last executing test programs: 18.370951889s ago: executing program 0 (id=1601): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="74010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088048010c8054000b800800090000000000080009000000000008000a00fffe"], 0x174}}, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (async) socket$netlink(0x10, 0x3, 0x6720f15ce8555866) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x50, 0x2, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @local}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000003c0)={r3, @in={{0x2, 0x4e24, @private=0xa010101}}}, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000000)='wlan1\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x8001000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x120, 0x11, 0x148, 0x0, 0x0, 0x1b0, 0x2a8, 0x2a8, 0x1b0, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010100, @private=0x1a010100, 0xffffff00, 0xffffffff, 'hsr0\x00', 'macvtap0\x00', {0xff}, {0xff}, 0x56, 0x1, 0x40}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x5, [0x4e24, 0x4e21, 0x4e24, 0x4e23, 0x4e20, 0x4e23, 0x4e24, 0x4e21, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e20, 0x4e23, 0x4e21], [0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x5, 0x3, 0x20], 0x4, 0x4}, {0xffffffffffffffff, [0x56, 0x7], 0x0, 0x4}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000010402000200fedbdf2500000000", @ANYRES32=r7, @ANYBLOB="98e400007306000005002100100000001c00168018000180140002"], 0x44}, 0x1, 0x0, 0x0, 0x4cc51}, 0x4054) (async) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="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"], 0x24}}, 0x40000) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r4) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="32084e85057a58e17ee09847f6d5b964405c05895b0000d2fdcba4cfbe816a252b0ac92eab82984a5a78ac4a4a94a0711ae969b34396cb65b9d59d64fb226c05c345c896caeff0952e751bcd2a59a8483fc1505aec66de86de724b2b861415917ecdf794c858755b32edbeac", @ANYRES16=r13, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r14, @ANYBLOB="3000308014000400403a050c5baee2004ef2b6d713459a7a100001800800010000000000040003800500020000000000"], 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r4, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x60, r11, 0x1, 0x46af, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x60}, 0x1, 0x0, 0x0, 0x40011}, 0x80) (async) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3000000018b3bfba5373f1dcdaff00000a800000ff0300060000000014000100200100000000000000000000000000005320d752c67de4dd42ad5942a0dd993bb82199addc41b9b064921bcc70979458d8447f31b9d70cf085850f65dedcefe9d8491a724c35ef0ae9354f53dbbd808da3bc14ee868b36de22553593e58e4834a362bdbf26f31976634d7c69553f1787a9b3aefafbff02b9d7c95cf538da92ccdeacc0fa"], 0x30}}, 0x0) (async) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x125) 18.151705066s ago: executing program 0 (id=1605): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a30000000004c000000060a010400000800000000000500000008000b400000000018000480140001800b00010074756e6e656c0000040002800900010073797a30000000000b000740ae30c665"], 0xc0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x100}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$phonet_pipe(0x23, 0x5, 0x2) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newchain={0x4c, 0x64, 0x300, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0x3}, {0xc, 0x2}, {0xfff2, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x7}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x10, 0x6}}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r7) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010069bd7000fedbdf253f00000008000300", @ANYBLOB="3c005e80080009000800001008000600c7f20000080005004d0000000800050022000000080007"], 0x58}, 0x1, 0x0, 0x0, 0x80c0}, 0x4) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r5, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r6, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1002, 0x66}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4008001}, 0x80) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) close(r2) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "12ad"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001400038010"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 17.999290159s ago: executing program 0 (id=1609): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x24, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000140)={r4, 0x6, 0x70, "a01a2aaf5897edb27e6d5f0ef1fbae01f7bfb5dc7ccf9f21c7797a13ac6b870d4fc458441fbcba92ecaab36b3310397cf211262ef1299f0f3edc2f164cbcbf65632c2abc4935ebf36f7d04bb43c48b9fa8a14d56bcfaa94fdbb4e5ba5cf39d6976ee37229693b20c95b2baaf33c7e518"}, 0x78) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x30, r6, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffa}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r6, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa47}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x404cc10}, 0x2000c885) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@exit]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x24, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) 17.541378709s ago: executing program 4 (id=1615): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x4c, 0x2, {0x10, "000000000000000000001000000010dc"}}}]}, 0x48}}, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x4, 0x4, 0x1000000, 0x1, 0x1}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000000c0)={r4, 0x7, 0x1}, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000900000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000010340)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x4000000}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) 17.540835967s ago: executing program 1 (id=1616): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) ioctl$OCFS2_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046f01, &(0x7f0000000040)=0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1e, 0x4, 0x7fe2, 0x1, 0x1, 0x1, 0xe766}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, r3, 0x25, 0x0, @val=@perf_event={0x200}}, 0x18) syz_emit_ethernet(0x7a, &(0x7f0000001d40)={@multicast, @random="e802b9fa0f2e", @void, {@ipv6={0x86dd, @gre_packet={0x3, 0x6, '0\x00U', 0x44, 0x2f, 0x3, @remote, @rand_addr=' \x01\x00', {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {}, {0x1}, {0x8, 0x88be, 0x4, {{0x0, 0x1, 0x8, 0x1, 0x1, 0x3, 0x2}, 0x1, {0x2010}}}, {0x8, 0x22eb, 0x0, {{0x5, 0x2, 0x79, 0x0, 0x1, 0x1, 0x2, 0x3e}, 0x2, {0x10000, 0x7, 0x1, 0x7, 0x0, 0x0, 0x3, 0x1}}}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000aa1bd0c000000000"], 0x50) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001880)=@generic={&(0x7f0000000200)='./file0\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x1d, 0x37, &(0x7f00000018c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x2}, @generic={0xd5, 0x8, 0x2, 0xb, 0xea3}, @exit, @map_fd={0x18, 0x9}, @alu={0x4, 0x1, 0xb, 0x6, 0x0, 0xfffffffffffffffc, 0x4}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xadd}}, @call={0x85, 0x0, 0x0, 0x23}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001a80)='GPL\x00', 0x8, 0xfa, &(0x7f0000001ac0)=""/250, 0x41100, 0x28, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000001bc0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000001c00)={0x1, 0x8, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001c40)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001e40)={@fallback=r7, 0x0, 0x1, 0x1, &(0x7f0000001d40)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000001d80)=[0x0, 0x0, 0x0], &(0x7f0000001dc0)=[0x0, 0x0, 0x0], &(0x7f0000001e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000001ec0)=@bloom_filter={0x1e, 0x4, 0x52, 0x3, 0x20800, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5, 0xa}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r10}, &(0x7f00000006c0), &(0x7f0000000700)=r9}, 0x20) sendmsg$inet(r8, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r7, 0xc0385868, &(0x7f0000002040)={r7, &(0x7f0000001f40)='[,$\x00', 0x105000, &(0x7f0000001f80)={@_ha_fsid={[0x7fffffff, 0x2]}, {0x7f8, 0xc4ef, 0x80000000, 0x9}}, 0x7fff, &(0x7f0000001fc0)={@_ha_fsid}, &(0x7f0000002000)=0x153d}) 17.539864875s ago: executing program 3 (id=1618): r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) r1 = socket(0x1d, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e00), r0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000200), 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_int(r5, 0x29, 0x42, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x200007, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0xfffffffffffffe5b) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) unshare(0x2040400) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0x8008b705, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x378, 0xffffffff, 0x1d8, 0xd0, 0xd0, 0xfeffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [0xffffff00, 0x0, 0xff000000, 0xffffffff], [0x0, 0xffffff00], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1, 0x8}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [0x0, 0xffffffff], [0x0, 0x0, 0xffffffff], 'sit0\x00', 'vxcan1\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x9}, {0x9}], 0x2, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff, 0xff000000], [0xffffff00, 0x0, 0x0, 0xff], 'veth1_virt_wifi\x00', 'erspan0\x00', {0xff}, {0xff}, 0x29, 0x4, 0x0, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)=ANY=[@ANYBLOB="24408000", @ANYRES16=r2, @ANYBLOB="10002cbd7000fcdbdf25260000000a004f00ffffffffffff00000400af00"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffec77, @hyper=0x300}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000005000f000006"], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@deltaction={0x54, 0x31, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x40) 17.401858812s ago: executing program 4 (id=1620): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000bb"], 0x190) syz_emit_ethernet(0x3e, &(0x7f0000000540)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @mlv2_report}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="60040000002100"/20, @ANYRES32=r0, @ANYRES32=r0, @ANYRES64=r0, @ANYBLOB="050009000400000006000e000200000006000f0001000000060011004e21000008000300"], 0x60}}, 0x0) 17.401131743s ago: executing program 3 (id=1621): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001380)={&(0x7f0000000000)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x80, &(0x7f0000001140)=[{&(0x7f0000000080)="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", 0x1000}, {&(0x7f0000001080)="ca2e3cc326f59970f5cc5e16b94b6c1950698c63cf1afd00c797f6769203cbc37377b99590b07c9191d8b0b1c0192b4a95cab4ae5236db6594bcc24a719112555af7628f302b46a97577f79440a69e92602ca11bb1722e2c3993b2aabfba3b33793dd62eb175162b8cf76a6025a72af28a31fee8a3bd213d714ef683ee81414d1ee9f78f35dfcdb971717847b9ecbd35ab3e2610930738c1bc00", 0x9a}], 0x2, &(0x7f0000001180)=[{0x38, 0x117, 0x1f5, "1490e9509ed59b5290c0e03c6b02ef2a0a50a174e602cb7f09fcd4ba3449a44eb4b498c379a6ae"}, {0x60, 0xff, 0x2, "943871b5bd7811396676d430008e7e06da56f9edc47cd93f992d7cc61d3aa4e7c7365004ae271c3f941d9ad5860e8423c94bada10e1f26fe8a8e1e5800fdf166183ad1b2718e435c2f19"}, {0x68, 0x104, 0xfffffbff, "629ff3d85f3328ac34013d0e7239b8340f659961fcca89666d6b3e382e1dab6816a98cdfd6b7b80b80d8376bba0086ebb8ff7d9756fd8cee05bfc97f822f5f86f9ed515b1130b994b888fa2eefc704878bc01f2ce4"}, {0xc8, 0x84, 0x5, "d020dc4d9e27a2abfeb1071e63f8095a79135fa4c7032101b15a61983c494a076b36bf5b96e0fa7e713c00e9f4c94872b68d8d20a03abb4bb9a5a492916ccdbc3a0c4678ba527789c97d593febfec7dcef01df6fd7ba3d4150e675229461c5efc24654e8f67aa333ad51faf2e589d67730718239b057042e9d8045dc63c2972f470b6643c9cb8f692082163ad72f8b5eef8f4662e22f5a4452fc77bb192fba278541bab73b6fe76c228d7de11cf002757027"}, {0x20, 0x6, 0x8, "faf9f4ef0b30397b0f655495aa"}], 0x1e8}, 0x4000000) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000013c0)={r0}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000001400)={0x0, 0x200, 0x20}, 0xc) 17.284646377s ago: executing program 4 (id=1622): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x358, 0x1b0, 0x43, 0xa0, 0x1b0, 0x98, 0x2c0, 0x178, 0x178, 0x2c0, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x190, 0x1b0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0xfffffffd, 0x8, 0x1, 'syz0\x00'}}, @common=@unspec=@cgroup0={{0x28}, {0xa}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x9}]}}, @common=@icmp={{0x28}, {0xb, "17e4"}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b8) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e65746465"], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000040000000400000002"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r7, 0xffffffffffffffff, 0x9, 0x0, @void}, 0x10) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) r8 = socket$inet(0x2, 0x3, 0x2) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fcffffff00000000000040001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008085000000730000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000000c0)=ANY=[], 0x1c) socket(0x10, 0x3, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r10) sendmsg$NFC_CMD_DISABLE_SE(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, r11, 0x105beec262c852b3, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4018041}, 0x2008080) socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r12) getsockname$packet(r12, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) 17.237996889s ago: executing program 3 (id=1623): ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000200)='netdevsim0\x00') r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x7fff, 0x0, 0x0, 0x2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x22, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x22, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x0) unshare(0x2a020400) (async) unshare(0x2a020400) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=0xffffffffffffffff, 0x11, 0x1, 0x3, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f00000009c0)={{r2, &(0x7f0000000480)='netdevsim0\x00', 0x12000, &(0x7f00000004c0)={@align=0x8000000000000001, {0x9, 0x7, 0x3, 0x77}}, 0x8, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000580)=0xb9af}, 0x3, &(0x7f0000000940)=[{0x2, 0x3, &(0x7f00000005c0)='netdevsim0\x00', &(0x7f0000000600)="a2a50b4a334a036fa514ea350d5c247c28f940f1347808ee434cf84ae99ad25c048247de6d94070ab3c8e516adce00281e58b81ebfde95465d5df1bb1b0c5328f33a9ae3347b439244003e2e4aff8b3d7c687049dceec2dd0a74dd009ba8c94e33e3953b281aebc9c4c39b05e978bb969b24812b66efd74ac52636ff5eca94e6ff6127aa7c2e80856eb3ef631a4f270f37", 0x91, 0x8}, {0x1, 0x4, &(0x7f00000006c0)='netdevsim0\x00', &(0x7f0000000740)="3902a578d52a217af1a76e7c23b806ca8844ae271681f0c795b223b7d6cb6434d98003790f9fcf82ef29f09ee69bd5b60205f950ababb1df3138ec37d6e74c746fce741ef8e8ae7c1a64a80327dbcd9ad398b245639ebe9c693bb4e29ad3bfa64366635aeb8990bc8c588a7346839f9738111697dd1f39131f9f20693a36b30e44d0f647d2fd45d01b1a280ccf8c0d60c65212c66bcf2de7eb23768005ed9d58", 0xa0, 0x2}, {0x3, 0x6, &(0x7f0000000800)='netdevsim0\x00', &(0x7f0000000840)="147e851c4104669cbafbde260b99a6080fe6dbc2909316f3a60c897f39a4894443f2e5f1ec6024c836954a9aad40d073b0b75c235077d30363367dbe3860b62fc9dc2474a3bcf6c960c5ebda4dda32bcbb1b52ac62fdf91402a005f269216a00b1ad55758533070cb8cb3c3f550ef3520ed52034af4be8ae08555afe21060846da99725d6ba870b73f4f2f23a01254da7282a062e4aa3f504ed449c8de2ed18344c42b4dded84fb9e6965dd9968d85d3b05df787e7d6a7e52716601b2a90700f45135c5bf764d4", 0xc7, 0x8}]}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "00000000000236c5b301b2fb0c7400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000040)=0x32154, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000d945e50003000000000018000000070000000000000005000000db393bff0ac08d54e27a0ac0ff100000001812000084af38dfe81d555c90c74611118a25eb22bd60dfd30b44adc9", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r10, 0x107, 0x9, &(0x7f0000000000), 0x4) (async) setsockopt$packet_int(r10, 0x107, 0x9, &(0x7f0000000000), 0x4) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000180)) r11 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r11, &(0x7f0000001540)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000340)='v&U', 0x3}], 0x1}}], 0x3, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r11, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r12}, 0x20) (async) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r11, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r12}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000c00)={r12, 0x38, &(0x7f0000000cc0)=[@in6={0xa, 0x4e24, 0x2, @local, 0x8}, @in6={0xa, 0x4e24, 0x4, @loopback, 0x5}]}, &(0x7f0000000c40)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000c00)={r12, 0x38, &(0x7f0000000cc0)=[@in6={0xa, 0x4e24, 0x2, @local, 0x8}, @in6={0xa, 0x4e24, 0x4, @loopback, 0x5}]}, &(0x7f0000000c40)=0x10) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x1, 0x18}, 0xc) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=r14, 0x4) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=r14, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32=r13, @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r14, @ANYBLOB, @ANYRES64=r3], 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000002000000", @ANYRES32=0x1], 0x50) pipe(&(0x7f0000000040)) (async) pipe(&(0x7f0000000040)) 17.20450088s ago: executing program 1 (id=1625): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_open_procfs$namespace(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000001c0)="0100400871a7832e6b7303c3cd59", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 17.111147843s ago: executing program 2 (id=1626): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT], 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000240)=ANY=[], 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) write$nci(r1, &(0x7f0000000040)=ANY=[], 0x14) write$nci(r1, &(0x7f0000000100)=@NCI_OP_CORE_RESET_RSP={0x0, 0x1, 0x2, 0x0, 0x1, {0x1, 0x0, 0x8}}, 0x6) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000ce98000000000000c6080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x26, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002480)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xe11}}]}, 0x38}, 0x1, 0x0, 0x0, 0x51}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x3, &(0x7f00000002c0)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x1, 0x71, 0x10, 0x9b, 0x10000}}, 0x0, 0x17dc, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0xa}, 0x94) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r10, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0xfffffff7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@btf_id={0x18, 0x57570ec41ff4cd92, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 17.059441711s ago: executing program 3 (id=1627): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001440)=ANY=[@ANYBLOB="0800080f8e6d04aab9c5b0000000450aff2b006600000b89907800010102ffffffff3297e300"], 0xfdef) 17.02693063s ago: executing program 0 (id=1628): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="18020000040071fc0000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff0300600d698cff9e14f086dd", 0x0, 0x99, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r3) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r4, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x3}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xc8}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000081}, 0x20004) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d80), 0x80800, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffff8, 0x4, 0x8, 0x0, 0x2}, 0x0, &(0x7f0000000900)={0x3fe, 0x0, 0x0, 0x81, 0x4000, 0x0, 0x7ffffffe, 0x4}, 0x0, 0x0) close(r6) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1, 0xffffffffffffffff, 0x60000000}, 0xc) 16.802087904s ago: executing program 4 (id=1629): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x41e02}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd1000000800030006010800418e01400004fcff", 0x58}], 0x1) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80000001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) connect(r3, &(0x7f0000000440)=@qipcrtr={0x2a, 0x2, 0x8000}, 0x80) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r6, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x82d2ce4e5fe7f340}, 0x800) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000040)=[{0x20, 0xa, 0x6, 0x5c13}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0xff, 0xc, 0x401}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) socket(0x10, 0x803, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x41e02}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd1000000800030006010800418e01400004fcff", 0x58}], 0x1) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80000001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) connect(r3, &(0x7f0000000440)=@qipcrtr={0x2a, 0x2, 0x8000}, 0x80) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r6, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x82d2ce4e5fe7f340}, 0x800) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000040)=[{0x20, 0xa, 0x6, 0x5c13}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0xff, 0xc, 0x401}]}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) (async) 16.7979945s ago: executing program 3 (id=1630): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r3, 0x86, &(0x7f0000001040)}, 0x17) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000980), r4) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000300)={0x64, r5, 0x4d1b20c6161d1adb, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:inetd_child_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_macvtap\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x4, 0x5, @broadcast}]}, 0x64}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60d1}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$netlink(r0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000007a00)={0x28, 0x26, 0x723, 0x0, 0x0, "", [@nested={0x15, 0xa9, 0x0, 0x1, [@generic="57d753865b", @nested={0xc, 0xeb, 0x0, 0x1, [@typed={0x8, 0x20, 0x0, 0x0, @fd=r0}]}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x24008015}, 0x0) 16.751585612s ago: executing program 2 (id=1631): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xfffffffe, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x7, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 64) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000140)='\b', 0x1, 0x0, &(0x7f0000000240)={0x3a, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000380)=@ethtool_flash={0x33, 0x0, './file0\x00'}}) (async) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000040000100fcff0700040000000100000007004880100001800c00108004000880040007800c0002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 16.648337691s ago: executing program 1 (id=1632): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x18) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) (async) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 16.380690087s ago: executing program 1 (id=1633): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000020605000000000000000000000000070e0003006269746d61703a697000000005000400010000000900020073797a3000000000240007800c00028008005e00000000020c0001800800014000000004080008400000005c05000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000003c0)=0x61205c6a, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2d706572665f6576656e74202b68756765746c62202d637075200670696473202b4b63707520"], 0x25) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, 0x0, 0x0}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="a40100001b00674c0000000000000000fe80080000000000000000000000001a2001000000000000000000000006000000000000000000100a00800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1a4}}, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000000c0)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r7], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x2, 0x8001, @private2, 0xffffffff}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) openat$cgroup_devices(r3, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) mkdirat$cgroup(r1, &(0x7f00000001c0)='syz1\x00', 0x1ff) 16.378245164s ago: executing program 4 (id=1634): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0800000005000000040000000100010000000000", @ANYRES32, @ANYBLOB="ff0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000000000000000000000000000000000000000000000000002bd633a3ff01538b8e8252337962d2e54c348f02df5040fe303bb4dca3b1c3c285f5e847b2a5dc045423c5ee67542e1124c813dd588a6d919873962d032d2f23daf5e3d283e6dc0b7ad07d886f46f5c095098ab2a15f29f0dc87c73965bfcdac419a6512f867fe4aa8db2634aa2ea9565a6d3456ddf16bbc8d4fc76a55cb6696cda1541afc4cd4f5c87d4619afa0ec53872875df8ba520c4ce744dd09f026629"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000600)}, 0x20) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000001a00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000080)=0x6, 0x4) writev(r2, &(0x7f0000000540)=[{&(0x7f00000000c0)="02", 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000004000000000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff9500000000000000dea2625661b1437750725f0ce2558ff603d58ec9b757a836"], &(0x7f00000000c0)='GPL\x00'}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = socket(0x200000000000011, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r8, r6, 0x25, 0x0, @val=@perf_event={0x200}}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x10, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) socket(0x10, 0x3, 0x0) r9 = socket$inet(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r9, 0x0, 0x487, 0x0, &(0x7f00000001c0)) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYBLOB="318321bd70009fff0000190000000c0001800800030007000000"], 0x20}, 0x1, 0x0, 0x0, 0x24004041}, 0x4008000) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) close(0x4) syz_open_procfs$namespace(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) 16.317441146s ago: executing program 2 (id=1635): close(0x3) (async) close(0x3) r0 = socket$kcm(0x2, 0x200000000000006, 0x106) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r2) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0xc8, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xc8}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0xc8, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xc8}}, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r3, 0x8080583a, &(0x7f00000002c0)={0xfffffff7, 0x80000001, 0xf, 0x4, 0x80000000, 0x0, 0x8}) socket$kcm(0xa, 0x5, 0x0) (async) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x3, 0x100000, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="58000000000000008400000008000000cd"], 0x58}, 0x41) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000340), 0x4) close(0x3) r5 = socket$l2tp6(0xa, 0x2, 0x73) r6 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r6, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="7000102e7577d401", 0x8}, {0x0}], 0x2}}], 0x1, 0x4c0c0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000000)={0x3c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x1}]}, 0x10) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000000)={0x3c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x1}]}, 0x10) 16.115286342s ago: executing program 0 (id=1636): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="140000000000"], 0x18}, 0x800) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x2}]}, 0x10) (async) recvmmsg(r4, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}, 0xfffffffe}], 0x1, 0x40, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x20000, 0x61, 0x10, 0x14}, [@ldst={0x2, 0x0, 0x3, 0x1c10a1, 0x0, 0x18}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x6}, 0x10}, 0x94) (async) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffe40, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001"], 0x38, 0x400c0}}], 0x1, 0x0) (async) sendmmsg$unix(r3, &(0x7f0000003ec0)=[{{&(0x7f0000000400)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000035c0)=[{&(0x7f0000002200)="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", 0x1000}, {&(0x7f0000003200)="be1aeb24cca97200d6999b9e932b4cd66563998b993902b5acefaa8f7d776f37e5c07a0a88790a95742d177d8efb4beafb256fdbde02bb6efb0d215e5e9181ee25878dccfdb6a23175aeb24dd01430acb5afb04c02de6e344dff155030b36ea5126a49d8c7b90cd6a29730d483f38342bed182c6d00c04f40853cfc81038fdc7a6a318a0e4727ec2c198e2c1306eb79e45272ffe990de5522761f76cdfa672d2cf34d0523744034710f2e35f836a773221e75f263bb69bd09ef60907d43c878b42c6a12f2477b01ae19f083e99cbf870", 0xd0}, {&(0x7f0000003300)="9a6e30a5d68235afd3849add95e167794c2195044f71b8d95e15f340932a4afce48eb8f72769aff1f4ab40658bd3bbafb16fe060c08113b6fae7ce1ca92be9d02e8a68a44a916bba745d7aa08587fb2431b468e6b8b78d43667ddaf6bca99ae74684b474b7740e4105f19e18375c080882ab97b2fcc9fa3f506109821d1883b384667181eae46d5ea84ec8ea53745283c239c484b16287983d9c6a1ae267d6897b0034bdbcbcfe362526650b6b0a9316e40e135e815191d1cc41", 0xba}, {&(0x7f00000033c0)="189faea9dc20a79a8e94d9901a1260b22bda3a7b98ce730c4180f8886aa2a0c1343d28108893f5cf6230465bdd7ab5fa156e239ad2022541b9526ae847df19c03061a3eebd1f5fe62cfa7bbc5018ce1f48891c12cf147f5d4b2ea5a8d7e83807b0eff8d1edec176476190877efa241d10f2932d0fc74b785be344eec65b55ce12252e185a965f114207034860ee4a6ac60eb33af9ff4df42617c6bed425a2dbcfc413c39ff5d59a28c4fc4a8", 0xac}, {&(0x7f0000003480)="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", 0xff}, {&(0x7f0000003580)="758e5ecf03accb5b66aed99c8d0f2a18c81141db1d776e6d2af439def49f4492f7e5a1", 0x23}], 0x6, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000003640)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003740)=[{&(0x7f00000036c0)="264bdb3e9286e2f431bee47394efaac84c9a8a2766c66ac13f402bd96c643a", 0x1f}, {&(0x7f0000003700)="99fc1a8c98c64b54cec35139e0e0cb", 0xf}], 0x2, 0x0, 0x0, 0x20004884}}, {{&(0x7f0000003780)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003a40)=[{&(0x7f0000003800)="26969db82a305bccc706e17b4308055847c066545c3fc5f1bf5e12f2dda709d670b5599fd6be8bbae2ed80f3208394c1a827b7cb0428ef0cef466392cac40bc196579eb656069760e9d1dc09226fadd9fda9", 0x52}, {&(0x7f0000003880)="0241ac72ff4bb33f265c40accd2ee6ffe51f259d89fe2d55b65fa216901eb827d8c127a1fd1c477c4ae66823e463de9d7bdd5f1e534b980db592a235a2bc1759ef3ad5c296747d8f064e06cd99bbe0f9d438b8b8f15eb8d127c91583802e2d36c499301b6887153eefdf848081828dc10fef7994784dad4db6cb28fa3fcec86880d511", 0x83}, {&(0x7f0000003940)="158e06330c693c5e93b1ff142118cff56857aa8f38eeb5979abecc11df55404504999c7b0f59715eba487a36565e906bc8ef20eeba3cfa1162da9d80625e4175d762", 0x42}, {&(0x7f00000039c0)="e8bab096b320f28f2564cabe525cf8261fb1980344217ca11dbd15bd4c278554cefff8e008dd70a2386d5c535c602ea328295b6905b8c40b2c8106d1b0f966db6f86c360d2c8aa0110bb01d2147b087dbfbb89da10079c326c1511b44e0a1d06", 0x60}], 0x4, &(0x7f0000003ac0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x4000}}, {{&(0x7f0000003b00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003d80)=[{&(0x7f0000003b80)="571a4c2002275129cd92fb2da9010632ec382a317fd78a7b90accd3ee5f2a9f34283f1e9b7d18e59e12efb67d37ec614462d72f73d8f63fad3d5b5b67d01d09300bedc0d8e9ddb33c52db1c79bc976d4bfaf09045b75be2bdfea9c739366745f981f2bef677277e4b25539c5e2869960858b110efd4adab651ae9bd6db20a097ba695f22aedf7a1d517933185a5f989cc27e20ed083137e2ccc52d17252fcbf67e820fc6b40910692f15645f34b4f659653912f597c628cd7ff89204ae", 0xbd}, {&(0x7f0000003c40)}, {&(0x7f0000003c80)="c83958a1d62832efe9dd496f5126c7c29901ccb7f7b809bcab4df8f6777e56a570d87330ccaabe8f43c6ccd807ae3d6cddf598441b0d63dd533c8cf8e132e2af186555eac08881f550a321235e750f0caad8d34f1a3e5112295be0c6a06308a0b146bdc66a00112d50cba602986dd6fc3e9605885a82db6dca2f3cfe9b25370eb40dcc9697073d1213492f01e5b5198ed176e5476b6cb3e24961599688b315f04f08f4123a3a385cfb2ddce0abb5f7af97b75692669fee4f4b27bc2319c3e3cd87e55f5864163a694c6c8e409226dfce2ae0013b7344712acc", 0xd9}], 0x3, &(0x7f0000003e40)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r0, r1]}}, @rights={{0x1c, 0x1, 0x1, [r4, r3, r4]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, r11}}}], 0x78, 0x800}}], 0x4, 0x0) (async) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r13, 0x941c, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000001580)=@raw={'raw\x00', 0x8, 0x3, 0x3e8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x318, 0xffffffff, 0xffffffff, 0x318, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast1, [0xff, 0xffffff00, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff000000, 0xff000000], 'veth1_to_team\x00', 'gretap0\x00', {}, {}, 0x29, 0x7, 0x4, 0x6}, 0x0, 0x1e0, 0x208, 0x60030000, {0x0, 0xff000000}, [@common=@rt={{0x138}, {0x6, [0x1, 0x9460], 0x203, 0x2, 0x4, [@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00', @private0, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, @empty, @local, @dev={0xfe, 0x80, '\x00', 0x13}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @remote, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1], 0x3}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xfff9, 0xe31}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x0, 0x8, 0x2, 'snmp_trap\x00', 'syz0\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) (async) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000000d0a0103d0a300db267384d800000000000000000a000001"], 0x14}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) syz_emit_ethernet(0x85, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a80f00810004008847017e4dc12eca9ac4df20c1f976f51ed36ef15ac168ef22c4a081f4914174c704deecb64704ded09c53bd4e46b3805f1f74cc604c3b0863af9b0313a69fe139336c8f3213b7228028a7db11e74edd51ed2db01b094e3cb9aad9b680d952d5639275bf19348756996ad5098d90fa71545a6f0079e554d0f7dfb0a352bb3156d6fe261f4a4dac2c2c7716d008f6d6531cf1e0f75a28175d7ab48e54f8eef752091290a054b1f3b6d2ba968a428f135fc5670f16defcf5695b08f801b2b4b1"], &(0x7f0000000140)={0x0, 0x3, [0xcdc, 0x941, 0x177, 0x535]}) (async) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0x30, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0x30}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) (async) r14 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r15, @ANYBLOB="01800000000000000000030202000900010053"], 0x20}, 0x1, 0x40030000000000, 0x0, 0x20000400}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x40088c0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) 15.910304604s ago: executing program 0 (id=1637): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='!\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r0}]}, 0x24}}, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x3004c071) r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000180)=0xffffffc0, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x12, &(0x7f0000000300), 0x4) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x10, 0x0, @val=@tracing={0xffffffffffffffff, 0x4}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000730133000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.909641909s ago: executing program 2 (id=1638): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x200010, 0x40, 0x3, 0x41}, 0x50) (rerun: 64) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000f40)={r1, &(0x7f0000000e80), 0x0}, 0x20) (async) unshare(0x26020480) r2 = socket$l2tp(0x2, 0x2, 0x73) (async) socket$can_j1939(0x1d, 0x2, 0x7) bind$inet(r2, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r3, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r4, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r5, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffff70, &(0x7f0000001440)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffcac, 0xfffffffffffffffd}}, 0x10) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r9 = socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003300)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r8, {0xffe0}, {0xfff2, 0xffff}, {0x2, 0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) getsockopt$llc_int(r9, 0x10c, 0x6, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r9, 0x84, 0x20, &(0x7f0000000200)=0x7, 0x4) 15.764193441s ago: executing program 3 (id=1639): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000000000000002"], 0x1f0}}, 0x2000c000) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0xcdb281c69b69ad50}, 0x4000) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x40, 0x0, 0xc8, r3}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x48}}, 0x400c0c0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000c00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000880)={0x314, r5, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "bc2cabd9bedf11b96f20c5caf855b84283886c903a9d82"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "4a35d4dfd37a275c5f07151d45b24e3cdef30a38c919ef598ba36d7d18"}}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf4ec}]}, @TIPC_NLA_NODE={0x160, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "6aa03da811134ac33e16a2127f9f39fdcd4c9208"}}, @TIPC_NLA_NODE_ID={0x69, 0x3, "aa881b8b29f0207a11d99902c70cd73b3e5b1fa8cd8d7d4660d9b33747b61c3097f7d13f73b312ff70f2b6f009db380599acb46dac1280d06de50d611cbaa162b55d9c55425a1b64eb7f8f0a257af79d03a98b0136a4975b6c19a0e96d3ad1378efb2bcf63"}, @TIPC_NLA_NODE_ID={0xa0, 0x3, "e185a4a329e85ceee0417bb96c0e90398c59b07608b426136249af1040bf7491ad4fb8983f946e36594e84d127b1748d9270a8315e5a471ea2136ce26b793ba3acae9145691e52cbed54be33c4c0eff3b319117f38702c76f0c61cf08abcfeefffbeaffeb32f823ed475b8d178c3261618f72453eb1c483d3c57316fe14827ccedc2e8aa32b81f59f0b92c062b3e7505f6b9c14ea04ee2b0cd41cd62"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3f80}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xc0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f0a}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7c76}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}]}, 0x314}, 0x1, 0x0, 0x0, 0x90}, 0x4000800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x14, 0x3d, 0x301, 0x70bd25, 0xfffffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073717a30000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r9, @ANYBLOB="01002abd7000fbdbdf25030000000c00060004000000000000000c00040001000000000000000c0002000200000000000000080001"], 0xc0}, 0x1, 0x0, 0x0, 0x66393c82b5350394}, 0x20000804) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}}, 0x4) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4000}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x3501, 0x5, 0x0, 0x0, 0x0, 0x9}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 15.638750286s ago: executing program 2 (id=1640): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0xa}, 0x94) 15.461634974s ago: executing program 2 (id=1641): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}}, @timestamp={0xd, 0x0, 0x0, 0x0, 0xd, 0x9, 0xc7f, 0x5}}}}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="b30100f2", @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf250f000000080034002400080008000300", @ANYRES32=r3, @ANYBLOB="050033"], 0x2c}}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x25dfdffd, {0x0, 0x0, 0x0, 0x0, {0x6}, {}, {0x8, 0x6}}}, 0x24}}, 0x20004811) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r7, 0x0, 0x0}, 0x10) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x48, r8, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) sendmmsg(r10, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r13, @ANYBLOB="0c00990000000200000000000800a00094090000080026009409000008002700000000000800a1"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1c, 0x4, 0xa, 0xff, 0x8000, 0x1, 0xd61, '\x00', r14, 0xffffffffffffffff, 0x2, 0x2, 0x4}, 0x50) 15.458299812s ago: executing program 4 (id=1642): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0x44, 0x4, 0x508, 0xffffffff, 0x0, 0x1d0, 0x1d0, 0xffffffff, 0xffffffff, 0x438, 0x438, 0x438, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0xa8, 0x1d0, 0x8502}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x4, 0x0, 'system_u:object_r:wireless_device_t:s0\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xff, 0xff, 0xff], [0xffffffff, 0xff, 0x0, 0xffffff00], 'erspan0\x00', 'caif0\x00', {}, {}, 0xc8, 0x0, 0x4, 0x50}, 0x0, 0x128, 0x150, 0x0, {0x0, 0x11}, [@common=@eui64={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'batadv_slave_0\x00', {0x8, 0x7, 0x101, 0x3, 0x4, 0x4, 0xfffffff8, 0x0, 0x78}, {0x1}}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x401}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x1007, 0x81, 0x1, 0x0, "d13aea835ab25d2af06d2a594bd55044f3f8f4a6ee1c3d886408088b5319e5294d4192982093b0f1e78cdb4585b98822e00d4b509e74d3ebb43b153f2481c6e3"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x54, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffd93, 0xb, 0x4}, {0x6}, {0x8, 0x13, 0xb}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x44040}, 0x4044000) 15.454194856s ago: executing program 1 (id=1643): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000000000000851000000000000085100000000000528822a2860085100000080000008510000000000000b7080000000000007b8af8ff00000000b7080000000002007b8af0ff00000000bfa100001ff9e00087ea2995f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], 0x0}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000), 0x9) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x7, 0x1, 0x3, 0x9, {{0x3d, 0x4, 0x3, 0x6, 0xf4, 0x68, 0x0, 0x9, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x31}, {[@timestamp_addr={0x44, 0x1c, 0xc, 0x1, 0x2, [{@local, 0x5}, {@rand_addr=0x64010102, 0x23e}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @ra={0x94, 0x4}, @generic={0x83, 0x11, "e1941f0846433a2a51763d9f95d260"}, @end, @timestamp_prespec={0x44, 0x3c, 0x9a, 0x3, 0x0, [{@remote, 0x6}, {@rand_addr=0x64010101, 0x9}, {@remote, 0xffffffff}, {@multicast2, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@local, 0x979e}]}, @generic={0x44, 0xe, "5f66b82288a4c41dc1815597"}, @timestamp={0x44, 0x10, 0xe9, 0x0, 0x1, [0x8, 0x444, 0x1]}, @timestamp_prespec={0x44, 0x3c, 0x9f, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x3f}, 0x1}, {@local, 0x1ff}, {@rand_addr=0x64010102, 0x9}, {@private=0xa010101}, {@remote, 0x1}, {@multicast2, 0x4}, {@empty, 0xb}]}, @lsrr={0x83, 0x17, 0x61, [@loopback, @multicast1, @local, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@private0, @in6=@mcast1, 0x4e24, 0x7, 0x4e24, 0x8001, 0x0, 0xc0, 0x0, 0x32, r2}, {0x4, 0xec, 0x3, 0x8, 0x10000, 0x2, 0xfffffffffffffffb, 0x7}, {0x64, 0x4, 0xd, 0xffffffffffff0001}, 0x7, 0x6e6bb4, 0x2, 0x0, 0x1}, {{@in=@rand_addr=0x64010100, 0x4d5, 0x3c}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x34ff, 0x1, 0x1, 0x80, 0x6, 0x7fff}}, 0xe8) r3 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r3, @ANYBLOB="0000800000000000180034800500"], 0x38}, 0x1, 0x300}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000000000000851000000000000085100000000000528822a2860085100000080000008510000000000000b7080000000000007b8af8ff00000000b7080000000002007b8af0ff00000000bfa100001ff9e00087ea2995f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], 0x0}, 0x94) (async) pipe(&(0x7f0000000000)) (async) vmsplice(r0, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x1) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000), 0x9) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x7, 0x1, 0x3, 0x9, {{0x3d, 0x4, 0x3, 0x6, 0xf4, 0x68, 0x0, 0x9, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x31}, {[@timestamp_addr={0x44, 0x1c, 0xc, 0x1, 0x2, [{@local, 0x5}, {@rand_addr=0x64010102, 0x23e}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @ra={0x94, 0x4}, @generic={0x83, 0x11, "e1941f0846433a2a51763d9f95d260"}, @end, @timestamp_prespec={0x44, 0x3c, 0x9a, 0x3, 0x0, [{@remote, 0x6}, {@rand_addr=0x64010101, 0x9}, {@remote, 0xffffffff}, {@multicast2, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@local, 0x979e}]}, @generic={0x44, 0xe, "5f66b82288a4c41dc1815597"}, @timestamp={0x44, 0x10, 0xe9, 0x0, 0x1, [0x8, 0x444, 0x1]}, @timestamp_prespec={0x44, 0x3c, 0x9f, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x3f}, 0x1}, {@local, 0x1ff}, {@rand_addr=0x64010102, 0x9}, {@private=0xa010101}, {@remote, 0x1}, {@multicast2, 0x4}, {@empty, 0xb}]}, @lsrr={0x83, 0x17, 0x61, [@loopback, @multicast1, @local, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) (async) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@private0, @in6=@mcast1, 0x4e24, 0x7, 0x4e24, 0x8001, 0x0, 0xc0, 0x0, 0x32, r2}, {0x4, 0xec, 0x3, 0x8, 0x10000, 0x2, 0xfffffffffffffffb, 0x7}, {0x64, 0x4, 0xd, 0xffffffffffff0001}, 0x7, 0x6e6bb4, 0x2, 0x0, 0x1}, {{@in=@rand_addr=0x64010100, 0x4d5, 0x3c}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x34ff, 0x1, 0x1, 0x80, 0x6, 0x7fff}}, 0xe8) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r3, @ANYBLOB="0000800000000000180034800500"], 0x38}, 0x1, 0x300}, 0x0) (async) 15.395023876s ago: executing program 1 (id=1644): socket$key(0xf, 0x3, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x10, {0x0, 0x0, 0x4a00, 0x0, 0x8020}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x840) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002780)={0x30, 0x40, 0x107, 0x70bd2d, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x1c, 0x1c2, 0x0, 0x1, [@nested={0x18, 0x9, 0x0, 0x1, [@typed={0x12, 0x91, 0x0, 0x0, @str='/dev/qrtr-tun\x00'}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r3) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x40, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0xa}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x1, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$SIOCX25SCALLUSERDATA(r4, 0x89e5, &(0x7f0000000380)={0x5, "9b2bfd996c0be5abb43cb3b0dbe99f3a7926b4b8e032ee19cb719817a88a825ea1816942b4e9322bc95288a463141e5ac63db6b8a145be31b7616743ed728bb8f3bae936e132cf4d5bf66ad646ff4ccef51ec743af93382a56162bbefd23448915341fcaf41f1d0862316ab3dd7d1de6f02814ca5f5c03d29189749fef86a658"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x210}]}, 0x34}}, 0x8000) 647.693304ms ago: executing program 32 (id=1637): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='!\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r0}]}, 0x24}}, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x3004c071) r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000180)=0xffffffc0, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x12, &(0x7f0000000300), 0x4) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x10, 0x0, @val=@tracing={0xffffffffffffffff, 0x4}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000730133000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 612.662787ms ago: executing program 33 (id=1639): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000000000000002"], 0x1f0}}, 0x2000c000) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0xcdb281c69b69ad50}, 0x4000) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x40, 0x0, 0xc8, r3}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x48}}, 0x400c0c0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000c00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000880)={0x314, r5, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "bc2cabd9bedf11b96f20c5caf855b84283886c903a9d82"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "4a35d4dfd37a275c5f07151d45b24e3cdef30a38c919ef598ba36d7d18"}}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf4ec}]}, @TIPC_NLA_NODE={0x160, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "6aa03da811134ac33e16a2127f9f39fdcd4c9208"}}, @TIPC_NLA_NODE_ID={0x69, 0x3, "aa881b8b29f0207a11d99902c70cd73b3e5b1fa8cd8d7d4660d9b33747b61c3097f7d13f73b312ff70f2b6f009db380599acb46dac1280d06de50d611cbaa162b55d9c55425a1b64eb7f8f0a257af79d03a98b0136a4975b6c19a0e96d3ad1378efb2bcf63"}, @TIPC_NLA_NODE_ID={0xa0, 0x3, "e185a4a329e85ceee0417bb96c0e90398c59b07608b426136249af1040bf7491ad4fb8983f946e36594e84d127b1748d9270a8315e5a471ea2136ce26b793ba3acae9145691e52cbed54be33c4c0eff3b319117f38702c76f0c61cf08abcfeefffbeaffeb32f823ed475b8d178c3261618f72453eb1c483d3c57316fe14827ccedc2e8aa32b81f59f0b92c062b3e7505f6b9c14ea04ee2b0cd41cd62"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3f80}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xc0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f0a}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7c76}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}]}, 0x314}, 0x1, 0x0, 0x0, 0x90}, 0x4000800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x14, 0x3d, 0x301, 0x70bd25, 0xfffffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073717a30000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r9, @ANYBLOB="01002abd7000fbdbdf25030000000c00060004000000000000000c00040001000000000000000c0002000200000000000000080001"], 0xc0}, 0x1, 0x0, 0x0, 0x66393c82b5350394}, 0x20000804) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}}, 0x4) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4000}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x3501, 0x5, 0x0, 0x0, 0x0, 0x9}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 125.13537ms ago: executing program 34 (id=1644): socket$key(0xf, 0x3, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x10, {0x0, 0x0, 0x4a00, 0x0, 0x8020}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x840) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002780)={0x30, 0x40, 0x107, 0x70bd2d, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x1c, 0x1c2, 0x0, 0x1, [@nested={0x18, 0x9, 0x0, 0x1, [@typed={0x12, 0x91, 0x0, 0x0, @str='/dev/qrtr-tun\x00'}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r3) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x40, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0xa}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x1, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$SIOCX25SCALLUSERDATA(r4, 0x89e5, &(0x7f0000000380)={0x5, "9b2bfd996c0be5abb43cb3b0dbe99f3a7926b4b8e032ee19cb719817a88a825ea1816942b4e9322bc95288a463141e5ac63db6b8a145be31b7616743ed728bb8f3bae936e132cf4d5bf66ad646ff4ccef51ec743af93382a56162bbefd23448915341fcaf41f1d0862316ab3dd7d1de6f02814ca5f5c03d29189749fef86a658"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x210}]}, 0x34}}, 0x8000) 64.132023ms ago: executing program 35 (id=1641): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}}, @timestamp={0xd, 0x0, 0x0, 0x0, 0xd, 0x9, 0xc7f, 0x5}}}}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="b30100f2", @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf250f000000080034002400080008000300", @ANYRES32=r3, @ANYBLOB="050033"], 0x2c}}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x25dfdffd, {0x0, 0x0, 0x0, 0x0, {0x6}, {}, {0x8, 0x6}}}, 0x24}}, 0x20004811) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r7, 0x0, 0x0}, 0x10) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x48, r8, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) sendmmsg(r10, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r13, @ANYBLOB="0c00990000000200000000000800a00094090000080026009409000008002700000000000800a1"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1c, 0x4, 0xa, 0xff, 0x8000, 0x1, 0xd61, '\x00', r14, 0xffffffffffffffff, 0x2, 0x2, 0x4}, 0x50) 0s ago: executing program 36 (id=1642): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0x44, 0x4, 0x508, 0xffffffff, 0x0, 0x1d0, 0x1d0, 0xffffffff, 0xffffffff, 0x438, 0x438, 0x438, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0xa8, 0x1d0, 0x8502}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x4, 0x0, 'system_u:object_r:wireless_device_t:s0\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xff, 0xff, 0xff], [0xffffffff, 0xff, 0x0, 0xffffff00], 'erspan0\x00', 'caif0\x00', {}, {}, 0xc8, 0x0, 0x4, 0x50}, 0x0, 0x128, 0x150, 0x0, {0x0, 0x11}, [@common=@eui64={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'batadv_slave_0\x00', {0x8, 0x7, 0x101, 0x3, 0x4, 0x4, 0xfffffff8, 0x0, 0x78}, {0x1}}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x401}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x1007, 0x81, 0x1, 0x0, "d13aea835ab25d2af06d2a594bd55044f3f8f4a6ee1c3d886408088b5319e5294d4192982093b0f1e78cdb4585b98822e00d4b509e74d3ebb43b153f2481c6e3"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x54, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffd93, 0xb, 0x4}, {0x6}, {0x8, 0x13, 0xb}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x44040}, 0x4044000) kernel console output (not intermixed with test programs): after parsing attributes in process `syz.4.197'. [ 106.196600][ T6635] netlink: 28 bytes leftover after parsing attributes in process `syz.2.198'. [ 106.655430][ T6655] netlink: 76 bytes leftover after parsing attributes in process `syz.3.203'. [ 106.724071][ T6655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.203'. [ 106.912647][ T6672] geneve2: entered promiscuous mode [ 107.087298][ T6680] bridge0: entered allmulticast mode [ 107.136044][ T6680] pim6reg: entered allmulticast mode [ 108.120692][ T4944] Bluetooth: hci3: command tx timeout [ 108.188940][ T6730] __nla_validate_parse: 8 callbacks suppressed [ 108.188957][ T6730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.223'. [ 108.428240][ T6747] netlink: 28 bytes leftover after parsing attributes in process `syz.2.226'. [ 108.453488][ T6747] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 108.663282][ T6755] netlink: 276 bytes leftover after parsing attributes in process `syz.2.229'. [ 108.811331][ T6743] netlink: 104 bytes leftover after parsing attributes in process `syz.1.227'. [ 109.423674][ T6779] netlink: 9 bytes leftover after parsing attributes in process `syz.3.235'. [ 109.456468][ T6779] 0·: renamed from hsr0 (while UP) [ 109.477062][ T6779] 0·: entered allmulticast mode [ 109.483416][ T6779] hsr_slave_0: entered allmulticast mode [ 109.492144][ T6779] hsr_slave_1: entered allmulticast mode [ 109.502697][ T6779] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 109.620373][ T6785] syzkaller0: entered promiscuous mode [ 109.635405][ T6785] syzkaller0: entered allmulticast mode [ 109.658143][ T6777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.236'. [ 109.788542][ T6794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.980877][ T6800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.242'. [ 110.064716][ T6806] Bluetooth: MGMT ver 1.23 [ 110.203835][ T4944] Bluetooth: hci3: command tx timeout [ 110.321187][ T6819] netlink: 24 bytes leftover after parsing attributes in process `syz.2.250'. [ 110.383025][ T6798] netlink: 104 bytes leftover after parsing attributes in process `syz.1.241'. [ 111.477240][ T6862] netlink: 48 bytes leftover after parsing attributes in process `syz.3.262'. [ 111.774112][ T6874] ieee802154 phy0 wpan0: encryption failed: -22 [ 112.154262][ T6892] syzkaller0: entered promiscuous mode [ 112.170236][ T6892] syzkaller0: entered allmulticast mode [ 112.281064][ T4944] Bluetooth: hci3: command tx timeout [ 113.444121][ T6914] __nla_validate_parse: 4 callbacks suppressed [ 113.444164][ T6914] netlink: 28 bytes leftover after parsing attributes in process `syz.0.278'. [ 113.672200][ T6935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.282'. [ 113.766965][ T6942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.284'. [ 113.894213][ T6943] nbd: must specify a size in bytes for the device [ 114.033786][ T6959] openvswitch: netlink: IP tunnel dst address not specified [ 114.135002][ T6967] netlink: 36 bytes leftover after parsing attributes in process `syz.1.290'. [ 114.360482][ T4944] Bluetooth: hci3: command tx timeout [ 114.592887][ T6989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.293'. [ 115.011037][ T7010] netlink: 'syz.0.301': attribute type 1 has an invalid length. [ 115.019219][ T7011] FAULT_INJECTION: forcing a failure. [ 115.019219][ T7011] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 115.063029][ T7011] CPU: 0 UID: 0 PID: 7011 Comm: syz.1.302 Not tainted syzkaller #0 PREEMPT(full) [ 115.063051][ T7011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 115.063068][ T7011] Call Trace: [ 115.063077][ T7011] [ 115.063084][ T7011] dump_stack_lvl+0xe8/0x150 [ 115.063116][ T7011] should_fail_ex+0x412/0x560 [ 115.063143][ T7011] _copy_to_user+0x31/0xb0 [ 115.063171][ T7011] simple_read_from_buffer+0xe1/0x170 [ 115.063196][ T7011] proc_fail_nth_read+0x1bb/0x230 [ 115.063221][ T7011] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 115.063245][ T7011] ? rw_verify_area+0x2a6/0x4d0 [ 115.063269][ T7011] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 115.063292][ T7011] vfs_read+0x20c/0xa70 [ 115.063319][ T7011] ? __pfx___mutex_lock+0x10/0x10 [ 115.063337][ T7011] ? __pfx_vfs_read+0x10/0x10 [ 115.063362][ T7011] ? __fget_files+0x2a/0x420 [ 115.063386][ T7011] ? __fget_files+0x3a0/0x420 [ 115.063405][ T7011] ? __fget_files+0x2a/0x420 [ 115.063432][ T7011] ksys_read+0x150/0x270 [ 115.063457][ T7011] ? __pfx_ksys_read+0x10/0x10 [ 115.063488][ T7011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.063507][ T7011] do_syscall_64+0x15f/0xf80 [ 115.063532][ T7011] ? trace_irq_disable+0x3b/0x140 [ 115.063556][ T7011] ? clear_bhb_loop+0x40/0x90 [ 115.063578][ T7011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.063594][ T7011] RIP: 0033:0x7f2ae095d68e [ 115.063618][ T7011] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 115.063636][ T7011] RSP: 002b:00007f2ae1904fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 115.063657][ T7011] RAX: ffffffffffffffda RBX: 00007f2ae19056c0 RCX: 00007f2ae095d68e [ 115.063669][ T7011] RDX: 000000000000000f RSI: 00007f2ae19050a0 RDI: 0000000000000004 [ 115.063679][ T7011] RBP: 00007f2ae1905090 R08: 0000000000000000 R09: 0000000000000000 [ 115.063688][ T7011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.063697][ T7011] R13: 00007f2ae0c16038 R14: 00007f2ae0c15fa0 R15: 00007ffe7928ffe8 [ 115.063724][ T7011] [ 115.300262][ T7010] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.366871][ T7017] netlink: 192 bytes leftover after parsing attributes in process `syz.2.303'. [ 115.376073][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.303'. [ 115.394658][ T7010] vlan2: entered allmulticast mode [ 115.399908][ T7010] bond2: entered allmulticast mode [ 115.416748][ T7010] bond2: (slave geneve2): making interface the new active one [ 115.424341][ T7010] geneve2: entered allmulticast mode [ 115.431699][ T7010] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 115.574189][ T7035] netlink: 'syz.3.304': attribute type 4 has an invalid length. [ 116.049494][ T7048] netlink: 48 bytes leftover after parsing attributes in process `syz.3.307'. [ 116.232971][ T7055] netlink: 16 bytes leftover after parsing attributes in process `syz.4.311'. [ 116.376981][ T7055] bond0: entered promiscuous mode [ 116.403230][ T7055] bond_slave_0: entered promiscuous mode [ 116.412031][ T7055] bond_slave_1: entered promiscuous mode [ 116.438269][ T7060] netlink: 16 bytes leftover after parsing attributes in process `syz.1.314'. [ 116.450592][ T4944] Bluetooth: hci3: command tx timeout [ 116.467669][ T7055] bond0: left promiscuous mode [ 116.506586][ T7055] bond_slave_0: left promiscuous mode [ 116.544508][ T7055] bond_slave_1: left promiscuous mode [ 116.698784][ T7078] nbd: device at index 64 is going down [ 116.946776][ T5633] udevd[5633]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 117.009964][ T5628] udevd[5628]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 117.117363][ T7099] netlink: 'syz.2.324': attribute type 49 has an invalid length. [ 117.356615][ T7112] netlink: 'syz.2.327': attribute type 4 has an invalid length. [ 117.625310][ T6121] IPVS: starting estimator thread 0... [ 117.730422][ T7128] IPVS: using max 32 ests per chain, 76800 per kthread [ 117.745149][ T7132] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.863894][ T7137] netlink: 'syz.2.334': attribute type 7 has an invalid length. [ 118.205362][ T7158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.523405][ T4944] Bluetooth: hci3: command tx timeout [ 118.967213][ T7191] xt_HMARK: spi-set and port-set can't be combined [ 119.673600][ T7209] netlink: 'syz.0.354': attribute type 12 has an invalid length. [ 119.741157][ T7209] __nla_validate_parse: 4 callbacks suppressed [ 119.741175][ T7209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.354'. [ 119.796637][ T7209] macsec0: entered promiscuous mode [ 119.822050][ T7209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.354'. [ 119.829259][ T7210] netlink: 16 bytes leftover after parsing attributes in process `syz.4.355'. [ 119.911027][ T7209] veth1_macvtap: left promiscuous mode [ 120.005524][ T7209] macsec0 (unregistering): left promiscuous mode [ 120.045017][ T7219] netlink: 'syz.3.359': attribute type 21 has an invalid length. [ 120.063411][ T7219] netlink: 128 bytes leftover after parsing attributes in process `syz.3.359'. [ 120.082762][ T7219] netlink: 'syz.3.359': attribute type 5 has an invalid length. [ 120.112602][ T7219] netlink: 3 bytes leftover after parsing attributes in process `syz.3.359'. [ 120.419454][ T7244] netlink: 'syz.4.364': attribute type 1 has an invalid length. [ 120.438743][ T7244] netlink: 36 bytes leftover after parsing attributes in process `syz.4.364'. [ 120.493502][ T7232] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.520684][ T7232] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.560996][ T7249] netlink: 160 bytes leftover after parsing attributes in process `syz.3.363'. [ 120.601232][ T4944] Bluetooth: hci3: command tx timeout [ 120.688544][ T7262] netlink: 296 bytes leftover after parsing attributes in process `syz.4.366'. [ 121.085408][ T4957] block nbd0: Connection timed out, retrying (0/2 alive) [ 121.093660][ T4957] block nbd0: Connection timed out, retrying (0/2 alive) [ 121.101020][ T4957] block nbd0: Connection timed out, retrying (0/2 alive) [ 121.108125][ T4957] block nbd0: Connection timed out, retrying (0/2 alive) [ 121.117279][ T4957] block nbd0: Dead connection, failed to find a fallback [ 121.189251][ T7268] syzkaller0: entered promiscuous mode [ 121.194915][ T7268] syzkaller0: entered allmulticast mode [ 121.233423][ T7281] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.284092][ T7297] netlink: 'syz.3.372': attribute type 21 has an invalid length. [ 121.338256][ T7294] xt_CT: You must specify a L4 protocol and not use inversions on it [ 121.388781][ T7281] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.439487][ T7302] netlink: 64 bytes leftover after parsing attributes in process `syz.1.375'. [ 122.532830][ T7314] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 122.681361][ T4944] Bluetooth: hci3: command tx timeout [ 122.708086][ T7302] netlink: 48 bytes leftover after parsing attributes in process `syz.1.375'. [ 122.719075][ T7302] bridge_slave_0: left allmulticast mode [ 122.724872][ T7302] bridge_slave_0: left promiscuous mode [ 122.730857][ T7302] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.739974][ T7302] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 122.849028][ T7281] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.965232][ T7323] team_slave_1: entered promiscuous mode [ 122.992931][ T7323] team0: Port device team_slave_1 removed [ 123.109702][ T7281] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.416964][ T7348] bond1: option ad_user_port_key: invalid value (65535) [ 123.425742][ T7348] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 123.440097][ T7348] bond1 (unregistering): Released all slaves [ 123.506074][ T472] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.676677][ T472] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.704662][ T472] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.739416][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.395568][ T7405] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 124.407515][ T5823] IPVS: starting estimator thread 0... [ 124.445954][ T7410] openvswitch: netlink: IP tunnel TTL not specified. [ 124.507010][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.526900][ T7406] IPVS: using max 31 ests per chain, 74400 per kthread [ 124.544558][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.565465][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.591120][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.760444][ T4944] Bluetooth: hci3: command tx timeout [ 124.833005][ T7429] __nla_validate_parse: 13 callbacks suppressed [ 124.833022][ T7429] netlink: 104 bytes leftover after parsing attributes in process `syz.1.409'. [ 125.051438][ T7438] netlink: 'syz.3.411': attribute type 8 has an invalid length. [ 125.158778][ T7444] syzkaller1: entered promiscuous mode [ 125.164917][ T7445] netlink: 20 bytes leftover after parsing attributes in process `syz.4.412'. [ 125.172379][ T7444] syzkaller1: entered allmulticast mode [ 125.242590][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.412'. [ 125.661734][ T7458] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.911225][ T7473] sit1: entered promiscuous mode [ 125.941653][ T7474] netlink: 17 bytes leftover after parsing attributes in process `syz.1.419'. [ 126.303467][ T7493] netlink: 20 bytes leftover after parsing attributes in process `syz.1.426'. [ 126.340931][ T7497] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 126.404095][ T6103] IPVS: starting estimator thread 0... [ 126.523109][ T7506] IPVS: using max 30 ests per chain, 72000 per kthread [ 126.578491][ T7494] bond1: left promiscuous mode [ 126.597649][ T7494] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.609446][ T7513] netlink: 'syz.3.430': attribute type 9 has an invalid length. [ 126.617954][ T7513] netlink: 'syz.3.430': attribute type 6 has an invalid length. [ 126.618412][ T7494] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 126.646969][ T7494] 8021q: adding VLAN 0 to HW filter on device eth0 [ 126.657326][ T7494] 8021q: adding VLAN 0 to HW filter on device eth1 [ 126.668797][ T7494] 8021q: adding VLAN 0 to HW filter on device eth2 [ 126.679905][ T7494] 8021q: adding VLAN 0 to HW filter on device eth3 [ 126.688795][ T7494] 8021q: adding VLAN 0 to HW filter on device bond3 [ 126.729498][ T7510] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 126.753249][ T7510] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 126.776674][ T7510] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 126.827763][ T7519] geneve2: entered promiscuous mode [ 126.841195][ T4944] Bluetooth: hci3: command tx timeout [ 126.861044][ T1171] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.880037][ T1171] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.901399][ T1171] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.932288][ T1171] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.434404][ T7548] netlink: 'syz.4.439': attribute type 1 has an invalid length. [ 127.448814][ T7549] xt_connbytes: Forcing CT accounting to be enabled [ 127.712995][ T7568] netlink: 28 bytes leftover after parsing attributes in process `syz.2.443'. [ 127.753056][ T7565] netlink: 'syz.2.443': attribute type 11 has an invalid length. [ 127.956517][ T7572] netlink: 24 bytes leftover after parsing attributes in process `syz.3.444'. [ 128.136437][ T7596] netlink: 'syz.3.444': attribute type 1 has an invalid length. [ 128.165036][ T7596] netlink: 224 bytes leftover after parsing attributes in process `syz.3.444'. [ 128.220229][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.448'. [ 128.389756][ T7602] nicvf0: tun_chr_ioctl cmd 1074025673 [ 128.406526][ T7600] nicvf0: tun_chr_ioctl cmd 2148553947 [ 128.421647][ T7602] nicvf0: tun_chr_ioctl cmd 1074025673 [ 128.494493][ T7605] netlink: 20 bytes leftover after parsing attributes in process `syz.0.450'. [ 128.536273][ T7605] veth0: entered promiscuous mode [ 128.727968][ T7604] veth0: left promiscuous mode [ 128.920443][ T4944] Bluetooth: hci3: command tx timeout [ 129.610907][ T7653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.619347][ T7653] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.635938][ T7653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.695876][ T7653] team_slave_1: left promiscuous mode [ 129.719704][ T7653] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 129.731149][ T7653] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 129.754422][ T7653] 0·: left allmulticast mode [ 129.759141][ T7653] hsr_slave_0: left allmulticast mode [ 129.770524][ T7653] hsr_slave_1: left allmulticast mode [ 129.797474][ T7653] veth1_vlan: left promiscuous mode [ 129.807798][ T7653] veth0_vlan: left promiscuous mode [ 129.814087][ T7653] veth0_vlan: entered promiscuous mode [ 129.824088][ T7664] netlink: 'syz.1.466': attribute type 1 has an invalid length. [ 129.827260][ T7653] veth1_vlan: entered promiscuous mode [ 129.843979][ T7653] veth1_macvtap: left promiscuous mode [ 129.851044][ T7653] veth0_macvtap: left promiscuous mode [ 129.857890][ T7653] veth0_macvtap: entered promiscuous mode [ 129.866436][ T7653] veth1_macvtap: entered promiscuous mode [ 129.886391][ T7653] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 129.895306][ T7653] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 129.904075][ T7653] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 129.913381][ T7653] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 129.923716][ T7653] vlan2: left promiscuous mode [ 129.930868][ T7653] bond_slave_1: left promiscuous mode [ 129.936906][ T7653] gtp0: left promiscuous mode [ 129.944324][ T7653] gtp0: left allmulticast mode [ 129.953322][ T7653] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.963540][ T7653] geneve2: left promiscuous mode [ 129.969817][ T7653] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 129.981708][ T7653] sit1: left promiscuous mode [ 130.070430][ T7660] tipc: Started in network mode [ 130.082004][ T7660] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 130.090109][ T7660] tipc: Enabled bearer , priority 31 [ 130.183383][ T7674] __nla_validate_parse: 2 callbacks suppressed [ 130.183400][ T7674] netlink: 32 bytes leftover after parsing attributes in process `syz.4.469'. [ 130.281632][ T7679] openvswitch: netlink: Key type 142 is out of range max 32 [ 130.295601][ T7665] macvlan3: entered promiscuous mode [ 130.309194][ T7665] macvlan3: entered allmulticast mode [ 130.335296][ T472] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.344270][ T472] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.389385][ T472] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.439015][ T472] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.465863][ T472] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.488972][ T472] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.568226][ T472] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.598085][ T472] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.776336][ T7694] syzkaller1: entered promiscuous mode [ 130.805696][ T7694] syzkaller1: entered allmulticast mode [ 130.838608][ T7713] IPv6: Can't replace route, no match found [ 130.854033][ T7713] IPv6: Can't replace route, no match found [ 130.889740][ T7710] syzkaller0: entered promiscuous mode [ 130.897246][ T7710] syzkaller0: entered allmulticast mode [ 131.000743][ T4944] Bluetooth: hci3: command tx timeout [ 131.203955][ T6103] tipc: Node number set to 10136234 [ 131.342300][ T7735] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 131.364323][ T7735] bond3: (slave lo): Enslaving as an active interface with an up link [ 131.374167][ T7735] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 132.137801][ T7785] ip6t_rpfilter: unknown options [ 132.261632][ T7790] x_tables: duplicate underflow at hook 1 [ 132.506678][ T7798] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 132.603167][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.761863][ T7817] netlink: 'syz.1.501': attribute type 11 has an invalid length. [ 132.771840][ T7817] netlink: 134292 bytes leftover after parsing attributes in process `syz.1.501'. [ 133.092763][ T4944] Bluetooth: hci3: command tx timeout [ 133.232963][ T7843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.502'. [ 133.309295][ T7845] netlink: 44 bytes leftover after parsing attributes in process `syz.1.502'. [ 133.372251][ T7845] netlink: 44 bytes leftover after parsing attributes in process `syz.1.502'. [ 134.056779][ T7871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.510'. [ 135.160942][ T4944] Bluetooth: hci3: command tx timeout [ 135.196183][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.512'. [ 135.205389][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.512'. [ 137.151870][ T7876] geneve2: entered promiscuous mode [ 137.167951][ T7876] geneve2: entered allmulticast mode [ 137.181500][ T6335] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 137.220749][ T6335] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 137.242372][ T4944] Bluetooth: hci3: command tx timeout [ 137.264253][ T6335] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 137.289838][ T6335] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 137.939662][ T7928] hsr0: entered promiscuous mode [ 137.974928][ T7926] hsr0: left promiscuous mode [ 138.101089][ T7935] netlink: 'syz.1.526': attribute type 1 has an invalid length. [ 138.117368][ T7939] netlink: 'syz.0.527': attribute type 1 has an invalid length. [ 138.243695][ T7935] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.305399][ T7936] bond2: (slave veth3): Enslaving as an active interface with an up link [ 138.401154][ T7950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.530'. [ 139.008939][ T7973] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.163878][ T7973] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.215603][ T7979] syzkaller1: entered promiscuous mode [ 139.221307][ T7979] syzkaller1: entered allmulticast mode [ 139.247170][ T7981] netlink: 20 bytes leftover after parsing attributes in process `syz.2.537'. [ 139.320509][ T4944] Bluetooth: hci3: command tx timeout [ 139.349387][ T7973] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.550088][ T7973] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.724587][ T5628] udevd[5628]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 139.798533][ T6164] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.882272][ T6164] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.903064][ T8000] veth1_macvtap: left promiscuous mode [ 139.909504][ T8000] macsec0: entered promiscuous mode [ 139.915383][ T8000] macsec0: entered allmulticast mode [ 140.013730][ T6164] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.034218][ T6164] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.047331][ T8003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.544'. [ 140.057154][ T8003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.544'. [ 140.100726][ T8000] netlink: 28 bytes leftover after parsing attributes in process `syz.4.543'. [ 140.151481][ T8000] netlink: 28 bytes leftover after parsing attributes in process `syz.4.543'. [ 140.290649][ T8010] netlink: 'syz.3.546': attribute type 4 has an invalid length. [ 140.313001][ T8010] netlink: 17 bytes leftover after parsing attributes in process `syz.3.546'. [ 140.359012][ T8013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.547'. [ 140.478249][ T8013] netlink: 'syz.1.547': attribute type 4 has an invalid length. [ 140.540436][ T8013] netlink: 156 bytes leftover after parsing attributes in process `syz.1.547'. [ 140.565833][ T8013] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 140.736072][ T8026] netlink: 20 bytes leftover after parsing attributes in process `syz.2.551'. [ 140.964472][ T8032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.554'. [ 141.006585][ T8034] netlink: 28 bytes leftover after parsing attributes in process `syz.1.555'. [ 141.368738][ T8058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.563'. [ 141.402246][ T4944] Bluetooth: hci3: command tx timeout [ 141.463497][ T8061] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 141.485310][ T8061] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 141.716747][ T6164] tipc: Subscription rejected, illegal request [ 141.740234][ T8072] netlink: 'syz.2.567': attribute type 1 has an invalid length. [ 141.744785][ T8075] netlink: 20 bytes leftover after parsing attributes in process `syz.0.568'. [ 141.788530][ T8066] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 141.804818][ T8078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.566'. [ 141.816829][ T8068] batadv_slave_0: entered promiscuous mode [ 141.827247][ T8072] netlink: 24 bytes leftover after parsing attributes in process `syz.2.567'. [ 141.887796][ T8078] bond2: entered promiscuous mode [ 141.893530][ T8078] 8021q: adding VLAN 0 to HW filter on device bond2 [ 141.919855][ T8068] 8021q: adding VLAN 0 to HW filter on device bond2 [ 141.928108][ T8068] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 141.940793][ T8068] bond2: (slave vti0): Error -95 calling set_mac_address [ 142.007713][ T6335] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.066646][ T6335] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.096666][ T6335] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.129464][ T8067] batadv_slave_0: left promiscuous mode [ 142.137291][ T8084] netlink: 'syz.4.569': attribute type 1 has an invalid length. [ 142.152490][ T6335] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.103419][ T8116] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 143.466667][ T8154] netlink: 'syz.0.589': attribute type 1 has an invalid length. [ 143.483650][ T4944] Bluetooth: hci3: command tx timeout [ 143.572541][ T8154] bond4: entered promiscuous mode [ 143.578868][ T8154] 8021q: adding VLAN 0 to HW filter on device bond4 [ 143.629719][ T8156] bond4: left promiscuous mode [ 143.635653][ T8156] bond4: entered allmulticast mode [ 143.668382][ T8154] bond4: (slave bridge1): making interface the new active one [ 143.676275][ T8154] bridge1: entered allmulticast mode [ 143.684872][ T8154] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 144.114663][ T8173] netlink: 'syz.2.592': attribute type 1 has an invalid length. [ 144.239792][ T8185] netlink: 'syz.4.596': attribute type 2 has an invalid length. [ 144.321310][ T8172] netlink: 'syz.3.594': attribute type 1 has an invalid length. [ 144.335152][ T8172] netlink: 'syz.3.594': attribute type 2 has an invalid length. [ 144.713494][ T8211] xt_hashlimit: size too large, truncated to 1048576 [ 144.839036][ T8211] xt_hashlimit: size too large, truncated to 1048576 [ 145.086376][ T8227] bond5: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms [ 145.131707][ T8227] bond5: entered promiscuous mode [ 145.151365][ T8227] 8021q: adding VLAN 0 to HW filter on device bond5 [ 145.359634][ T8241] netlink: 'syz.0.609': attribute type 4 has an invalid length. [ 145.560401][ T4944] Bluetooth: hci3: command tx timeout [ 145.689716][ T472] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.701326][ T472] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.724470][ T472] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.747268][ T8253] __nla_validate_parse: 19 callbacks suppressed [ 145.747283][ T8253] netlink: 28 bytes leftover after parsing attributes in process `syz.0.612'. [ 145.763260][ T8253] netlink: 28 bytes leftover after parsing attributes in process `syz.0.612'. [ 145.773639][ T472] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.065449][ T8266] netlink: 48 bytes leftover after parsing attributes in process `syz.2.614'. [ 146.076343][ T8266] bridge_slave_0: left allmulticast mode [ 146.082134][ T8266] bridge_slave_0: left promiscuous mode [ 146.088001][ T8266] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.097979][ T8266] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 146.195582][ T8274] netlink: 'syz.0.617': attribute type 11 has an invalid length. [ 146.208762][ T8274] netlink: 532 bytes leftover after parsing attributes in process `syz.0.617'. [ 146.642969][ T8307] netlink: 'syz.4.624': attribute type 1 has an invalid length. [ 146.665389][ T8307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.624'. [ 146.705096][ T8307] netlink: 'syz.4.624': attribute type 1 has an invalid length. [ 146.782436][ T8303] syzkaller0: create flow: hash 565944492 index 1 [ 146.898851][ T472] syzkaller0: tun_net_xmit 76 [ 146.907039][ T472] syzkaller0: tun_net_xmit 48 [ 146.920575][ T6111] syzkaller0: tun_net_xmit 76 [ 147.124413][ T8302] syzkaller0: delete flow: hash 565944492 index 1 [ 147.640947][ T4944] Bluetooth: hci3: command tx timeout [ 147.889538][ T8349] xt_l2tp: wrong L2TP version: 0 [ 147.902817][ T8349] xt_l2tp: wrong L2TP version: 0 [ 148.755584][ T8313] syzkaller1: entered promiscuous mode [ 148.763626][ T8313] syzkaller1: entered allmulticast mode [ 148.929797][ T8364] netlink: 40 bytes leftover after parsing attributes in process `syz.1.634'. [ 149.410871][ T8392] netlink: 'syz.1.640': attribute type 3 has an invalid length. [ 149.722541][ T4944] Bluetooth: hci3: command tx timeout [ 150.098034][ T8423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.645'. [ 150.138058][ T8423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.645'. [ 150.489914][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.649'. [ 150.934122][ T8461] tipc: Enabled bearer , priority 0 [ 150.961587][ T8461] syzkaller0: entered promiscuous mode [ 150.979459][ T8461] syzkaller0: entered allmulticast mode [ 151.065293][ T8461] netlink: 'syz.4.652': attribute type 1 has an invalid length. [ 151.102298][ T8464] netlink: 24 bytes leftover after parsing attributes in process `syz.3.653'. [ 151.110430][ T8461] netlink: 'syz.4.652': attribute type 2 has an invalid length. [ 151.133132][ T8465] netlink: 44 bytes leftover after parsing attributes in process `syz.4.652'. [ 151.165855][ T8461] netlink: 'syz.4.652': attribute type 1 has an invalid length. [ 151.212680][ T8472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.653'. [ 151.239937][ T8461] netlink: 16 bytes leftover after parsing attributes in process `syz.4.652'. [ 151.259709][ T8470] tipc: Resetting bearer [ 151.378001][ T8460] tipc: Resetting bearer [ 151.464410][ T8460] tipc: Disabling bearer [ 151.796150][ T8494] xt_l2tp: v2 sid > 0xffff: 8388608 [ 151.811607][ T4944] Bluetooth: hci3: command tx timeout [ 152.110433][ T8514] sctp: [Deprecated]: syz.0.662 (pid 8514) Use of int in max_burst socket option. [ 152.110433][ T8514] Use struct sctp_assoc_value instead [ 152.164320][ T8513] sctp: [Deprecated]: syz.0.662 (pid 8513) Use of int in max_burst socket option. [ 152.164320][ T8513] Use struct sctp_assoc_value instead [ 152.389230][ T8526] netlink: 277 bytes leftover after parsing attributes in process `syz.4.665'. [ 152.683228][ T8533] syzkaller0: entered promiscuous mode [ 152.700587][ T8533] syzkaller0: entered allmulticast mode [ 152.719207][ T8533] policy can only be matched on NF_INET_PRE_ROUTING [ 152.719222][ T8533] unable to load match [ 152.744453][ T8533] netlink: 68 bytes leftover after parsing attributes in process `syz.1.668'. [ 153.075203][ T8559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.675'. [ 153.741331][ T8600] nbd: must specify a size in bytes for the device [ 153.765355][ T8601] netlink: 24 bytes leftover after parsing attributes in process `syz.3.684'. [ 153.781510][ T8600] batadv_slave_1: entered promiscuous mode [ 153.880767][ T4944] Bluetooth: hci3: command tx timeout [ 153.910053][ T8600] batadv_slave_1: left promiscuous mode [ 153.943242][ T8607] xt_hashlimit: size too large, truncated to 1048576 [ 153.950163][ T8608] xt_hashlimit: size too large, truncated to 1048576 [ 154.040140][ T8609] tipc: Started in network mode [ 154.061117][ T8609] tipc: Node identity 52e2754dd536, cluster identity 4711 [ 154.088125][ T8609] tipc: Enabled bearer , priority 0 [ 154.113245][ T8613] syzkaller0: entered promiscuous mode [ 154.130350][ T8613] syzkaller0: entered allmulticast mode [ 154.464759][ T8605] tipc: Resetting bearer [ 154.548670][ T8605] tipc: Disabling bearer [ 154.583155][ T8639] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 154.682596][ T8642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.693'. [ 154.758905][ T8651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.693'. [ 155.650033][ T8703] FAULT_INJECTION: forcing a failure. [ 155.650033][ T8703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.710393][ T8703] CPU: 0 UID: 0 PID: 8703 Comm: syz.2.705 Not tainted syzkaller #0 PREEMPT(full) [ 155.710416][ T8703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 155.710427][ T8703] Call Trace: [ 155.710437][ T8703] [ 155.710444][ T8703] dump_stack_lvl+0xe8/0x150 [ 155.710469][ T8703] should_fail_ex+0x412/0x560 [ 155.710496][ T8703] _copy_from_user+0x2d/0xb0 [ 155.710522][ T8703] ___sys_sendmsg+0x1c6/0x360 [ 155.710548][ T8703] ? __lock_acquire+0x6b5/0x2cf0 [ 155.710570][ T8703] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.710619][ T8703] ? __fget_files+0x2a/0x420 [ 155.710639][ T8703] ? __fget_files+0x3a0/0x420 [ 155.710668][ T8703] __x64_sys_sendmsg+0x1bd/0x2a0 [ 155.710688][ T8703] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 155.710713][ T8703] ? __pfx_ksys_write+0x10/0x10 [ 155.710746][ T8703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.710765][ T8703] do_syscall_64+0x15f/0xf80 [ 155.710790][ T8703] ? trace_irq_disable+0x3b/0x140 [ 155.710816][ T8703] ? clear_bhb_loop+0x40/0x90 [ 155.710837][ T8703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.710854][ T8703] RIP: 0033:0x7f0dd779ce59 [ 155.710869][ T8703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.710883][ T8703] RSP: 002b:00007f0dd863b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.710901][ T8703] RAX: ffffffffffffffda RBX: 00007f0dd7a15fa0 RCX: 00007f0dd779ce59 [ 155.710913][ T8703] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 155.710923][ T8703] RBP: 00007f0dd863b090 R08: 0000000000000000 R09: 0000000000000000 [ 155.710933][ T8703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.710942][ T8703] R13: 00007f0dd7a16038 R14: 00007f0dd7a15fa0 R15: 00007ffe64b45138 [ 155.710970][ T8703] [ 156.033704][ T4944] Bluetooth: hci3: command tx timeout [ 156.605406][ T8743] netlink: 'syz.4.712': attribute type 1 has an invalid length. [ 156.746699][ T8743] bond4 (unregistering): Released all slaves [ 156.823019][ T30] audit: type=1804 audit(1778875892.769:5): pid=8747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.713" name="/newroot/132/cgroup.controllers" dev="tmpfs" ino=690 res=1 errno=0 [ 156.910394][ T30] audit: type=1800 audit(1778875892.799:6): pid=8747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.713" name="cgroup.controllers" dev="tmpfs" ino=690 res=0 errno=0 [ 157.002490][ T30] audit: type=1804 audit(1778875892.809:7): pid=8747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.713" name="/newroot/132/cgroup.controllers" dev="tmpfs" ino=690 res=1 errno=0 [ 157.423939][ T8771] FAULT_INJECTION: forcing a failure. [ 157.423939][ T8771] name failslab, interval 1, probability 0, space 0, times 0 [ 157.466365][ T8771] CPU: 0 UID: 0 PID: 8771 Comm: syz.4.718 Not tainted syzkaller #0 PREEMPT(full) [ 157.466388][ T8771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 157.466398][ T8771] Call Trace: [ 157.466405][ T8771] [ 157.466412][ T8771] dump_stack_lvl+0xe8/0x150 [ 157.466438][ T8771] should_fail_ex+0x412/0x560 [ 157.466466][ T8771] should_failslab+0xa8/0x100 [ 157.466494][ T8771] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 157.466518][ T8771] ? __alloc_skb+0x186/0x7d0 [ 157.466542][ T8771] ? __alloc_skb+0x1d0/0x7d0 [ 157.466564][ T8771] ? __local_bh_enable_ip+0xd0/0x130 [ 157.466586][ T8771] __alloc_skb+0x1d0/0x7d0 [ 157.466614][ T8771] netlink_sendmsg+0x5d4/0xb40 [ 157.466641][ T8771] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.466661][ T8771] ? aa_sock_msg_perm+0xf1/0x1b0 [ 157.466685][ T8771] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 157.466711][ T8771] ____sys_sendmsg+0x972/0x9f0 [ 157.466728][ T8771] ? __might_fault+0xaf/0x130 [ 157.466756][ T8771] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.466781][ T8771] ? import_iovec+0x73/0xa0 [ 157.466809][ T8771] ___sys_sendmsg+0x2a5/0x360 [ 157.466825][ T8771] ? __lock_acquire+0x6b5/0x2cf0 [ 157.466848][ T8771] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.466897][ T8771] ? __fget_files+0x2a/0x420 [ 157.466916][ T8771] ? __fget_files+0x3a0/0x420 [ 157.466945][ T8771] __x64_sys_sendmsg+0x1bd/0x2a0 [ 157.466965][ T8771] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 157.466991][ T8771] ? __pfx_ksys_write+0x10/0x10 [ 157.467023][ T8771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.467041][ T8771] do_syscall_64+0x15f/0xf80 [ 157.467066][ T8771] ? trace_irq_disable+0x3b/0x140 [ 157.467091][ T8771] ? clear_bhb_loop+0x40/0x90 [ 157.467113][ T8771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.467129][ T8771] RIP: 0033:0x7f0463f9ce59 [ 157.467145][ T8771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.467159][ T8771] RSP: 002b:00007f0464f0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.467177][ T8771] RAX: ffffffffffffffda RBX: 00007f0464215fa0 RCX: 00007f0463f9ce59 [ 157.467188][ T8771] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 157.467198][ T8771] RBP: 00007f0464f0f090 R08: 0000000000000000 R09: 0000000000000000 [ 157.467208][ T8771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.467218][ T8771] R13: 00007f0464216038 R14: 00007f0464215fa0 R15: 00007fff492d0228 [ 157.467248][ T8771] [ 158.040768][ T5629] Bluetooth: hci3: command tx timeout [ 158.337566][ T8788] __nla_validate_parse: 7 callbacks suppressed [ 158.337582][ T8788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.720'. [ 158.488381][ T8742] syz.0.711 (8742) used greatest stack depth: 17944 bytes left [ 158.717567][ T8814] SET target dimension over the limit! [ 158.829093][ T8818] netlink: 76 bytes leftover after parsing attributes in process `syz.1.723'. [ 158.871936][ T8818] netlink: 40 bytes leftover after parsing attributes in process `syz.1.723'. [ 158.890547][ T8818] netlink: 40 bytes leftover after parsing attributes in process `syz.1.723'. [ 159.055752][ T8822] openvswitch: netlink: Multiple metadata blocks provided [ 159.118575][ T8827] netlink: 156 bytes leftover after parsing attributes in process `syz.0.726'. [ 159.128250][ T8827] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 159.250791][ T8827] netlink: 16 bytes leftover after parsing attributes in process `syz.0.726'. [ 159.994671][ T8851] netlink: 20 bytes leftover after parsing attributes in process `syz.0.731'. [ 160.011683][ T8851] netlink: 20 bytes leftover after parsing attributes in process `syz.0.731'. [ 160.033493][ T8851] netlink: 112 bytes leftover after parsing attributes in process `syz.0.731'. [ 160.123842][ T5629] Bluetooth: hci3: command tx timeout [ 160.132671][ T8855] netlink: 'syz.4.730': attribute type 13 has an invalid length. [ 160.291296][ T8857] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 160.301646][ T8867] netlink: 24 bytes leftover after parsing attributes in process `syz.0.733'. [ 160.312162][ T8857] bond1 (unregistering): Released all slaves [ 160.427142][ T8859] netlink: 'syz.0.733': attribute type 2 has an invalid length. [ 160.463071][ T8871] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.879021][ T8890] netlink: 'syz.3.742': attribute type 1 has an invalid length. [ 160.926264][ T8881] bond6: option lacp_rate: invalid value (128) [ 160.946616][ T8893] netlink: 'syz.1.743': attribute type 1 has an invalid length. [ 160.948488][ T8881] bond6 (unregistering): Released all slaves [ 161.174496][ T8900] syz.1.743 (8900) used obsolete PPPIOCDETACH ioctl [ 161.193131][ T8899] bridge3: entered promiscuous mode [ 161.204798][ T8899] bridge3: entered allmulticast mode [ 161.588425][ T8908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.726699][ T8911] ip6gre1: entered promiscuous mode [ 161.732364][ T8911] ip6gre1: entered allmulticast mode [ 161.740759][ T8920] netlink: 'syz.3.747': attribute type 6 has an invalid length. [ 161.755430][ T80] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.790058][ T80] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 161.809927][ T80] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.833828][ T80] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 161.914593][ T80] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.946369][ T80] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 161.978730][ T80] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.018700][ T80] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 162.155640][ T8930] batman_adv: batadv0: Adding interface: macvtap1 [ 162.177653][ T8930] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.211609][ T5629] Bluetooth: hci3: command tx timeout [ 162.235317][ T8930] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 162.270984][ T8958] Bluetooth: MGMT ver 1.23 [ 162.324425][ T8950] bond3: entered promiscuous mode [ 162.329977][ T8950] 8021q: adding VLAN 0 to HW filter on device bond3 [ 162.421302][ T8963] netlink: 'syz.0.757': attribute type 13 has an invalid length. [ 162.847906][ T8987] netlink: 'syz.3.764': attribute type 3 has an invalid length. [ 162.875859][ T8987] netlink: 'syz.3.764': attribute type 1 has an invalid length. [ 162.931664][ T8996] batadv_slave_1: entered promiscuous mode [ 162.963859][ T8996] geneve1: Caught tx_queue_len zero misconfig [ 162.970011][ T9001] netlink: 'syz.3.767': attribute type 1 has an invalid length. [ 163.091258][ T9001] 8021q: adding VLAN 0 to HW filter on device bond3 [ 163.134039][ T9004] bond3: (slave veth7): Enslaving as an active interface with an up link [ 163.213524][ T9004] netlink: 'syz.3.767': attribute type 1 has an invalid length. [ 163.298514][ T9004] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 163.362182][ T9004] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 163.403264][ T8997] batadv_slave_1: left promiscuous mode [ 163.425274][ T9022] __nla_validate_parse: 13 callbacks suppressed [ 163.425289][ T9022] netlink: 208 bytes leftover after parsing attributes in process `syz.1.773'. [ 163.470941][ T9022] netlink: 208 bytes leftover after parsing attributes in process `syz.1.773'. [ 163.493093][ T9023] netlink: 208 bytes leftover after parsing attributes in process `syz.1.773'. [ 163.504172][ T9023] netlink: 208 bytes leftover after parsing attributes in process `syz.1.773'. [ 163.591395][ T9026] tipc: Failed to remove unknown binding: 66,0,0/0:471055559/471055561 [ 163.620506][ T9026] tipc: Failed to remove unknown binding: 66,0,0/0:471055559/471055560 [ 163.646895][ T9026] tipc: Failed to remove unknown binding: 66,0,0/0:471055559/471055561 [ 163.676414][ T9026] tipc: Failed to remove unknown binding: 66,0,0/0:471055559/471055560 [ 163.854924][ T9038] netlink: 20 bytes leftover after parsing attributes in process `syz.3.780'. [ 163.936188][ T9042] netlink: 20 bytes leftover after parsing attributes in process `syz.1.781'. [ 163.956358][ T9042] netlink: 'syz.1.781': attribute type 4 has an invalid length. [ 164.107685][ T9056] xt_TPROXY: Can be used only with -p tcp or -p udp [ 164.130220][ T9048] bond4: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 164.163422][ T9048] bond4 (unregistering): Released all slaves [ 164.282433][ T5629] Bluetooth: hci3: command tx timeout [ 164.533790][ T9077] netlink: 32 bytes leftover after parsing attributes in process `syz.4.792'. [ 165.175135][ T9109] IPv6: addrconf: prefix option has invalid lifetime [ 165.446445][ T9121] netlink: 9 bytes leftover after parsing attributes in process `syz.1.804'. [ 165.477747][ T9121] 0·: renamed from hsr0 [ 165.494598][ T9121] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 165.522101][ T9121] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.551238][ T9121] 0·: entered allmulticast mode [ 165.561742][ T9121] hsr_slave_0: entered allmulticast mode [ 165.573857][ T9127] netlink: 28 bytes leftover after parsing attributes in process `syz.0.807'. [ 165.583476][ T9121] hsr_slave_1: entered allmulticast mode [ 165.591683][ T9121] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 165.852863][ T9136] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 166.128399][ T9154] netlink: 12 bytes leftover after parsing attributes in process `syz.2.813'. [ 166.173488][ T9154] vlan2: entered promiscuous mode [ 166.178731][ T9154] veth1: entered promiscuous mode [ 166.360647][ T5629] Bluetooth: hci3: command tx timeout [ 166.413246][ T9163] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 166.449892][ T9163] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.459193][ T9163] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.541249][ T9169] dvmrp0: entered allmulticast mode [ 166.550180][ T9163] bond0: Caught tx_queue_len zero misconfig [ 166.715449][ T9181] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20004 [ 167.152766][ T9201] smc: net device wlan0 applied user defined pnetid SYZ0 [ 167.734037][ T9232] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 167.762532][ T9232] x_tables: duplicate underflow at hook 2 [ 167.802299][ T9238] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 167.820881][ T9237] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 168.009665][ T9244] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 168.399471][ T9253] vxcan2: entered allmulticast mode [ 168.440600][ T5629] Bluetooth: hci3: command tx timeout [ 168.914941][ T9272] bridge_slave_1: left allmulticast mode [ 168.934131][ T9272] bridge_slave_1: left promiscuous mode [ 168.947698][ T9272] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.967951][ T9279] __nla_validate_parse: 1 callbacks suppressed [ 168.967965][ T9279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.849'. [ 168.984764][ T9272] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 169.120998][ T9283] netlink: 'syz.4.851': attribute type 29 has an invalid length. [ 169.163881][ T9285] can: request_module (can-proto-0) failed. [ 169.198441][ T9289] netlink: 'syz.1.853': attribute type 1 has an invalid length. [ 169.241111][ T9289] 8021q: adding VLAN 0 to HW filter on device bond4 [ 169.273117][ T9289] bond4: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 169.292776][ T9291] tipc: Enabled bearer , priority 10 [ 169.312895][ T9291] netlink: 20 bytes leftover after parsing attributes in process `syz.4.851'. [ 169.341578][ T48] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 169.423899][ T9297] netlink: 16 bytes leftover after parsing attributes in process `syz.0.854'. [ 169.443249][ T9298] sctp: [Deprecated]: syz.1.855 (pid 9298) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.443249][ T9298] Use struct sctp_sack_info instead [ 169.461067][ T48] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 169.496315][ T9297] netlink: 16 bytes leftover after parsing attributes in process `syz.0.854'. [ 169.648308][ T9305] syzkaller0: entered promiscuous mode [ 169.679033][ T9305] syzkaller0: entered allmulticast mode [ 169.808592][ T9308] : entered promiscuous mode [ 169.817064][ T9314] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 169.839542][ T9314] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 169.920143][ T9317] wg2: entered allmulticast mode [ 170.071371][ T9326] syzkaller0: entered promiscuous mode [ 170.086143][ T9326] syzkaller0: entered allmulticast mode [ 170.158220][ T9335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.863'. [ 170.476438][ T9362] IPVS: set_ctl: invalid protocol: 60 100.1.1.1:20000 [ 170.515569][ T6122] tipc: Node number set to 2229572754 [ 170.521856][ T5629] Bluetooth: hci3: command tx timeout [ 172.600511][ T5629] Bluetooth: hci3: command tx timeout [ 173.805163][ T4994] udevd[4994]: worker [5646] /devices/virtual/block/nbd0 is taking a long time [ 174.680685][ T5629] Bluetooth: hci3: command tx timeout [ 176.760924][ T5629] Bluetooth: hci3: command tx timeout [ 178.840413][ T5629] Bluetooth: hci3: command tx timeout [ 180.920430][ T5629] Bluetooth: hci3: command tx timeout [ 183.000475][ T5629] Bluetooth: hci3: command tx timeout [ 185.080671][ T5629] Bluetooth: hci3: command tx timeout [ 187.160400][ T5629] Bluetooth: hci3: command tx timeout [ 189.250410][ T5629] Bluetooth: hci3: command tx timeout [ 191.320449][ T5629] Bluetooth: hci3: command tx timeout [ 191.434799][ T9375] syzkaller0: entered promiscuous mode [ 191.440826][ T9375] syzkaller0: entered allmulticast mode [ 191.470531][ T9382] netlink: 'syz.3.876': attribute type 1 has an invalid length. [ 191.480069][ T9382] netlink: 96 bytes leftover after parsing attributes in process `syz.3.876'. [ 191.490781][ T9382] netlink: 658 bytes leftover after parsing attributes in process `syz.3.876'. [ 191.500554][ T9382] netlink: 1 bytes leftover after parsing attributes in process `syz.3.876'. [ 191.507606][ T9375] netlink: 'syz.4.877': attribute type 10 has an invalid length. [ 191.557354][ T9375] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 191.583662][ T9386] netlink: 'syz.1.874': attribute type 1 has an invalid length. [ 191.693742][ T9391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.879'. [ 191.877434][ T9390] wg2: entered allmulticast mode [ 192.217602][ T9411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.883'. [ 192.305231][ T9422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.885'. [ 192.445986][ T9425] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 192.717522][ T9429] bond4: option ad_user_port_key: invalid value (65535) [ 192.745098][ T9429] bond4: option ad_user_port_key: allowed values 0 - 1023 [ 192.769581][ T9429] bond4 (unregistering): Released all slaves [ 192.776831][ T9437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.891'. [ 192.894628][ T9429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.889'. [ 192.951173][ T48] bond4: (slave ip6gretap0): link status up again after 0 ms [ 193.002399][ T48] bond4: (slave ip6gretap0): link status up again after 0 ms [ 193.042556][ T48] bond4: (slave ip6gretap0): link status up again after 0 ms [ 193.064959][ T48] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 193.152978][ T9433] netlink: 'syz.4.890': attribute type 1 has an invalid length. [ 193.315562][ T6157] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 193.401457][ T5629] Bluetooth: hci3: command tx timeout [ 193.712204][ T9466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.897'. [ 193.740427][ T6164] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 194.194938][ T9483] netlink: 44 bytes leftover after parsing attributes in process `syz.0.900'. [ 194.313152][ T472] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 194.445197][ T9483] xt_hashlimit: size too large, truncated to 1048576 [ 194.455198][ T472] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 194.519016][ T9500] netlink: 'syz.3.904': attribute type 3 has an invalid length. [ 194.635995][ T9502] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 194.688123][ T9502] CPU: 1 UID: 0 PID: 9502 Comm: syz.4.905 Not tainted syzkaller #0 PREEMPT(full) [ 194.688148][ T9502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 194.688159][ T9502] Call Trace: [ 194.688167][ T9502] [ 194.688175][ T9502] dump_stack_lvl+0xe8/0x150 [ 194.688203][ T9502] sysfs_warn_dup+0x8e/0xa0 [ 194.688228][ T9502] sysfs_do_create_link_sd+0xc0/0x110 [ 194.688254][ T9502] device_add_class_symlinks+0x1cf/0x240 [ 194.688293][ T9502] device_add+0x475/0xbb0 [ 194.688320][ T9502] wiphy_register+0x1fb1/0x2fe0 [ 194.688363][ T9502] ? __pfx_wiphy_register+0x10/0x10 [ 194.688389][ T9502] ? __pfx_netdev_run_todo+0x10/0x10 [ 194.688410][ T9502] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 194.688438][ T9502] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 194.688480][ T9502] ieee80211_register_hw+0x3c53/0x4910 [ 194.688518][ T9502] ? ieee80211_register_hw+0x18c1/0x4910 [ 194.688572][ T9502] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 194.688602][ T9502] ? __asan_memset+0x22/0x50 [ 194.688626][ T9502] ? __hrtimer_setup+0x1b7/0x260 [ 194.688647][ T9502] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 194.688679][ T9502] mac80211_hwsim_new_radio+0x3327/0x57f0 [ 194.688729][ T9502] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 194.688750][ T9502] ? kstrndup+0xbf/0x160 [ 194.688775][ T9502] hwsim_new_radio_nl+0xe20/0x26e0 [ 194.688795][ T9502] ? unwind_next_frame+0xa6/0x2550 [ 194.688831][ T9502] ? is_bpf_text_address+0x26/0x2b0 [ 194.688860][ T9502] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 194.688882][ T9502] ? __kernel_text_address+0xd/0x30 [ 194.688905][ T9502] ? unwind_get_return_address+0x4d/0x90 [ 194.688925][ T9502] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 194.688950][ T9502] ? arch_stack_walk+0xfb/0x150 [ 194.688982][ T9502] ? stack_trace_save+0xa9/0x100 [ 194.689024][ T9502] ? __pfx_stack_trace_save+0x10/0x10 [ 194.689055][ T9502] ? stack_depot_save_flags+0x33/0x810 [ 194.689095][ T9502] ? __nla_validate_parse+0x2480/0x2dc0 [ 194.689121][ T9502] ? ____sys_sendmsg+0x972/0x9f0 [ 194.689137][ T9502] ? ___sys_sendmsg+0x2a5/0x360 [ 194.689173][ T9502] ? __pfx___nla_validate_parse+0x10/0x10 [ 194.689220][ T9502] ? rcu_is_watching+0x15/0xb0 [ 194.689243][ T9502] ? trace_kmalloc+0x2a/0xf0 [ 194.689275][ T9502] ? __nla_parse+0x40/0x60 [ 194.689306][ T9502] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 194.689331][ T9502] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 194.689365][ T9502] genl_family_rcv_msg_doit+0x22a/0x330 [ 194.689397][ T9502] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 194.689437][ T9502] ? bpf_lsm_capable+0x9/0x20 [ 194.689455][ T9502] ? security_capable+0x7e/0x2c0 [ 194.689485][ T9502] genl_rcv_msg+0x61c/0x7a0 [ 194.689517][ T9502] ? __pfx_genl_rcv_msg+0x10/0x10 [ 194.689541][ T9502] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 194.689591][ T9502] netlink_rcv_skb+0x232/0x4b0 [ 194.689610][ T9502] ? __pfx_genl_rcv_msg+0x10/0x10 [ 194.689634][ T9502] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 194.689673][ T9502] ? down_read+0x270/0x2e0 [ 194.689689][ T9502] ? genl_rcv+0xd/0x40 [ 194.689713][ T9502] genl_rcv+0x28/0x40 [ 194.689733][ T9502] netlink_unicast+0x75c/0x8e0 [ 194.689771][ T9502] netlink_sendmsg+0x813/0xb40 [ 194.689799][ T9502] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.689821][ T9502] ? aa_sock_msg_perm+0xf1/0x1b0 [ 194.689845][ T9502] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 194.689872][ T9502] ____sys_sendmsg+0x972/0x9f0 [ 194.689889][ T9502] ? __might_fault+0xaf/0x130 [ 194.689918][ T9502] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.689945][ T9502] ? import_iovec+0x73/0xa0 [ 194.689974][ T9502] ___sys_sendmsg+0x2a5/0x360 [ 194.689990][ T9502] ? __lock_acquire+0x6b5/0x2cf0 [ 194.690013][ T9502] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.690038][ T9502] ? futex_wake+0x4ac/0x580 [ 194.690088][ T9502] ? __fget_files+0x2a/0x420 [ 194.690109][ T9502] ? __fget_files+0x3a0/0x420 [ 194.690140][ T9502] __x64_sys_sendmsg+0x1bd/0x2a0 [ 194.690161][ T9502] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 194.690187][ T9502] ? rcu_is_watching+0x15/0xb0 [ 194.690219][ T9502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.690238][ T9502] do_syscall_64+0x15f/0xf80 [ 194.690262][ T9502] ? trace_irq_disable+0x3b/0x140 [ 194.690288][ T9502] ? clear_bhb_loop+0x40/0x90 [ 194.690310][ T9502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.690327][ T9502] RIP: 0033:0x7f0463f9ce59 [ 194.690343][ T9502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.690357][ T9502] RSP: 002b:00007f0464f0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.690375][ T9502] RAX: ffffffffffffffda RBX: 00007f0464215fa0 RCX: 00007f0463f9ce59 [ 194.690387][ T9502] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009 [ 194.690397][ T9502] RBP: 00007f0464032d6f R08: 0000000000000000 R09: 0000000000000000 [ 194.690407][ T9502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.690417][ T9502] R13: 00007f0464216038 R14: 00007f0464215fa0 R15: 00007fff492d0228 [ 194.690447][ T9502] [ 195.199811][ T6157] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 195.480860][ T5629] Bluetooth: hci3: command tx timeout [ 195.793312][ T472] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 195.993141][ T9553] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 197.560614][ T5629] Bluetooth: hci3: command tx timeout [ 198.843134][ T80] net_ratelimit: 7 callbacks suppressed [ 198.843151][ T80] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 198.944395][ T9583] __nla_validate_parse: 2 callbacks suppressed [ 198.944412][ T9583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.921'. [ 198.986053][ T9585] netlink: 'syz.1.921': attribute type 1 has an invalid length. [ 199.009137][ T9586] netlink: 24 bytes leftover after parsing attributes in process `syz.1.921'. [ 199.022482][ T80] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 199.060933][ T9589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.924'. [ 199.100827][ T9586] ip6gre1: entered promiscuous mode [ 199.117835][ T9586] ip6gre1: entered allmulticast mode [ 199.222695][ T80] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 199.319811][ T9598] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.927'. [ 199.342038][ T6157] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 199.363507][ T9598] netlink: ct family unspecified [ 199.408534][ T9603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.929'. [ 199.472631][ T6164] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 199.589655][ T9615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.932'. [ 199.600664][ T80] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 199.642976][ T5629] Bluetooth: hci3: command tx timeout [ 199.677478][ T9622] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 199.712995][ T9625] xt_bpf: check failed: parse error [ 199.721093][ T80] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 199.851081][ T6164] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 199.980708][ T6157] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 200.126542][ T9644] netlink: 24 bytes leftover after parsing attributes in process `syz.3.938'. [ 200.231265][ T9659] netlink: 24 bytes leftover after parsing attributes in process `syz.1.942'. [ 200.286484][ T9663] netlink: 34 bytes leftover after parsing attributes in process `syz.3.944'. [ 200.308080][ T9663] netlink: 48 bytes leftover after parsing attributes in process `syz.3.944'. [ 200.624883][ T9672] nbd: nbd64 already in use [ 200.717849][ T9677] syzkaller0: entered promiscuous mode [ 200.735578][ T9677] syzkaller0: entered allmulticast mode [ 201.125213][ T9695] xt_hashlimit: size too large, truncated to 1048576 [ 201.720608][ T5629] Bluetooth: hci3: command tx timeout [ 202.706108][ T6111] IPVS: starting estimator thread 0... [ 202.764515][ T9708] tipc: Enabling of bearer rejected, failed to enable media [ 202.794728][ T9708] tipc: Enabling of bearer rejected, failed to enable media [ 202.820357][ T9716] IPVS: using max 31 ests per chain, 74400 per kthread [ 202.860872][ T9723] netlink: 'syz.1.960': attribute type 13 has an invalid length. [ 202.885001][ T9718] xt_CT: No such helper "netbios-ns" [ 203.467238][ T9749] netlink: 'syz.1.968': attribute type 10 has an invalid length. [ 203.522457][ T9749] team0: Port device dummy0 added [ 203.537207][ T9751] netlink: 'syz.4.969': attribute type 1 has an invalid length. [ 203.551217][ T9751] netlink: 'syz.4.969': attribute type 1 has an invalid length. [ 203.747817][ T9751] 8021q: adding VLAN 0 to HW filter on device bond4 [ 203.800490][ T5629] Bluetooth: hci3: command tx timeout [ 203.941162][ T6164] net_ratelimit: 13 callbacks suppressed [ 203.941179][ T6164] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 204.055831][ T9776] __nla_validate_parse: 11 callbacks suppressed [ 204.055861][ T9776] netlink: 24 bytes leftover after parsing attributes in process `syz.4.973'. [ 204.101659][ T6164] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 204.249271][ T9785] netlink: 'syz.1.976': attribute type 9 has an invalid length. [ 204.285982][ T6164] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 204.374300][ T9787] netlink: 428 bytes leftover after parsing attributes in process `syz.2.977'. [ 204.461826][ T9807] netlink: 'syz.0.982': attribute type 4 has an invalid length. [ 204.592449][ T48] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 204.740705][ T48] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 205.010537][ T80] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 205.290496][ T48] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 205.420496][ T472] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 205.581519][ T48] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 205.595798][ T9860] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 205.690385][ T472] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 205.736948][ T9865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.997'. [ 205.881023][ T5645] Bluetooth: hci3: command tx timeout [ 205.906452][ T9876] v: renamed from erspan0 (while UP) [ 206.011866][ T9882] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1001'. [ 206.252018][ T9893] netlink: 'syz.0.1003': attribute type 1 has an invalid length. [ 206.278556][ T9893] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1003'. [ 206.304502][ T9893] netlink: 658 bytes leftover after parsing attributes in process `syz.0.1003'. [ 206.357461][ T9893] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1003'. [ 206.366457][ T5645] Bluetooth: hci0: command 0x0c1a tx timeout [ 206.375347][ T5634] Bluetooth: hci1: command 0x0406 tx timeout [ 206.384146][ T5634] Bluetooth: hci2: command 0x0406 tx timeout [ 206.442389][ T9905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1007'. [ 207.269286][ T9946] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1019'. [ 207.324119][ T9950] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1021'. [ 207.488996][ T9955] netlink: 'syz.1.1022': attribute type 1 has an invalid length. [ 207.598662][ T9955] 8021q: adding VLAN 0 to HW filter on device bond5 [ 207.956471][T10000] xt_CT: You must specify a L4 protocol and not use inversions on it [ 207.956917][T10000] netlink: 'syz.3.1030': attribute type 21 has an invalid length. [ 207.974030][ T50] Bluetooth: hci3: command 0x2001 tx timeout [ 208.259658][T10019] ip6t_srh: unknown srh match flags 4000 [ 208.825691][T10046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.850802][T10046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.879603][T10046] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 208.924720][T10046] bond0 (unregistering): Released all slaves [ 209.005143][ T6157] net_ratelimit: 25 callbacks suppressed [ 209.005163][ T6157] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 209.107012][T10062] __nla_validate_parse: 4 callbacks suppressed [ 209.107028][T10062] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1049'. [ 209.276175][T10068] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1051'. [ 209.358251][T10080] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1052'. [ 209.469000][T10059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.489834][T10059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.507923][T10086] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1055'. [ 209.692040][ T6335] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 209.750892][T10086] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1055'. [ 209.791977][T10086] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1055'. [ 209.845075][ T80] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.860380][T10096] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1057'. [ 209.885262][ T80] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.897836][T10098] netlink: 'syz.4.1058': attribute type 7 has an invalid length. [ 209.907049][ T80] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.920227][ T80] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.933696][T10098] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1058'. [ 209.939931][ T472] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 209.954828][ T80] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.967052][ T80] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.987928][ T80] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.016591][ T80] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.041069][ T50] Bluetooth: hci3: command 0x2001 tx timeout [ 210.054438][T10098] netlink: 'syz.4.1058': attribute type 10 has an invalid length. [ 210.070401][ T6335] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 210.210608][ T80] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 210.346232][ T80] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 210.397563][T10119] netlink: 'syz.3.1064': attribute type 11 has an invalid length. [ 210.406001][T10119] netlink: 'syz.3.1064': attribute type 11 has an invalid length. [ 210.415236][T10119] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1064'. [ 210.480797][ T6335] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 210.651608][ T472] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 210.669831][T10133] netlink: 'syz.0.1067': attribute type 1 has an invalid length. [ 210.760633][T10133] 8021q: adding VLAN 0 to HW filter on device bond6 [ 210.779404][T10137] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1069'. [ 211.123443][ T48] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 211.296009][T10156] bond6: option resend_igmp: invalid value (2878) [ 211.342358][T10163] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 211.346160][T10156] bond6: option resend_igmp: allowed values 0 - 255 [ 211.384145][T10156] bond6 (unregistering): Released all slaves [ 211.631321][T10166] bond0: option xmit_hash_policy: invalid value (10) [ 211.646742][T10166] bond0 (unregistering): Released all slaves [ 211.656844][ T48] tipc: Subscription rejected, illegal request [ 211.709741][T10172] vlan2: entered promiscuous mode [ 211.731530][T10172] veth0_to_bridge: entered promiscuous mode [ 211.881204][ T48] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 211.949430][T10191] netlink: 'syz.4.1083': attribute type 1 has an invalid length. [ 211.985488][T10191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.062195][T10187] bond0: (slave veth7): Enslaving as an active interface with a down link [ 212.120539][ T50] Bluetooth: hci3: command 0x2001 tx timeout [ 212.176337][T10191] bond0: (slave veth9): Enslaving as an active interface with a down link [ 212.267870][T10187] bond0: (slave bridge3): Enslaving as an active interface with a down link [ 212.746978][T10229] team0: entered promiscuous mode [ 212.758749][T10229] team_slave_0: entered promiscuous mode [ 212.767655][T10229] team_slave_1: entered promiscuous mode [ 212.822762][T10234] syzkaller0: entered promiscuous mode [ 212.830877][T10234] syzkaller0: entered allmulticast mode [ 214.203425][ T50] Bluetooth: hci3: command 0x2001 tx timeout [ 214.493973][T10252] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 214.511750][T10253] erspan0: left promiscuous mode [ 214.549558][T10253] bridge0: left promiscuous mode [ 214.640510][ T6157] net_ratelimit: 7 callbacks suppressed [ 214.640529][ T6157] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 214.785417][ T80] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 214.869759][T10282] __nla_validate_parse: 11 callbacks suppressed [ 214.869774][T10282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1107'. [ 214.893286][T10287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1109'. [ 214.903754][T10287] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1109'. [ 214.931361][ T48] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 214.962731][T10296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1111'. [ 215.050351][ T472] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 215.080605][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.090115][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.098550][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.180805][ T48] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 215.240927][T10320] netlink: 'syz.3.1115': attribute type 1 has an invalid length. [ 215.344174][T10300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1111'. [ 215.361114][ T80] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 215.380377][T10327] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1115'. [ 215.413127][T10320] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1115'. [ 215.491450][T10327] bond4: (slave bridge1): making interface the new active one [ 215.511314][T10327] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 215.554230][T10320] bond4: (slave bridge2): Enslaving as an active interface with a down link [ 215.606651][T10321] ip6gretap1: entered promiscuous mode [ 215.619762][T10321] ip6gretap1: entered allmulticast mode [ 215.640878][T10321] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 215.947882][T10336] netlink: 'syz.4.1118': attribute type 1 has an invalid length. [ 216.280475][ T50] Bluetooth: hci3: command 0x2001 tx timeout [ 216.334046][T10336] bond5: entered promiscuous mode [ 216.356368][T10336] 8021q: adding VLAN 0 to HW filter on device bond5 [ 216.433303][T10342] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1120'. [ 216.461557][T10337] veth11: entered promiscuous mode [ 216.476018][T10337] veth11: entered allmulticast mode [ 216.503786][T10337] bond5: (slave veth11): Enslaving as a backup interface with a down link [ 216.670504][ T6165] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 216.699474][T10350] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1122'. [ 216.877269][T10360] netlink: 'syz.1.1124': attribute type 15 has an invalid length. [ 216.897485][T10359] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1125'. [ 216.921958][T10360] netlink: 'syz.1.1124': attribute type 2 has an invalid length. [ 216.943208][T10359] nbd: nbd0 already in use [ 216.962710][T10360] netlink: 'syz.1.1124': attribute type 11 has an invalid length. [ 217.090076][T10368] netlink: 'syz.2.1127': attribute type 1 has an invalid length. [ 217.347480][T10385] vlan2: entered promiscuous mode [ 217.353186][T10385] ip6gretap0: entered promiscuous mode [ 218.361387][ T50] Bluetooth: hci3: command 0x2001 tx timeout [ 218.774352][T10396] bond0: entered promiscuous mode [ 218.779943][T10396] bond_slave_0: entered promiscuous mode [ 218.786770][T10396] bond_slave_1: entered promiscuous mode [ 218.797046][T10396] batadv0: entered promiscuous mode [ 218.804919][T10396] debugfs: 'hsr1' already exists in 'hsr' [ 218.810986][T10396] Cannot create hsr debugfs directory [ 218.816611][T10396] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 218.827562][T10396] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 218.848606][T10396] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 218.879210][T10396] bond0: left promiscuous mode [ 218.887201][T10396] bond_slave_0: left promiscuous mode [ 218.899791][T10396] bond_slave_1: left promiscuous mode [ 218.921347][T10396] batadv0: left promiscuous mode [ 218.965653][T10403] macsec0: entered promiscuous mode [ 218.982397][T10403] macsec0: entered allmulticast mode [ 219.236454][T10418] raw_sendmsg: syz.1.1142 forgot to set AF_INET. Fix it! [ 219.308254][T10425] netlink: 'syz.3.1143': attribute type 4 has an invalid length. [ 219.324576][T10425] netlink: 'syz.3.1143': attribute type 4 has an invalid length. [ 219.692788][ T6157] net_ratelimit: 12 callbacks suppressed [ 219.692806][ T6157] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 219.707444][T10438] syzkaller1: entered promiscuous mode [ 219.713496][T10438] syzkaller1: entered allmulticast mode [ 219.811313][ T472] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 219.941211][ T6157] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 220.052204][ T6157] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 220.170464][ T80] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 220.281296][ T48] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 220.292155][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.301581][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.384174][T10461] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:20000 [ 220.391722][ T48] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 220.399997][T10461] __nla_validate_parse: 8 callbacks suppressed [ 220.400007][T10461] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1150'. [ 220.416368][T10461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1150'. [ 220.440383][ T50] Bluetooth: hci3: command 0x2001 tx timeout [ 220.500378][ T80] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 220.679984][T10466] bond5: Removing last arp target with arp_interval on [ 222.206938][T10418] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 222.326109][T10481] netlink: 'syz.1.1156': attribute type 1 has an invalid length. [ 222.419253][T10481] 8021q: adding VLAN 0 to HW filter on device bond6 [ 222.471849][T10487] bond6: (slave ip6gretap1): making interface the new active one [ 222.484954][T10487] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 222.520392][ T50] Bluetooth: hci3: command 0x2001 tx timeout [ 222.629240][T10503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1159'. [ 222.848074][T10515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1164'. [ 222.884681][T10517] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1163'. [ 222.928363][T10513] can: request_module (can-proto-5) failed. [ 223.003602][T10521] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1166'. [ 223.013407][T10522] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1166'. [ 223.075868][T10524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1167'. [ 223.095951][T10521] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1166'. [ 223.107352][T10521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1166'. [ 223.242596][T10531] nbd: must specify at least one socket [ 223.281638][T10528] gtp0: entered promiscuous mode [ 223.313091][T10528] gtp0: entered allmulticast mode [ 223.392423][T10535] xt_CT: You must specify a L4 protocol and not use inversions on it [ 223.808257][T10556] netlink: 'syz.3.1178': attribute type 1 has an invalid length. [ 223.849150][T10556] syzkaller0: entered promiscuous mode [ 223.868574][T10556] syzkaller0: entered allmulticast mode [ 223.913787][T10556] gre2: entered allmulticast mode [ 223.935275][T10561] netlink: 'syz.4.1180': attribute type 1 has an invalid length. [ 224.068818][T10561] bond6: entered promiscuous mode [ 224.080831][T10561] 8021q: adding VLAN 0 to HW filter on device bond6 [ 224.097390][T10556] tipc: Enabled bearer , priority 0 [ 224.125920][T10556] tipc: Resetting bearer [ 224.145957][T10572] 8021q: adding VLAN 0 to HW filter on device bond6 [ 224.162253][T10572] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 224.173201][T10572] bond6: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 224.187233][T10572] bond6: (slave ip6gre1): making interface the new active one [ 224.195264][T10572] ip6gre1: entered promiscuous mode [ 224.205950][T10572] bond6: (slave ip6gre1): Enslaving as an active interface with an up link [ 224.220563][T10555] tipc: Resetting bearer [ 224.240731][T10555] tipc: Disabling bearer [ 224.356488][T10580] netlink: 'syz.4.1184': attribute type 1 has an invalid length. [ 224.389290][T10579] netlink: 'syz.4.1184': attribute type 1 has an invalid length. [ 224.472636][T10579] 8021q: adding VLAN 0 to HW filter on device bond7 [ 224.535469][T10589] 8021q: adding VLAN 0 to HW filter on device bond7 [ 224.568813][T10589] bond7: (slave vcan1): The slave device specified does not support setting the MAC address [ 224.594372][T10589] bond7: (slave vcan1): Error -95 calling set_mac_address [ 224.600876][ T50] Bluetooth: hci3: command 0x2001 tx timeout [ 224.730861][ T48] net_ratelimit: 38 callbacks suppressed [ 224.730878][ T48] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 224.770044][ T6157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.779070][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.887771][T10618] openvswitch: netlink: Missing key (keys=40, expected=80) [ 225.091741][ T6164] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 225.216381][T10633] netlink: 'syz.1.1194': attribute type 11 has an invalid length. [ 225.285799][ T6165] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 225.416100][ T6165] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 225.589813][T10654] __nla_validate_parse: 5 callbacks suppressed [ 225.589829][T10654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1202'. [ 225.650501][ T6164] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 225.771248][ T6164] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 225.910947][ T6164] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 226.020597][T10663] bond7: option arp_all_targets: invalid value (129) [ 226.045242][T10663] bond7 (unregistering): Released all slaves [ 226.107888][T10671] ip6gretap0: entered promiscuous mode [ 226.144310][T10671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1208'. [ 226.681893][ T50] Bluetooth: hci3: command 0x2001 tx timeout [ 226.930891][T10722] syzkaller0: entered promiscuous mode [ 226.970085][T10722] syzkaller0: entered allmulticast mode [ 227.349642][T10744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1225'. [ 227.387631][T10746] mac80211_hwsim hwsim12 wlan1: Device is already in use. [ 227.503061][T10753] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1217'. [ 227.680152][T10759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1229'. [ 227.745760][T10759] vlan3: entered promiscuous mode [ 227.762696][T10759] bridge0: entered promiscuous mode [ 227.837952][T10768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1230'. [ 228.080963][T10776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1233'. [ 228.122397][T10777] netlink: 5000 bytes leftover after parsing attributes in process `syz.2.1232'. [ 228.241998][T10780] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1234'. [ 228.276388][T10784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1232'. [ 228.298803][T10788] x_tables: duplicate underflow at hook 2 [ 228.307383][T10784] netlink: 'syz.2.1232': attribute type 1 has an invalid length. [ 228.331857][T10788] netlink: 'syz.4.1235': attribute type 10 has an invalid length. [ 228.352367][T10788] team0: Failed to send options change via netlink (err -105) [ 228.360026][T10788] team0: Port device dummy0 added [ 228.640535][T10790] bond1 (unregistering): Released all slaves [ 228.760957][ T50] Bluetooth: hci3: command 0x2001 tx timeout [ 229.071659][T10823] tipc: New replicast peer: 255.255.255.255 [ 229.082890][T10823] tipc: Enabled bearer , priority 10 [ 229.119266][T10826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.146592][T10826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.163282][T10826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.188730][T10826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.226390][T10826] batman_adv: batadv0: Removing interface: macvtap1 [ 229.254021][T10833] xt_hashlimit: size too large, truncated to 1048576 [ 229.598076][T10850] IPVS: set_ctl: invalid protocol: 92 255.255.255.255:20003 [ 229.740461][ T48] net_ratelimit: 35 callbacks suppressed [ 229.740480][ T48] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 229.881338][ T6335] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 229.980562][T10868] xt_addrtype: ipv6 does not support BROADCAST matching [ 230.107873][T10873] team1: entered promiscuous mode [ 230.184210][T10873] team1: entered allmulticast mode [ 230.246536][T10873] 8021q: adding VLAN 0 to HW filter on device team1 [ 230.309579][T10876] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 230.330177][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88806a513c00: rx timeout, send abort [ 230.521190][ T6155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.529515][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.529851][T10876] team2: entered promiscuous mode [ 230.545426][T10876] team2: entered allmulticast mode [ 230.552097][T10876] 8021q: adding VLAN 0 to HW filter on device team2 [ 230.552289][T10905] netlink: 'syz.3.1263': attribute type 10 has an invalid length. [ 230.603760][T10908] netlink: 'syz.3.1263': attribute type 10 has an invalid length. [ 230.645601][ T6117] tipc: Node number set to 2464843369 [ 230.665305][T10905] team0: Port device dummy0 added [ 230.683268][ T6117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.688980][T10908] team0: Port device dummy0 removed [ 230.707807][T10908] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 230.770804][ T6335] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 230.842676][ T50] Bluetooth: hci3: command 0x2001 tx timeout [ 230.901450][ T48] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 231.048358][ T48] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 231.182633][ T6155] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 231.254060][T10943] __nla_validate_parse: 11 callbacks suppressed [ 231.254077][T10943] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1276'. [ 231.271991][T10943] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1276'. [ 231.302603][T10944] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 231.312242][T10944] bond4: (slave ip6gretap0): Removing an active aggregator [ 231.359718][T10944] bond4: (slave ip6gretap0): Releasing backup interface [ 231.376153][T10953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1276'. [ 231.444315][T10943] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1276'. [ 231.467173][T10944] team0: Port device dummy0 removed [ 231.473476][T10944] bridge_slave_1: left allmulticast mode [ 231.479179][T10944] bridge_slave_1: left promiscuous mode [ 231.485708][T10944] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.530750][T10969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1276'. [ 231.568802][T10944] bond0: (slave bond_slave_0): Releasing backup interface [ 231.604220][T10944] bond0: (slave bond_slave_1): Releasing backup interface [ 231.655694][T10944] team0: Port device team_slave_0 removed [ 231.670825][T10944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.688516][T10944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.703598][T10944] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 231.778810][T10978] syzkaller0: entered promiscuous mode [ 231.785166][T10978] syzkaller0: entered allmulticast mode [ 231.801922][T10957] vxcan3: entered allmulticast mode [ 231.911050][T10984] bond8: option min_links: invalid value (18446744073709551612) [ 231.945377][T10984] bond8: option min_links: allowed values 0 - 2147483647 [ 231.972437][T10984] bond8 (unregistering): Released all slaves [ 232.042105][T10996] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1281'. [ 232.051704][T10996] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1281'. [ 232.089809][T10997] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1280'. [ 232.440510][ T48] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967286. macoff=82 [ 232.920609][ T50] Bluetooth: hci3: command 0x2001 tx timeout [ 234.024710][T11006] tipc: Enabling of bearer rejected, failed to enable media [ 234.038755][T11021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1284'. [ 234.054396][T11021] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1284'. [ 234.847493][ T9966] net_ratelimit: 5 callbacks suppressed [ 234.847510][ T9966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.926603][T11090] netlink: 'syz.0.1303': attribute type 1 has an invalid length. [ 234.992496][T11090] 8021q: adding VLAN 0 to HW filter on device bond7 [ 235.011282][ T50] Bluetooth: hci3: command 0x2001 tx timeout [ 235.039741][T11091] bond7: (slave gretap1): making interface the new active one [ 235.052808][T11091] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 235.085628][T11100] bond7 (unregistering): (slave gretap1): Releasing active interface [ 235.132736][T11100] bond7 (unregistering): Released all slaves [ 235.651591][T11118] team0: Port device dummy0 removed [ 235.678287][T11118] bridge5: port 1(dummy0) entered blocking state [ 235.695207][T11118] bridge5: port 1(dummy0) entered disabled state [ 235.712600][T11118] dummy0: entered allmulticast mode [ 235.733838][T11118] dummy0: entered promiscuous mode [ 235.770491][T11121] dummy0 (unregistering): left allmulticast mode [ 235.798044][T11121] dummy0 (unregistering): left promiscuous mode [ 235.815625][T11121] bridge5: port 1(dummy0) entered disabled state [ 235.882963][ T9966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.273350][T11142] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 236.290688][ T6155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.298928][ T9963] IPVS: starting estimator thread 0... [ 236.299604][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.410356][T11152] IPVS: using max 42 ests per chain, 100800 per kthread [ 236.473308][T11158] ip6erspan0: entered allmulticast mode [ 236.637113][T11165] __nla_validate_parse: 9 callbacks suppressed [ 236.637131][T11165] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1321'. [ 236.920724][ T9966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.062950][T11177] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1324'. [ 237.080679][ T50] Bluetooth: hci3: command 0x2001 tx timeout [ 237.201379][T11183] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1324'. [ 237.259085][T11177] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1324'. [ 237.305793][T11177] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1324'. [ 237.773406][T11213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1333'. [ 237.798048][T11213] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 237.825779][T11213] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 237.961809][ T9966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.051668][T11225] netlink: 'syz.3.1338': attribute type 13 has an invalid length. [ 238.178277][T11232] netlink: 'syz.1.1342': attribute type 1 has an invalid length. [ 238.187682][T11232] netlink: 'syz.1.1342': attribute type 1 has an invalid length. [ 238.199856][T11232] netlink: 9172 bytes leftover after parsing attributes in process `syz.1.1342'. [ 238.431451][T11232] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 238.439156][T11232] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 238.454548][T11237] tipc: Enabled bearer , priority 10 [ 238.475830][ T36] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.507308][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.532004][ T36] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.556532][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.582708][ T36] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.623855][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.659899][ T36] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.677857][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.750434][T11251] netlink: 'syz.0.1347': attribute type 1 has an invalid length. [ 238.760745][T11239] syzkaller1: entered promiscuous mode [ 238.777960][T11239] syzkaller1: entered allmulticast mode [ 238.830962][T11256] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1347'. [ 238.909706][T11251] 8021q: adding VLAN 0 to HW filter on device bond7 [ 238.922834][T11258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1347'. [ 238.962970][T11248] syzkaller1: entered promiscuous mode [ 238.975965][T11248] syzkaller1: entered allmulticast mode [ 238.998828][T11258] bond7 (unregistering): Released all slaves [ 239.149891][T11265] syzkaller0: entered promiscuous mode [ 239.160443][ T50] Bluetooth: hci3: command 0x2001 tx timeout [ 239.174218][T11265] syzkaller0: entered allmulticast mode [ 239.205571][T11267] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1350'. [ 239.215340][T11267] openvswitch: netlink: Flow key attr not present in new flow. [ 239.250591][T11265] tipc: Started in network mode [ 239.271552][T11265] tipc: Node identity 8a466261b6c8, cluster identity 4711 [ 239.299477][T11265] tipc: Enabled bearer , priority 0 [ 239.387344][T11265] tipc: Resetting bearer [ 239.616686][T11265] tipc: Disabling bearer [ 239.657740][T11288] ip6gre2: entered promiscuous mode [ 239.663354][T11288] ip6gre2: entered allmulticast mode [ 240.287019][T11326] batadv1: entered promiscuous mode [ 240.293169][T11326] batadv1: entered allmulticast mode [ 241.039834][T11369] netlink: 'syz.2.1376': attribute type 49 has an invalid length. [ 241.250922][ T50] Bluetooth: hci3: command 0x2001 tx timeout [ 241.328974][T11369] ip6gretap0: entered allmulticast mode [ 241.981935][T11412] tipc: Failed to remove unknown binding: 66,0,0/0:4138071338/4138071340 [ 242.017988][T11412] tipc: Failed to remove unknown binding: 66,0,0/0:4138071338/4138071339 [ 242.049293][T11412] tipc: Failed to remove unknown binding: 66,0,0/0:4138071338/4138071340 [ 242.074143][T11412] tipc: Failed to remove unknown binding: 66,0,0/0:4138071338/4138071339 [ 242.158235][T11418] __nla_validate_parse: 5 callbacks suppressed [ 242.158252][T11418] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1389'. [ 242.341880][T11438] xt_l2tp: v2 sid > 0xffff: 8388608 [ 242.415107][T11440] vlan3: entered promiscuous mode [ 242.448953][T11440] bridge0: entered promiscuous mode [ 242.623737][T11454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1396'. [ 242.646705][T11454] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1396'. [ 242.828936][T11470] netlink: 'syz.3.1400': attribute type 1 has an invalid length. [ 242.888263][T11470] bond6: entered promiscuous mode [ 242.893871][T11470] 8021q: adding VLAN 0 to HW filter on device bond6 [ 242.982618][T11470] bond6: (slave bridge3): making interface the new active one [ 243.003937][T11470] bridge3: entered promiscuous mode [ 243.033492][T11470] bridge3: left promiscuous mode [ 243.265156][T11488] xt_CT: You must specify a L4 protocol and not use inversions on it [ 243.267796][T11488] netlink: 'syz.2.1403': attribute type 21 has an invalid length. [ 243.289453][T11488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1403'. [ 243.299299][T11488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1403'. [ 243.324856][T11489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1403'. [ 243.350368][T11489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1403'. [ 243.434848][T11488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1403'. [ 243.456659][T11489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1403'. [ 243.466351][T11488] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1403'. [ 243.529876][T11491] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 244.260145][T11525] netlink: 'syz.4.1412': attribute type 11 has an invalid length. [ 244.298869][T11532] bridge4: port 1(gretap3) entered blocking state [ 244.306200][T11532] bridge4: port 1(gretap3) entered disabled state [ 244.312927][T11532] gretap3: entered allmulticast mode [ 244.320284][T11532] gretap3: entered promiscuous mode [ 245.503965][T11599] syzkaller1: entered promiscuous mode [ 245.511775][T11599] syzkaller1: entered allmulticast mode [ 245.526561][T11599] wg2: left allmulticast mode [ 245.537351][T11599] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 245.549192][T11599] ip6gre1: left promiscuous mode [ 245.554367][T11599] ip6gre1: left allmulticast mode [ 245.560802][T11599] ip6gretap1: left promiscuous mode [ 245.566049][T11599] ip6gretap1: left allmulticast mode [ 245.571936][T11599] gre2: left allmulticast mode [ 245.582032][T11599] bond6: left promiscuous mode [ 245.613209][T11599] syzkaller1: left promiscuous mode [ 245.641819][T11599] syzkaller1: left allmulticast mode [ 245.824314][T11608] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 245.961579][T11625] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 245.980771][T11625] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 246.000428][T11625] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 246.019233][T11630] xt_hashlimit: size too large, truncated to 1048576 [ 246.141146][T11636] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 246.391176][T11647] xt_hashlimit: size too large, truncated to 1048576 [ 246.416180][T11647] xt_hashlimit: max too large, truncated to 1048576 [ 246.706161][ T30] audit: type=1804 audit(1778875982.649:8): pid=11658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1451" name="/newroot/302/memory.events" dev="tmpfs" ino=1566 res=1 errno=0 [ 246.791859][ T30] audit: type=1800 audit(1778875982.679:9): pid=11658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1451" name="memory.events" dev="tmpfs" ino=1566 res=0 errno=0 [ 246.998453][T11676] netlink: 'syz.3.1455': attribute type 2 has an invalid length. [ 247.296341][T11683] __nla_validate_parse: 12 callbacks suppressed [ 247.296360][T11683] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1459'. [ 247.479527][T11696] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 247.573775][T11705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1463'. [ 247.590413][T11705] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1463'. [ 247.639222][T11708] tipc: Enabled bearer , priority 0 [ 247.649664][T11708] syzkaller0: entered promiscuous mode [ 247.656867][T11708] syzkaller0: entered allmulticast mode [ 247.684396][T11705] netlink: 'syz.1.1463': attribute type 11 has an invalid length. [ 247.746321][T11711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1466'. [ 248.058600][T11720] tipc: Resetting bearer [ 248.156189][T11707] tipc: Resetting bearer [ 248.203577][T11707] tipc: Disabling bearer [ 248.424864][T11745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1474'. [ 248.477170][T11750] netlink: 'syz.0.1474': attribute type 1 has an invalid length. [ 248.603787][T11755] syzkaller0: entered promiscuous mode [ 248.609664][T11755] syzkaller0: entered allmulticast mode [ 248.626638][T11751] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 248.795259][T11767] netlink: 'syz.4.1479': attribute type 1 has an invalid length. [ 248.824360][T11767] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1479'. [ 248.881590][T11767] netlink: 658 bytes leftover after parsing attributes in process `syz.4.1479'. [ 248.925629][T11767] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1479'. [ 248.936865][T11774] syzkaller0: entered promiscuous mode [ 248.947369][T11775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1482'. [ 248.956504][T11774] syzkaller0: entered allmulticast mode [ 249.146404][T11784] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1479'. [ 249.326092][ T5629] Bluetooth: hci4: command 0x0405 tx timeout [ 249.673855][T11809] vlan2: entered allmulticast mode [ 249.705800][T11809] erspan0: entered allmulticast mode [ 249.915783][T11821] netlink: 'syz.1.1494': attribute type 1 has an invalid length. [ 250.208303][T11844] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 250.938002][T11885] syzkaller0: entered promiscuous mode [ 250.944476][T11885] syzkaller0: entered allmulticast mode [ 251.749857][T11910] syzkaller0: entered promiscuous mode [ 251.762871][T11910] syzkaller0: entered allmulticast mode [ 251.917037][T11922] netlink: 'syz.0.1519': attribute type 1 has an invalid length. [ 251.950649][T11922] 8021q: adding VLAN 0 to HW filter on device bond7 [ 252.078276][T11930] netlink: 'syz.3.1522': attribute type 1 has an invalid length. [ 252.123844][T11933] netlink: 'syz.0.1523': attribute type 12 has an invalid length. [ 252.140587][T11933] netlink: 'syz.0.1523': attribute type 39 has an invalid length. [ 252.204187][T11934] netlink: 'syz.0.1523': attribute type 1 has an invalid length. [ 252.468983][T11948] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 252.536899][T11955] bond7: entered promiscuous mode [ 252.543243][T11955] 8021q: adding VLAN 0 to HW filter on device bond7 [ 252.550824][T11960] __nla_validate_parse: 17 callbacks suppressed [ 252.550838][T11960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1529'. [ 252.551399][T11955] bridge0: port 1(bond7) entered blocking state [ 252.572932][T11955] bridge0: port 1(bond7) entered disabled state [ 252.576445][T11962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1528'. [ 252.579595][T11955] bond7: entered allmulticast mode [ 252.602903][T11960] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 252.722751][T11966] tipc: Enabled bearer , priority 0 [ 252.730059][T11966] syzkaller0: entered promiscuous mode [ 252.736284][T11966] syzkaller0: entered allmulticast mode [ 252.775134][T11966] tipc: Resetting bearer [ 252.793359][T11965] tipc: Resetting bearer [ 252.835884][T11965] tipc: Disabling bearer [ 252.964841][T11976] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1534'. [ 253.073653][T11982] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1534'. [ 253.171755][T11986] netlink: 'syz.0.1537': attribute type 3 has an invalid length. [ 253.257904][T11996] netlink: 'syz.1.1540': attribute type 4 has an invalid length. [ 253.521700][T12015] netlink: 'syz.4.1546': attribute type 19 has an invalid length. [ 253.636534][T12023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1549'. [ 253.924070][T12038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1554'. [ 253.937788][T12039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1551'. [ 253.948462][T12038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1554'. [ 253.973371][T12039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1551'. [ 254.073491][T12039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1551'. [ 254.234502][T12062] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 254.270140][T12064] 8021q: adding VLAN 0 to HW filter on device bond8 [ 254.285404][ T6155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.286371][T12064] bond8: option mode: unable to set because the bond device is up [ 254.307050][ T6155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.294976][T12119] openvswitch: netlink: Flow key attr not present in new flow. [ 255.581642][T12139] team0: left promiscuous mode [ 255.586826][T12139] team_slave_0: left promiscuous mode [ 255.593317][T12139] team_slave_1: left promiscuous mode [ 255.609477][T12139] geneve2: left promiscuous mode [ 255.617863][T12139] bridge3: left promiscuous mode [ 255.629931][T12139] netlink: 'syz.2.1574': attribute type 13 has an invalid length. [ 255.638134][T12139] netlink: 'syz.2.1574': attribute type 17 has an invalid length. [ 255.698168][T12144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.708674][T12144] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.726534][T12144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.793912][T12144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.805733][T12144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.819439][T12144] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 255.831792][T12144] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 255.852996][T12144] veth1_vlan: left promiscuous mode [ 255.859718][T12144] veth0_vlan: left promiscuous mode [ 255.866605][T12144] veth0_vlan: entered promiscuous mode [ 255.876014][T12144] veth1_vlan: entered promiscuous mode [ 255.893977][T12144] veth0_macvtap: left promiscuous mode [ 255.901271][T12144] veth0_macvtap: entered promiscuous mode [ 255.915877][T12144] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 255.927321][T12144] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 255.936580][T12144] erspan0: entered promiscuous mode [ 255.944006][T12144] 8021q: adding VLAN 0 to HW filter on device bond1 [ 255.960595][T12144] 8021q: adding VLAN 0 to HW filter on device bond2 [ 255.971144][T12144] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 255.979245][T12144] 8021q: adding VLAN 0 to HW filter on device bond3 [ 255.988878][T12144] 8021q: adding VLAN 0 to HW filter on device eth0 [ 256.000303][T12144] 8021q: adding VLAN 0 to HW filter on device eth1 [ 256.011404][T12144] 8021q: adding VLAN 0 to HW filter on device eth2 [ 256.027103][T12144] 8021q: adding VLAN 0 to HW filter on device eth3 [ 256.039498][T12144] 8021q: adding VLAN 0 to HW filter on device bond4 [ 256.048996][T12144] bond5: left promiscuous mode [ 256.054482][T12144] 8021q: adding VLAN 0 to HW filter on device bond5 [ 256.072956][T12144] vlan3: left promiscuous mode [ 256.077765][T12144] bridge0: left promiscuous mode [ 256.083299][T12144] bridge0: entered promiscuous mode [ 256.139422][ T6159] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.148056][ T6159] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.156573][ T6159] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.165134][ T6159] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.181664][ T6159] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.189952][ T6159] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.199834][ T6159] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.208288][ T6159] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.318035][T12165] netlink: 'syz.4.1579': attribute type 10 has an invalid length. [ 256.352594][T12165] team0 (unregistering): Port device team_slave_0 removed [ 256.365138][T12165] team0 (unregistering): Port device team_slave_1 removed [ 256.505618][T12174] ipvlan1: entered promiscuous mode [ 256.804608][T12184] 8021q: adding VLAN 0 to HW filter on device bond8 [ 257.144384][T12216] IPVS: set_ctl: invalid protocol: 51 10.1.1.1:20000 [ 257.782454][T12253] __nla_validate_parse: 50 callbacks suppressed [ 257.782475][T12253] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1601'. [ 257.828706][T12253] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1601'. [ 258.033022][T12268] sctp: [Deprecated]: syz.3.1606 (pid 12268) Use of struct sctp_assoc_value in delayed_ack socket option. [ 258.033022][T12268] Use struct sctp_sack_info instead [ 258.054327][T12269] x_tables: duplicate underflow at hook 2 [ 258.064186][T12269] sctp: [Deprecated]: syz.1.1607 (pid 12269) Use of int in max_burst socket option. [ 258.064186][T12269] Use struct sctp_assoc_value instead [ 258.085277][T12268] sctp: [Deprecated]: syz.3.1606 (pid 12268) Use of struct sctp_assoc_value in delayed_ack socket option. [ 258.085277][T12268] Use struct sctp_sack_info instead [ 258.166173][T12279] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1608'. [ 258.435014][T12297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1614'. [ 258.528223][T12301] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1615'. [ 258.909648][T12321] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1622'. [ 259.059241][ T80] nci: nci_rx_work: unknown MT 0x7 [ 259.083445][T12337] syzkaller1: entered promiscuous mode [ 259.089045][T12337] syzkaller1: entered allmulticast mode [ 259.196883][T12331] validate_nla: 6 callbacks suppressed [ 259.196901][T12331] netlink: 'syz.2.1626': attribute type 4 has an invalid length. [ 259.701133][T12374] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1634'. [ 260.002024][T12389] xt_NFQUEUE: number of queues (3633) out of range (got 69161) [ 260.201497][T12393] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1638'. [ 260.424916][T12402] lo speed is unknown, defaulting to 1000 [ 260.480971][T12403] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1639'. [ 260.504588][T12402] lo speed is unknown, defaulting to 1000 [ 260.557232][T12402] lo speed is unknown, defaulting to 1000 [ 260.698861][T12419] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 4 [ 260.719482][T12421] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 260.727736][T12421] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 260.860672][ T9969] lo speed is unknown, defaulting to 1000 [ 260.869204][T12402] infiniband sqz0: set down [ 260.876795][T12402] infiniband sqz0: added lo [ 260.902609][T12402] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 260.918091][T12402] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 260.935805][T12402] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 260.990012][T12402] RDS/IB: sqz0: added [ 260.996822][T12402] smc: adding ib device sqz0 with port count 1 [ 261.003335][T12402] smc: ib device sqz0 port 1 has no pnetid [ 261.016642][ T9969] lo speed is unknown, defaulting to 1000 [ 261.032556][T12402] lo speed is unknown, defaulting to 1000 [ 261.207808][T12402] lo speed is unknown, defaulting to 1000 [ 261.361348][T12402] lo speed is unknown, defaulting to 1000 [ 261.519189][T12402] lo speed is unknown, defaulting to 1000 [ 261.677136][T12402] lo speed is unknown, defaulting to 1000 [ 263.463998][ C0] ICMPv6: NA: 7a:ac:29:c9:6c:de advertised our address fe80::78ac:29ff:fec9:6cde on gretap1! [ 273.846127][ T4994] udevd[4994]: worker [5646] /devices/virtual/block/nbd0 timeout; kill it [ 273.855798][ T4994] udevd[4994]: seq 10619 '/devices/virtual/block/nbd0' killed [ 275.519920][ T5629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 275.534941][ T5629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 275.542905][ T5629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 275.553480][ T5629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 275.561755][ T5629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 275.594814][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 275.606259][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 275.614386][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 275.625378][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 275.637098][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 276.061305][T12429] lo speed is unknown, defaulting to 1000 [ 276.237999][ T5629] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 276.253239][ T5629] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 276.262255][ T5629] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 276.271334][ T5629] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 276.279038][ T5629] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 276.303665][ T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 276.316258][ T5629] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 276.331887][ T5629] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 276.342153][ T5629] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 276.349802][ T5629] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 276.422648][ T5632] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 276.437013][ T5632] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 276.446203][ T5632] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 276.457740][ T5632] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 276.466160][ T5632] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 276.683286][T12431] lo speed is unknown, defaulting to 1000 [ 277.219805][T12452] lo speed is unknown, defaulting to 1000 [ 277.344102][T12429] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.354049][T12429] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.361787][T12429] bridge_slave_0: entered allmulticast mode [ 277.370847][T12429] bridge_slave_0: entered promiscuous mode [ 277.379152][T12429] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.386523][T12429] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.393862][T12429] bridge_slave_1: entered allmulticast mode [ 277.403542][T12429] bridge_slave_1: entered promiscuous mode [ 277.458059][T12429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.471513][T12453] lo speed is unknown, defaulting to 1000 [ 277.483001][T12429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.571845][T12429] team0: Port device team_slave_0 added [ 277.595971][T12429] team0: Port device team_slave_1 added [ 277.640988][ T5629] Bluetooth: hci5: command tx timeout [ 277.699926][T12429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.707475][T12429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.738610][ T5629] Bluetooth: hci6: command tx timeout [ 277.746655][T12429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.766849][T12429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.777221][T12429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.804583][T12429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.835578][T12457] lo speed is unknown, defaulting to 1000 [ 277.987825][T12429] hsr_slave_0: entered promiscuous mode [ 277.994936][T12429] hsr_slave_1: entered promiscuous mode [ 278.043627][T12431] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.051103][T12431] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.058328][T12431] bridge_slave_0: entered allmulticast mode [ 278.065781][T12431] bridge_slave_0: entered promiscuous mode [ 278.101044][T12431] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.108216][T12431] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.115742][T12431] bridge_slave_1: entered allmulticast mode [ 278.123368][T12431] bridge_slave_1: entered promiscuous mode [ 278.240962][T12431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.254379][T12431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.306278][T12431] team0: Port device team_slave_0 added [ 278.333558][T12431] team0: Port device team_slave_1 added [ 278.370354][ T5629] Bluetooth: hci8: command tx timeout [ 278.413669][T12431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.421859][T12431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.448439][T12431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.453402][ T5629] Bluetooth: hci7: command tx timeout [ 278.487277][T12431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.494500][T12431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.521421][T12431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.521433][ T5629] Bluetooth: hci9: command tx timeout [ 278.629557][T12452] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.637340][T12452] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.646165][T12452] bridge_slave_0: entered allmulticast mode [ 278.654251][T12452] bridge_slave_0: entered promiscuous mode [ 278.697447][T12452] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.705213][T12452] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.712483][T12452] bridge_slave_1: entered allmulticast mode [ 278.719582][T12452] bridge_slave_1: entered promiscuous mode [ 278.774543][T12431] hsr_slave_0: entered promiscuous mode [ 278.781326][T12431] hsr_slave_1: entered promiscuous mode [ 278.787588][T12431] debugfs: 'hsr0' already exists in 'hsr' [ 278.793568][T12431] Cannot create hsr debugfs directory [ 278.840689][T12452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.879545][T12452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.978321][T12452] team0: Port device team_slave_0 added [ 279.019844][T12452] team0: Port device team_slave_1 added [ 279.129664][T12452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.136912][T12452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.163386][T12452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.198859][T12452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.206048][T12452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.232465][T12452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.286618][T12453] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.293987][T12453] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.301996][T12453] bridge_slave_0: entered allmulticast mode [ 279.309178][T12453] bridge_slave_0: entered promiscuous mode [ 279.344042][T12453] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.351493][T12453] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.358910][T12453] bridge_slave_1: entered allmulticast mode [ 279.367606][T12453] bridge_slave_1: entered promiscuous mode [ 279.379545][T12457] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.386814][T12457] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.394384][T12457] bridge_slave_0: entered allmulticast mode [ 279.402350][T12457] bridge_slave_0: entered promiscuous mode [ 279.434095][T12457] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.441551][T12457] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.448868][T12457] bridge_slave_1: entered allmulticast mode [ 279.456559][T12457] bridge_slave_1: entered promiscuous mode [ 279.469254][T12452] hsr_slave_0: entered promiscuous mode [ 279.477149][T12452] hsr_slave_1: entered promiscuous mode [ 279.483728][T12452] debugfs: 'hsr0' already exists in 'hsr' [ 279.489500][T12452] Cannot create hsr debugfs directory [ 279.549814][T12453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.562875][T12453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.589520][T12457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.601938][T12457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.686081][T12457] team0: Port device team_slave_0 added [ 279.696379][T12453] team0: Port device team_slave_0 added [ 279.709115][T12457] team0: Port device team_slave_1 added [ 279.721416][ T5629] Bluetooth: hci5: command tx timeout [ 279.730541][T12453] team0: Port device team_slave_1 added [ 279.788337][T12457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.795816][T12457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.823611][T12457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.824691][ T5629] Bluetooth: hci6: command tx timeout [ 279.862947][T12457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.869972][T12457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.896419][T12457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.910163][T12453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.917465][T12453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.943799][T12453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.977852][T12453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.984882][T12453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.011728][T12453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.117261][T12453] hsr_slave_0: entered promiscuous mode [ 280.125313][T12453] hsr_slave_1: entered promiscuous mode [ 280.132469][T12453] debugfs: 'hsr0' already exists in 'hsr' [ 280.138246][T12453] Cannot create hsr debugfs directory [ 280.150019][T12457] hsr_slave_0: entered promiscuous mode [ 280.157398][T12457] hsr_slave_1: entered promiscuous mode [ 280.163896][T12457] debugfs: 'hsr0' already exists in 'hsr' [ 280.169641][T12457] Cannot create hsr debugfs directory [ 280.440518][ T31] INFO: task kworker/1:1H:4957 blocked for more than 143 seconds. [ 280.442439][ T5629] Bluetooth: hci8: command tx timeout [ 280.448555][ T31] Not tainted syzkaller #0 [ 280.448568][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 280.448576][ T31] task:kworker/1:1H state:D stack:26504 pid:4957 tgid:4957 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 280.448632][ T31] Workqueue: kblockd blk_mq_requeue_work [ 280.448662][ T31] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 280.448669][ T31] [ 280.448680][ T31] __schedule+0x1821/0x5740 [ 280.448725][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 280.448751][ T31] ? __pfx___schedule+0x10/0x10 [ 280.448781][ T31] ? schedule+0x90/0x360 [ 280.448805][ T31] schedule+0x164/0x360 [ 280.448829][ T31] schedule_timeout+0x158/0x2c0 [ 280.448852][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 280.448872][ T31] ? __pfx_process_timeout+0x10/0x10 [ 280.448897][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 280.448920][ T31] ? prepare_to_wait_event+0x436/0x480 [ 280.448951][ T31] nbd_queue_rq+0x857/0x1100 [ 280.521917][ T5629] Bluetooth: hci7: command tx timeout [ 280.533564][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 280.533600][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 280.533640][ T31] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 280.533685][ T31] ? sbitmap_get+0x229/0x390 [ 280.533706][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 280.600431][ T5629] Bluetooth: hci9: command tx timeout [ 280.686653][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 280.692790][ T31] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 280.699218][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 280.706163][ T31] ? blk_mq_hw_queue_need_run+0x13c/0x680 [ 280.712028][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 280.717789][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 280.723239][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 280.729294][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 280.735914][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 280.741166][ T31] blk_mq_run_hw_queues+0x26c/0x3f0 [ 280.746420][ T31] blk_mq_requeue_work+0x71c/0x780 [ 280.751933][ T31] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 280.757642][ T31] ? process_scheduled_works+0xa70/0x1860 [ 280.763687][ T31] ? process_scheduled_works+0xa70/0x1860 [ 280.769455][ T31] process_scheduled_works+0xb5d/0x1860 [ 280.775397][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 280.782184][ T31] ? assign_work+0x3d5/0x5e0 [ 280.786837][ T31] worker_thread+0xa53/0xfc0 [ 280.792028][ T31] kthread+0x389/0x470 [ 280.796153][ T31] ? __pfx_worker_thread+0x10/0x10 [ 280.801485][ T31] ? __pfx_kthread+0x10/0x10 [ 280.807244][ T31] ret_from_fork+0x514/0xb70 [ 280.812140][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 280.817309][ T31] ? __switch_to+0xc79/0x1410 [ 280.822343][ T31] ? __pfx_kthread+0x10/0x10 [ 280.827001][ T31] ret_from_fork_asm+0x1a/0x30 [ 280.832246][ T31] [ 280.835523][ T31] [ 280.835523][ T31] Showing all locks held in the system: [ 280.851507][ T31] 1 lock held by khungtaskd/31: [ 280.862133][ T31] #0: ffffffff8e95cda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 280.890800][ T31] 5 locks held by kworker/u8:5/80: [ 280.896018][ T31] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 280.920412][ T31] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 280.940276][ T31] #2: ffffffff8f3925c0 (deferred_probe_mutex){+.+.}-{4:4}, at: deferred_probe_work_func+0x21/0x260 [ 280.969258][ T31] #3: ffffffff9a73e680 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x83/0x580 [ 280.979810][ T31] #4: ffffffff8e95cda0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa6/0x2550 [ 280.989877][ T31] 4 locks held by kworker/1:1H/4957: [ 280.995445][ T31] #0: ffff8880206a4540 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 281.006892][ T31] #1: ffffc9000745fc40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 281.020122][ T31] #2: ffff88802759cf18 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 281.029980][ T31] #3: ffff888055215738 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 281.039224][ T31] 2 locks held by getty/5382: [ 281.044184][ T31] #0: ffff8880379120a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 281.054252][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 281.064683][ T31] 1 lock held by udevd/5646: [ 281.069313][ T31] #0: ffff888027fcb350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 281.078933][ T31] 2 locks held by syz.0.1637/12395: [ 281.084425][ T31] #0: ffff888076912640 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 281.094968][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_done+0x10b/0x220 [ 281.104057][ T31] 6 locks held by syz.3.1639/12403: [ 281.109316][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 281.117939][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 281.127323][ T31] #2: ffff888027f99a60 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 281.137975][ T31] #3: ffff888027fc47c8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 281.147753][ T31] #4: ffff888027fc4190 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 281.160110][ T31] #5: ffff888027fc41c8 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 281.172983][ T31] 2 locks held by syz.2.1641/12408: [ 281.178250][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 281.187469][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 281.197709][ T31] 2 locks held by syz.2.1641/12415: [ 281.203245][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 281.211857][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 281.221578][ T31] 2 locks held by syz.2.1641/12420: [ 281.226829][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 281.235491][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 281.245972][ T31] 2 locks held by syz.2.1641/12422: [ 281.252456][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 281.260915][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 281.269946][ T31] 2 locks held by syz.4.1642/12414: [ 281.275673][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 281.290672][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 281.310370][ T31] 2 locks held by syz.1.1644/12421: [ 281.315703][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 281.324092][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 281.333375][ T31] 2 locks held by syz-executor/12429: [ 281.338772][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 281.347122][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 281.356225][ T31] 2 locks held by syz-executor/12431: [ 281.361925][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 281.370149][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 281.379312][ T31] 2 locks held by syz-executor/12452: [ 281.384803][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 281.393191][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 281.402303][ T31] 5 locks held by syz-executor/12453: [ 281.407705][ T31] #0: ffff88804ddc0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 281.417744][ T31] #1: ffff88804ddc00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 281.427559][ T31] #2: ffffffff8ff56740 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 281.438158][ T31] #3: ffff8880797322f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x92/0x570 [ 281.448152][ T31] #4: ffffffff8e9630a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 281.459158][ T31] 1 lock held by syz-executor/12457: [ 281.464493][ T31] #0: ffffffff8e9630a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 281.476164][ T31] [ 281.482760][ T31] ============================================= [ 281.482760][ T31] [ 281.493015][ T31] NMI backtrace for cpu 0 [ 281.493031][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 281.493049][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 281.493060][ T31] Call Trace: [ 281.493067][ T31] [ 281.493074][ T31] dump_stack_lvl+0xe8/0x150 [ 281.493098][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 281.493119][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 281.493140][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 281.493164][ T31] sys_info+0x135/0x170 [ 281.493181][ T31] watchdog+0xfd3/0x1030 [ 281.493212][ T31] ? watchdog+0x1c9/0x1030 [ 281.493241][ T31] kthread+0x389/0x470 [ 281.493264][ T31] ? __pfx_watchdog+0x10/0x10 [ 281.493287][ T31] ? __pfx_kthread+0x10/0x10 [ 281.493310][ T31] ret_from_fork+0x514/0xb70 [ 281.493331][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 281.493349][ T31] ? __switch_to+0xc79/0x1410 [ 281.493377][ T31] ? __pfx_kthread+0x10/0x10 [ 281.493400][ T31] ret_from_fork_asm+0x1a/0x30 [ 281.493435][ T31] [ 281.493442][ T31] Sending NMI from CPU 0 to CPUs 1: [ 281.605573][ C1] NMI backtrace for cpu 1 [ 281.605592][ C1] CPU: 1 UID: 0 PID: 80 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 281.605612][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 281.605623][ C1] Workqueue: bat_events batadv_mcast_mla_update [ 281.605647][ C1] RIP: 0010:process_scheduled_works+0x953/0x1860 [ 281.605669][ C1] Code: 48 c1 e8 03 49 be 00 00 00 00 00 fc ff df 42 80 3c 30 00 74 08 48 89 df e8 4a 6b a2 00 48 ff 03 48 8b 7c 24 50 e8 5d 59 1e 0a <65> 48 8b 05 fd c8 ab 11 48 89 44 24 18 48 8d 98 c4 04 00 00 48 89 [ 281.605684][ C1] RSP: 0018:ffffc9000249fae0 EFLAGS: 00000286 [ 281.605698][ C1] RAX: 0000000080000000 RBX: ffff8880338958f0 RCX: 0000000000000000 [ 281.605711][ C1] RDX: 0000000000000000 RSI: ffffffff8dfafcec RDI: 00000000ffffffff [ 281.605723][ C1] RBP: ffffc9000249fce8 R08: ffffffff90311bf7 R09: 1ffffffff206237e [ 281.605735][ C1] R10: dffffc0000000000 R11: fffffbfff206237f R12: 0000000002000000 [ 281.605748][ C1] R13: ffff8880785797f0 R14: dffffc0000000000 R15: ffff88801cf9f718 [ 281.605761][ C1] FS: 0000000000000000(0000) GS:ffff88812537a000(0000) knlGS:0000000000000000 [ 281.605775][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 281.605787][ C1] CR2: 00007fdf47547e20 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 281.605802][ C1] Call Trace: [ 281.605808][ C1] [ 281.605816][ C1] ? trace_contention_end+0x3b/0x160 [ 281.605857][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 281.605878][ C1] ? assign_work+0x3d5/0x5e0 [ 281.605898][ C1] worker_thread+0xa53/0xfc0 [ 281.605931][ C1] kthread+0x389/0x470 [ 281.605962][ C1] ? __pfx_worker_thread+0x10/0x10 [ 281.605977][ C1] ? __pfx_kthread+0x10/0x10 [ 281.605997][ C1] ret_from_fork+0x514/0xb70 [ 281.606015][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 281.606031][ C1] ? __switch_to+0xc79/0x1410 [ 281.606055][ C1] ? __pfx_kthread+0x10/0x10 [ 281.606075][ C1] ret_from_fork_asm+0x1a/0x30 [ 281.606102][ C1] [ 281.801809][ T5629] Bluetooth: hci5: command tx timeout [ 281.812685][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 281.819598][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 281.828725][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 281.838794][ T31] Call Trace: [ 281.842090][ T31] [ 281.845040][ T31] vpanic+0x56c/0xa60 [ 281.849065][ T31] ? __pfx___schedule+0x10/0x10 [ 281.853946][ T31] ? __pfx_vpanic+0x10/0x10 [ 281.858481][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 281.864661][ T31] panic+0xc5/0xd0 [ 281.868410][ T31] ? __pfx_panic+0x10/0x10 [ 281.872849][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 281.878250][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 281.884440][ T31] watchdog+0x102c/0x1030 [ 281.888820][ T31] ? watchdog+0x1c9/0x1030 [ 281.893270][ T31] kthread+0x389/0x470 [ 281.897380][ T31] ? __pfx_watchdog+0x10/0x10 [ 281.902097][ T31] ? __pfx_kthread+0x10/0x10 [ 281.906722][ T31] ret_from_fork+0x514/0xb70 [ 281.911336][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 281.916480][ T31] ? __switch_to+0xc79/0x1410 [ 281.921198][ T31] ? __pfx_kthread+0x10/0x10 [ 281.925831][ T31] ret_from_fork_asm+0x1a/0x30 [ 281.930667][ T31] [ 281.934518][ T31] Kernel Offset: disabled [ 281.938850][ T31] Rebooting in 86400 seconds..