulticast mode [ 816.112404][T26628] veth1_vlan: left allmulticast mode [ 816.349986][T26630] ip6tnl2: entered promiscuous mode [ 816.367997][T26630] ip6tnl2: entered allmulticast mode [ 816.390038][T26630] team0: Device ip6tnl2 is of different type [ 816.532316][T26635] wg1 speed is unknown, defaulting to 1000 [ 816.653982][T26641] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6677'. [ 816.694164][T26644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6678'. [ 816.954572][T26655] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6684'. [ 817.285446][T26673] netlink: 'syz.0.6689': attribute type 2 has an invalid length. [ 817.354873][T26673] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6689'. [ 817.467820][T26676] netlink: 'syz.0.6690': attribute type 1 has an invalid length. [ 817.587481][T26647] delete_channel: no stack [ 817.599384][T26681] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6690'. [ 817.873558][T26691] netlink: 'syz.2.6694': attribute type 1 has an invalid length. [ 817.915696][T26678] bond5: (slave veth3): Enslaving as an active interface with a down link [ 817.972965][T26681] 8021q: adding VLAN 0 to HW filter on device bond5 [ 818.356795][T26709] netlink: 'syz.2.6700': attribute type 2 has an invalid length. [ 818.367171][T26709] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6700'. [ 818.645669][T26722] netlink: 'syz.1.6706': attribute type 1 has an invalid length. [ 818.814744][T26732] netlink: 'syz.2.6708': attribute type 1 has an invalid length. [ 819.171375][T26750] netlink: 'syz.2.6713': attribute type 2 has an invalid length. [ 819.201462][T26750] __nla_validate_parse: 1 callbacks suppressed [ 819.201482][T26750] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6713'. [ 819.264207][T26752] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 819.454695][T26752] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 819.751744][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 819.956057][T26752] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 820.089424][T26752] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 820.194599][T26797] netlink: 'syz.4.6729': attribute type 2 has an invalid length. [ 820.207223][T26797] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6729'. [ 820.245948][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 820.412953][T26807] IPv6: Can't replace route, no match found [ 820.440206][T12034] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 820.471797][T12034] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 820.517399][T12034] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 820.521565][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 820.556894][T12034] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 820.760187][T26823] macvlan2: entered allmulticast mode [ 820.791698][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 820.837197][T26823] veth1_vlan: entered allmulticast mode [ 820.866799][T26823] veth1_vlan: left allmulticast mode [ 821.106790][T26844] netlink: 'syz.5.6743': attribute type 2 has an invalid length. [ 821.127323][T26844] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6743'. [ 821.286318][T26851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6747'. [ 821.293310][T26858] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6748'. [ 821.326028][T26851] IPVS: Error joining to the multicast group [ 821.429266][T16174] IPVS: starting estimator thread 0... [ 821.437499][T26858] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 821.524667][T26867] IPVS: using max 24 ests per chain, 57600 per kthread [ 821.649296][T26878] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6753'. [ 821.821114][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 821.830485][T26884] wg1 speed is unknown, defaulting to 1000 [ 821.849883][T26891] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6757'. [ 822.672070][T26925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6766'. [ 822.682353][T26928] wg1 speed is unknown, defaulting to 1000 [ 822.746707][T26925] 8021q: adding VLAN 0 to HW filter on device bond1 [ 822.772512][T26933] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6767'. [ 822.837441][T26929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 822.847977][T26929] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 822.863179][T26929] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 823.008227][T26939] lo: entered allmulticast mode [ 823.035699][T26939] tunl0: entered allmulticast mode [ 823.048837][T26939] gre0: entered allmulticast mode [ 823.076695][T26939] gretap0: entered allmulticast mode [ 823.089163][T26943] netlink: 'syz.4.6771': attribute type 2 has an invalid length. [ 823.098366][T26939] erspan0: entered allmulticast mode [ 823.111142][T26939] ip_vti0: entered allmulticast mode [ 823.117382][T26939] ip6_vti0: entered allmulticast mode [ 823.122515][T26943] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6771'. [ 823.132659][T26939] sit0: entered allmulticast mode [ 823.139749][T26939] ip6tnl0: entered allmulticast mode [ 823.153482][T26939] ip6gre0: entered allmulticast mode [ 823.211974][T26939] syz_tun: entered allmulticast mode [ 823.242864][T26939] ip6gretap0: entered allmulticast mode [ 823.252576][T26939] bridge0: entered allmulticast mode [ 823.258740][T26939] vcan0: entered allmulticast mode [ 823.278486][T26939] bond0: entered allmulticast mode [ 823.289167][T26939] ..@ÿ: entered allmulticast mode [ 823.308048][T26939] dummy0: entered allmulticast mode [ 823.317419][T26939] nlmon0: entered allmulticast mode [ 823.330004][T26939] caif0: entered allmulticast mode [ 823.335552][T26939] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 823.518593][T26958] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 824.155512][T26982] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 824.255136][T26991] 8021q: VLANs not supported on gre0 [ 824.483417][T26998] wg1 speed is unknown, defaulting to 1000 [ 824.924409][T16155] IPVS: starting estimator thread 0... [ 825.045779][T27019] IPVS: using max 28 ests per chain, 67200 per kthread [ 825.086333][T27030] __nla_validate_parse: 2 callbacks suppressed [ 825.086355][T27030] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6798'. [ 825.226913][T27037] tipc: Enabled bearer , priority 0 [ 825.261009][T27040] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6806'. [ 825.297445][T27038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6803'. [ 825.340483][T27029] syzkaller0: entered promiscuous mode [ 825.360946][T27029] syzkaller0: entered allmulticast mode [ 825.429119][T27029] tipc: Resetting bearer [ 825.457787][T27048] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6809'. [ 825.467303][T27028] tipc: Resetting bearer [ 825.511275][T27028] tipc: Disabling bearer [ 826.086946][T27086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6816'. [ 826.139816][T27080] netlink: 200 bytes leftover after parsing attributes in process `syz.4.6816'. [ 826.523189][T27098] netlink: 'syz.2.6819': attribute type 1 has an invalid length. [ 826.726684][T27104] netlink: 'syz.4.6821': attribute type 9 has an invalid length. [ 826.787226][T27106] 8021q: VLANs not supported on gre0 [ 827.068801][T27121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6825'. [ 827.203186][T27133] netlink: 'syz.1.6832': attribute type 1 has an invalid length. [ 827.216502][T27130] bond6 (unregistering): Released all slaves [ 827.241715][T27134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6831'. [ 827.635841][T27154] 8021q: VLANs not supported on gre0 [ 827.743924][T27160] netlink: 'syz.2.6839': attribute type 1 has an invalid length. [ 827.757217][T27160] netlink: 600 bytes leftover after parsing attributes in process `syz.2.6839'. [ 827.962544][T27175] netlink: 'syz.2.6844': attribute type 1 has an invalid length. [ 828.047393][T27181] netlink: 'syz.4.6847': attribute type 3 has an invalid length. [ 828.055323][T27181] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6847'. [ 828.497206][T27205] 8021q: VLANs not supported on gre0 [ 828.931738][T27235] wg1 speed is unknown, defaulting to 1000 [ 829.139001][T27243] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.146838][T27243] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.376074][T27254] dummy0: entered promiscuous mode [ 829.382331][T27252] 8021q: VLANs not supported on gre0 [ 829.953527][T27267] wg1 speed is unknown, defaulting to 1000 [ 830.408037][T27284] wg1 speed is unknown, defaulting to 1000 [ 831.240357][T27296] __nla_validate_parse: 30 callbacks suppressed [ 831.240378][T27296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6879'. [ 831.258918][T27296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6879'. [ 831.276775][T27296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6879'. [ 831.433689][T27303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6878'. [ 831.675199][T27322] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 831.697235][T27322] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6889'. [ 831.736012][T27313] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6886'. [ 831.967646][T27333] netlink: 80 bytes leftover after parsing attributes in process `syz.5.6893'. [ 831.977001][T27339] netlink: 'syz.0.6894': attribute type 1 has an invalid length. [ 832.133100][T27336] 8021q: VLANs not supported on gre0 [ 832.139143][T27338] tipc: Enabling of bearer rejected, failed to enable media [ 832.280318][T27352] openvswitch: netlink: Flow key attribute not present in set flow. [ 832.396138][T27358] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6901'. [ 832.568052][T27354] syzkaller1: entered promiscuous mode [ 832.587973][T27354] syzkaller1: entered allmulticast mode [ 832.613101][T27363] netlink: 'syz.1.6902': attribute type 1 has an invalid length. [ 832.621476][T27362] wg1 speed is unknown, defaulting to 1000 [ 832.638040][T27363] netlink: 208 bytes leftover after parsing attributes in process `syz.1.6902'. [ 832.656778][T27363] netlink: 'syz.1.6902': attribute type 1 has an invalid length. [ 832.707667][T27363] netlink: 'syz.1.6902': attribute type 2 has an invalid length. [ 832.832680][T27377] wg1 speed is unknown, defaulting to 1000 [ 833.006891][T27391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6906'. [ 833.149707][T27397] 8021q: VLANs not supported on gre0 [ 833.257089][T27399] netlink: 'syz.5.6912': attribute type 13 has an invalid length. [ 833.265740][T27399] netlink: 'syz.5.6912': attribute type 17 has an invalid length. [ 833.417672][T27409] netlink: 'syz.1.6915': attribute type 3 has an invalid length. [ 833.437178][T27409] netlink: 'syz.1.6915': attribute type 2 has an invalid length. [ 833.521888][T27399] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.529134][T27399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 833.536837][T27399] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.544134][T27399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 833.579014][T27399] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 833.658260][T27409] þ: entered promiscuous mode [ 833.699321][T27404] wg1 speed is unknown, defaulting to 1000 [ 835.535955][T27496] lo speed is unknown, defaulting to 1000 [ 835.575865][T27496] lo speed is unknown, defaulting to 1000 [ 835.605642][T27496] lo speed is unknown, defaulting to 1000 [ 835.666824][T27496] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 835.705026][T27496] lo speed is unknown, defaulting to 1000 [ 835.717076][T27496] lo speed is unknown, defaulting to 1000 [ 835.729263][T27496] lo speed is unknown, defaulting to 1000 [ 835.740313][T27496] lo speed is unknown, defaulting to 1000 [ 835.753829][T27496] lo speed is unknown, defaulting to 1000 [ 835.763429][T27496] lo speed is unknown, defaulting to 1000 [ 835.787219][T27496] lo speed is unknown, defaulting to 1000 [ 835.804592][T27496] lo speed is unknown, defaulting to 1000 [ 835.844553][T27518] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 835.864960][T27518] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.875858][T27518] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 836.098888][T27518] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 836.114972][T27518] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.129295][T27518] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 836.257298][T27518] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 836.268720][T27518] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.280117][T27518] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 836.354595][T27542] wg1 speed is unknown, defaulting to 1000 [ 836.386396][T27548] __nla_validate_parse: 9 callbacks suppressed [ 836.386415][T27548] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6967'. [ 836.407140][T27518] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 836.423907][T27518] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.438476][T27518] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 836.464331][T27542] lo speed is unknown, defaulting to 1000 [ 836.607193][T12034] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 836.627343][T12034] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 836.646263][T12034] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 836.692369][T12034] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 836.698390][T27560] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 836.708074][T12034] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 836.722267][T12034] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 836.826514][T27560] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6969'. [ 836.840310][T12034] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 836.876925][T12034] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 836.889287][T12034] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 836.933636][T27560] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6969'. [ 836.946185][T12034] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 836.965831][T12034] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 836.987863][T12034] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 837.014107][T12034] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 837.044652][T12034] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 837.068498][T12034] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 837.089686][T12034] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 837.118206][T27577] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6973'. [ 837.263030][T27583] netlink: 'syz.4.6978': attribute type 1 has an invalid length. [ 837.304617][T27583] bond1: (slave geneve3): making interface the new active one [ 837.314308][T27583] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 837.323392][T24905] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 837.334952][T12032] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 837.346753][T12032] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 837.358485][T12032] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 837.398810][T27586] netlink: 'syz.4.6979': attribute type 9 has an invalid length. [ 837.474257][T27589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6979'. [ 837.493497][T27589] netlink: 'syz.4.6979': attribute type 4 has an invalid length. [ 838.053405][T27615] netlink: 'syz.5.6992': attribute type 1 has an invalid length. [ 838.191950][T27615] bond1: (slave geneve3): making interface the new active one [ 838.202072][T27615] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 838.237690][T12032] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 838.359304][T12032] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 838.378215][T12032] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 838.388813][T12032] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 838.399041][T27630] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6998'. [ 838.528077][T27637] macvlan3: entered allmulticast mode [ 838.533878][T27637] veth1_vlan: entered allmulticast mode [ 838.561814][T27637] veth1_vlan: left allmulticast mode [ 838.697079][T27641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 838.741306][T27641] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7002'. [ 838.765114][T27641] siw: device registration error -23 [ 838.773155][T27654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7006'. [ 839.072732][T21213] Bluetooth: hci4: link tx timeout [ 839.079383][T21213] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 839.220204][T27677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7017'. [ 839.309352][T27677] bridge_slave_1: left allmulticast mode [ 839.315518][T27677] bridge_slave_1: left promiscuous mode [ 839.323189][T27677] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.333952][T27677] bridge_slave_0: left allmulticast mode [ 839.340539][T27677] bridge_slave_0: left promiscuous mode [ 839.347258][T27677] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.477663][T27687] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7020'. [ 839.614610][T27690] macvlan2: entered allmulticast mode [ 839.640416][T27690] veth1_vlan: entered allmulticast mode [ 839.657052][T27690] veth1_vlan: left allmulticast mode [ 841.111069][T21213] Bluetooth: hci4: command 0x0406 tx timeout [ 842.490456][T27739] __nla_validate_parse: 6 callbacks suppressed [ 842.490478][T27739] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7041'. [ 842.646727][T27748] wg1 speed is unknown, defaulting to 1000 [ 842.689460][T27748] lo speed is unknown, defaulting to 1000 [ 842.722791][T27756] netlink: 'syz.0.7047': attribute type 39 has an invalid length. [ 842.886454][T27753] wg1 speed is unknown, defaulting to 1000 [ 842.929902][T27753] lo speed is unknown, defaulting to 1000 [ 843.113305][T27776] tipc: Enabled bearer , priority 0 [ 843.638447][T27770] tipc: Disabling bearer [ 843.735851][T27802] nbd: must specify at least one socket [ 843.758722][T27804] macvlan2: entered allmulticast mode [ 843.778103][T27802] nbd: couldn't find device at index 1 [ 843.790345][T27804] veth1_vlan: entered allmulticast mode [ 843.799183][T27804] veth1_vlan: left allmulticast mode [ 843.877385][T27802] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7057'. [ 843.886883][T27802] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 844.150444][T27815] netlink: 104 bytes leftover after parsing attributes in process `syz.5.7062'. [ 844.678544][T27845] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7070'. [ 844.680079][T27833] wg1 speed is unknown, defaulting to 1000 [ 844.695768][T27833] lo speed is unknown, defaulting to 1000 [ 844.931944][T27840] tipc: Enabled bearer , priority 0 [ 844.969144][T27840] syzkaller0: entered promiscuous mode [ 844.985757][T27840] syzkaller0: entered allmulticast mode [ 845.169597][T27860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7072'. [ 845.266976][T27854] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 845.293815][T27854] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.305479][T27854] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 845.333525][T27858] macvlan2: entered allmulticast mode [ 845.338946][T27858] veth1_vlan: entered allmulticast mode [ 845.347989][T27858] veth1_vlan: left allmulticast mode [ 845.354773][T27865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7075'. [ 845.402146][T27845] tipc: Resetting bearer [ 845.406486][T27866] netlink: 'syz.1.7075': attribute type 1 has an invalid length. [ 845.457583][T27864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7075'. [ 845.502548][T27854] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 845.513434][T27854] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.524238][T27854] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 845.586109][T27866] bond6: entered promiscuous mode [ 845.592186][T27866] 8021q: adding VLAN 0 to HW filter on device bond6 [ 845.604560][T27838] tipc: Resetting bearer [ 845.639524][T27838] tipc: Disabling bearer [ 845.712741][T27868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7076'. [ 845.837686][T27854] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 845.860977][T27854] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.877927][T27854] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 846.012494][T27854] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 846.041180][T27854] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.067262][T27854] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 846.128162][T27888] netlink: 'syz.1.7081': attribute type 7 has an invalid length. [ 846.192536][T27893] wg1 speed is unknown, defaulting to 1000 [ 846.209851][T27893] lo speed is unknown, defaulting to 1000 [ 846.335370][T27901] netlink: 'syz.2.7087': attribute type 1 has an invalid length. [ 846.455478][T24905] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 846.479480][T24905] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 846.508460][T24905] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 846.565909][T27908] macvlan2: entered allmulticast mode [ 846.583170][T27908] veth1_vlan: entered allmulticast mode [ 846.602345][T27908] veth1_vlan: left allmulticast mode [ 846.646745][ T6910] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 846.659747][ T6910] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 846.668768][ T6910] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 846.701959][T12032] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 846.710377][T12032] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 846.722202][T12032] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 846.779041][T12032] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 846.802189][T12032] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 846.851845][T12032] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 847.098065][T27916] syzkaller0: Caught tx_queue_len zero misconfig [ 847.164445][T27930] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 847.198787][T27930] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 847.245530][T27930] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 847.471204][T27944] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.7100'. [ 847.491586][T27944] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 847.512318][T27944] openvswitch: netlink: Message has 8454 unknown bytes. [ 847.609498][T27932] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.617372][T27932] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.335389][T27956] netlink: 'syz.5.7103': attribute type 10 has an invalid length. [ 848.399056][T27932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 848.401605][T27957] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7103'. [ 848.416839][T27932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 848.778282][T27932] mac80211_hwsim hwsim71 wlan0: left allmulticast mode [ 848.847298][T27930] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 848.867576][T27930] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 848.895164][T27930] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 849.011246][T27956] veth0_vlan: left promiscuous mode [ 849.040123][T27956] veth0_vlan: entered promiscuous mode [ 849.056190][T27956] team0: Device veth0_vlan failed to register rx_handler [ 849.108203][T12031] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 849.132270][T12031] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 849.150917][T12031] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 849.159594][T12031] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 849.174491][T12031] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 849.184618][T12031] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 849.255278][T27930] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 849.268514][T27930] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 849.307694][T27930] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 849.373291][T12031] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 849.384409][T12031] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 849.395768][T12031] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 849.405736][T12031] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 849.420922][T12031] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 849.434102][T12031] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 849.476791][T27972] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7106'. [ 849.508971][T27974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7107'. [ 849.619566][T27930] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 849.645563][T27930] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 849.661938][T27930] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 849.902180][T23382] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 849.924929][T23382] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 849.943521][T23382] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 849.979031][T23382] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 850.000348][T23382] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 850.031081][T23382] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 850.072367][T12032] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 850.093198][T12032] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 850.107331][T12032] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 850.134494][T12032] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 850.146702][T12032] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 850.157746][T12032] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 850.299795][T27998] netlink: 'syz.2.7113': attribute type 1 has an invalid length. [ 850.699996][T28008] veth3: entered promiscuous mode [ 850.712910][T28010] sch_fq: defrate 0 ignored. [ 850.818099][T28015] netlink: 'syz.1.7120': attribute type 1 has an invalid length. [ 850.868004][T28015] 8021q: adding VLAN 0 to HW filter on device bond7 [ 850.903709][T28015] 8021q: adding VLAN 0 to HW filter on device bond7 [ 850.916903][T28018] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7121'. [ 850.928851][T28015] bond7: (slave vcan1): The slave device specified does not support setting the MAC address [ 850.944058][T28015] bond7: (slave vcan1): Error -95 calling set_mac_address [ 851.015743][T28023] gretap1: entered promiscuous mode [ 851.025093][T28023] bond7: (slave gretap1): making interface the new active one [ 851.042578][T28023] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 851.094709][T28030] FAULT_INJECTION: forcing a failure. [ 851.094709][T28030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 851.128675][T28030] CPU: 0 UID: 0 PID: 28030 Comm: syz.2.7123 Not tainted syzkaller #0 PREEMPT(full) [ 851.128707][T28030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 851.128721][T28030] Call Trace: [ 851.128731][T28030] [ 851.128741][T28030] dump_stack_lvl+0x189/0x250 [ 851.128773][T28030] ? __pfx____ratelimit+0x10/0x10 [ 851.128803][T28030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 851.128829][T28030] ? __pfx__printk+0x10/0x10 [ 851.128874][T28030] should_fail_ex+0x414/0x560 [ 851.128910][T28030] _copy_from_user+0x2d/0xb0 [ 851.128936][T28030] get_user_ifreq+0x6c/0x180 [ 851.128965][T28030] sock_ioctl+0x6dd/0x790 [ 851.129004][T28030] ? __pfx_sock_ioctl+0x10/0x10 [ 851.129033][T28030] ? __fget_files+0x3a0/0x420 [ 851.129066][T28030] ? __fget_files+0x2a/0x420 [ 851.129102][T28030] ? bpf_lsm_file_ioctl+0x9/0x20 [ 851.129129][T28030] ? __pfx_sock_ioctl+0x10/0x10 [ 851.129156][T28030] __se_sys_ioctl+0xfc/0x170 [ 851.129185][T28030] do_syscall_64+0xfa/0x3b0 [ 851.129215][T28030] ? lockdep_hardirqs_on+0x9c/0x150 [ 851.129244][T28030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.129275][T28030] ? clear_bhb_loop+0x60/0xb0 [ 851.129302][T28030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.129324][T28030] RIP: 0033:0x7f027558ebe9 [ 851.129345][T28030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 851.129364][T28030] RSP: 002b:00007f02764b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 851.129388][T28030] RAX: ffffffffffffffda RBX: 00007f02757b5fa0 RCX: 00007f027558ebe9 [ 851.129404][T28030] RDX: 0000200000000000 RSI: 00000000000089f1 RDI: 0000000000000003 [ 851.129418][T28030] RBP: 00007f02764b5090 R08: 0000000000000000 R09: 0000000000000000 [ 851.129433][T28030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 851.129446][T28030] R13: 00007f02757b6038 R14: 00007f02757b5fa0 R15: 00007ffea682c5a8 [ 851.129479][T28030] [ 851.547335][T28045] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7129'. [ 851.686534][T28049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7131'. [ 851.700919][T28049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7131'. [ 851.768405][T28053] netlink: 'syz.2.7133': attribute type 13 has an invalid length. [ 851.778227][T28054] netlink: 'syz.1.7132': attribute type 1 has an invalid length. [ 851.779077][T28053] netlink: 'syz.2.7133': attribute type 17 has an invalid length. [ 851.788810][T28054] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7132'. [ 851.805703][T28053] lo: left allmulticast mode [ 851.836684][T28053] tunl0: left allmulticast mode [ 851.850492][T28053] gre0: left allmulticast mode [ 851.860272][T28053] gretap0: left allmulticast mode [ 851.884221][T28053] erspan0: left allmulticast mode [ 851.899239][T28053] ip_vti0: left allmulticast mode [ 851.916863][T28053] ip6_vti0: left allmulticast mode [ 851.926547][T28053] sit0: left allmulticast mode [ 851.949636][T28053] ip6tnl0: left allmulticast mode [ 851.958815][T28053] ip6gre0: left allmulticast mode [ 851.972885][T28053] syz_tun: left allmulticast mode [ 852.316011][T28053] ip6gretap0: left allmulticast mode [ 852.392632][T28053] bridge0: left allmulticast mode [ 852.403459][T28053] vcan0: left allmulticast mode [ 852.409183][T28053] bond0: left allmulticast mode [ 852.414783][T28053] ..@ÿ: left allmulticast mode [ 852.426929][T28053] dummy0: left allmulticast mode [ 852.437690][T28053] nlmon0: left allmulticast mode [ 852.552551][T28053] caif0: left allmulticast mode [ 852.559577][T28053] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 852.882780][T28076] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7138'. [ 852.896908][T28070] syzkaller0: entered promiscuous mode [ 852.903463][T28070] syzkaller0: entered allmulticast mode [ 853.108099][T28081] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7142'. [ 855.055752][T28085] macvlan2: entered allmulticast mode [ 855.061669][T28085] veth1_vlan: entered allmulticast mode [ 855.069362][T28085] veth1_vlan: left allmulticast mode [ 855.097065][T28087] tipc: Started in network mode [ 855.104247][T28087] tipc: Node identity 7273351cd9fe, cluster identity 4711 [ 855.113389][T28087] tipc: Enabled bearer , priority 0 [ 855.126944][T28088] syzkaller0: entered promiscuous mode [ 855.132691][T28088] syzkaller0: entered allmulticast mode [ 855.157601][T28091] tipc: Resetting bearer [ 855.165445][T28094] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 855.786979][T28130] netlink: 'syz.2.7157': attribute type 1 has an invalid length. [ 855.843627][T28130] netlink: 'syz.2.7157': attribute type 10 has an invalid length. [ 855.892724][T28130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7157'. [ 856.048614][T28136] wg1 speed is unknown, defaulting to 1000 [ 856.105325][T28136] lo speed is unknown, defaulting to 1000 [ 856.141228][T16160] tipc: Node number set to 2878158108 [ 856.231998][ T5923] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 856.559330][T28169] 8021q: VLANs not supported on gre0 [ 856.951836][ T59] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 857.101183][ T5923] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 857.126572][T28196] wg1 speed is unknown, defaulting to 1000 [ 857.143276][T28196] lo speed is unknown, defaulting to 1000 [ 857.984893][T12031] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 858.020915][T12031] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 858.178199][T28250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7199'. [ 858.264940][T28256] 8021q: VLANs not supported on gre0 [ 858.631037][T16154] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 858.674877][T28274] macvlan2: entered allmulticast mode [ 858.680653][T28274] veth1_vlan: entered allmulticast mode [ 858.697384][T28274] veth1_vlan: left allmulticast mode [ 859.004332][T28287] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7211'. [ 859.421316][T28298] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 859.442113][T28298] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7215'. [ 859.495077][T28299] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 859.976363][T28312] wg1 speed is unknown, defaulting to 1000 [ 860.035049][T28312] lo speed is unknown, defaulting to 1000 [ 860.486844][T28318] netlink: 'syz.5.7220': attribute type 1 has an invalid length. [ 860.676070][T28318] 8021q: adding VLAN 0 to HW filter on device bond2 [ 860.709999][T28323] gretap1: entered promiscuous mode [ 860.951624][T28339] netlink: 'syz.4.7224': attribute type 1 has an invalid length. [ 861.031051][T28339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7224'. [ 861.101482][T28339] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7224'. [ 861.401766][T28353] wg1 speed is unknown, defaulting to 1000 [ 861.409724][T28353] lo speed is unknown, defaulting to 1000 [ 861.558938][T28358] netlink: 'syz.0.7230': attribute type 3 has an invalid length. [ 861.675984][T28365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7232'. [ 861.965872][T28376] netlink: 428 bytes leftover after parsing attributes in process `syz.1.7238'. [ 861.971825][T28378] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7236'. [ 861.980060][T28376] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7238'. [ 862.013076][T28376] netlink: 'syz.1.7238': attribute type 1 has an invalid length. [ 862.301045][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 862.800648][T28409] wg1 speed is unknown, defaulting to 1000 [ 862.837431][T28409] lo speed is unknown, defaulting to 1000 [ 862.887658][T28424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7255'. [ 863.012594][T28428] syzkaller0: entered promiscuous mode [ 863.019636][T28428] syzkaller0: entered allmulticast mode [ 863.125379][T28434] pim6reg1: entered promiscuous mode [ 863.149591][T28434] pim6reg1: entered allmulticast mode [ 863.569213][T28460] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7265'. [ 863.685874][T28462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7265'. [ 863.778712][T28468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7267'. [ 865.905634][T28498] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 865.941432][T28501] macvlan2: entered allmulticast mode [ 865.947067][T28501] veth1_vlan: entered allmulticast mode [ 865.956231][T28501] veth1_vlan: left allmulticast mode [ 866.187124][T28512] wg1 speed is unknown, defaulting to 1000 [ 866.210126][T28512] lo speed is unknown, defaulting to 1000 [ 866.526128][T28531] openvswitch: netlink: IP tunnel dst address not specified [ 866.652265][T28533] wg1 speed is unknown, defaulting to 1000 [ 866.669532][T28537] macvlan2: entered allmulticast mode [ 866.737129][T28537] veth1_vlan: entered allmulticast mode [ 866.780317][T28537] veth1_vlan: left allmulticast mode [ 866.839094][T28533] lo speed is unknown, defaulting to 1000 [ 866.877499][T28542] netlink: 'syz.4.7295': attribute type 1 has an invalid length. [ 866.988404][T28543] tipc: Enabled bearer , priority 0 [ 867.101031][ T5864] Bluetooth: hci1: command 0x0406 tx timeout [ 867.193819][T28543] tipc: Resetting bearer [ 867.236824][T28555] netlink: 'syz.0.7297': attribute type 1 has an invalid length. [ 867.269127][T28540] tipc: Disabling bearer [ 867.319277][T28547] wg1 speed is unknown, defaulting to 1000 [ 867.369191][T28547] lo speed is unknown, defaulting to 1000 [ 867.480512][T28560] __nla_validate_parse: 2 callbacks suppressed [ 867.480536][T28560] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7298'. [ 867.549723][T28557] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7298'. [ 867.575076][T28557] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7298'. [ 867.606509][T28557] netlink: 'syz.1.7298': attribute type 4 has an invalid length. [ 867.722853][T28567] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7302'. [ 867.754082][T28568] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7302'. [ 869.449870][T28647] bridge0: Device is already in use. [ 869.552766][T28652] tipc: Enabling of bearer rejected, already enabled [ 869.983171][T28673] FAULT_INJECTION: forcing a failure. [ 869.983171][T28673] name failslab, interval 1, probability 0, space 0, times 0 [ 870.017918][T28673] CPU: 1 UID: 0 PID: 28673 Comm: syz.5.7343 Not tainted syzkaller #0 PREEMPT(full) [ 870.017947][T28673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 870.017961][T28673] Call Trace: [ 870.017969][T28673] [ 870.017978][T28673] dump_stack_lvl+0x189/0x250 [ 870.018009][T28673] ? __pfx____ratelimit+0x10/0x10 [ 870.018040][T28673] ? __pfx_dump_stack_lvl+0x10/0x10 [ 870.018065][T28673] ? __pfx__printk+0x10/0x10 [ 870.018101][T28673] ? __pfx___might_resched+0x10/0x10 [ 870.018127][T28673] should_fail_ex+0x414/0x560 [ 870.018160][T28673] should_failslab+0xa8/0x100 [ 870.018192][T28673] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 870.018223][T28673] ? __alloc_skb+0x112/0x2d0 [ 870.018260][T28673] __alloc_skb+0x112/0x2d0 [ 870.018296][T28673] tcp_stream_alloc_skb+0x3d/0x340 [ 870.018328][T28673] tcp_sendmsg_locked+0xf38/0x5620 [ 870.018420][T28673] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 870.018461][T28673] ? __local_bh_enable_ip+0x13e/0x1c0 [ 870.018498][T28673] tcp_sendmsg+0x2f/0x50 [ 870.018525][T28673] __sock_sendmsg+0x19c/0x270 [ 870.018556][T28673] __sys_sendto+0x3bd/0x520 [ 870.018591][T28673] ? __pfx___sys_sendto+0x10/0x10 [ 870.018620][T28673] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 870.018666][T28673] ? __fget_files+0x3a0/0x420 [ 870.018710][T28673] ? ksys_write+0x22a/0x250 [ 870.018741][T28673] ? __pfx_ksys_write+0x10/0x10 [ 870.018766][T28673] ? rcu_is_watching+0x15/0xb0 [ 870.018794][T28673] __x64_sys_sendto+0xde/0x100 [ 870.018831][T28673] do_syscall_64+0xfa/0x3b0 [ 870.018860][T28673] ? lockdep_hardirqs_on+0x9c/0x150 [ 870.018889][T28673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.018910][T28673] ? clear_bhb_loop+0x60/0xb0 [ 870.018936][T28673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.018956][T28673] RIP: 0033:0x7f246bd8ebe9 [ 870.018976][T28673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 870.018995][T28673] RSP: 002b:00007f246cc1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 870.019018][T28673] RAX: ffffffffffffffda RBX: 00007f246bfb6090 RCX: 00007f246bd8ebe9 [ 870.019034][T28673] RDX: 000000000000059a RSI: 0000200000000580 RDI: 0000000000000004 [ 870.019048][T28673] RBP: 00007f246cc1f090 R08: 0000000000000000 R09: 0000000000000000 [ 870.019062][T28673] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000001 [ 870.019075][T28673] R13: 00007f246bfb6128 R14: 00007f246bfb6090 R15: 00007ffec478dad8 [ 870.019109][T28673] [ 870.283064][T28680] macvlan2: entered allmulticast mode [ 870.286907][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 870.288509][T28680] veth1_vlan: entered allmulticast mode [ 870.291901][T28680] veth1_vlan: left allmulticast mode [ 870.355058][T28684] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7348'. [ 870.435801][T28684] openvswitch: netlink: VXLAN extension 274 out of range max 1 [ 870.512227][T28692] IPVS: length: 24 != 36888 [ 870.669776][T28700] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 870.679042][T28700] netlink: 'syz.2.7354': attribute type 21 has an invalid length. [ 870.781049][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 871.063405][T28722] netlink: 'syz.5.7361': attribute type 11 has an invalid length. [ 871.076588][T28722] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7361'. [ 871.169823][T28729] netlink: 'syz.4.7364': attribute type 24 has an invalid length. [ 871.187917][T28731] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7365'. [ 871.210195][T28729] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7364'. [ 871.219857][T28729] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 871.320173][T28738] netlink: 'syz.4.7368': attribute type 11 has an invalid length. [ 871.328793][T28738] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7368'. [ 871.626693][T28757] netlink: 'syz.1.7373': attribute type 10 has an invalid length. [ 872.379953][T28786] wg1 speed is unknown, defaulting to 1000 [ 872.387092][T28791] 8021q: VLANs not supported on gre0 [ 872.457865][T28786] lo speed is unknown, defaulting to 1000 [ 872.753444][T28795] syzkaller0: entered promiscuous mode [ 872.768296][T28795] syzkaller0: entered allmulticast mode [ 873.597228][T28835] netlink: 'syz.4.7396': attribute type 1 has an invalid length. [ 874.819365][T28828] 8021q: VLANs not supported on gre0 [ 874.835581][T28832] macvlan3: entered allmulticast mode [ 874.851067][T28832] veth1_vlan: entered allmulticast mode [ 874.875120][T28832] veth1_vlan: left allmulticast mode [ 874.922197][T28835] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 874.966250][T28846] netlink: 'syz.0.7398': attribute type 1 has an invalid length. [ 875.232875][T28855] __nla_validate_parse: 4 callbacks suppressed [ 875.232898][T28855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7401'. [ 875.280993][T28855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7401'. [ 875.307483][T28855] netlink: 'syz.2.7401': attribute type 14 has an invalid length. [ 875.355138][T28855] netlink: 'syz.2.7401': attribute type 11 has an invalid length. [ 875.447673][T28869] syzkaller1: entered promiscuous mode [ 875.465887][T28869] syzkaller1: entered allmulticast mode [ 875.570185][T28875] netlink: 'syz.2.7411': attribute type 1 has an invalid length. [ 875.766862][T28890] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7414'. [ 876.423183][T28913] wg1 speed is unknown, defaulting to 1000 [ 876.441918][T28913] lo speed is unknown, defaulting to 1000 [ 877.099038][T28945] wg1 speed is unknown, defaulting to 1000 [ 877.137859][T28945] lo speed is unknown, defaulting to 1000 [ 877.368911][T28956] netlink: 'syz.2.7429': attribute type 1 has an invalid length. [ 877.563707][T28963] nbd: must specify at least one socket [ 877.876065][T28967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7429'. [ 877.989980][T28956] bridge0: port 3(team0) entered disabled state [ 877.997670][T28956] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.005367][T28956] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.157593][T28956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 878.165997][T28989] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7439'. [ 878.184702][T28956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 878.234308][T27075] [ 878.236705][T27075] ====================================================== [ 878.243747][T27075] WARNING: possible circular locking dependency detected [ 878.250802][T27075] syzkaller #0 Not tainted [ 878.255244][T27075] ------------------------------------------------------ [ 878.262293][T27075] kworker/u8:3/27075 is trying to acquire lock: [ 878.268557][T27075] ffff88807e08cf30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220 [ 878.277675][T27075] [ 878.277675][T27075] but task is already holding lock: [ 878.285055][T27075] ffff88801ba9c558 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 878.294921][T27075] [ 878.294921][T27075] which lock already depends on the new lock. [ 878.294921][T27075] [ 878.305331][T27075] [ 878.305331][T27075] the existing dependency chain (in reverse order) is: [ 878.314348][T27075] [ 878.314348][T27075] -> #1 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}: [ 878.322649][T27075] lock_acquire+0x120/0x360 [ 878.327690][T27075] _raw_spin_lock+0x2e/0x40 [ 878.332727][T27075] sch_direct_xmit+0x153/0x4b0 [ 878.338021][T27075] __dev_queue_xmit+0x1857/0x3b50 [ 878.343575][T27075] hsr_forward_skb+0x158b/0x2860 [ 878.349041][T27075] hsr_dev_xmit+0x1a5/0x220 [ 878.354078][T27075] dev_hard_start_xmit+0x2d4/0x830 [ 878.359715][T27075] __dev_queue_xmit+0x1b8d/0x3b50 [ 878.365269][T27075] ip6_finish_output2+0x11fb/0x16a0 [ 878.370997][T27075] ndisc_send_skb+0xb54/0x1440 [ 878.376291][T27075] ndisc_send_ns+0xcb/0x150 [ 878.381363][T27075] addrconf_dad_work+0xaae/0x14b0 [ 878.387115][T27075] process_scheduled_works+0xae1/0x17b0 [ 878.393206][T27075] worker_thread+0x8a0/0xda0 [ 878.398327][T27075] kthread+0x711/0x8a0 [ 878.402930][T27075] ret_from_fork+0x3f9/0x770 [ 878.408131][T27075] ret_from_fork_asm+0x1a/0x30 [ 878.413466][T27075] [ 878.413466][T27075] -> #0 (&hsr->seqnr_lock){+.-.}-{3:3}: [ 878.421214][T27075] validate_chain+0xb9b/0x2140 [ 878.426508][T27075] __lock_acquire+0xab9/0xd20 [ 878.431719][T27075] lock_acquire+0x120/0x360 [ 878.436840][T27075] _raw_spin_lock_bh+0x36/0x50 [ 878.442135][T27075] hsr_dev_xmit+0x19a/0x220 [ 878.447163][T27075] dev_hard_start_xmit+0x2d4/0x830 [ 878.452802][T27075] __dev_queue_xmit+0x1b8d/0x3b50 [ 878.458356][T27075] NF_HOOK+0x310/0x3a0 [ 878.462950][T27075] arp_xmit+0x16c/0x270 [ 878.467689][T27075] arp_solicit+0xc1d/0xe60 [ 878.472646][T27075] __neigh_event_send+0xf70/0x1560 [ 878.478297][T27075] neigh_resolve_output+0x198/0x750 [ 878.484032][T27075] ip_finish_output2+0xd3d/0x1160 [ 878.489584][T27075] ip_output+0x2a1/0x3c0 [ 878.494354][T27075] iptunnel_xmit+0x592/0xa40 [ 878.499476][T27075] ip_tunnel_xmit+0x1c41/0x2390 [ 878.504856][T27075] gre_tap_xmit+0x590/0x7a0 [ 878.509881][T27075] dev_hard_start_xmit+0x2d4/0x830 [ 878.515517][T27075] sch_direct_xmit+0x241/0x4b0 [ 878.520810][T27075] __dev_queue_xmit+0x1857/0x3b50 [ 878.526362][T27075] alb_send_lp_vid+0x324/0x510 [ 878.531664][T27075] alb_send_learning_packets+0x10d/0x2c0 [ 878.537825][T27075] bond_alb_monitor+0x3e4/0x1800 [ 878.543287][T27075] process_scheduled_works+0xae1/0x17b0 [ 878.549369][T27075] worker_thread+0x8a0/0xda0 [ 878.554486][T27075] kthread+0x711/0x8a0 [ 878.559084][T27075] ret_from_fork+0x3f9/0x770 [ 878.564210][T27075] ret_from_fork_asm+0x1a/0x30 [ 878.569504][T27075] [ 878.569504][T27075] other info that might help us debug this: [ 878.569504][T27075] [ 878.579728][T27075] Possible unsafe locking scenario: [ 878.579728][T27075] [ 878.587178][T27075] CPU0 CPU1 [ 878.592540][T27075] ---- ---- [ 878.597904][T27075] lock(&qdisc_xmit_lock_key#3); [ 878.602943][T27075] lock(&hsr->seqnr_lock); [ 878.609982][T27075] lock(&qdisc_xmit_lock_key#3); [ 878.617534][T27075] lock(&hsr->seqnr_lock); [ 878.622041][T27075] [ 878.622041][T27075] *** DEADLOCK *** [ 878.622041][T27075] [ 878.630188][T27075] 10 locks held by kworker/u8:3/27075: [ 878.635645][T27075] #0: ffff8880500fc948 ((wq_completion)bond1#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 878.646711][T27075] #1: ffffc9000434fbc0 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 878.659593][T27075] #2: ffffffff8e139ea0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf1/0x1800 [ 878.669209][T27075] #3: ffffffff8e139f00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 878.679141][T27075] #4: ffff888028531258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x138a/0x3b50 [ 878.691773][T27075] #5: ffff88801ba9c558 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 878.702063][T27075] #6: ffffffff8e139ea0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x60/0x3c0 [ 878.710946][T27075] #7: ffffffff8e139ea0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x452/0x1160 [ 878.720730][T27075] #8: ffffffff8e139ea0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 878.729539][T27075] #9: ffffffff8e139f00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 878.739472][T27075] [ 878.739472][T27075] stack backtrace: [ 878.745368][T27075] CPU: 1 UID: 0 PID: 27075 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 878.745391][T27075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 878.745409][T27075] Workqueue: bond1 bond_alb_monitor [ 878.745435][T27075] Call Trace: [ 878.745442][T27075] [ 878.745450][T27075] dump_stack_lvl+0x189/0x250 [ 878.745474][T27075] ? __pfx_dump_stack_lvl+0x10/0x10 [ 878.745495][T27075] ? __pfx__printk+0x10/0x10 [ 878.745522][T27075] ? print_lock_name+0xde/0x100 [ 878.745547][T27075] print_circular_bug+0x2ee/0x310 [ 878.745568][T27075] check_noncircular+0x134/0x160 [ 878.745590][T27075] validate_chain+0xb9b/0x2140 [ 878.745610][T27075] ? unwind_next_frame+0xa5/0x2390 [ 878.745631][T27075] ? unwind_next_frame+0xa5/0x2390 [ 878.745653][T27075] ? unwind_next_frame+0xa5/0x2390 [ 878.745674][T27075] __lock_acquire+0xab9/0xd20 [ 878.745702][T27075] ? hsr_dev_xmit+0x19a/0x220 [ 878.745721][T27075] lock_acquire+0x120/0x360 [ 878.745746][T27075] ? hsr_dev_xmit+0x19a/0x220 [ 878.745766][T27075] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 878.745791][T27075] ? hsr_dev_xmit+0x19a/0x220 [ 878.745810][T27075] _raw_spin_lock_bh+0x36/0x50 [ 878.745831][T27075] ? hsr_dev_xmit+0x19a/0x220 [ 878.745849][T27075] hsr_dev_xmit+0x19a/0x220 [ 878.745869][T27075] dev_hard_start_xmit+0x2d4/0x830 [ 878.745896][T27075] __dev_queue_xmit+0x1b8d/0x3b50 [ 878.745915][T27075] ? arp_send_dst+0xa7/0x2d0 [ 878.745934][T27075] ? arp_solicit+0xc1d/0xe60 [ 878.745954][T27075] ? __neigh_event_send+0xf70/0x1560 [ 878.745981][T27075] ? __dev_queue_xmit+0x27b/0x3b50 [ 878.746001][T27075] ? ret_from_fork_asm+0x1a/0x30 [ 878.746030][T27075] ? __pfx___dev_queue_xmit+0x10/0x10 [ 878.746057][T27075] ? __lock_acquire+0xab9/0xd20 [ 878.746091][T27075] ? NF_HOOK+0x9e/0x3a0 [ 878.746112][T27075] NF_HOOK+0x310/0x3a0 [ 878.746132][T27075] ? __pfx_arp_xmit_finish+0x10/0x10 [ 878.746152][T27075] ? NF_HOOK+0x9e/0x3a0 [ 878.746172][T27075] ? __pfx_NF_HOOK+0x10/0x10 [ 878.746192][T27075] ? arp_xmit+0x23/0x270 [ 878.746216][T27075] arp_xmit+0x16c/0x270 [ 878.746234][T27075] ? arp_xmit+0x23/0x270 [ 878.746254][T27075] arp_solicit+0xc1d/0xe60 [ 878.746277][T27075] ? arp_solicit+0x11a/0xe60 [ 878.746298][T27075] ? __pfx_arp_solicit+0x10/0x10 [ 878.746323][T27075] ? __neigh_event_send+0xf08/0x1560 [ 878.746348][T27075] ? __pfx_arp_solicit+0x10/0x10 [ 878.746369][T27075] __neigh_event_send+0xf70/0x1560 [ 878.746398][T27075] neigh_resolve_output+0x198/0x750 [ 878.746430][T27075] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 878.746451][T27075] ? __lock_acquire+0xab9/0xd20 [ 878.746479][T27075] ip_finish_output2+0xd3d/0x1160 [ 878.746503][T27075] ? ip_finish_output2+0x452/0x1160 [ 878.746524][T27075] ? __pfx_ip_finish_output2+0x10/0x10 [ 878.746546][T27075] ? ip_skb_dst_mtu+0x1a5/0xab0 [ 878.746564][T27075] ? ip_skb_dst_mtu+0x866/0xab0 [ 878.746583][T27075] ? ip_finish_output+0x33a/0x3f0 [ 878.746602][T27075] ip_output+0x2a1/0x3c0 [ 878.746620][T27075] ? ip_output+0x60/0x3c0 [ 878.746638][T27075] iptunnel_xmit+0x592/0xa40 [ 878.746669][T27075] ip_tunnel_xmit+0x1c41/0x2390 [ 878.746701][T27075] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 878.746721][T27075] ? gre_build_header+0x3fd/0xa40 [ 878.746742][T27075] ? __pfx_gre_build_header+0x10/0x10 [ 878.746761][T27075] ? iptunnel_handle_offloads+0x2fd/0x630 [ 878.746789][T27075] gre_tap_xmit+0x590/0x7a0 [ 878.746809][T27075] ? __pfx_gre_tap_xmit+0x10/0x10 [ 878.746825][T27075] ? __lock_acquire+0xab9/0xd20 [ 878.746854][T27075] dev_hard_start_xmit+0x2d4/0x830 [ 878.746880][T27075] sch_direct_xmit+0x241/0x4b0 [ 878.746906][T27075] ? __pfx_sch_direct_xmit+0x10/0x10 [ 878.746932][T27075] __dev_queue_xmit+0x1857/0x3b50 [ 878.746956][T27075] ? __dev_queue_xmit+0x27b/0x3b50 [ 878.746982][T27075] ? __pfx___dev_queue_xmit+0x10/0x10 [ 878.747003][T27075] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 878.747025][T27075] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 878.747053][T27075] ? __build_skb_around+0x257/0x3e0 [ 878.747087][T27075] ? __pfx___netdev_alloc_skb+0x10/0x10 [ 878.747115][T27075] ? alb_send_lp_vid+0x139/0x510 [ 878.747140][T27075] alb_send_lp_vid+0x324/0x510 [ 878.747166][T27075] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 878.747192][T27075] ? __lock_acquire+0xab9/0xd20 [ 878.747221][T27075] alb_send_learning_packets+0x10d/0x2c0 [ 878.747244][T27075] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 878.747272][T27075] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 878.747300][T27075] bond_alb_monitor+0x3e4/0x1800 [ 878.747325][T27075] ? bond_alb_monitor+0xf1/0x1800 [ 878.747346][T27075] ? process_scheduled_works+0x9ef/0x17b0 [ 878.747363][T27075] ? __pfx_bond_alb_monitor+0x10/0x10 [ 878.747385][T27075] ? _raw_spin_unlock_irq+0x23/0x50 [ 878.747411][T27075] ? process_scheduled_works+0x9ef/0x17b0 [ 878.747427][T27075] ? process_scheduled_works+0x9ef/0x17b0 [ 878.747445][T27075] process_scheduled_works+0xae1/0x17b0 [ 878.747474][T27075] ? __pfx_process_scheduled_works+0x10/0x10 [ 878.747498][T27075] worker_thread+0x8a0/0xda0 [ 878.747516][T27075] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 878.747542][T27075] ? __kthread_parkme+0x7b/0x200 [ 878.747564][T27075] kthread+0x711/0x8a0 [ 878.747587][T27075] ? __pfx_worker_thread+0x10/0x10 [ 878.747604][T27075] ? __pfx_kthread+0x10/0x10 [ 878.747626][T27075] ? _raw_spin_unlock_irq+0x23/0x50 [ 878.747647][T27075] ? lockdep_hardirqs_on+0x9c/0x150 [ 878.747670][T27075] ? __pfx_kthread+0x10/0x10 [ 878.747692][T27075] ret_from_fork+0x3f9/0x770 [ 878.747711][T27075] ? __pfx_ret_from_fork+0x10/0x10 [ 878.747731][T27075] ? __switch_to_asm+0x39/0x70 [ 878.747753][T27075] ? __switch_to_asm+0x33/0x70 [ 878.747775][T27075] ? __pfx_kthread+0x10/0x10 [ 878.747796][T27075] ret_from_fork_asm+0x1a/0x30 [ 878.747827][T27075] [ 879.339663][T28956] veth3: left promiscuous mode [ 879.349694][T28956] ipvlan2: left allmulticast mode [ 879.357970][T28956] bond1: left allmulticast mode [ 879.365419][T28956] gretap1: left allmulticast mode [ 879.382858][T28967] hsr_slave_0: left promiscuous mode [ 879.388883][T28967] hsr_slave_1: left promiscuous mode [ 879.416091][T28987] macvlan3: entered allmulticast mode [ 879.422621][T28987] veth1_vlan: entered allmulticast mode [ 879.429465][T28987] veth1_vlan: left allmulticast mode [ 879.438778][T27075] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 879.449388][T27075] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 879.459026][T27075] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 879.469776][T27075] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 879.478213][T27075] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 879.488776][T27075] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 879.497352][T27075] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 879.505813][T27075] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 879.514345][T27075] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 879.522750][T27075] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 879.531226][T27075] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 879.539766][T27075] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 882.461684][ T5864] Bluetooth: hci0: command 0x0405 tx timeout [ 887.420837][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 887.581055][T21213] Bluetooth: hci3: command 0x0406 tx timeout