last executing test programs: 2m28.485107559s ago: executing program 2 (id=461): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000001a40)=[{{&(0x7f0000000200)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbb11414aa0000000010000000000000000000000007"], 0x30}}], 0x1, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500070000001400040073"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m28.48465958s ago: executing program 1 (id=462): r0 = socket(0x1d, 0x2, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000010300b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) sendmmsg$inet6(r0, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="e2f78c8a71da", 0x6}, {0x0}], 0x2, &(0x7f00000006c0)=[@hopopts={{0x18, 0x29, 0x36, {0x3b}}}], 0x18}}, {{0x0, 0x0, 0x0}}], 0x2, 0x44800) 2m28.240860748s ago: executing program 1 (id=465): r0 = socket(0x27, 0x8, 0x2) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@setlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x54220}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_MASTER={0x8, 0x3a}]}, 0x3c}}, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x20}, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r0}, 0x20) (async) close(r0) (async) unshare(0x22020400) (async) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x3a, 0x8, 0x2}, 0x48) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f00000010c0)={@map=r3, 0xffffffffffffffff, 0x2c}, 0x20) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xffffffffffffff58, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6}]}}}]}, 0x48}}, 0x0) (async) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) (async) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x14, 0x2, 0x6, 0x801}, 0x14}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) socket$netlink(0x10, 0x3, 0xc) 2m28.201084815s ago: executing program 2 (id=466): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="ec000000210001002dbd7000fedbdf25fe880000000000000000000000000101ac1414bb0000000000000000000000004e240002000700010a0080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="af6b6e00010000009c0011001901010000000000000000000000000020010000000000000000000000000001ac14143e0000000000c8b10000000000ac1414bb00000000000000000000000032fcff00073500000a000200000000000000000000000201a8000000ac1e01010000000000000000000000000a010102000000000000000000000000fe80000000000000000000000000002f33"], 0xec}}, 0x20000000) 2m27.984760714s ago: executing program 1 (id=468): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0xb, [@func={0xf, 0x0, 0x0, 0xc, 0x1}, @decl_tag={0xf, 0x0, 0x0, 0x11, 0x2, 0x9}, @const={0xc, 0x0, 0x0, 0xa, 0x4}, @decl_tag={0xf, 0x0, 0x0, 0x11, 0x5, 0x2}, @datasec={0x5, 0x1, 0x0, 0xf, 0x1, [{0x3, 0x3, 0x1}], '`'}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x5, 0xffffffffffffffff}, @fwd={0x5}, @datasec={0x8, 0x7, 0x0, 0xf, 0x3, [{0x2, 0x0, 0x7fff}, {0x2, 0x81, 0x2728}, {0x5, 0x5, 0x9}, {0x2, 0xffff3a67, 0x6}, {0x1, 0x40, 0x27}, {0x2, 0xffffffff, 0x80000000}, {0x1, 0xc, 0x2}], "7a7f9d"}, @enum={0x7, 0x5, 0x0, 0x6, 0x4, [{0x9, 0x4}, {0xa, 0x151}, {0xb, 0x5}, {0x3, 0x8}, {0x2, 0x80000}]}]}, {0x0, [0x5f, 0x5f, 0x0, 0x0, 0x61, 0x61, 0x5f, 0x51, 0x0]}}, &(0x7f0000000340)=""/129, 0x127, 0x81}, 0x28) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffff00000001, 0x31b, 0x6}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, r0, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x23}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd00}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x6}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x80000001}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x2}, {0x7, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x7}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x80000, 0xb) 2m27.98411826s ago: executing program 2 (id=469): r0 = socket(0x10, 0x803, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast1, @multicast2, 0x0}, &(0x7f0000000100)=0xc) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @local}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x2, 0x17, 0x400, 0x400, 0x5, 0x81e00005, r1}) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 2m27.784088863s ago: executing program 2 (id=472): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) socket(0x1e, 0x4, 0x0) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x14, 0x14}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000040)=[@ip_retopts={{0x20, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0xc, 0x0, 0xb, [0x2, 0xff, 0x8]}]}}}], 0x20}, 0x0) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16=r0], 0xdd12}], 0x1}, 0x10) 2m27.651943759s ago: executing program 1 (id=473): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000007cc38af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xa100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m27.453133472s ago: executing program 1 (id=475): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x2, 0x10, 0x3}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004"], 0x328}}, 0x84) 2m27.357185775s ago: executing program 2 (id=476): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="070000000400000008020000210000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYRES8=r1], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) 2m27.208273549s ago: executing program 2 (id=477): r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELRULE={0x64, 0x8, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}]}]}, @NFT_MSG_DELCHAIN={0xa8, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x5c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6b6b3380}, @NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_virt_wifi\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'bridge_slave_0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv0\x00'}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x154}}, 0x41) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x48, 0x32, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=@ipv4_newrule={0x40, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x3, 0x0, 0x0, 0x8}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'bridge_slave_0\x00'}, @FRA_SRC={0x8, 0x2, @multicast2}, @FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x6}]}, 0x40}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r4, 0x0, 0xf69}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000400)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x80, 0x8, 0x4, 0x0, 0xffffffff, 0xb59f}}) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f00000000c0)={0x0, {0x2, 0x4e22, @remote}, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e23, @empty}, 0x204, 0x0, 0x0, 0x0, 0xecc6, &(0x7f0000000080)='netdevsim0\x00', 0x4eb5, 0x3, 0xffff}) socket$inet6(0xa, 0x80003, 0xff) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000240)={'dummy0\x00', 0x3bcd, 0x8}) 2m26.976827597s ago: executing program 1 (id=478): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELRULE={0x64, 0x8, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}]}]}, @NFT_MSG_DELCHAIN={0xa8, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x5c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6b6b3380}, @NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_virt_wifi\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'bridge_slave_0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv0\x00'}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x154}}, 0x41) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x48, 0x32, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=@ipv4_newrule={0x40, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x3, 0x0, 0x0, 0x8}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'bridge_slave_0\x00'}, @FRA_SRC={0x8, 0x2, @multicast2}, @FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x6}]}, 0x40}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r4, 0x0, 0xf69}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000400)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x80, 0x8, 0x4, 0x0, 0xffffffff, 0xb59f}}) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f00000000c0)={0x0, {0x2, 0x4e22, @remote}, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e23, @empty}, 0x204, 0x0, 0x0, 0x0, 0xecc6, &(0x7f0000000080)='netdevsim0\x00', 0x4eb5, 0x3, 0xffff}) socket$inet6(0xa, 0x80003, 0xff) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000240)={'dummy0\x00', 0x3bcd, 0x8}) 2m13.141284635s ago: executing program 3 (id=594): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r0, 0xffffffffffffffff, 0x2f}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) 2m12.913848961s ago: executing program 3 (id=597): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0xfffb, 0x5, 0xffc0, 0x0, 0x81, 0x0, 0xfffe}, 0xc) 2m12.763410207s ago: executing program 3 (id=600): socket$inet6(0xa, 0x2, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x1e, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000370429bd7000fcdbdf2500000000", @ANYBLOB="890c040000000000280012800b000100697036746e6c00001800028014000200000000000000000000000000e3000000", @ANYRES32=r2, @ANYRESHEX=r1], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) 2m12.634605284s ago: executing program 3 (id=602): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0500000067a6f8af000022004baf0c0001000b0000da44574c01"], 0x20}}, 0x2000c094) (async, rerun: 32) sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x38, 0x701, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) (rerun: 32) unshare(0x68040200) (async, rerun: 64) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async, rerun: 32) sendmmsg$sock(r6, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) (rerun: 32) shutdown(r6, 0x1) socket$alg(0x26, 0x5, 0x0) 2m12.106966528s ago: executing program 32 (id=477): r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELRULE={0x64, 0x8, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}]}]}, @NFT_MSG_DELCHAIN={0xa8, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x5c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6b6b3380}, @NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_virt_wifi\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'bridge_slave_0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv0\x00'}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x154}}, 0x41) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x48, 0x32, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=@ipv4_newrule={0x40, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x3, 0x0, 0x0, 0x8}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'bridge_slave_0\x00'}, @FRA_SRC={0x8, 0x2, @multicast2}, @FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x6}]}, 0x40}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r4, 0x0, 0xf69}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000400)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x80, 0x8, 0x4, 0x0, 0xffffffff, 0xb59f}}) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f00000000c0)={0x0, {0x2, 0x4e22, @remote}, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e23, @empty}, 0x204, 0x0, 0x0, 0x0, 0xecc6, &(0x7f0000000080)='netdevsim0\x00', 0x4eb5, 0x3, 0xffff}) socket$inet6(0xa, 0x80003, 0xff) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000240)={'dummy0\x00', 0x3bcd, 0x8}) 2m11.598796879s ago: executing program 33 (id=478): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELRULE={0x64, 0x8, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}]}]}, @NFT_MSG_DELCHAIN={0xa8, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x5c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6b6b3380}, @NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_virt_wifi\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'bridge_slave_0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv0\x00'}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x154}}, 0x41) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x48, 0x32, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=@ipv4_newrule={0x40, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x3, 0x0, 0x0, 0x8}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'bridge_slave_0\x00'}, @FRA_SRC={0x8, 0x2, @multicast2}, @FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x6}]}, 0x40}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r4, 0x0, 0xf69}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000400)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x80, 0x8, 0x4, 0x0, 0xffffffff, 0xb59f}}) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f00000000c0)={0x0, {0x2, 0x4e22, @remote}, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e23, @empty}, 0x204, 0x0, 0x0, 0x0, 0xecc6, &(0x7f0000000080)='netdevsim0\x00', 0x4eb5, 0x3, 0xffff}) socket$inet6(0xa, 0x80003, 0xff) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000240)={'dummy0\x00', 0x3bcd, 0x8}) 2m10.496529683s ago: executing program 3 (id=614): bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB="0000000000000000000000040000000000000000de5268a1a59361f36bebe7a38f0ea41a69759b6ac8f24f62503d8a2155b22e0af205e229e5b4575e0083968c07db20bbfdfd0889803f2c3187e010586fc6685e8c66cef1e7b0eb8390f4ea8c4efc1840ca329c192f1cb90361a1601e4c8949ced977696ea3f4ec6e6f3dba78f5483b0e1888a69700de7758d4a8c618df7f3b2742a700edd9385bf78bf8a409927b6bf9d45c4690e9df3e7bf3c725d960dbc2afbe8fd07a5acf320003e4d04308dd9ea8bd7c19059ff9ba32183367992d1b3b35053655f87a8eb8c186e206e04fca8240232a93c9c06383793061efe0764a1fd3ef9ed38b602ef339c1fc1e22018572cb4e2fa3da86576ee3e8e20f661ef1bdf3c807f6485737dca5750a64fd434433ce", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x9, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x3, 0x3, 0x0, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, 0x0) unshare(0x22020600) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000420005"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xe5c}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="05000000040000800700000080"], 0x50) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fcdbdf250700000012000200fc00000000000000000000000001080004006401010214000300fe8000000000000000000000000000aa0000"], 0x44}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0) recvmmsg(r3, 0x0, 0x0, 0x20, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0209000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x0, @loopback}, 0x4, 0x0, 0x3}}, 0x2e) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$PPPIOCGCHAN(r8, 0x80047437, &(0x7f0000000080)) syz_emit_ethernet(0x5c, &(0x7f00000014c0)=ANY=[@ANYBLOB="99177fa54f29ece65fbcee5586df60000000002611fffe8000000000000000000000000000bbfe8000000000000000000000000000aa5e00000000000000000033c06500000000000e1300169078020300000000000030b00afe4e70"], 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000000}, [@map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x4}, @ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000180)='syzkaller\x00', 0x3}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e23, @private=0xa010101}, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 2m10.31868378s ago: executing program 3 (id=616): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x8, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000040000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x28) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff801}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='fsi_master_gpio_cmd_rel_addr\x00', r1}, 0x18) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000100)={0x0, 0x81, 0x0, 0x4}, 0xc) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, &(0x7f0000000180)) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m55.198882615s ago: executing program 34 (id=616): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x8, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000040000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x28) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff801}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='fsi_master_gpio_cmd_rel_addr\x00', r1}, 0x18) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000100)={0x0, 0x81, 0x0, 0x4}, 0xc) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, &(0x7f0000000180)) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m29.956117608s ago: executing program 5 (id=921): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@rand_addr=0x64010101, 0x1, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="cc000000210001000000000004000000fc010000000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ff0200000000000000000000000000010a010100000000000000000000000000fc010000000000000000000000000001000000060000000000000000000000003c000000000000000a000a002c0013"], 0xcc}, 0x1, 0x0, 0x0, 0x700}, 0x0) 1m15.733282821s ago: executing program 5 (id=921): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@rand_addr=0x64010101, 0x1, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="cc000000210001000000000004000000fc010000000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ff0200000000000000000000000000010a010100000000000000000000000000fc010000000000000000000000000001000000060000000000000000000000003c000000000000000a000a002c0013"], 0xcc}, 0x1, 0x0, 0x0, 0x700}, 0x0) 59.800780131s ago: executing program 5 (id=921): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@rand_addr=0x64010101, 0x1, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="cc000000210001000000000004000000fc010000000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ff0200000000000000000000000000010a010100000000000000000000000000fc010000000000000000000000000001000000060000000000000000000000003c000000000000000a000a002c0013"], 0xcc}, 0x1, 0x0, 0x0, 0x700}, 0x0) 45.412514114s ago: executing program 5 (id=921): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@rand_addr=0x64010101, 0x1, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="cc000000210001000000000004000000fc010000000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ff0200000000000000000000000000010a010100000000000000000000000000fc010000000000000000000000000001000000060000000000000000000000003c000000000000000a000a002c0013"], 0xcc}, 0x1, 0x0, 0x0, 0x700}, 0x0) 29.91124918s ago: executing program 5 (id=921): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@rand_addr=0x64010101, 0x1, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="cc000000210001000000000004000000fc010000000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ff0200000000000000000000000000010a010100000000000000000000000000fc010000000000000000000000000001000000060000000000000000000000003c000000000000000a000a002c0013"], 0xcc}, 0x1, 0x0, 0x0, 0x700}, 0x0) 23.383888153s ago: executing program 7 (id=1407): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xca02}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000012003b15002900000000000020000600", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677470000c00028008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x5, 0x40, 0x3, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x8, 0x4, 0x2}}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001042dbd70000000000000000000", @ANYRES32=r10, @ANYBLOB="000000000000000030001280080001007369740024000280080014002f00000008000300ac"], 0x50}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0xf0a, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400004, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0xfff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000200)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000240)="81411f0295f62923c3d734cd45cfc295b6ff959fe3d9d89c", 0x18}], 0x1, &(0x7f00000006c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @loopback, @rand_addr=0x64010102}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x82, 0x0, 0xa, [0x4]}, @generic={0x86, 0x11, "f60e8dbb5b37b7b894ea806791147a"}, @noop, @ssrr={0x89, 0xf, 0x61, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x21}, @dev={0xac, 0x14, 0x14, 0xf}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x42}, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @loopback, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @rand_addr=0x64010101, @empty}}}], 0x120}, 0x80) close(r3) socket$netlink(0x10, 0x3, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000080)=""/4, 0x4}], 0x1, 0x0, 0x9) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$bt_hci(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00000002"], 0x8) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000003000000000000000073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000068000000060a010400000000000000000100000040000480240001800b00010072656a6563740000140002800500020008000000080001400000000018000180080001006f7366000c000280080001400000001408000b40000000000900010073797a3000000000140092261b3d941dcfca40e70000110001000000"], 0xf0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a000018000000000100000095080000000010007baa00fe00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000080000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x3, 0x10, &(0x7f0000001e00)=""/4087}, 0x90) 22.336042589s ago: executing program 7 (id=1413): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f80000001600010000000000000000006401010000000000000000000000000000000000000000000000ffff000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000003200000000033000000000000000000000000000000000000000000000000000000000000000200"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 22.125862718s ago: executing program 7 (id=1415): r0 = socket(0x1d, 0x2, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="00000000007b0000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) sendmmsg$inet6(r0, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="e2f78c8a71da", 0x6}, {0x0}], 0x2, &(0x7f00000006c0)=[@hopopts={{0x18, 0x29, 0x36, {0x3b}}}], 0x18}}, {{0x0, 0x0, 0x0}}], 0x2, 0x44800) 20.433098866s ago: executing program 7 (id=1417): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xa, 0x0, 0xfe, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0xfffd}, @generic={0x0, 0x5, "d58838"}]}}}}}}, 0x4a) 20.072363224s ago: executing program 7 (id=1420): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.dequeue\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000004580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELOBJ={0x68, 0x14, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x28, 0x8, "354d2906a9978eefe9260778f5871dfd68e2505c95822d170ddec1ef1ba9fbfb14c6cfc6"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x224, 0x3, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_USERDATA={0x9e, 0xc, "777eb57103f2d17b5f9ca4a5b3d0b78e3a21ef6379b14e7921ada26d717f8683f6feaeb7ae77a503cc4a57c0f7ffa388d58a002b3344c8947b2981f598becd6340c9c6da9cd7c9c14ab28fba51f26f20ec3ee1fd77a535a6fe17b58a06126b3dd3bae2aa574e8717ceb9dfe46812425ec940ec4f205d0660f459209af0b0d534e0525059df6bc6a23daaa105276dbfda0828f7ac411a146562c6"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0xb2, 0xc, "2f6b1ec8b0854a2e28f04095c2dd41d1d856fb85288119a76df4cb495cd2283c48d900d52153ce703b055eadeca5a603625c93c1db95c954320eff55e21e71ca0dd5a0573fe8c10d819174ed0614b753ee0eec7c3a8ae81ca027d54b3babdccf04117e57f373443e6091fa1b51d415cdf63ddd87c928ec6f85cd1d08ecd6255edabecd1d15a132d6876c44a8768fb396a754a0c08f8c98b45e7012750520acab16db37942c1df8567607653bdb43"}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_USERDATA={0x9f, 0xc, "81efd21a4dcc9cfa97bbc5bd102ebefd6cc269b382a8234c4f23e4dae1c2727159cde0352f15cbafddb7e87ee216b3366658f9d95b5ca3f83ce3aa8d398bfb1a21f0444b64a143e780b472632b83c3b593e35140bd277d810b86ccb8a9220fcf073f7a1d95e884363c629440b56f2b442e25f12f17648bb1dc5c4c20438a3cc5ce552f71684f12ec03ab306c28170b24e4b03f64824d920dbc159c"}]}, @NFT_MSG_NEWFLOWTABLE={0xfc, 0x16, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0xdc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'sit0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffc}]}]}, @NFT_MSG_DELRULE={0x5c, 0x8, 0xa, 0x404, 0x0, 0x0, {0x7}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_USERDATA={0x49, 0xd, 0x1, 0x0, "e7d056b5dece8a9f59de96a5dc6320939d5aed6404e8ec8ac4d48938fdf240b0e753c9f298099266911c7ba6761ca25cfbfe8bf0b9c19a29f2154e013ed34a0feaff8bbec0"}]}, @NFT_MSG_NEWSETELEM={0x2e5c, 0xc, 0xa, 0xe04, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x2e2c, 0x3, 0x0, 0x1, [{0x1bec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xc3e}, @NFTA_SET_ELEM_USERDATA={0x2e, 0x6, 0x1, 0x0, "87b07b8f91b8bef09c13eb8040b1cabc6dffff5f1f6fdb07efdd01e65012f86f124a196e8e29a2d54d15"}, @NFTA_SET_ELEM_EXPRESSIONS={0x71c, 0xb, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x15}]}}}, {0x64, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}]}}}, {0x60c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x5fc, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0xe4, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x26, 0x1, "78ef40ff5c06b34ef69ab7e2b1fac95f0f84ef0ad0c88897ee9da8d2a40a41f2d408"}, @NFTA_DATA_VALUE={0x72, 0x1, "afff37c1c1c4c1cbd156d0904d606770f912b7f71bf9b45d0188fb64f36715e7ee465b23cc4b31ebb195ebfa6783d98b55b3ba387bd8fe2bce6dc09e70daf39754ef5fe22f5cc7771f5335d9ca55240374c4e3f2a3d9b87c4494b9eb42fcb27f108ed652d665a73f5f8f98e668c1"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_RANGE_FROM_DATA={0x3f8, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xb2, 0x1, "bcdcf266057cfa0de4109b83539d1f14c77c0054af94c6514bad691fc82c8306eb92809ac1eca3e2a579a7054bc0e036b12b6260a767678338aac48ec12759dae47be06630b1bbf462267d91342f451a723dc0f49b9bdb66f4d124e6563de9651b8847367f30664f4f8bca1ebe70c60ee7fd9f8dc4b57568d4e0c4f35468ba16c89381e635afb55978b1c8c38ca60d212fcf89f6d320f39d7c3eac39b6cf98c8616b872100abade771b706213bbd"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xd4, 0x1, "037b4f480fa24aa4347b6399d1b2464150d9a6f1c67eac5d76fddf7b750fa1ebfe67b7c073ed196ba7e3239df5b00cd53342a67edbd380f6c89ff2d9403189b645894046351b6c306feffe71d6539732cb694baeed503978ed2429a3615d3f52f9f110ecc90e5041fb024b5f06881b0250f24766a484ac2ae6464e3e95e7edeb0aa1b1bf7de999f5488e00bd879bfc6f2c66e5e536531f570fa24dae6810aaf2e86e8440830563c12945f71141229edc8f87150df5247364fc5d2cf7ff8d59f7a164e66f515a44ced2bedbb031da71a2"}, @NFTA_DATA_VALUE={0x83, 0x1, "ea4e5456cf92385fd82909155365cb78c53d1e5f3b3f1b6d3544c940bbde3938ba9015549821e6604f6e88ad527f06ad45c331722973e4a0ce908b96e0cbda20c4cc9a4d807ad412ddd2c6d1f9c91cbdaa2a2771b6c2da46bf8da67224e875b1c6c59d1ad9f706420faa89284882b8653c72681e547ea325f85568ca126066"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xba, 0x1, "72fa09393fe5b1dd720eb98cec1ebde5084c4df8c92651478556dedae73e4698cec9ecc7e59b32adcb4153dd21dd90015ccbc7ab81165c24c8064b60c59c84d0120404732bfa45da3703e0c20177a0fe9d8f39c8352878dcc6f5a39e542ba3a3ca4cadb8c11e4bc9beaf4ce40edf1ff9433a93bb74252ed95c4d471665b5b59904aecf805afcec7f372a4522efc14be630bcdc7aeb542305dc91a127665a39653dfcc54f28079c0c15976f14dc6cbe96fdff02e505b9"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_RANGE_TO_DATA={0xec, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x81, 0x1, "6a850cc53c515c379004eed5edbc6bc9275283742b27cd1e9c8a31b38cf29e974cd9be35c36af4c5dc81ff3d70fc06c16f203b9055d8af34bf775c2880760b1d8051042d7260846bc7a930bc68be365023dc5ef0d60c91c3f236bc42a2a7d1aedbc3f309c3e920dbda3c2a26a2adc5d4d00eb520c4cdf5b4692d6d8192"}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}}}, {0x44, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x1b}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_SET_ELEM_KEY={0x1244, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x70, 0x1, "40c750200464f003471467f8a83091f3c2f07d89827023b5e3284abdecbde115a08e197fcbe894245aee51b976c78d71d336ea08db42e0de67b32867e7ade025126ec28eacb3867c18163b99d344ce370914293105883948e3764840be12c1a1408fa5b31fc7b2fb6e5b2e60"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6a2a087e3f363253}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x91, 0x1, "612823dcf56796abbb77d2e4f703dade304a94e01e46471eb55e9b8d71edef937adb227317c353f82f604b5a71a795f27f14ab6ec9784ebffa625109f3a5425571de36070478b4f4187a67a30cb3c365ec7eb52d5b86afbe75f7a1c4c303eb95ef4991fba945f7f6dffb2659377a71e3568816235277077795e3edb67ad122064ac9c88c72db1a11c84aec9cf9"}, @NFTA_DATA_VALUE={0xbd, 0x1, "3dc4d331c17c20fb8bcffb7173cb84aed7b400333aa848566f79eeb2b1d6f4660cfc09561e086c9f54bca9e24b85800d003b46e8df9bdb72074750f64dd74a5089904ec685352e014b15b2becb90c98047f445ac361db81b9d5a9d86effbafa2e592964b361b160fd3ed3242c5349353f6fc5f928faf7972a510c218440de5d5f58a8385808559a55e223d55cba3eb8dde4c0c930e351d902d047878fe627f7ed6b06e4f59adb6cc49ce57f3173a3e623242a640ddf7bb4a9f"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @redir={{0xa}, @void}}, @NFTA_SET_ELEM_KEY_END={0x1f8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6c, 0x1, "be3a155964dac9c09fee2b4b7b367b40bd9a328515a335c3e205dd5bfc0dc28f251bc6fd557eeb19fe6894bbbcbddcd98cd4bfa62769c418c9fec48fd35e7abedc55a1320666e2609dc34834da1002dbb4613bd3786caa5b7a9108302f7497e85cea25eed2ad8727"}, @NFTA_DATA_VALUE={0x53, 0x1, "e18f5d66725d222c8da553455150970149867200e2392abe30a7b9b4b7a60682bd252ec77852bb1eba28ff79e32a234672f0d64bcb19475e622a053907d0d546e91743cdf6dfe1e234727bf7281acf"}, @NFTA_DATA_VALUE={0xd8, 0x1, "e33289f08b666b10dc2a677b9baefef32928d7f00e6173fda73d875afec19476444a4d76740731fcf586598efcfe14df931f3c63434d1d8436c31c431ba52675520dc57a9cbf03bd12a6f48b5ffd6df7393216c62f59489cbc09a8e6d888c9e4db51c96230f1275b31c2f305fa036784401ca460473c89b11d85abab20fe6e40c0e5adb7a1c876e1f43a77b08c638a6cd8245f15e2e1e76abda9a3f2d386a29f1af39461c10040cca8a45bdc39d52e85b9adf37a343699b83d06e79cf9da6f07e3a0f14336fb2547a020c06c42121d964c0ad171"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_ELEM_USERDATA={0x3c, 0x6, 0x1, 0x0, "1566a2ab1eef08c9956b69e8a0a7a7d18e4e2f71ba6a5411e4a753b55e3f15442fcb9964797088708f9e1a0b82598da79d1427114653d753"}]}, {0x138, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0x8b, 0x6, 0x1, 0x0, "80e7de355d0293cb9d4821973cd7078746def482c67d85c90bb2a6df934d28fe0f379bef55e06fc678e3d0b3ee20b5d00d32e6f324e3af6eb927b4bd285843c6dd9bc8b667eb02549c2cda37990c789dca5474fbe2c029ce9a162f4d65090c35bfb41bfe9b7e4898b4509db3ec310eb8a00dead4b34d7893a74a3b3346a3ad4e670476cae9f778"}, @NFTA_SET_ELEM_EXPRESSIONS={0x9c, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x1}]}}}, {0x50, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xffff8001}, @NFTA_CONNLIMIT_FLAGS={0x8}]}}}, {0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}]}]}, {0x1104, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x107c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0x6e, 0x6, 0x1, 0x0, "822e0147d56df5b7a99f02dbc70838d7ca1ce945430662b4a09be9b153859cc2414e1aee09fa248ca0d5cf5a330772cfdf24365f04463286a7d4e5358079e136a4ebc0be24714fad2a2d1f2c178822b448078bbdd203b30eb714a647a54b36a7e9ebb7da1f1841a7bf9f"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x148, 0xc, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x11c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}]}, {0x4}, {0xd4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xc4, 0x6, 0x1, 0x0, "bb2b303452617c40cabb81e6f5b08240340d26952adfa8906165798cb8ce9bb65efbf092307191fc14698290912eef3c1dd723ca3c9b7c97fd2ba4d8bbcd4a04aa44ef7d8fdf1e8db7a4365ad5bfd095b3a0d386425189b48476bc6fe54f0fb5f64128f65cb33a41924b5744e3eaa91a8cb9ce77656b88d0a956bb161cd5198a30bc62fcbe91143c1a1a252fa498e85f173bcefc6aeab07a52f6cb8f8acab8d9ebf4b65d409261a8b5cab0a505622e4707c761c982d52727faedf27557547ec8"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x1c, 0x18, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xb}}}, 0x342c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x4005}, 0x20040880) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x587, 0x4) sendmmsg$inet6(r3, &(0x7f0000000e00)=[{{&(0x7f00000002c0)={0xa, 0x4e22, 0xf58, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4040884) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006a008313000000000000354f1b0800000000000008000e"], 0x20}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'vlan1\x00', &(0x7f0000000180)=@ethtool_link_settings={0x1, 0xa, 0x82, 0x7f, 0x9, 0x0, 0x25, 0x80, 0x41, 0x4, [0x2, 0xd, 0xe18, 0x172d, 0x3, 0x7, 0x6, 0x3]}}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000900)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d61637365630000140002800500060001000000050007000100000008000500", @ANYRES32=r6], 0x54}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) 19.70917955s ago: executing program 7 (id=1424): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r1}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x2, 0x4, 0x5, 0x143, 0x1014}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r7, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) 14.131762123s ago: executing program 5 (id=921): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@rand_addr=0x64010101, 0x1, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="cc000000210001000000000004000000fc010000000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ff0200000000000000000000000000010a010100000000000000000000000000fc010000000000000000000000000001000000060000000000000000000000003c000000000000000a000a002c0013"], 0xcc}, 0x1, 0x0, 0x0, 0x700}, 0x0) 10.050698428s ago: executing program 6 (id=1473): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) unshare(0x6a040000) unshare(0x3c000800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$packet(0x11, 0x3, 0x300) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004840)={0x38, r1, 0x731, 0x0, 0x0, {0x38}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73}}}]}, 0x38}, 0x1, 0x2, 0x0, 0x1bb5818a0d1752a}, 0x4890) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d40)={0x0, 0xe0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4], 0x22c}}, 0x0) (async) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x2a4, r3, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}, @WGDEVICE_A_PEERS={0xb4, 0x8, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7725145ee20de536bdd1b6cbfb86c1b492d278590cc9e7613752a1916c08dd23"}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}]}]}, @WGDEVICE_A_PEERS={0x180, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x170, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x128, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7f, @private0, 0xfffc}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PEERS={0x38, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x20044010}, 0x4000) (async) shutdown(0xffffffffffffffff, 0x1) 7.395221978s ago: executing program 4 (id=1476): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="441f080100000000ff0000005b1957034b596f21d3816491ee54bec6fe", 0x1d) getsockopt$inet_opts(r1, 0x0, 0x4, 0x0, &(0x7f0000000040)) (async) getsockopt$inet_opts(r1, 0x0, 0x4, 0x0, &(0x7f0000000040)) socket(0x2, 0x80805, 0x0) (async) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c", 0x6}, {0x0}, {&(0x7f0000000300)='l', 0x1}], 0x3}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000280)={r7, 0x7, 0x2d9a, 0x6000, 0x80000000, 0x400005}, 0x14) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x80004}, 0x1c) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast2}}, {{@in6=@empty}, 0x0, @in=@loopback}}, 0x0) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newsa={0x150, 0x10, 0x100, 0x70bd29, 0x0, {{@in=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x2f, 0x0, r9}, {@in=@multicast1, 0x0, 0x32}, @in6=@loopback={0x100000000000000}, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0x80000, 0x81}, {0x0, 0x5, 0x4, 0x4000006}, {0x0, 0xfffffff9, 0x80000}, 0x0, 0x0, 0x2, 0x1, 0x81, 0x68}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "25cac5216d3c8af0aa76902918bf448c5d9f5459"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x20000080) (async) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newsa={0x150, 0x10, 0x100, 0x70bd29, 0x0, {{@in=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x2f, 0x0, r9}, {@in=@multicast1, 0x0, 0x32}, @in6=@loopback={0x100000000000000}, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0x80000, 0x81}, {0x0, 0x5, 0x4, 0x4000006}, {0x0, 0xfffffff9, 0x80000}, 0x0, 0x0, 0x2, 0x1, 0x81, 0x68}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "25cac5216d3c8af0aa76902918bf448c5d9f5459"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x20000080) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e21, 0x2, 0x4e20, 0x0, 0x2, 0x0, 0x80, 0x32, 0x0, r9}, {0xfffffffffffffff7, 0x0, 0x2, 0x7cc80000000000, 0x579, 0x8000000000000001, 0x3, 0xf}, {0x1, 0xfffffffffffffffd, 0xf0, 0x34e}, 0x3, 0x6e6bb6, 0x0, 0x1, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0xd}, 0x4d3, 0x32}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2, 0x6, 0x10000, 0x0, 0xfffffff5}}, 0xe8) listen(r0, 0x0) 6.872540885s ago: executing program 4 (id=1477): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000180)={0x1d, r1}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0700147ea64e21160af3650ab68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030106000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="0400000001090000797cf8f287df027eb709603100d3a361fc9aadf41cc738ba98a055572679cda62829d3b534c8e4f903b2d31bd25e515c1daf87ca2edef90f625e9ac6606ece", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYRESHEX=0x0, @ANYBLOB="000000000100000000000000ff020000d7c1399ed4fe372efadba3417665ffb2b92af56c860f29402f8111302ae84c15b9dd43bd01000000347f0000592c7c94fc00"/80], 0x80}, 0x1, 0x0, 0x0, 0x2000c850}, 0x4040040) pipe(&(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x10000000000002ee, 0x0, 0x0, 0x1f00c00e}, 0x20004054) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) 5.945409478s ago: executing program 4 (id=1478): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 5.629088432s ago: executing program 4 (id=1479): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r3 = socket$key(0xf, 0x3, 0x2) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r4, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x2c, r5, 0x506, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x1f}}}}, [@NL80211_ATTR_KEY_SEQ={0x9, 0xa, "db53f07853"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x4040) 4.50795398s ago: executing program 35 (id=1424): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r1}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x2, 0x4, 0x5, 0x143, 0x1014}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r7, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) 3.556761717s ago: executing program 0 (id=1482): r0 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000080)='v', 0x1}, {0x0}], 0x2) readv(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/214, 0xd6}], 0x1) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001e0001eb25bd70000000000001"], 0x114}], 0x1}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000005c0)='sched_switch\x00', r6, 0x0, 0x2}, 0x18) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000af00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000208000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000230c0001400000000000000101500000000c0a010100000000000000000700fffc0900020073797a31000000000900010073797a300000000024000380200000800800034000000002140007800c000100636f756e7465720004000280140000001000010000000000000000000084000a5fce705f0b7cc452aea664bd4a55c269ce6177540a9857b5341909046588e123bf518c1d0f139b32877de98c6cd4c2d07d2a8de8267f4d75104f4aa36643d06a790ba192"], 0x100}, 0x1, 0x0, 0x0, 0x4040854}, 0x0) write$cgroup_int(r8, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) write$cgroup_devices(r4, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d"], 0xffdd) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000002d00090526bd70000000000004000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) recvmmsg(r0, &(0x7f000000acc0), 0x0, 0x10000, &(0x7f000000aec0)) 2.939884358s ago: executing program 6 (id=1483): r0 = socket(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000740)=""/245, 0xf5}], 0x1, &(0x7f0000000380)=""/201, 0xc9}, 0x3}], 0x1, 0x20, 0x0) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000240)="57c5a2eb96f65a6e55d8330b8c02b9453ec132a52473b31fdff24a77a92d28056b5ec4007e49a37034c063d54e7df67408320f602111bb0f116b96a22bee241c36e9438e5d1662b3e14ca6df20d11ae9d901d22754e73ff59fb7ab96899612383634184bd9bde9c467d906565aec3e1225f349ac47e2cc374366b92d7be933b6f60682c92388dca9ce74ec4736674c74be20d9f7618cf3b3f91eb14f2db5a2b00e83f1f6f56091e731e6899666fa2f9cef886ae311ef2e0cbe597994d54949a4850abe7bdd58a5e434768c7914237bdc1e2a43f9", 0xd4}, {&(0x7f0000000500)="5b0fd3cfbdf170ead22cd37bb7e68f6b6691b71b94e727099f8febd5a0ce2e1da6c18a50c20f8d7f6bc95a18e9d8c1d7b867216a99f17f6bb065b686f19162c213f8ad42baaa43b6843f7d3e950db2e053f151dee95cba877abbab96229b7a7994f7ef36bee7c793741bdb1a7f985b88bfc14e0aacece1c1d16f9cfb31924efe2c30ce3cd3", 0x85}, {&(0x7f00000000c0)="71c5b87c472dbe886cb9ba97cdf01ab5429cfddff64d7abf7e2fa4ba0d3208", 0x1f}, {&(0x7f00000005c0)="9ea6a68ee51441fe9f6b0d004be100200f8ba218539ba9a8c6f91cd10dcc33e82c8bebe673e9359317b8dc1f846bb231853edc2b4c7f9fe103a7ace6234faecf00a171fab2dc4df04ceba8074db07a0112903fbf2793902724e2d256e7e564590f45b6ab6fc7a2f6e989e1743c68bfc8318c05231e2e3bdbd35264bd6fa8506c7c81b57a8316d61582191316289581854f477cca44d00a4f8eaae439af162b0127aefee74dd3189149bca17f0c807b637a142d0129c6a11ec516cd060284931c382f7a3cdd1bc9abd23b4c493bfacfe9d95bf5ac0f266f40941a197a3cb6189612879227ecbc5304", 0xe8}, {&(0x7f0000000840)="d6833a5d32f75da0bae1de685f033140fb181f21a160fe5d3ff0eaf43e937a088a287dd907f8fec7b74af526ad944196fb246718ea639de8b97b067df64ea619edebf6a534bb54e0d2256889ed3fad427332bda1e74ad1189a1410e779e7590299243674a218ade954c6e91fb4a97a66923b03a78083dbb3c79bd06104136b183aa25ca4853207a6439e23c0c1a839b69717ec7742b9278266b40660226469b85fed0b97d8d75f92a4a88fd5308e16ee5d60cc1a8c44cb25d56f280481dc07be08b58b345645218a29", 0xc9}, {&(0x7f0000000940)="eb6007ae1169dead4fde31fbbc6d9058593a5afef40fa2147ff2d9fda85a83dd53fb954bd9c8a6c32901c234b784c78d91ab2d0c99e5ed1bcf1c0318f4ea00b500461e840c8d087adb718d6b529b34cfba3eed8dfb8392dbcc37829ad8b985e2e3755161d01d9d98b5217797223f0ab775b8412d78bdf5d7b4e5942f37b7a7374b3322700d0d5dbc5eb002829f5b922143840d9e5c29755a9fc6411e935992408c33f48b0a6af91f1348be3ccf6908e7bf1fb77ab2743b23b60b26f40763457928fe303d2507d645d0111ded192cd4b6d77a85593b02ca1efd819652cee554e763ca", 0xe2}, {&(0x7f0000000a40)="ae9bda987a485a4480f67f221b371d3b0ddace2c1c848b4d6900502963af5da6ed19e4449bfcccfaf00f9fcb75417bea7a29a7dedce45519eba86b2bab9e176d9d5f0e9000a75381bf31985f6c0fac746e4a2b13717e8c78878f171b3c8f66bbaf11ef437d1aea66c70391febde89d908d096bf4f09f8f95193c5395d10cf3908016af14fcb2bf77f48230b51fc19a9ccaed8671101724a649af4b4b90d1bb6a2fd68ce93b77bc1cf30aac9b24fdf8f3486b8fb4bb51bd637ec3f22574c408b67c4b16ba9d24800f7e4ed1d3063c7fb48743011712107686c48fb67c", 0xdc}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000000100)}], 0x9}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000006c0)="250379b2811662be97bf4ab27696c3245e669ef7b737f917c7b065b541e5a1a4a061ebdfcfad751671036925291183e12e8407f2fd60b6473c", 0x39}, {&(0x7f0000000700)="8a7163bec3ce7f39a95824e1157e03aed4243694f9db5023f8299787ee9fec21fd290a9e30cd0b298ff01ea4b10cecf8effcfa50747a70b9f65dc2e55fe4b68e", 0x40}, {&(0x7f0000000cc0)="b92e358d094ad4fee871021005e5ffb41790f6591662", 0x16}, {&(0x7f0000002440)="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", 0x1000}], 0x4}}], 0x2, 0x24044058) 1.988431982s ago: executing program 6 (id=1484): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x3, 0x3}, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000006a0001012dbd7000fcdbdf2500000000000000000800010001000000c337c11bac7bf150b4b4bd21dae816f99c5fc8f2155069828ac8b3a9968a55dd369befd15f1474658cc3cc9a25612d2d4451878917ab2eafe87860dc63ee5aaf79e3e52111"], 0x20}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff11, 0x0, 0xffffffffffffffff, 0xfffffffffffffea5}, 0x48) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000080)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000300)='cgroup.clone_children\x00', 0x2, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)={0x1a0000010}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x4040400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r4, &(0x7f0000000180)=[{&(0x7f0000000300)="00214717a70700000000030600710a5e31163ceb9d0471200000000500000000000000ffff0342844d50e7182ce0ab6d00000846df930d0ab9cc127d0dc450de49c204a803166580ac899c081cb49f1930e7d07fbdf3", 0x56}], 0x1, 0x8, 0x1) r9 = socket$unix(0x1, 0x5, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40901}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001500)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {}, {0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x448, 0x2, [@TCA_CGROUP_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x200, 0x2cb95740, 0xd2a, 0x2, 0x9, 0x6, 0x68e0, 0x4, 0x7, 0x2, 0x400, 0x40, 0x8, 0x10001, 0x4, 0x2, 0x7ff, 0xa8d, 0x2, 0xee, 0xfffffff7, 0x1, 0x3, 0xffff55da, 0xf24, 0x401, 0x5, 0x2, 0x3, 0x3ff, 0x0, 0x3, 0x0, 0x2, 0x1ff, 0x3, 0x690a, 0xff, 0x1, 0x9, 0x40, 0x695, 0x0, 0x2, 0x93d1, 0x5, 0x9478, 0x7, 0xa, 0x0, 0xc0b, 0x6, 0x4, 0x5, 0x7, 0x8, 0x7, 0xeda, 0x80000000, 0x4e98, 0x0, 0x3, 0x80, 0x275b200, 0x5, 0x6, 0x3, 0x10000, 0x7, 0x3, 0x2, 0x5, 0x7fffffff, 0x7f, 0x5, 0x8, 0x8001, 0xc1d, 0x8, 0x4, 0xca, 0x9, 0x49, 0xbf, 0x4, 0x3, 0x3, 0x6, 0x7f, 0x0, 0x1, 0x2, 0x6, 0x4, 0x2, 0x6, 0x5, 0x5, 0x6, 0x4, 0x0, 0x6, 0x6, 0x0, 0x8, 0x9, 0x0, 0x8, 0x512, 0x4, 0x7, 0x6, 0x9, 0xea2, 0x1, 0x6, 0x1, 0x2, 0x10, 0x0, 0x0, 0x4b43, 0x6, 0x4, 0x400, 0xffffffff, 0x0, 0x8001, 0x6, 0x5, 0xaa0, 0x10001, 0x4, 0xf, 0x7, 0x6, 0x1, 0x8, 0xffffe9c4, 0x6, 0x7fffffff, 0x4, 0x2400, 0xfffffffa, 0x0, 0x3689dd20, 0x9f2, 0xfad6, 0x0, 0xfb3, 0x4, 0x3f, 0x3, 0x5, 0x7, 0x5, 0x6, 0x9, 0x1c0000, 0x1, 0x9, 0xc, 0x7, 0x7f2d, 0x8, 0x3, 0x5, 0xd, 0x80, 0x8000, 0x7fffffff, 0xffffffff, 0x263, 0x1, 0xfffffff9, 0x3, 0x2, 0x4, 0x504, 0x0, 0xa, 0x2, 0x0, 0x3, 0x8, 0x3, 0x3, 0x7, 0xfff, 0x2, 0x2, 0x0, 0x3, 0x8, 0x9, 0x2, 0x8, 0xfffff47f, 0x800, 0x5, 0x6, 0x80, 0xf21d, 0x1c2083d1, 0xd, 0x80000000, 0x80000000, 0x6, 0x0, 0x100, 0x9, 0x3, 0x7fffffff, 0x80000001, 0x7, 0xef, 0x80000000, 0x4, 0x8b, 0x1, 0x3, 0x10000, 0x101, 0x3, 0x2, 0x6, 0x8608, 0x3ff, 0x0, 0x1b800000, 0xff, 0x0, 0x919, 0xe77, 0x4, 0xffffffff, 0xc, 0x7, 0xbe9, 0x2, 0x5, 0x5, 0xd79, 0x3ff, 0x401, 0x8, 0xeb60, 0xfffffff5, 0x7ff, 0x10000000, 0x1, 0x6, 0x7, 0x8, 0xff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x20000001, 0x7, 0x9, 0x94, {0x6, 0x1, 0x8482, 0x3, 0x7f, 0x9}, {0x8, 0x1, 0x6, 0x29, 0x4, 0x7}, 0xb, 0x8, 0xfffffffc}}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x8080}, 0x4800) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000fbffffff00000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 847.087729ms ago: executing program 0 (id=1485): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000009}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$caif_stream(0x25, 0x1, 0x0) accept4(r4, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}}}, &(0x7f0000000100)=0x80, 0x80000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_MAX_AGE={0x8, 0x3, 0x6}]}}}]}, 0x44}}, 0x0) openat$cgroup_ro(r2, &(0x7f0000001300)='memory.swap.events\x00', 0x26e1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000007440000000c0a01020000000000000000010000000900020073797a320000000018000380140000800400018008000340000000019a930b800900010073797a3000"], 0xd0}}, 0x0) 753.044223ms ago: executing program 4 (id=1486): r0 = socket(0x1d, 0x2, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000085ff0000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) sendmmsg$inet6(r0, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="e2f78c8a71da", 0x6}, {0x0}], 0x2, &(0x7f00000006c0)=[@hopopts={{0x18, 0x29, 0x36, {0x3b}}}], 0x18}}, {{0x0, 0x0, 0x0}}], 0x2, 0x44800) 675.450955ms ago: executing program 6 (id=1487): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x1020000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 557.106469ms ago: executing program 6 (id=1488): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a01020000000000ff9c0001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c080001"], 0x122}}, 0x0) 513.499451ms ago: executing program 4 (id=1489): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) (async) write$tun(r0, &(0x7f0000002800)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x2, 0x0, 0x17, 0x7}, @ipv4=@gre={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x68, 0x0, 0x5, 0x2f, 0x0, @loopback, @multicast1}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {}, {0x8, 0x88be, 0x4, {{0x2, 0x1, 0x4, 0x1, 0x1, 0x2, 0x4, 0xd}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x2, {{0x6, 0x2, 0x5f, 0x2, 0x1, 0x0, 0x1, 0x4}, 0x2, {0xf, 0xe5, 0x0, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x3, "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"}}}}, 0xfce) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="24005a80200001801400040000000700c40000000000000005000100040001"], 0x40}}, 0x4000) 470.836285ms ago: executing program 6 (id=1490): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x263b0}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x58}}, 0x800) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcf, 0xcf, 0x6, [@datasec={0x1, 0x7, 0x0, 0xf, 0x3, [{0x2, 0x8b}, {0x3, 0x28, 0x7}, {0x1, 0x6, 0x5}, {0x5, 0x8, 0xd}, {0x5, 0x9, 0x9}, {0x4, 0x5, 0x400}, {0x3, 0x10, 0x2bdf0d76}], "0bdf99"}, @const={0x2, 0x0, 0x0, 0xa, 0x3}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xf}, {0x1, 0x3}, {0x5, 0x4}, {0xa}]}, @enum={0xd, 0x2, 0x0, 0x6, 0x4, [{0x0, 0x5}, {0x1, 0x89c}]}, @fwd={0x3}, @const={0x4, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x0, 0x61, 0x2e]}}, &(0x7f00000000c0)=""/161, 0xee, 0xa1, 0x1, 0x9}, 0x28) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) unshare(0x20040600) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000040000000400000004"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, r9}, 0x38) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r8, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0, 0xea}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0xbb, 0x4, 0x3, 0x4010, r3, 0x9, '\x00', r5, r7, 0x3, 0x1, 0x3, 0x3}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='c\x00'/16, @ANYRES16=r2, @ANYBLOB="0100feffffff000000005c00000008000300", @ANYRES32=r11, @ANYBLOB="08006b001c020000"], 0x24}}, 0x8000) 375.808692ms ago: executing program 0 (id=1491): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000007cc38af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf8ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 200.730348ms ago: executing program 0 (id=1492): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}], {0x95, 0x0, 0x2000}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 87.166243ms ago: executing program 0 (id=1493): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'pim6reg1\x00', 0x3}) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x80010, r0, 0x913e0000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x3000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000833000/0x13000)=nil, 0x13000, 0x300000c, 0x12, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r4, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x1000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) 0s ago: executing program 0 (id=1494): syz_emit_ethernet(0x5a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "d285b6853bc4dc54c6910c1d66f8841a"}, @md5sig={0x1d, 0x12, "adf059fd789278e2fb03dc15d356998a"}]}}}}}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000007b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7004fcdbdf252700000008000300", @ANYRES32=r7], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x80) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1800000078000106000000000000ee0007"], 0x18}], 0x1}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000007b80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4000010) recvmmsg(r3, &(0x7f0000007900), 0x0, 0x40000000, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socketpair(0x1d, 0x3, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c"], 0x28}, 0x1, 0x0, 0x0, 0x10040000}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0xfe, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x600, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) kernel console output (not intermixed with test programs): .006944][ T8038] Cannot create hsr debugfs directory [ 160.033202][ T8118] netlink: 'syz.4.625': attribute type 4 has an invalid length. [ 160.053361][ T8060] chnl_net:caif_netlink_parms(): no params data found [ 160.176994][ T51] Bluetooth: hci6: command tx timeout [ 160.441464][ T8060] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.450185][ T8060] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.486065][ T8060] bridge_slave_0: entered allmulticast mode [ 160.494052][ T8060] bridge_slave_0: entered promiscuous mode [ 160.518921][ T8060] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.574523][ T8060] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.590223][ T8060] bridge_slave_1: entered allmulticast mode [ 160.618913][ T8060] bridge_slave_1: entered promiscuous mode [ 160.824472][ T8060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.872891][ T8060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.030982][ T8038] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 161.083834][ T8060] team0: Port device team_slave_0 added [ 161.165746][ T8142] sctp: [Deprecated]: syz.0.631 (pid 8142) Use of struct sctp_assoc_value in delayed_ack socket option. [ 161.165746][ T8142] Use struct sctp_sack_info instead [ 161.194131][ T8038] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 161.218246][ T8060] team0: Port device team_slave_1 added [ 161.290911][ T8038] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 161.357669][ T8060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.364879][ T8060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.391762][ T51] Bluetooth: hci5: command tx timeout [ 161.399739][ T8060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.418031][ T8145] __nla_validate_parse: 6 callbacks suppressed [ 161.418050][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.633'. [ 161.418302][ T8060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.465738][ T8060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.542855][ T8060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.566940][ T8038] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 161.801825][ T8060] hsr_slave_0: entered promiscuous mode [ 161.809826][ T8060] hsr_slave_1: entered promiscuous mode [ 161.819336][ T8060] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.847945][ T8060] Cannot create hsr debugfs directory [ 162.221071][ T8165] netlink: 24 bytes leftover after parsing attributes in process `syz.0.638'. [ 162.256149][ T51] Bluetooth: hci6: command tx timeout [ 162.401320][ T8038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.514949][ T8038] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.524248][ T8168] netlink: 'syz.0.639': attribute type 5 has an invalid length. [ 162.579130][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.586707][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.652871][ T8060] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 162.679356][ T8060] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 162.686567][ T8174] netlink: 216 bytes leftover after parsing attributes in process `syz.0.641'. [ 162.689563][ T8173] netlink: 24 bytes leftover after parsing attributes in process `syz.4.640'. [ 162.713685][ T8060] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 162.717002][ T8174] netlink: 24 bytes leftover after parsing attributes in process `syz.0.641'. [ 162.731035][ T8174] netlink: 16 bytes leftover after parsing attributes in process `syz.0.641'. [ 162.736530][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.747426][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.771578][ T8060] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 162.930869][ T8038] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.963292][ T8182] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 162.986185][ T8184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.643'. [ 163.031192][ T8184] netlink: 36 bytes leftover after parsing attributes in process `syz.0.643'. [ 163.277649][ T8060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.339001][ T8060] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.380926][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.388172][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.456285][ T51] Bluetooth: hci5: command tx timeout [ 163.460649][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.468931][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.607410][ T8038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.636814][ T8204] netlink: 'syz.4.648': attribute type 142 has an invalid length. [ 163.657085][ T8202] netlink: 28 bytes leftover after parsing attributes in process `syz.4.648'. [ 163.688820][ T8202] netlink: 28 bytes leftover after parsing attributes in process `syz.4.648'. [ 164.290867][ T8060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.326647][ T8223] netlink: 'syz.0.651': attribute type 1 has an invalid length. [ 164.334696][ T8223] nbd: error processing sock list [ 164.340655][ T51] Bluetooth: hci6: command tx timeout [ 164.363443][ T8223] block nbd0: shutting down sockets [ 164.365406][ T8038] veth0_vlan: entered promiscuous mode [ 164.393157][ T8038] veth1_vlan: entered promiscuous mode [ 164.451390][ T8038] veth0_macvtap: entered promiscuous mode [ 164.479062][ T8038] veth1_macvtap: entered promiscuous mode [ 164.554796][ T8038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.581913][ T8038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.593539][ T8235] ieee802154 phy0 wpan0: encryption failed: -22 [ 164.621166][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.631049][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.664462][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.683799][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.844499][ T3529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.871963][ T3529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.993988][ T3507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.010896][ T3507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.152846][ T8250] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 165.282674][ T8060] veth0_vlan: entered promiscuous mode [ 165.317117][ T8253] !: renamed from dummy0 (while UP) [ 165.339513][ T8060] veth1_vlan: entered promiscuous mode [ 165.437426][ T8060] veth0_macvtap: entered promiscuous mode [ 165.510158][ T8060] veth1_macvtap: entered promiscuous mode [ 165.537581][ T51] Bluetooth: hci5: command tx timeout [ 165.582341][ T8060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.612035][ T8060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.676542][ T3006] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.704428][ T3006] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.760469][ T3006] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.785514][ T3006] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.911619][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.924502][ T3006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.934240][ T8260] openvswitch: netlink: Unknown key attributes 2 [ 165.943226][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.950675][ T3006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.048641][ T3529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.070351][ T3529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.114590][ T8263] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input6 [ 166.416306][ T51] Bluetooth: hci6: command tx timeout [ 166.416600][ T8270] netlink: 'syz.6.605': attribute type 1 has an invalid length. [ 166.446902][ T8270] __nla_validate_parse: 3 callbacks suppressed [ 166.446922][ T8270] netlink: 4 bytes leftover after parsing attributes in process `syz.6.605'. [ 166.468906][ T8274] netlink: 24 bytes leftover after parsing attributes in process `syz.5.664'. [ 167.341369][ T8303] netlink: 'syz.6.674': attribute type 5 has an invalid length. [ 167.924739][ T8330] netlink: 20 bytes leftover after parsing attributes in process `syz.6.680'. [ 167.994798][ T8335] netlink: 'syz.0.679': attribute type 4 has an invalid length. [ 168.148025][ T8335] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.156276][ T8335] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.324556][ T8335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.358042][ T8335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.499935][ T8337] netlink: 44 bytes leftover after parsing attributes in process `syz.6.680'. [ 168.526443][ T3529] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.542434][ T3529] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.575011][ T3529] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.610767][ T3529] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.657121][ T8328] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 168.757404][ T8349] netlink: 'syz.5.682': attribute type 1 has an invalid length. [ 168.805778][ T8349] netlink: 12 bytes leftover after parsing attributes in process `syz.5.682'. [ 168.903475][ T8355] netlink: 24 bytes leftover after parsing attributes in process `syz.0.686'. [ 169.316706][ T8370] netlink: 'syz.0.691': attribute type 10 has an invalid length. [ 169.325399][ T8370] openvswitch: netlink: Flow key attr not present in new flow. [ 169.367934][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.691'. [ 169.387532][ T8370] x_tables: duplicate underflow at hook 1 [ 169.599326][ T8379] netlink: 8 bytes leftover after parsing attributes in process `syz.5.692'. [ 170.407667][ T8404] netlink: 4 bytes leftover after parsing attributes in process `syz.6.699'. [ 170.595461][ T8404] bridge_slave_1: left allmulticast mode [ 170.615904][ T8404] bridge_slave_1: left promiscuous mode [ 170.633192][ T8404] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.708373][ T8404] bridge_slave_0: left allmulticast mode [ 170.716046][ T8404] bridge_slave_0: left promiscuous mode [ 170.721979][ T8404] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.582973][ T8446] netlink: 40 bytes leftover after parsing attributes in process `syz.4.711'. [ 172.759014][ T8455] veth0: entered promiscuous mode [ 172.790384][ T8455] netlink: 4 bytes leftover after parsing attributes in process `syz.5.714'. [ 172.822496][ T8459] netlink: 'syz.4.715': attribute type 10 has an invalid length. [ 172.898563][ T8459] netlink: 20 bytes leftover after parsing attributes in process `syz.4.715'. [ 173.024676][ T8462] netlink: 'syz.4.716': attribute type 1 has an invalid length. [ 173.044977][ T8462] netlink: 224 bytes leftover after parsing attributes in process `syz.4.716'. [ 173.554477][ T8477] Cannot find add_set index 0 as target [ 173.982321][ T8492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.723'. [ 174.071233][ T8493] netlink: 44 bytes leftover after parsing attributes in process `syz.5.726'. [ 174.108926][ T8493] netlink: 43 bytes leftover after parsing attributes in process `syz.5.726'. [ 174.187323][ T8493] netlink: 'syz.5.726': attribute type 5 has an invalid length. [ 174.240028][ T8493] netlink: 43 bytes leftover after parsing attributes in process `syz.5.726'. [ 174.515429][ T8501] netlink: 8 bytes leftover after parsing attributes in process `syz.5.729'. [ 174.567181][ T8503] xt_TCPMSS: Only works on TCP SYN packets [ 174.594536][ T5839] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 174.604294][ T5839] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 174.613925][ T5839] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 174.624293][ T5839] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 174.636926][ T5839] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 175.053091][ T8515] ip6tnl1: entered promiscuous mode [ 175.061235][ T8515] ip6tnl1: entered allmulticast mode [ 175.068826][ T8515] team0: Device ip6tnl1 is of different type [ 175.069302][ T8517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.730'. [ 175.182121][ T8514] veth0: entered promiscuous mode [ 175.209424][ T8518] veth0: left promiscuous mode [ 175.238693][ T8517] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 175.727119][ T8539] veth1_macvtap: left promiscuous mode [ 175.748876][ T5203] udevd[5203]: worker [5882] terminated by signal 33 (Unknown signal 33) [ 175.924289][ T8542] batadv_slave_0: entered promiscuous mode [ 176.735948][ T51] Bluetooth: hci7: command tx timeout [ 176.968971][ T30] audit: type=1800 audit(1751607230.893:3): pid=8564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.745" name="memory.events" dev="tmpfs" ino=139 res=0 errno=0 [ 177.133663][ T8502] chnl_net:caif_netlink_parms(): no params data found [ 177.208383][ T8582] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 177.236396][ T8581] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 177.542029][ T8502] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.563410][ T8502] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.605998][ T8502] bridge_slave_0: entered allmulticast mode [ 177.633951][ T8502] bridge_slave_0: entered promiscuous mode [ 177.652275][ T8502] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.080171][ T8502] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.096216][ T8502] bridge_slave_1: entered allmulticast mode [ 178.121703][ T8502] bridge_slave_1: entered promiscuous mode [ 178.141087][ T8593] wg0: entered promiscuous mode [ 178.170202][ T8593] wg0: entered allmulticast mode [ 178.408912][ T8606] __nla_validate_parse: 5 callbacks suppressed [ 178.408932][ T8606] netlink: 216 bytes leftover after parsing attributes in process `syz.6.756'. [ 178.431805][ T8606] netlink: 24 bytes leftover after parsing attributes in process `syz.6.756'. [ 178.455676][ T8606] netlink: 16 bytes leftover after parsing attributes in process `syz.6.756'. [ 178.510353][ T8502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.598728][ T8502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.733631][ T8610] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.758'. [ 178.756291][ T8502] team0: Port device team_slave_0 added [ 178.783422][ T8502] team0: Port device team_slave_1 added [ 178.820479][ T51] Bluetooth: hci7: command tx timeout [ 178.991702][ T8502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.015740][ T8502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.104548][ T8502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.126274][ T8621] netlink: 'syz.6.759': attribute type 8 has an invalid length. [ 179.274227][ T8502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.294869][ T8502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.345703][ T8502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.708491][ T8502] hsr_slave_0: entered promiscuous mode [ 179.729143][ T8502] hsr_slave_1: entered promiscuous mode [ 179.736664][ T8502] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.744526][ T8502] Cannot create hsr debugfs directory [ 180.331108][ T8502] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 180.380999][ T8502] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 180.456544][ T8502] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 180.492820][ T8502] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 180.788527][ T8502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.857950][ T8502] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.899646][ T5839] Bluetooth: hci7: command tx timeout [ 180.917029][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.924270][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.006730][ T3529] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.013919][ T3529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.127172][ T8652] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 181.799649][ T8502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.894963][ T8671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.770'. [ 182.126259][ T8676] xt_hashlimit: size too large, truncated to 1048576 [ 182.577896][ T8690] !: renamed from dummy0 (while UP) [ 182.981565][ T5839] Bluetooth: hci7: command 0x0419 tx timeout [ 183.520973][ T8747] netlink: 216 bytes leftover after parsing attributes in process `syz.4.778'. [ 183.527368][ T8745] netlink: 40 bytes leftover after parsing attributes in process `syz.5.780'. [ 183.531487][ T8747] netlink: 24 bytes leftover after parsing attributes in process `syz.4.778'. [ 183.549219][ T8747] netlink: 16 bytes leftover after parsing attributes in process `syz.4.778'. [ 183.607395][ T8502] veth0_vlan: entered promiscuous mode [ 183.624691][ T8502] veth1_vlan: entered promiscuous mode [ 183.762903][ T8502] veth0_macvtap: entered promiscuous mode [ 183.786649][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.5.781'. [ 183.801780][ T8502] veth1_macvtap: entered promiscuous mode [ 183.860320][ T8502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.941038][ T8502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.011022][ T1106] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.052483][ T1106] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.102320][ T1106] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.154804][ T1106] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.295323][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.307495][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.362522][ T3477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.372069][ T3477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.723914][ T8783] netlink: 'syz.0.788': attribute type 4 has an invalid length. [ 184.888315][ T8791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.790'. [ 184.947417][ T8791] netlink: 'syz.0.790': attribute type 1 has an invalid length. [ 185.001889][ T8791] netlink: 'syz.0.790': attribute type 10 has an invalid length. [ 185.014621][ T8791] netlink: 236 bytes leftover after parsing attributes in process `syz.0.790'. [ 185.055966][ T51] Bluetooth: hci7: command 0x0419 tx timeout [ 185.147574][ T8795] netlink: 40 bytes leftover after parsing attributes in process `syz.5.791'. [ 185.381864][ T8807] netlink: 8 bytes leftover after parsing attributes in process `syz.5.795'. [ 185.482388][ T8810] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 185.565112][ T8812] netlink: 'syz.0.797': attribute type 30 has an invalid length. [ 185.657298][ T8818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.797'. [ 185.842875][ T8825] netlink: 'syz.7.800': attribute type 13 has an invalid length. [ 185.857580][ T8825] netlink: 'syz.7.800': attribute type 17 has an invalid length. [ 186.283270][ T8825] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 186.512201][ T8837] veth1_to_team: entered allmulticast mode [ 186.520938][ T8837] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 186.582864][ T8828] netlink: 'syz.4.799': attribute type 27 has an invalid length. [ 187.755295][ T8873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.782748][ T8873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.521021][ T8887] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.535500][ T8887] netlink: 'syz.6.816': attribute type 4 has an invalid length. [ 189.300469][ T8892] __nla_validate_parse: 6 callbacks suppressed [ 189.300503][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.818'. [ 189.348941][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.818'. [ 189.377402][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.818'. [ 189.413144][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.818'. [ 189.545739][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.818'. [ 189.697932][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.818'. [ 189.707516][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.818'. [ 189.717010][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.818'. [ 189.764710][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.818'. [ 189.795854][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.818'. [ 191.687458][ T8966] sctp: [Deprecated]: syz.4.833 (pid 8966) Use of int in max_burst socket option. [ 191.687458][ T8966] Use struct sctp_assoc_value instead [ 191.812463][ T8969] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input7 [ 192.039208][ T8982] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 192.471613][ T8988] pim6reg1: entered promiscuous mode [ 192.486749][ T8988] pim6reg1: entered allmulticast mode [ 192.634290][ T8991] bridge0: port 3(veth0_to_bridge) entered blocking state [ 192.651341][ T8991] bridge0: port 3(veth0_to_bridge) entered disabled state [ 192.659099][ T8991] veth0_to_bridge: entered allmulticast mode [ 192.667602][ T8991] veth0_to_bridge: entered promiscuous mode [ 193.333908][ T9022] IPVS: set_ctl: invalid protocol: 92 255.255.255.255:0 [ 193.433269][ T9027] netlink: 'syz.0.853': attribute type 1 has an invalid length. [ 193.593977][ T9027] 8021q: adding VLAN 0 to HW filter on device bond3 [ 193.816956][ T9033] bond3: (slave veth7): Enslaving as an active interface with a down link [ 193.839731][ T9039] xt_l2tp: missing protocol rule (udp|l2tpip) [ 194.082009][ T9034] bond3: (slave veth9): Enslaving as an active interface with a down link [ 194.452270][ T9060] __nla_validate_parse: 132 callbacks suppressed [ 194.452293][ T9060] netlink: 36 bytes leftover after parsing attributes in process `syz.4.863'. [ 194.598212][ T9070] lo speed is unknown, defaulting to 1000 [ 194.604272][ T9070] lo speed is unknown, defaulting to 1000 [ 194.655405][ T9070] lo speed is unknown, defaulting to 1000 [ 194.677740][ T9076] netlink: 8 bytes leftover after parsing attributes in process `syz.6.869'. [ 194.759504][ T9070] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 194.886255][ T9070] lo speed is unknown, defaulting to 1000 [ 194.902645][ T9086] netlink: 'syz.4.866': attribute type 10 has an invalid length. [ 194.917884][ T9070] lo speed is unknown, defaulting to 1000 [ 194.941372][ T9070] lo speed is unknown, defaulting to 1000 [ 194.968677][ T9070] lo speed is unknown, defaulting to 1000 [ 194.998459][ T9090] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.871'. [ 195.012712][ T9089] netlink: 20 bytes leftover after parsing attributes in process `syz.6.872'. [ 195.023881][ T9092] netlink: 16 bytes leftover after parsing attributes in process `syz.0.873'. [ 195.029747][ T9086] bridge_slave_1: entered promiscuous mode [ 195.059966][ T9086] bridge_slave_1: entered allmulticast mode [ 195.072128][ T9086] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 195.106609][ T9070] lo speed is unknown, defaulting to 1000 [ 195.141030][ T9070] lo speed is unknown, defaulting to 1000 [ 195.184718][ T9070] lo speed is unknown, defaulting to 1000 [ 195.238094][ T9070] lo speed is unknown, defaulting to 1000 [ 195.250690][ T9070] lo speed is unknown, defaulting to 1000 [ 195.536862][ T9104] netlink: 36 bytes leftover after parsing attributes in process `syz.6.876'. [ 196.100217][ T5839] Bluetooth: hci7: command 0x0419 tx timeout [ 196.300207][ T9133] tipc: Started in network mode [ 196.313172][ T9133] tipc: Node identity 9, cluster identity 3 [ 196.323741][ T9133] tipc: Node number set to 9 [ 196.480343][ T9142] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 196.551360][ T9144] netlink: 36 bytes leftover after parsing attributes in process `syz.5.890'. [ 197.377715][ T9176] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 197.460041][ T9186] netlink: 8 bytes leftover after parsing attributes in process `syz.6.901'. [ 197.483466][ T9186] netlink: 8 bytes leftover after parsing attributes in process `syz.6.901'. [ 197.557719][ T9186] netlink: 8 bytes leftover after parsing attributes in process `syz.6.901'. [ 197.576081][ T9186] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 198.546653][ T9226] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 198.724403][ T9234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.745268][ T9233] netlink: 'syz.7.918': attribute type 1 has an invalid length. [ 198.920436][ T9242] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 199.066068][ T8734] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.247416][ T8734] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.377981][ T8734] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.480573][ T9253] netlink: 'syz.7.922': attribute type 14 has an invalid length. [ 199.539851][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.678909][ T8734] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.747508][ T9260] netlink: 'syz.7.923': attribute type 10 has an invalid length. [ 199.814077][ T9260] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 200.051124][ T9229] lo speed is unknown, defaulting to 1000 [ 200.197088][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 200.213731][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 200.223636][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 200.246656][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 200.256788][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 200.326630][ T9268] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.626245][ T9284] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4. [ 200.655405][ T8734] bridge_slave_1: left allmulticast mode [ 200.664640][ T8734] bridge_slave_1: left promiscuous mode [ 200.702598][ T8734] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.741287][ T8734] bridge_slave_0: left allmulticast mode [ 200.759319][ T8734] bridge_slave_0: left promiscuous mode [ 200.775341][ T8734] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.283529][ T8734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.300889][ T8734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.313389][ T8734] bond0 (unregistering): Released all slaves [ 201.329509][ T9282] netlink: 'syz.0.925': attribute type 1 has an invalid length. [ 201.345702][ T9242] lo speed is unknown, defaulting to 1000 [ 201.413347][ T9293] __nla_validate_parse: 51 callbacks suppressed [ 201.413369][ T9293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.928'. [ 201.529945][ T8734] tipc: Left network mode [ 201.941414][ T9271] lo speed is unknown, defaulting to 1000 [ 202.336043][ T5839] Bluetooth: hci5: command tx timeout [ 202.638384][ T9311] bond0: option mode: unable to set because the bond device has slaves [ 202.732599][ T9311] netlink: 'syz.0.932': attribute type 5 has an invalid length. [ 202.764835][ T9311] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.932'. [ 202.796558][ T9311] netlink: 4484 bytes leftover after parsing attributes in process `syz.0.932'. [ 202.825326][ T8734] hsr_slave_0: left promiscuous mode [ 202.833023][ T8734] hsr_slave_1: left promiscuous mode [ 202.842457][ T8734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.851311][ T8734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.867194][ T8734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.875724][ T8734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.921252][ T8734] veth0_macvtap: left promiscuous mode [ 202.927447][ T8734] veth1_vlan: left promiscuous mode [ 202.933198][ T8734] veth0_vlan: left promiscuous mode [ 202.963865][ T9321] netlink: 24 bytes leftover after parsing attributes in process `syz.0.932'. [ 203.484939][ T8734] team0 (unregistering): Port device team_slave_1 removed [ 203.533472][ T8734] team0 (unregistering): Port device team_slave_0 removed [ 203.955925][ T9314] erspan0: entered promiscuous mode [ 204.030531][ T5934] lo speed is unknown, defaulting to 1000 [ 204.044535][ T5934] infiniband syz1: ib_query_port failed (-19) [ 204.072029][ T9314] erspan0: left promiscuous mode [ 204.115054][ T9324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.934'. [ 204.163404][ T9324] ipvlan2: entered promiscuous mode [ 204.367598][ T9329] netlink: 12 bytes leftover after parsing attributes in process `syz.7.936'. [ 204.393799][ T9271] chnl_net:caif_netlink_parms(): no params data found [ 204.416490][ T5839] Bluetooth: hci5: command tx timeout [ 204.822172][ T9271] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.851085][ T9271] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.869901][ T9353] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input8 [ 204.874857][ T9271] bridge_slave_0: entered allmulticast mode [ 204.892937][ T9271] bridge_slave_0: entered promiscuous mode [ 204.902333][ T9271] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.910458][ T9271] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.918223][ T9271] bridge_slave_1: entered allmulticast mode [ 204.927644][ T9271] bridge_slave_1: entered promiscuous mode [ 204.931336][ T9343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.940'. [ 205.233738][ T9271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.293889][ T9271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.461714][ T9271] team0: Port device team_slave_0 added [ 205.495458][ T9271] team0: Port device team_slave_1 added [ 205.593628][ T9271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.620150][ T9271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.686034][ T9271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.734314][ T9271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.751422][ T9271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.828226][ T9271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.880876][ T9372] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 206.041040][ T5934] IPVS: starting estimator thread 0... [ 206.056276][ T9271] hsr_slave_0: entered promiscuous mode [ 206.064000][ T9271] hsr_slave_1: entered promiscuous mode [ 206.070851][ T9271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.079316][ T9271] Cannot create hsr debugfs directory [ 206.099507][ T9380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.126995][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.136537][ T9379] IPVS: using max 38 ests per chain, 91200 per kthread [ 206.158448][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.496219][ T5839] Bluetooth: hci5: command tx timeout [ 206.567044][ T9386] IPv6: Can't replace route, no match found [ 206.590122][ T9386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.953'. [ 207.133456][ T9393] netlink: 'syz.4.956': attribute type 10 has an invalid length. [ 207.175716][ T9393] netlink: 40 bytes leftover after parsing attributes in process `syz.4.956'. [ 207.288608][ T9393] geneve0: entered promiscuous mode [ 207.300624][ T9393] geneve0: entered allmulticast mode [ 207.334618][ T9393] team0: Port device geneve0 added [ 207.772918][ T9271] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 207.896414][ T9271] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 207.975803][ T9271] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 208.038839][ T9271] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 208.405199][ T9271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.502487][ T9271] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.553467][ T8720] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.560777][ T8720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.576392][ T5839] Bluetooth: hci5: command tx timeout [ 208.640494][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.648022][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.766364][ T9440] netlink: 248 bytes leftover after parsing attributes in process `syz.7.971'. [ 208.967908][ T9271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.237148][ T9450] netlink: 'syz.7.974': attribute type 27 has an invalid length. [ 209.437935][ T9454] netlink: 'syz.7.975': attribute type 1 has an invalid length. [ 209.468279][ T9454] netlink: 224 bytes leftover after parsing attributes in process `syz.7.975'. [ 209.571341][ T9271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.847945][ T9467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.978'. [ 210.428871][ T9480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.981'. [ 210.755434][ T9271] veth0_vlan: entered promiscuous mode [ 210.802188][ T9271] veth1_vlan: entered promiscuous mode [ 210.999931][ T9491] netlink: 4 bytes leftover after parsing attributes in process `syz.7.985'. [ 211.300536][ T9491] bridge_slave_1: left allmulticast mode [ 211.349724][ T9491] bridge_slave_1: left promiscuous mode [ 211.385886][ T9491] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.432900][ T9491] bridge_slave_0: left allmulticast mode [ 211.485773][ T9491] bridge_slave_0: left promiscuous mode [ 211.514774][ T9491] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.860746][ T5153] Bluetooth: hci2: command 0x0406 tx timeout [ 211.870376][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 211.876729][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 211.918714][ T9271] veth0_macvtap: entered promiscuous mode [ 211.951322][ T9271] veth1_macvtap: entered promiscuous mode [ 212.021940][ T9271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.069318][ T9271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.159618][ T1106] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.189874][ T1106] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.236936][ T1106] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.267536][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.385480][ T8734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.417854][ T8734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.532101][ T8712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.550282][ T8712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.245495][ T8712] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.510608][ T8712] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.087055][ T8712] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.379318][ T8712] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.424325][ T9502] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 214.435450][ T9502] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 214.447624][ T9502] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 214.459222][ T9502] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 214.467208][ T9502] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 214.936017][ T8712] bridge_slave_1: left allmulticast mode [ 214.941910][ T8712] bridge_slave_1: left promiscuous mode [ 214.981622][ T8712] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.009362][ T8712] bridge_slave_0: left allmulticast mode [ 215.015064][ T8712] bridge_slave_0: left promiscuous mode [ 215.033532][ T8712] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.288881][ T9401] Set syz1 is full, maxelem 65536 reached [ 215.518187][ T9551] netlink: 'syz.0.1000': attribute type 4 has an invalid length. [ 215.530598][ T9550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.572380][ T9552] netlink: 'syz.0.1000': attribute type 4 has an invalid length. [ 215.583667][ T9550] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1001'. [ 215.820068][ T8712] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.838095][ T8712] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.861718][ T8712] bond0 (unregistering): Released all slaves [ 215.893438][ T9538] geneve1: entered promiscuous mode [ 216.303157][ T9566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1004'. [ 216.386842][ T9574] netlink: 'syz.0.1004': attribute type 83 has an invalid length. [ 216.411032][ T9575] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 216.542373][ T9578] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1007'. [ 216.552402][ T9578] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1007'. [ 216.571091][ T9578] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1007'. [ 216.582493][ T5848] Bluetooth: hci5: command tx timeout [ 216.583951][ T9578] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1007'. [ 216.621897][ T9578] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1007'. [ 216.632065][ T9578] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1007'. [ 216.642731][ T9578] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1007'. [ 216.651898][ T9578] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1007'. [ 216.659910][ T9584] netlink: 'syz.0.1012': attribute type 3 has an invalid length. [ 217.124753][ T1151] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.166151][ T8720] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.260485][ T8720] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.280988][ T8720] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.421562][ T8712] hsr_slave_0: left promiscuous mode [ 217.468318][ T8712] hsr_slave_1: left promiscuous mode [ 217.485096][ T8712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.511554][ T8712] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.545280][ T8712] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.563539][ T8712] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.640753][ T8712] veth1_macvtap: left promiscuous mode [ 217.664372][ T8712] veth0_macvtap: left promiscuous mode [ 217.673121][ T8712] veth1_vlan: left promiscuous mode [ 217.680924][ T8712] veth0_vlan: left promiscuous mode [ 218.209066][ T8712] team0 (unregistering): Port device team_slave_1 removed [ 218.256474][ T8712] team0 (unregistering): Port device team_slave_0 removed [ 218.659483][ T5848] Bluetooth: hci5: command tx timeout [ 218.808938][ T9528] chnl_net:caif_netlink_parms(): no params data found [ 219.816816][ T9528] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.824601][ T9528] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.841259][ T9528] bridge_slave_0: entered allmulticast mode [ 219.852422][ T9528] bridge_slave_0: entered promiscuous mode [ 219.880214][ T9528] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.894909][ T9528] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.902320][ T9528] bridge_slave_1: entered allmulticast mode [ 219.926292][ T9528] bridge_slave_1: entered promiscuous mode [ 220.084543][ T9528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.152969][ T9528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.283622][ T9528] team0: Port device team_slave_0 added [ 220.298591][ T9528] team0: Port device team_slave_1 added [ 220.403006][ T9528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.418704][ T9528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.457313][ T9528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.543102][ T9528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.572670][ T9528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.664463][ T9528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.742985][ T5848] Bluetooth: hci5: command tx timeout [ 220.823228][ T9703] Cannot find set identified by id 0 to match [ 220.842598][ T9528] hsr_slave_0: entered promiscuous mode [ 220.855181][ T9528] hsr_slave_1: entered promiscuous mode [ 220.883372][ T9528] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.932778][ T9528] Cannot create hsr debugfs directory [ 221.111178][ T9714] Bluetooth: MGMT ver 1.23 [ 221.151678][ T9714] bridge0: port 1(gretap0) entered blocking state [ 221.167267][ T9714] bridge0: port 1(gretap0) entered disabled state [ 221.201532][ T9714] gretap0: entered allmulticast mode [ 221.211693][ T9714] gretap0: entered promiscuous mode [ 221.446420][ T9728] __nla_validate_parse: 45 callbacks suppressed [ 221.446439][ T9728] netlink: 112 bytes leftover after parsing attributes in process `syz.7.1056'. [ 221.486410][ T9732] netlink: 'syz.0.1057': attribute type 6 has an invalid length. [ 222.045079][ T9751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1063'. [ 222.334197][ T9763] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 222.342421][ T9763] syzkaller1: linktype set to 270 [ 222.371372][ T9762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1066'. [ 222.644527][ T9770] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.821779][ T5848] Bluetooth: hci5: command tx timeout [ 222.842285][ T9775] netlink: 'syz.4.1071': attribute type 9 has an invalid length. [ 222.855806][ T9775] netlink: 204732 bytes leftover after parsing attributes in process `syz.4.1071'. [ 222.927583][ T9781] xt_TCPMSS: Only works on TCP SYN packets [ 222.938014][ T9781] netlink: 212344 bytes leftover after parsing attributes in process `syz.7.1070'. [ 223.365335][ T9528] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 223.408298][ T9802] netlink: 'syz.4.1076': attribute type 8 has an invalid length. [ 223.423885][ T9528] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 223.485326][ T9528] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 223.538699][ T9528] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 223.838842][ T9528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.884053][ T9528] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.901633][ T8712] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.908872][ T8712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.928493][ T8712] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.935733][ T8712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.605114][ T9528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.634445][ T9874] !: renamed from dummy0 (while UP) [ 225.660892][ T9528] veth0_vlan: entered promiscuous mode [ 225.751602][ T9528] veth1_vlan: entered promiscuous mode [ 225.884903][ T9528] veth0_macvtap: entered promiscuous mode [ 226.321923][ T9886] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1090'. [ 226.390253][ T8734] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.428764][ T8734] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.465009][ T9528] veth1_macvtap: entered promiscuous mode [ 226.747901][ T8734] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.777707][ T8734] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.889913][ T9895] netlink: 'syz.6.1102': attribute type 13 has an invalid length. [ 227.180191][ T9895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.212094][ T9895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.299438][ T9904] netlink: 308 bytes leftover after parsing attributes in process `syz.7.1104'. [ 227.304702][ T9900] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 227.409930][ T8712] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.428619][ T8712] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.467395][ T8712] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.506965][ T12] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.553938][ T9528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.608384][ T9528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.620884][ T9908] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1106'. [ 227.643363][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.663514][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.733103][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.750870][ T9915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1110'. [ 227.762701][ T9915] block nbd0: not configured, cannot reconfigure [ 227.777545][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.848355][ T9913] gretap1: entered promiscuous mode [ 227.853866][ T9913] gretap1: entered allmulticast mode [ 227.903506][ T9919] netlink: 'syz.4.1111': attribute type 9 has an invalid length. [ 228.199817][ T9921] netlink: 216 bytes leftover after parsing attributes in process `syz.6.1112'. [ 228.213609][ T9921] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1112'. [ 228.232288][ T9921] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1112'. [ 228.265878][ T3017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.281248][ T3017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.378684][ T8734] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.405609][ T8734] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.049619][ T3017] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.104571][ T9962] veth1_macvtap: left promiscuous mode [ 229.126419][ T9962] macsec0: entered allmulticast mode [ 229.239485][ T3017] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.256083][ T9963] veth1_macvtap: entered promiscuous mode [ 229.262879][ T9963] veth1_macvtap: entered allmulticast mode [ 229.272663][ T9963] macsec0: left allmulticast mode [ 229.278670][ T9963] veth1_macvtap: left allmulticast mode [ 229.342791][ T3017] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.494336][ T3017] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.574709][ T9975] netlink: 216 bytes leftover after parsing attributes in process `syz.7.1130'. [ 229.612020][ T9975] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1130'. [ 229.646160][ T9975] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1130'. [ 230.033283][ T9987] netlink: 440 bytes leftover after parsing attributes in process `syz.4.1137'. [ 230.045977][ T3017] bridge_slave_1: left allmulticast mode [ 230.051672][ T3017] bridge_slave_1: left promiscuous mode [ 230.101983][ T3017] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.146198][ T9502] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 230.154936][ T9502] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 230.165871][ T9502] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 230.178954][ T9502] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 230.194792][ T3017] bridge_slave_0: left allmulticast mode [ 230.203413][ T9502] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 230.220733][ T3017] bridge_slave_0: left promiscuous mode [ 230.240208][ T3017] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.395418][T10006] xt_bpf: check failed: parse error [ 230.724929][ T3017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.738187][ T3017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.752810][ T3017] bond0 (unregistering): Released all slaves [ 231.279888][T10031] 8021q: adding VLAN 0 to HW filter on device bond2 [ 231.336335][T10035] netlink: 'syz.0.1149': attribute type 9 has an invalid length. [ 231.593320][T10031] !: entered promiscuous mode [ 231.653194][T10031] !: left promiscuous mode [ 231.689759][T10053] xt_CT: You must specify a L4 protocol and not use inversions on it [ 232.257669][ T9502] Bluetooth: hci5: command tx timeout [ 232.418516][ T3017] hsr_slave_0: left promiscuous mode [ 232.447571][ T3017] hsr_slave_1: left promiscuous mode [ 232.462781][ T3017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.481863][ T3017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.493103][ T3017] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.515360][ T3017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.629958][T10071] __nla_validate_parse: 5 callbacks suppressed [ 232.629979][T10071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1156'. [ 232.642230][ T3017] veth1_macvtap: left promiscuous mode [ 232.671148][ T3017] veth0_macvtap: left promiscuous mode [ 232.695866][ T3017] veth1_vlan: left promiscuous mode [ 232.711562][ T3017] veth0_vlan: left promiscuous mode [ 233.424765][ T3017] team0 (unregistering): Port device team_slave_1 removed [ 233.469729][ T3017] team0 (unregistering): Port device team_slave_0 removed [ 234.249364][T10090] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1161'. [ 234.264800][ T9994] chnl_net:caif_netlink_parms(): no params data found [ 234.336367][ T9502] Bluetooth: hci5: command tx timeout [ 234.371611][T10090] syzkaller1: entered promiscuous mode [ 234.421878][T10090] syzkaller1: entered allmulticast mode [ 234.884729][ T9994] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.924691][ T9994] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.945918][ T9994] bridge_slave_0: entered allmulticast mode [ 234.953849][ T9994] bridge_slave_0: entered promiscuous mode [ 235.076111][ T9994] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.083320][ T9994] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.134802][ T9994] bridge_slave_1: entered allmulticast mode [ 235.147605][ T9994] bridge_slave_1: entered promiscuous mode [ 235.278551][ T9994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.288697][T10121] netlink: 'syz.4.1165': attribute type 10 has an invalid length. [ 235.303478][T10117] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1165'. [ 235.403257][T10126] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1167'. [ 235.412691][T10126] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1167'. [ 235.425082][T10121] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 235.441669][T10121] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 235.453986][T10121] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 235.471959][ T9994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.484252][T10128] netlink: zone id is out of range [ 235.489647][T10128] netlink: zone id is out of range [ 235.500581][T10128] netlink: del zone limit has 4 unknown bytes [ 235.603614][ T9994] team0: Port device team_slave_0 added [ 235.645243][ T9994] team0: Port device team_slave_1 added [ 235.844764][ T9994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.871564][ T9994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.925682][ T9994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.964309][ T9994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.010486][ T9994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.082784][ T9994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.153231][ T8712] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.192294][ T8712] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.374289][ T8712] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.394189][ T8712] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.416320][ T9502] Bluetooth: hci5: command tx timeout [ 236.503012][ T9994] hsr_slave_0: entered promiscuous mode [ 236.510319][ T9994] hsr_slave_1: entered promiscuous mode [ 236.526713][ T9994] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.537187][ T9994] Cannot create hsr debugfs directory [ 236.831154][T10169] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.153126][T10177] bridge: RTM_NEWNEIGH with invalid state 0x31 [ 237.338169][T10179] FAULT_INJECTION: forcing a failure. [ 237.338169][T10179] name failslab, interval 1, probability 0, space 0, times 1 [ 237.373190][T10179] CPU: 0 UID: 0 PID: 10179 Comm: syz.0.1182 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 237.373220][T10179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 237.373232][T10179] Call Trace: [ 237.373240][T10179] [ 237.373249][T10179] dump_stack_lvl+0x189/0x250 [ 237.373298][T10179] ? __pfx____ratelimit+0x10/0x10 [ 237.373323][T10179] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.373354][T10179] ? __pfx__printk+0x10/0x10 [ 237.373381][T10179] ? __pfx___might_resched+0x10/0x10 [ 237.373411][T10179] ? fs_reclaim_acquire+0x7d/0x100 [ 237.373440][T10179] should_fail_ex+0x414/0x560 [ 237.373470][T10179] should_failslab+0xa8/0x100 [ 237.373493][T10179] __kmalloc_cache_noprof+0x70/0x3d0 [ 237.373513][T10179] ? rtnl_newlink+0xed/0x1c70 [ 237.373535][T10179] ? kasan_save_free_info+0x46/0x50 [ 237.373565][T10179] rtnl_newlink+0xed/0x1c70 [ 237.373587][T10179] ? netlink_sendmsg+0x805/0xb30 [ 237.373611][T10179] ? __sock_sendmsg+0x21c/0x270 [ 237.373629][T10179] ? ____sys_sendmsg+0x505/0x830 [ 237.373654][T10179] ? ___sys_sendmsg+0x21f/0x2a0 [ 237.373680][T10179] ? __x64_sys_sendmsg+0x19b/0x260 [ 237.373706][T10179] ? do_syscall_64+0xfa/0x3b0 [ 237.373727][T10179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.373756][T10179] ? __pfx_rtnl_newlink+0x10/0x10 [ 237.373808][T10179] ? kasan_quarantine_put+0xdd/0x220 [ 237.373837][T10179] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.373866][T10179] ? nlmon_xmit+0xb0/0x100 [ 237.373882][T10179] ? kmem_cache_free+0x18f/0x400 [ 237.373910][T10179] ? __local_bh_enable_ip+0x12d/0x1c0 [ 237.373940][T10179] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.373965][T10179] ? __local_bh_enable_ip+0x12d/0x1c0 [ 237.373994][T10179] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 237.374040][T10179] ? __dev_queue_xmit+0x27e/0x3a70 [ 237.374075][T10179] ? __lock_acquire+0xab9/0xd20 [ 237.374132][T10179] ? __pfx_rtnl_newlink+0x10/0x10 [ 237.374161][T10179] rtnetlink_rcv_msg+0x7cc/0xb70 [ 237.374191][T10179] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 237.374214][T10179] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 237.374235][T10179] ? ref_tracker_free+0x63a/0x7d0 [ 237.374259][T10179] ? __copy_skb_header+0xa7/0x550 [ 237.374291][T10179] ? __pfx_ref_tracker_free+0x10/0x10 [ 237.374318][T10179] ? __skb_clone+0x63/0x7a0 [ 237.374356][T10179] netlink_rcv_skb+0x208/0x470 [ 237.374382][T10179] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 237.374408][T10179] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 237.374448][T10179] ? netlink_deliver_tap+0x2e/0x1b0 [ 237.374473][T10179] ? netlink_deliver_tap+0x2e/0x1b0 [ 237.374504][T10179] netlink_unicast+0x75b/0x8d0 [ 237.374540][T10179] netlink_sendmsg+0x805/0xb30 [ 237.374577][T10179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.374607][T10179] ? aa_sock_msg_perm+0x94/0x160 [ 237.374635][T10179] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 237.374661][T10179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.374687][T10179] __sock_sendmsg+0x21c/0x270 [ 237.374713][T10179] ____sys_sendmsg+0x505/0x830 [ 237.374750][T10179] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.374790][T10179] ? import_iovec+0x74/0xa0 [ 237.374815][T10179] ___sys_sendmsg+0x21f/0x2a0 [ 237.374846][T10179] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.374918][T10179] ? __fget_files+0x2a/0x420 [ 237.374940][T10179] ? __fget_files+0x3a0/0x420 [ 237.374974][T10179] __x64_sys_sendmsg+0x19b/0x260 [ 237.375008][T10179] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 237.375057][T10179] ? __pfx_ksys_write+0x10/0x10 [ 237.375086][T10179] ? rcu_is_watching+0x15/0xb0 [ 237.375124][T10179] ? do_syscall_64+0xbe/0x3b0 [ 237.375153][T10179] do_syscall_64+0xfa/0x3b0 [ 237.375177][T10179] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.375200][T10179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.375220][T10179] ? clear_bhb_loop+0x60/0xb0 [ 237.375246][T10179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.375265][T10179] RIP: 0033:0x7f58c298e929 [ 237.375292][T10179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.375310][T10179] RSP: 002b:00007f58c382b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.375337][T10179] RAX: ffffffffffffffda RBX: 00007f58c2bb5fa0 RCX: 00007f58c298e929 [ 237.375353][T10179] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000003 [ 237.375366][T10179] RBP: 00007f58c382b090 R08: 0000000000000000 R09: 0000000000000000 [ 237.375379][T10179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.375391][T10179] R13: 0000000000000000 R14: 00007f58c2bb5fa0 R15: 00007fff52e6a6f8 [ 237.375425][T10179] [ 238.105256][T10194] netlink: 'syz.6.1186': attribute type 21 has an invalid length. [ 238.113538][T10194] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1186'. [ 238.286060][T10202] netlink: 'syz.4.1190': attribute type 9 has an invalid length. [ 238.495952][ T9502] Bluetooth: hci5: command tx timeout [ 238.665329][ T9994] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 238.686896][T10222] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1194'. [ 238.720391][ T9994] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 238.782919][T10218] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1194'. [ 238.799673][ T9994] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 238.801235][T10228] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1199'. [ 238.820914][T10218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.833354][ T9994] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 239.174865][ T9994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.207640][ T9994] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.240427][T10247] netlink: 'syz.0.1203': attribute type 39 has an invalid length. [ 239.265447][T10251] netlink: 'syz.6.1204': attribute type 9 has an invalid length. [ 239.291458][ T8720] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.298909][ T8720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.327539][T10252] netlink: 'syz.7.1202': attribute type 10 has an invalid length. [ 239.353783][T10252] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1202'. [ 239.365182][ T8712] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.372405][ T8712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.412706][T10252] team0: entered promiscuous mode [ 239.435249][T10252] team_slave_0: entered promiscuous mode [ 239.441996][T10252] team_slave_1: entered promiscuous mode [ 239.454195][T10252] team0: entered allmulticast mode [ 239.461562][T10252] team_slave_0: entered allmulticast mode [ 239.475774][T10255] netlink: 'syz.6.1205': attribute type 9 has an invalid length. [ 239.484949][T10252] team_slave_1: entered allmulticast mode [ 239.500928][T10252] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 239.659827][T10263] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1208'. [ 240.108584][ T9994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.307049][T10288] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 240.479926][T10284] netlink: 'syz.6.1212': attribute type 1 has an invalid length. [ 240.528544][T10284] nbd: error processing sock list [ 240.550031][T10284] block nbd0: shutting down sockets [ 240.843297][T10307] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1216'. [ 240.846486][T10311] FAULT_INJECTION: forcing a failure. [ 240.846486][T10311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.864279][T10312] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1217'. [ 240.895114][T10311] CPU: 1 UID: 0 PID: 10311 Comm: syz.0.1219 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 240.895147][T10311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 240.895160][T10311] Call Trace: [ 240.895168][T10311] [ 240.895178][T10311] dump_stack_lvl+0x189/0x250 [ 240.895216][T10311] ? __pfx____ratelimit+0x10/0x10 [ 240.895241][T10311] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.895273][T10311] ? __pfx__printk+0x10/0x10 [ 240.895310][T10311] should_fail_ex+0x414/0x560 [ 240.895340][T10311] _copy_to_user+0x31/0xb0 [ 240.895363][T10311] simple_read_from_buffer+0xe1/0x170 [ 240.895390][T10311] proc_fail_nth_read+0x1df/0x250 [ 240.895418][T10311] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 240.895446][T10311] ? rw_verify_area+0x258/0x650 [ 240.895475][T10311] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 240.895502][T10311] vfs_read+0x200/0x980 [ 240.895540][T10311] ? __pfx___mutex_lock+0x10/0x10 [ 240.895566][T10311] ? __pfx_vfs_read+0x10/0x10 [ 240.895597][T10311] ? __fget_files+0x2a/0x420 [ 240.895624][T10311] ? __fget_files+0x3a0/0x420 [ 240.895644][T10311] ? __fget_files+0x2a/0x420 [ 240.895683][T10311] ksys_read+0x145/0x250 [ 240.895717][T10311] ? __pfx_ksys_read+0x10/0x10 [ 240.895753][T10311] ? do_syscall_64+0xbe/0x3b0 [ 240.895781][T10311] do_syscall_64+0xfa/0x3b0 [ 240.895804][T10311] ? lockdep_hardirqs_on+0x9c/0x150 [ 240.895825][T10311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.895845][T10311] ? clear_bhb_loop+0x60/0xb0 [ 240.895870][T10311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.895889][T10311] RIP: 0033:0x7f58c298d33c [ 240.895907][T10311] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 240.895925][T10311] RSP: 002b:00007f58c382b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 240.895946][T10311] RAX: ffffffffffffffda RBX: 00007f58c2bb5fa0 RCX: 00007f58c298d33c [ 240.895961][T10311] RDX: 000000000000000f RSI: 00007f58c382b0a0 RDI: 0000000000000003 [ 240.895973][T10311] RBP: 00007f58c382b090 R08: 0000000000000000 R09: 0000000000000000 [ 240.895984][T10311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.895996][T10311] R13: 0000000000000001 R14: 00007f58c2bb5fa0 R15: 00007fff52e6a6f8 [ 240.896028][T10311] [ 240.905784][T10312] openvswitch: netlink: Missing key (keys=40, expected=100) [ 241.168288][T10308] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.201117][T10308] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.292649][T10313] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 241.301425][T10313] batadv1: entered promiscuous mode [ 241.310819][T10313] batadv1: entered allmulticast mode [ 241.317506][T10313] team0: Port device batadv1 added [ 241.343784][T10321] netlink: 'syz.6.1221': attribute type 10 has an invalid length. [ 241.375841][T10308] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.386882][T10308] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.401682][T10322] netlink: 'syz.6.1221': attribute type 10 has an invalid length. [ 241.433692][T10321] team0: Port device 0! added [ 241.462136][T10322] team0: Port device 0! removed [ 241.481909][T10322] bond0: (slave 0!): Enslaving as an active interface with an up link [ 241.524379][T10308] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.535028][T10308] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.631918][T10308] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.666140][T10308] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.740769][ T9994] veth0_vlan: entered promiscuous mode [ 241.783142][ T9994] veth1_vlan: entered promiscuous mode [ 241.858787][ T9994] veth0_macvtap: entered promiscuous mode [ 241.931138][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.947914][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.980490][ T9994] veth1_macvtap: entered promiscuous mode [ 242.024807][ T8720] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.034220][ T8720] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.042740][ T8720] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.051426][ T8720] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.080236][ T8734] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.099025][ T8734] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.146639][T10338] netlink: 'syz.0.1227': attribute type 1 has an invalid length. [ 242.154520][T10338] nbd: error processing sock list [ 242.166123][T10338] block nbd0: shutting down sockets [ 242.182041][ T9994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.232413][ T9994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.314825][ T8734] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.365850][ T8734] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.390654][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.422307][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.613224][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.643563][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.721691][ T3017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.750857][ T3017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.838389][T10367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1238'. [ 242.873291][T10369] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 243.008472][T10368] batman_adv: batadv0: Adding interface: gretap1 [ 243.038838][T10368] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.068371][T10368] batman_adv: batadv0: Interface activated: gretap1 [ 243.137434][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1237'. [ 243.146713][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1237'. [ 243.165791][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1237'. [ 243.174875][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1237'. [ 243.195204][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1237'. [ 243.207934][T10381] netlink: 'syz.4.1240': attribute type 10 has an invalid length. [ 243.226038][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1237'. [ 243.235017][T10381] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1240'. [ 243.254535][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1237'. [ 243.268475][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1237'. [ 243.290990][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1237'. [ 243.313331][T10384] openvswitch: netlink: Missing valid actions attribute. [ 243.350601][T10381] bond0: (slave team0): Releasing backup interface [ 243.357531][T10381] bond0: (slave team0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 243.386521][T10384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.417328][T10381] bridge0: port 1(team0) entered blocking state [ 243.435798][T10381] bridge0: port 1(team0) entered disabled state [ 243.588967][ T8720] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.689091][ T8720] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.846608][ T8720] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.868546][ T8712] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 243.878870][ T8712] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 244.350033][ T8720] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.817118][ T8720] bridge_slave_1: left allmulticast mode [ 244.844949][ T8720] bridge_slave_1: left promiscuous mode [ 244.853869][ T8720] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.957157][ T8720] bridge_slave_0: left allmulticast mode [ 244.969931][ T8720] bridge_slave_0: left promiscuous mode [ 244.997914][ T8720] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.139260][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 245.148985][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 245.160993][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 245.183856][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 245.198298][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 245.734025][ T8720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.747972][ T8720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.762321][ T8720] bond0 (unregistering): Released all slaves [ 246.748032][T10472] netlink: 'syz.6.1266': attribute type 1 has an invalid length. [ 246.772826][T10466] batman_adv: batadv0: Adding interface: ip6gretap1 [ 246.780299][T10466] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.808057][T10466] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 246.901292][T10478] bond1 (unregistering): Released all slaves [ 247.047444][T10472] bond1: entered promiscuous mode [ 247.053187][T10472] 8021q: adding VLAN 0 to HW filter on device bond1 [ 247.068985][T10467] batman_adv: batadv0: Removing interface: ip6gretap1 [ 247.202797][ T8720] hsr_slave_0: left promiscuous mode [ 247.222051][ T8720] hsr_slave_1: left promiscuous mode [ 247.248531][ T8720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.290561][ T8720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.306110][ T9502] Bluetooth: hci5: command tx timeout [ 247.326592][ T8720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.334220][ T8720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.402654][ T8720] veth1_macvtap: left promiscuous mode [ 247.409219][ T8720] veth0_macvtap: left promiscuous mode [ 247.415034][ T8720] veth1_vlan: left promiscuous mode [ 247.420682][ T8720] veth0_vlan: left promiscuous mode [ 248.097482][ T8720] team0 (unregistering): Port device team_slave_1 removed [ 248.140460][ T8720] team0 (unregistering): Port device team_slave_0 removed [ 248.865025][T10517] __nla_validate_parse: 50 callbacks suppressed [ 248.865046][T10517] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1275'. [ 248.934572][T10521] netlink: 'syz.0.1278': attribute type 4 has an invalid length. [ 249.119225][T10534] netlink: 10132 bytes leftover after parsing attributes in process `syz.7.1276'. [ 249.177439][T10514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.198042][T10514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.325852][T10539] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.386391][ T9502] Bluetooth: hci5: command tx timeout [ 249.603096][T10416] chnl_net:caif_netlink_parms(): no params data found [ 249.633355][ T5825] IPVS: starting estimator thread 0... [ 249.653592][T10536] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1280'. [ 249.680544][T10537] netlink: 'syz.6.1280': attribute type 1 has an invalid length. [ 249.714065][ T8712] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.727785][T10537] netlink: 228 bytes leftover after parsing attributes in process `syz.6.1280'. [ 249.737158][T10545] IPVS: using max 25 ests per chain, 60000 per kthread [ 249.755870][ T8712] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.881666][ T8712] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.891232][ T8712] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.515123][T10416] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.537641][T10416] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.570894][T10416] bridge_slave_0: entered allmulticast mode [ 250.593943][T10416] bridge_slave_0: entered promiscuous mode [ 250.604776][T10416] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.621302][T10416] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.630127][T10416] bridge_slave_1: entered allmulticast mode [ 250.643777][T10416] bridge_slave_1: entered promiscuous mode [ 250.761894][T10567] netlink: 'syz.7.1285': attribute type 9 has an invalid length. [ 250.779724][T10416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.794041][T10567] FAULT_INJECTION: forcing a failure. [ 250.794041][T10567] name failslab, interval 1, probability 0, space 0, times 0 [ 250.816099][T10567] CPU: 0 UID: 0 PID: 10567 Comm: syz.7.1285 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 250.816131][T10567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 250.816159][T10567] Call Trace: [ 250.816167][T10567] [ 250.816176][T10567] dump_stack_lvl+0x189/0x250 [ 250.816220][T10567] ? __pfx____ratelimit+0x10/0x10 [ 250.816245][T10567] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.816276][T10567] ? __pfx__printk+0x10/0x10 [ 250.816306][T10567] ? __pfx___might_resched+0x10/0x10 [ 250.816336][T10567] ? fs_reclaim_acquire+0x7d/0x100 [ 250.816366][T10567] should_fail_ex+0x414/0x560 [ 250.816397][T10567] ? alloc_netdev_mqs+0x8a0/0x1170 [ 250.816416][T10567] should_failslab+0xa8/0x100 [ 250.816440][T10567] __kvmalloc_node_noprof+0x161/0x5f0 [ 250.816462][T10567] ? alloc_netdev_mqs+0x8a0/0x1170 [ 250.816489][T10567] alloc_netdev_mqs+0x8a0/0x1170 [ 250.816518][T10567] rtnl_create_link+0x31f/0xd10 [ 250.816546][T10567] rtnl_newlink_create+0x25c/0xb00 [ 250.816580][T10567] ? __mutex_lock+0x51b/0xe80 [ 250.816612][T10567] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 250.816638][T10567] ? rtnl_newlink+0x8db/0x1c70 [ 250.816673][T10567] ? __pfx___mutex_lock+0x10/0x10 [ 250.816714][T10567] ? ns_capable+0x8a/0xf0 [ 250.816749][T10567] rtnl_newlink+0x16d6/0x1c70 [ 250.816792][T10567] ? __pfx_rtnl_newlink+0x10/0x10 [ 250.816819][T10567] ? __lock_acquire+0xab9/0xd20 [ 250.816852][T10567] ? __lock_acquire+0xab9/0xd20 [ 250.816893][T10567] ? __lock_acquire+0xab9/0xd20 [ 250.816943][T10567] ? is_bpf_text_address+0x26/0x2b0 [ 250.816979][T10567] ? is_bpf_text_address+0x292/0x2b0 [ 250.817012][T10567] ? is_bpf_text_address+0x26/0x2b0 [ 250.817046][T10567] ? kernel_text_address+0xa5/0xe0 [ 250.817087][T10567] ? __lock_acquire+0xab9/0xd20 [ 250.817141][T10567] ? __pfx_rtnl_newlink+0x10/0x10 [ 250.817164][T10567] rtnetlink_rcv_msg+0x7cc/0xb70 [ 250.817193][T10567] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 250.817226][T10567] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 250.817270][T10567] netlink_rcv_skb+0x208/0x470 [ 250.817298][T10567] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 250.817325][T10567] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 250.817365][T10567] ? netlink_deliver_tap+0x2e/0x1b0 [ 250.817390][T10567] ? netlink_deliver_tap+0x2e/0x1b0 [ 250.817422][T10567] netlink_unicast+0x75b/0x8d0 [ 250.817458][T10567] netlink_sendmsg+0x805/0xb30 [ 250.817496][T10567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.817526][T10567] ? aa_sock_msg_perm+0x94/0x160 [ 250.817554][T10567] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 250.817580][T10567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.817606][T10567] __sock_sendmsg+0x21c/0x270 [ 250.817633][T10567] ____sys_sendmsg+0x505/0x830 [ 250.817669][T10567] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.817711][T10567] ? import_iovec+0x74/0xa0 [ 250.817735][T10567] ___sys_sendmsg+0x21f/0x2a0 [ 250.817768][T10567] ? __pfx____sys_sendmsg+0x10/0x10 [ 250.817841][T10567] ? __fget_files+0x2a/0x420 [ 250.817862][T10567] ? __fget_files+0x3a0/0x420 [ 250.817897][T10567] __x64_sys_sendmsg+0x19b/0x260 [ 250.817931][T10567] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 250.817974][T10567] ? __pfx_ksys_write+0x10/0x10 [ 250.818013][T10567] ? do_syscall_64+0xbe/0x3b0 [ 250.818043][T10567] do_syscall_64+0xfa/0x3b0 [ 250.818069][T10567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.818089][T10567] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 250.818110][T10567] ? clear_bhb_loop+0x60/0xb0 [ 250.818134][T10567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.818154][T10567] RIP: 0033:0x7f823fb8e929 [ 250.818173][T10567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.818190][T10567] RSP: 002b:00007f8240ae0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.818219][T10567] RAX: ffffffffffffffda RBX: 00007f823fdb5fa0 RCX: 00007f823fb8e929 [ 250.818234][T10567] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000003 [ 250.818246][T10567] RBP: 00007f8240ae0090 R08: 0000000000000000 R09: 0000000000000000 [ 250.818263][T10567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 250.818275][T10567] R13: 0000000000000000 R14: 00007f823fdb5fa0 R15: 00007ffd677b9dc8 [ 250.818309][T10567] [ 250.825128][T10416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.322069][T10580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1288'. [ 251.331338][T10580] block nbd0: not configured, cannot reconfigure [ 251.410692][T10416] team0: Port device team_slave_0 added [ 251.452252][T10584] openvswitch: netlink: IP tunnel dst address not specified [ 251.465322][T10416] team0: Port device team_slave_1 added [ 251.470473][T10586] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1289'. [ 251.477376][ T9502] Bluetooth: hci5: command tx timeout [ 251.690642][T10416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.701328][T10416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.738144][T10416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.758800][T10416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.766721][T10416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.793927][T10416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.036812][T10605] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1297'. [ 252.078920][T10605] netlink: 'syz.7.1297': attribute type 1 has an invalid length. [ 252.207444][T10416] hsr_slave_0: entered promiscuous mode [ 252.241718][T10416] hsr_slave_1: entered promiscuous mode [ 252.266045][T10416] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.294228][T10416] Cannot create hsr debugfs directory [ 252.585631][T10617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1300'. [ 252.722723][T10623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1302'. [ 252.886267][T10621] netlink: 'syz.7.1301': attribute type 1 has an invalid length. [ 252.894469][T10621] nbd: error processing sock list [ 252.913605][T10621] block nbd0: shutting down sockets [ 252.990652][T10629] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1303'. [ 253.536339][ T9502] Bluetooth: hci5: command tx timeout [ 253.554615][T10416] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 253.577854][T10416] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 253.592667][T10416] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 253.608701][T10416] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 253.807682][T10416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.848212][T10416] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.871051][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.878300][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.945303][ T8712] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.952669][ T8712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.165992][T10680] netlink: 'syz.4.1318': attribute type 1 has an invalid length. [ 254.185937][T10680] nbd: error processing sock list [ 254.208521][T10680] block nbd0: shutting down sockets [ 254.563056][T10707] netlink: 'syz.4.1324': attribute type 1 has an invalid length. [ 254.721342][T10416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.806050][T10717] __nla_validate_parse: 5 callbacks suppressed [ 254.806074][T10717] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1326'. [ 254.879249][T10717] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1326'. [ 254.949945][T10697] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1321'. [ 255.006302][T10725] netlink: 'syz.0.1325': attribute type 1 has an invalid length. [ 255.057154][T10725] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1325'. [ 255.457399][T10739] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1330'. [ 255.537927][T10725] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.842406][T10750] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 255.882284][T10750] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 256.198801][T10772] netlink: 'syz.6.1340': attribute type 9 has an invalid length. [ 256.356923][T10760] wireguard0: entered promiscuous mode [ 256.362744][T10760] wireguard0: entered allmulticast mode [ 256.410519][T10772] FAULT_INJECTION: forcing a failure. [ 256.410519][T10772] name failslab, interval 1, probability 0, space 0, times 0 [ 256.424305][T10772] CPU: 1 UID: 0 PID: 10772 Comm: syz.6.1340 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 256.424337][T10772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 256.424350][T10772] Call Trace: [ 256.424358][T10772] [ 256.424367][T10772] dump_stack_lvl+0x189/0x250 [ 256.424404][T10772] ? __pfx____ratelimit+0x10/0x10 [ 256.424428][T10772] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.424460][T10772] ? __pfx__printk+0x10/0x10 [ 256.424485][T10772] ? __pfx___might_resched+0x10/0x10 [ 256.424517][T10772] ? fs_reclaim_acquire+0x7d/0x100 [ 256.424546][T10772] should_fail_ex+0x414/0x560 [ 256.424578][T10772] should_failslab+0xa8/0x100 [ 256.424608][T10772] __kmalloc_cache_noprof+0x70/0x3d0 [ 256.424628][T10772] ? alloc_netdev_mqs+0xb90/0x1170 [ 256.424646][T10772] ? __xdp_rxq_info_reg+0x189/0x2a0 [ 256.424679][T10772] alloc_netdev_mqs+0xb90/0x1170 [ 256.424707][T10772] rtnl_create_link+0x31f/0xd10 [ 256.424735][T10772] rtnl_newlink_create+0x25c/0xb00 [ 256.424769][T10772] ? __mutex_lock+0x51b/0xe80 [ 256.424800][T10772] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 256.424825][T10772] ? rtnl_newlink+0x8db/0x1c70 [ 256.424853][T10772] ? __pfx___mutex_lock+0x10/0x10 [ 256.424890][T10772] ? ns_capable+0x8a/0xf0 [ 256.424925][T10772] rtnl_newlink+0x16d6/0x1c70 [ 256.424969][T10772] ? __pfx_rtnl_newlink+0x10/0x10 [ 256.424992][T10772] ? is_bpf_text_address+0x26/0x2b0 [ 256.425032][T10772] ? __lock_acquire+0xab9/0xd20 [ 256.425075][T10772] ? __lock_acquire+0xab9/0xd20 [ 256.425127][T10772] ? is_bpf_text_address+0x26/0x2b0 [ 256.425163][T10772] ? is_bpf_text_address+0x292/0x2b0 [ 256.425192][T10772] ? is_bpf_text_address+0x26/0x2b0 [ 256.425225][T10772] ? kernel_text_address+0xa5/0xe0 [ 256.425267][T10772] ? __lock_acquire+0xab9/0xd20 [ 256.425330][T10772] ? __pfx_rtnl_newlink+0x10/0x10 [ 256.425354][T10772] rtnetlink_rcv_msg+0x7cc/0xb70 [ 256.425394][T10772] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 256.425417][T10772] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 256.425462][T10772] netlink_rcv_skb+0x208/0x470 [ 256.425489][T10772] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 256.425514][T10772] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 256.425554][T10772] ? netlink_deliver_tap+0x2e/0x1b0 [ 256.425578][T10772] ? netlink_deliver_tap+0x2e/0x1b0 [ 256.425616][T10772] netlink_unicast+0x75b/0x8d0 [ 256.425650][T10772] netlink_sendmsg+0x805/0xb30 [ 256.425687][T10772] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.425716][T10772] ? aa_sock_msg_perm+0x94/0x160 [ 256.425744][T10772] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 256.425769][T10772] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.425794][T10772] __sock_sendmsg+0x21c/0x270 [ 256.425819][T10772] ____sys_sendmsg+0x505/0x830 [ 256.425857][T10772] ? __pfx_____sys_sendmsg+0x10/0x10 [ 256.425898][T10772] ? import_iovec+0x74/0xa0 [ 256.425921][T10772] ___sys_sendmsg+0x21f/0x2a0 [ 256.425952][T10772] ? __pfx____sys_sendmsg+0x10/0x10 [ 256.426022][T10772] ? __fget_files+0x2a/0x420 [ 256.426042][T10772] ? __fget_files+0x3a0/0x420 [ 256.426074][T10772] __x64_sys_sendmsg+0x19b/0x260 [ 256.426107][T10772] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 256.426147][T10772] ? __pfx_ksys_write+0x10/0x10 [ 256.426176][T10772] ? rcu_is_watching+0x15/0xb0 [ 256.426213][T10772] ? do_syscall_64+0xbe/0x3b0 [ 256.426242][T10772] do_syscall_64+0xfa/0x3b0 [ 256.426265][T10772] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.426287][T10772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.426306][T10772] ? clear_bhb_loop+0x60/0xb0 [ 256.426330][T10772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.426349][T10772] RIP: 0033:0x7fa14f18e929 [ 256.426366][T10772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.426384][T10772] RSP: 002b:00007fa14ffd2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.426405][T10772] RAX: ffffffffffffffda RBX: 00007fa14f3b5fa0 RCX: 00007fa14f18e929 [ 256.426419][T10772] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000003 [ 256.426431][T10772] RBP: 00007fa14ffd2090 R08: 0000000000000000 R09: 0000000000000000 [ 256.426444][T10772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 256.426455][T10772] R13: 0000000000000000 R14: 00007fa14f3b5fa0 R15: 00007ffdfe4ad248 [ 256.426489][T10772] [ 256.875261][T10774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1341'. [ 256.947804][T10776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1341'. [ 256.990478][T10416] veth0_vlan: entered promiscuous mode [ 257.018634][T10416] veth1_vlan: entered promiscuous mode [ 257.096608][T10782] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1342'. [ 257.149730][T10780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1343'. [ 257.167962][T10416] veth0_macvtap: entered promiscuous mode [ 257.177983][T10787] netlink: 'syz.7.1346': attribute type 7 has an invalid length. [ 257.186396][T10787] netlink: 'syz.7.1346': attribute type 3 has an invalid length. [ 257.194193][T10787] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1346'. [ 257.238380][T10780] !: entered promiscuous mode [ 257.267753][T10780] macvtap1: entered promiscuous mode [ 257.284786][T10780] macvtap1: entered allmulticast mode [ 257.322120][T10780] !: entered allmulticast mode [ 257.378397][T10788] !: left allmulticast mode [ 257.386836][T10788] !: left promiscuous mode [ 257.456876][T10416] veth1_macvtap: entered promiscuous mode [ 257.545322][T10416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.572697][T10416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.629357][T10803] netlink: 'syz.6.1353': attribute type 9 has an invalid length. [ 257.664985][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.697483][T10803] FAULT_INJECTION: forcing a failure. [ 257.697483][T10803] name failslab, interval 1, probability 0, space 0, times 0 [ 257.710925][T10803] CPU: 0 UID: 0 PID: 10803 Comm: syz.6.1353 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 257.710957][T10803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 257.710970][T10803] Call Trace: [ 257.710979][T10803] [ 257.710987][T10803] dump_stack_lvl+0x189/0x250 [ 257.711023][T10803] ? __pfx____ratelimit+0x10/0x10 [ 257.711048][T10803] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.711079][T10803] ? __pfx__printk+0x10/0x10 [ 257.711105][T10803] ? __pfx___might_resched+0x10/0x10 [ 257.711136][T10803] ? fs_reclaim_acquire+0x7d/0x100 [ 257.711165][T10803] should_fail_ex+0x414/0x560 [ 257.711195][T10803] should_failslab+0xa8/0x100 [ 257.711219][T10803] __kmalloc_cache_noprof+0x70/0x3d0 [ 257.711239][T10803] ? alloc_netdev_mqs+0xb90/0x1170 [ 257.711257][T10803] ? __xdp_rxq_info_reg+0x189/0x2a0 [ 257.711289][T10803] alloc_netdev_mqs+0xb90/0x1170 [ 257.711316][T10803] rtnl_create_link+0x31f/0xd10 [ 257.711343][T10803] rtnl_newlink_create+0x25c/0xb00 [ 257.711377][T10803] ? __mutex_lock+0x51b/0xe80 [ 257.711408][T10803] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 257.711434][T10803] ? rtnl_newlink+0x8db/0x1c70 [ 257.711462][T10803] ? __pfx___mutex_lock+0x10/0x10 [ 257.711499][T10803] ? ns_capable+0x8a/0xf0 [ 257.711536][T10803] rtnl_newlink+0x16d6/0x1c70 [ 257.711581][T10803] ? __pfx_rtnl_newlink+0x10/0x10 [ 257.711605][T10803] ? is_bpf_text_address+0x26/0x2b0 [ 257.711646][T10803] ? __lock_acquire+0xab9/0xd20 [ 257.711690][T10803] ? __lock_acquire+0xab9/0xd20 [ 257.711751][T10803] ? is_bpf_text_address+0x26/0x2b0 [ 257.711787][T10803] ? is_bpf_text_address+0x292/0x2b0 [ 257.711817][T10803] ? is_bpf_text_address+0x26/0x2b0 [ 257.711851][T10803] ? kernel_text_address+0xa5/0xe0 [ 257.711893][T10803] ? __lock_acquire+0xab9/0xd20 [ 257.711957][T10803] ? __pfx_rtnl_newlink+0x10/0x10 [ 257.711981][T10803] rtnetlink_rcv_msg+0x7cc/0xb70 [ 257.712012][T10803] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 257.712036][T10803] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 257.712082][T10803] netlink_rcv_skb+0x208/0x470 [ 257.712108][T10803] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 257.712135][T10803] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 257.712176][T10803] ? netlink_deliver_tap+0x2e/0x1b0 [ 257.712202][T10803] ? netlink_deliver_tap+0x2e/0x1b0 [ 257.712234][T10803] netlink_unicast+0x75b/0x8d0 [ 257.712269][T10803] netlink_sendmsg+0x805/0xb30 [ 257.712305][T10803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.712334][T10803] ? aa_sock_msg_perm+0x94/0x160 [ 257.712362][T10803] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 257.712389][T10803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.712416][T10803] __sock_sendmsg+0x21c/0x270 [ 257.712444][T10803] ____sys_sendmsg+0x505/0x830 [ 257.712480][T10803] ? __pfx_____sys_sendmsg+0x10/0x10 [ 257.712521][T10803] ? import_iovec+0x74/0xa0 [ 257.712545][T10803] ___sys_sendmsg+0x21f/0x2a0 [ 257.712577][T10803] ? __pfx____sys_sendmsg+0x10/0x10 [ 257.712643][T10803] ? __fget_files+0x2a/0x420 [ 257.712663][T10803] ? __fget_files+0x3a0/0x420 [ 257.712691][T10803] __x64_sys_sendmsg+0x19b/0x260 [ 257.712726][T10803] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 257.712760][T10803] ? __pfx_ksys_write+0x10/0x10 [ 257.712784][T10803] ? rcu_is_watching+0x15/0xb0 [ 257.712815][T10803] ? do_syscall_64+0xbe/0x3b0 [ 257.712839][T10803] do_syscall_64+0xfa/0x3b0 [ 257.712858][T10803] ? lockdep_hardirqs_on+0x9c/0x150 [ 257.712876][T10803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.712893][T10803] ? clear_bhb_loop+0x60/0xb0 [ 257.712913][T10803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.712929][T10803] RIP: 0033:0x7fa14f18e929 [ 257.712945][T10803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.712959][T10803] RSP: 002b:00007fa14ffd2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.712977][T10803] RAX: ffffffffffffffda RBX: 00007fa14f3b5fa0 RCX: 00007fa14f18e929 [ 257.712989][T10803] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000003 [ 257.713000][T10803] RBP: 00007fa14ffd2090 R08: 0000000000000000 R09: 0000000000000000 [ 257.713010][T10803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 257.713020][T10803] R13: 0000000000000000 R14: 00007fa14f3b5fa0 R15: 00007ffdfe4ad248 [ 257.713046][T10803] [ 258.188372][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.197734][ T1106] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.238881][ T1106] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.422534][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.452105][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.462348][ T8712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.497808][ T8712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.842360][T10834] netlink: 'syz.0.1360': attribute type 13 has an invalid length. [ 258.885725][T10834] netlink: 'syz.0.1360': attribute type 17 has an invalid length. [ 259.250612][ T8712] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.368438][ T8712] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.760624][ T8712] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.827374][ T8712] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.923750][T10845] gretap0: left allmulticast mode [ 259.936167][T10845] gretap0: left promiscuous mode [ 259.951818][T10845] bridge0: port 1(gretap0) entered disabled state [ 259.983973][T10845] bond0: (slave 0!): Releasing backup interface [ 260.014824][T10845] bond0: (slave bond_slave_0): Releasing backup interface [ 260.053752][T10845] bond0: (slave bond_slave_1): Releasing backup interface [ 260.069622][T10845] team0: Port device team_slave_0 removed [ 260.074110][T10856] __nla_validate_parse: 2 callbacks suppressed [ 260.074134][T10856] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1366'. [ 260.097308][T10845] team0: Port device team_slave_1 removed [ 260.112152][T10856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1366'. [ 260.112835][T10845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.132228][T10845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.148835][T10845] batman_adv: batadv0: Interface deactivated: gretap1 [ 260.162743][T10845] batman_adv: batadv0: Removing interface: gretap1 [ 260.185810][T10856] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1366'. [ 260.334643][T10857] netlink: 'syz.0.1366': attribute type 1 has an invalid length. [ 260.346440][T10857] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1366'. [ 260.401401][ T8712] bridge_slave_1: left allmulticast mode [ 260.425800][ T8712] bridge_slave_1: left promiscuous mode [ 260.431757][ T8712] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.479012][ T8712] bridge_slave_0: left allmulticast mode [ 260.484722][ T8712] bridge_slave_0: left promiscuous mode [ 260.513524][ T8712] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.595470][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 260.608138][T10872] netlink: 'syz.7.1371': attribute type 9 has an invalid length. [ 260.609892][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 260.627604][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 260.638853][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 260.647677][T10866] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1372'. [ 260.657400][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 261.146566][ T8712] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.163143][ T8712] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.177826][ T8712] bond0 (unregistering): Released all slaves [ 261.205331][T10872] FAULT_INJECTION: forcing a failure. [ 261.205331][T10872] name failslab, interval 1, probability 0, space 0, times 0 [ 261.224574][T10872] CPU: 0 UID: 0 PID: 10872 Comm: syz.7.1371 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 261.224599][T10872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 261.224609][T10872] Call Trace: [ 261.224615][T10872] [ 261.224622][T10872] dump_stack_lvl+0x189/0x250 [ 261.224650][T10872] ? __pfx____ratelimit+0x10/0x10 [ 261.224668][T10872] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.224691][T10872] ? __pfx__printk+0x10/0x10 [ 261.224719][T10872] should_fail_ex+0x414/0x560 [ 261.224741][T10872] should_failslab+0xa8/0x100 [ 261.224758][T10872] __kmalloc_noprof+0xcb/0x4f0 [ 261.224771][T10872] ? dev_prep_valid_name+0x193/0x610 [ 261.224792][T10872] dev_prep_valid_name+0x193/0x610 [ 261.224810][T10872] ? __pfx___might_resched+0x10/0x10 [ 261.224834][T10872] ? __pfx_dev_prep_valid_name+0x10/0x10 [ 261.224857][T10872] ? __raw_spin_lock_init+0x45/0x100 [ 261.224876][T10872] register_netdevice+0x542/0x1ae0 [ 261.224904][T10872] ? alloc_netdev_mqs+0xc59/0x1170 [ 261.224919][T10872] ? alloc_netdev_mqs+0xc59/0x1170 [ 261.224931][T10872] ? trace_kmalloc+0x1f/0xd0 [ 261.224942][T10872] ? __kvmalloc_node_noprof+0x331/0x5f0 [ 261.224957][T10872] ? __pfx_register_netdevice+0x10/0x10 [ 261.224983][T10872] ? validate_linkmsg+0x765/0x950 [ 261.225022][T10872] br_dev_newlink+0x6a/0x140 [ 261.225036][T10872] ? rtnl_newlink_create+0x2fd/0xb00 [ 261.225055][T10872] ? __pfx_br_dev_newlink+0x10/0x10 [ 261.225070][T10872] rtnl_newlink_create+0x30d/0xb00 [ 261.225095][T10872] ? __mutex_lock+0x51b/0xe80 [ 261.225117][T10872] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 261.225136][T10872] ? rtnl_newlink+0x8db/0x1c70 [ 261.225156][T10872] ? __pfx___mutex_lock+0x10/0x10 [ 261.225186][T10872] ? ns_capable+0x8a/0xf0 [ 261.225212][T10872] rtnl_newlink+0x16d6/0x1c70 [ 261.225243][T10872] ? __pfx_rtnl_newlink+0x10/0x10 [ 261.225259][T10872] ? is_bpf_text_address+0x26/0x2b0 [ 261.225292][T10872] ? __lock_acquire+0xab9/0xd20 [ 261.225335][T10872] ? __lock_acquire+0xab9/0xd20 [ 261.225388][T10872] ? is_bpf_text_address+0x26/0x2b0 [ 261.225424][T10872] ? is_bpf_text_address+0x292/0x2b0 [ 261.225447][T10872] ? is_bpf_text_address+0x26/0x2b0 [ 261.225472][T10872] ? kernel_text_address+0xa5/0xe0 [ 261.225510][T10872] ? __lock_acquire+0xab9/0xd20 [ 261.225564][T10872] ? __pfx_rtnl_newlink+0x10/0x10 [ 261.225587][T10872] rtnetlink_rcv_msg+0x7cc/0xb70 [ 261.225616][T10872] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 261.225640][T10872] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 261.225684][T10872] netlink_rcv_skb+0x208/0x470 [ 261.225709][T10872] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 261.225736][T10872] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 261.225776][T10872] ? netlink_deliver_tap+0x2e/0x1b0 [ 261.225801][T10872] ? netlink_deliver_tap+0x2e/0x1b0 [ 261.225833][T10872] netlink_unicast+0x75b/0x8d0 [ 261.225868][T10872] netlink_sendmsg+0x805/0xb30 [ 261.225904][T10872] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.225932][T10872] ? aa_sock_msg_perm+0x94/0x160 [ 261.225958][T10872] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 261.225983][T10872] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.226010][T10872] __sock_sendmsg+0x21c/0x270 [ 261.226035][T10872] ____sys_sendmsg+0x505/0x830 [ 261.226069][T10872] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.226106][T10872] ? import_iovec+0x74/0xa0 [ 261.226128][T10872] ___sys_sendmsg+0x21f/0x2a0 [ 261.226161][T10872] ? __pfx____sys_sendmsg+0x10/0x10 [ 261.226234][T10872] ? __fget_files+0x2a/0x420 [ 261.226256][T10872] ? __fget_files+0x3a0/0x420 [ 261.226287][T10872] __x64_sys_sendmsg+0x19b/0x260 [ 261.226320][T10872] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 261.226361][T10872] ? __pfx_ksys_write+0x10/0x10 [ 261.226390][T10872] ? rcu_is_watching+0x15/0xb0 [ 261.226426][T10872] ? do_syscall_64+0xbe/0x3b0 [ 261.226456][T10872] do_syscall_64+0xfa/0x3b0 [ 261.226480][T10872] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.226504][T10872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.226525][T10872] ? clear_bhb_loop+0x60/0xb0 [ 261.226550][T10872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.226571][T10872] RIP: 0033:0x7f823fb8e929 [ 261.226587][T10872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.226599][T10872] RSP: 002b:00007f8240ae0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.226615][T10872] RAX: ffffffffffffffda RBX: 00007f823fdb5fa0 RCX: 00007f823fb8e929 [ 261.226626][T10872] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000003 [ 261.226635][T10872] RBP: 00007f8240ae0090 R08: 0000000000000000 R09: 0000000000000000 [ 261.226645][T10872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 261.226653][T10872] R13: 0000000000000000 R14: 00007f823fdb5fa0 R15: 00007ffd677b9dc8 [ 261.226676][T10872] [ 261.818933][T10876] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1373'. [ 261.982434][T10892] netlink: 'syz.0.1377': attribute type 10 has an invalid length. [ 262.023542][T10894] netlink: 'syz.6.1379': attribute type 4 has an invalid length. [ 262.049229][T10892] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 262.056668][T10892] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 262.064330][T10892] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 262.215950][T10900] netlink: 'syz.7.1380': attribute type 1 has an invalid length. [ 262.381333][T10907] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1383'. [ 262.413743][T10908] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1380'. [ 262.439575][T10900] 8021q: adding VLAN 0 to HW filter on device bond3 [ 262.513498][T10914] netlink: 'syz.4.1382': attribute type 1 has an invalid length. [ 262.521484][T10914] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1382'. [ 262.562556][T10902] 8021q: adding VLAN 0 to HW filter on device bond3 [ 262.592042][T10902] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 262.633919][T10902] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 262.737580][ T9502] Bluetooth: hci5: command tx timeout [ 262.799379][T10918] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1385'. [ 263.076328][ T8712] hsr_slave_0: left promiscuous mode [ 263.115993][ T8712] hsr_slave_1: left promiscuous mode [ 263.122084][ T8712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.150147][ T8712] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.178128][ T8712] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.204754][ T8712] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.325677][ T8712] veth1_macvtap: left promiscuous mode [ 263.331397][ T8712] veth0_macvtap: left promiscuous mode [ 263.353848][ T8712] veth1_vlan: left promiscuous mode [ 263.365952][ T8712] veth0_vlan: left promiscuous mode [ 264.084909][ T8712] team0 (unregistering): Port device team_slave_1 removed [ 264.131797][ T8712] team0 (unregistering): Port device team_slave_0 removed [ 264.613692][T10941] kthread_run failed with err -4 [ 264.699294][T10962] geneve1: entered promiscuous mode [ 264.704681][T10962] geneve1: entered allmulticast mode [ 264.752157][ T8734] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.775411][ T8734] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.816785][ T9502] Bluetooth: hci5: command tx timeout [ 264.890634][ T8734] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.932969][ T8734] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.271036][T10869] chnl_net:caif_netlink_parms(): no params data found [ 265.649872][T11004] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1407'. [ 265.672998][T11006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1408'. [ 265.732978][T10869] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.746081][T10869] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.753374][T10869] bridge_slave_0: entered allmulticast mode [ 265.773862][T10869] bridge_slave_0: entered promiscuous mode [ 265.791586][T10998] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 265.846339][T10869] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.853529][T10869] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.885973][T10869] bridge_slave_1: entered allmulticast mode [ 265.893751][T10869] bridge_slave_1: entered promiscuous mode [ 265.976728][T11001] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1407'. [ 265.991782][T11012] netlink: 'syz.0.1410': attribute type 9 has an invalid length. [ 266.063552][T10995] syzkaller0: entered promiscuous mode [ 266.070725][T10995] syzkaller0: entered allmulticast mode [ 266.093699][T10869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.143020][T10869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.508037][T11020] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1413'. [ 266.896982][ T9502] Bluetooth: hci5: command tx timeout [ 268.191788][T10869] team0: Port device team_slave_0 added [ 268.201301][T10869] team0: Port device team_slave_1 added [ 268.386593][T10869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.393595][T10869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.422412][T10869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.437602][T10869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.444604][T10869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.473831][T10869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.743188][T11038] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1419'. [ 268.764012][T10869] hsr_slave_0: entered promiscuous mode [ 268.771362][T10869] hsr_slave_1: entered promiscuous mode [ 268.781655][T10869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.794857][T10869] Cannot create hsr debugfs directory [ 268.810739][T11040] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1420'. [ 268.984450][ T9502] Bluetooth: hci5: command tx timeout [ 269.222484][T11054] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1425'. [ 269.727815][T10869] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 269.758651][T10869] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 269.774714][T11066] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1432'. [ 269.781150][T10869] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 269.804014][T10869] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 270.029449][T11079] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1434'. [ 270.082120][T11083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1435'. [ 270.136454][T10869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.273000][T10869] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.309800][ T8728] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.317060][ T8728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.394705][ T3017] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.401982][ T3017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.413228][T11096] netlink: 'syz.4.1440': attribute type 9 has an invalid length. [ 270.593484][T11101] geneve0: entered promiscuous mode [ 270.611262][T11101] geneve0: entered allmulticast mode [ 270.708469][T11108] __nla_validate_parse: 1 callbacks suppressed [ 270.708491][T11108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1444'. [ 271.003579][T10869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.017143][T11120] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1449'. [ 271.211035][T11133] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1451'. [ 271.445087][T11138] netlink: 'syz.4.1453': attribute type 9 has an invalid length. [ 271.484274][T11133] veth0_to_bridge: left allmulticast mode [ 271.490557][T11133] veth0_to_bridge: left promiscuous mode [ 271.503195][T11133] bridge0: port 3(veth0_to_bridge) entered disabled state [ 271.544394][T11133] bridge_slave_0: left allmulticast mode [ 271.565686][T11133] bridge_slave_0: left promiscuous mode [ 271.592064][T11133] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.594842][T11142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.643061][T11133] bridge_slave_1: left allmulticast mode [ 271.661785][T11133] bridge_slave_1: left promiscuous mode [ 271.678006][T11133] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.738312][T11133] bond0: (slave bond_slave_0): Releasing backup interface [ 271.759571][T11133] bond_slave_0: left promiscuous mode [ 271.771873][T11133] bond_slave_0: left allmulticast mode [ 271.804273][T11147] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1456'. [ 271.845199][T11133] bond0: (slave bond_slave_1): Releasing backup interface [ 271.885105][T11133] bond_slave_1: left promiscuous mode [ 271.892339][T11133] bond_slave_1: left allmulticast mode [ 271.903617][T11133] team0: Port device team_slave_0 removed [ 271.933027][T11133] team0: Port device team_slave_1 removed [ 271.959051][T11133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.971537][T11133] bond0: (slave wlan1): Releasing backup interface [ 271.983581][T11133] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 271.999803][T11149] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1457'. [ 272.009667][T11133] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 272.048058][T11133] bond3: (slave veth7): Releasing active interface [ 272.054759][T11133] bond3: (slave veth7): the permanent HWaddr of slave - 4a:eb:54:12:10:45 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 272.084261][T11133] bond3: (slave veth9): Releasing active interface [ 272.223753][T11153] geneve0: left promiscuous mode [ 272.234036][T11151] xt_CT: You must specify a L4 protocol and not use inversions on it [ 272.244218][T11153] geneve0: left allmulticast mode [ 272.262800][T11153] geneve1: left promiscuous mode [ 272.275295][T11153] geneve1: left allmulticast mode [ 272.295215][T11153] bond1: left promiscuous mode [ 272.305189][ T8728] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.318732][ T8728] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.346572][ T8728] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.363885][ T8728] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.589356][T10869] veth0_vlan: entered promiscuous mode [ 272.604975][T10869] veth1_vlan: entered promiscuous mode [ 272.713160][T10869] veth0_macvtap: entered promiscuous mode [ 272.751272][T10869] veth1_macvtap: entered promiscuous mode [ 272.791363][T10869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.822393][T11165] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1462'. [ 272.834325][T10869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.875157][ T8720] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.906633][ T8720] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.941208][ T8720] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.955419][ T8720] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.061427][ T3017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.073755][ T3017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.263607][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.330172][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.343903][T11180] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1468'. [ 275.029711][T11185] netlink: 'syz.6.1469': attribute type 9 has an invalid length. [ 275.173892][T11183] tun0: tun_chr_ioctl cmd 1074025677 [ 275.230575][T11183] tun0: linktype set to 773 [ 276.084668][ T8712] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.542762][ T8712] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.853500][ T8712] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.863579][ T8712] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.272312][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 279.302475][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 279.349280][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 279.413915][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 279.462948][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 280.149667][ T8712] bridge_slave_1: left allmulticast mode [ 280.208169][ T8712] bridge_slave_1: left promiscuous mode [ 280.214011][ T8712] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.335343][ T8712] bridge_slave_0: left allmulticast mode [ 280.377646][ T8712] bridge_slave_0: left promiscuous mode [ 280.383544][ T8712] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.514295][T11209] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 280.635321][T11209] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 281.103126][T11211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1475'. [ 281.699855][ T9502] Bluetooth: hci5: command tx timeout [ 282.965103][T11219] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1478'. [ 283.138793][ T8712] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.228674][ T8712] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.284928][ T8712] bond0 (unregistering): Released all slaves [ 283.557910][ T9502] Bluetooth: hci4: command 0x0405 tx timeout [ 283.705205][T11221] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.757344][T11221] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.778375][ T5848] Bluetooth: hci5: command tx timeout [ 284.522102][T11221] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.579931][T11221] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.996890][T11221] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.026043][T11221] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.254076][T11221] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.270145][T11221] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.525811][ T9502] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 285.535424][ T9502] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 285.544341][ T9502] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 285.556779][ T9502] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 285.568145][ T9502] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 285.772322][ T3017] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.809124][ T3017] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.859314][ T9502] Bluetooth: hci5: command tx timeout [ 285.946114][ T3017] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.969044][ T3017] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.019352][ T8712] hsr_slave_0: left promiscuous mode [ 286.040036][ T8712] hsr_slave_1: left promiscuous mode [ 286.056556][ T8712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.064050][ T8712] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.087025][ T8712] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.106505][ T8712] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.166805][ T8712] veth1_macvtap: left promiscuous mode [ 286.172696][ T8712] veth0_macvtap: left promiscuous mode [ 286.185910][ T8712] veth1_vlan: left promiscuous mode [ 286.191346][ T8712] veth0_vlan: left promiscuous mode [ 287.153634][ T8712] team0 (unregistering): Port device team_slave_1 removed [ 287.222372][ T8712] team0 (unregistering): Port device team_slave_0 removed [ 287.620614][ T9502] Bluetooth: hci8: command tx timeout [ 287.786726][ T8728] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.795045][ T8728] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.867505][ T8720] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.882130][ T8720] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.935886][ T9502] Bluetooth: hci5: command tx timeout [ 288.034722][T11255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1485'. [ 288.078718][T11255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1485'. [ 288.160313][T11259] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1488'. [ 288.354839][T11203] chnl_net:caif_netlink_parms(): no params data found [ 288.427211][T11265] syzkaller1: entered promiscuous mode [ 288.453489][T11265] syzkaller1: entered allmulticast mode [ 288.763168][T11231] chnl_net:caif_netlink_parms(): no params data found [ 288.809572][T11282] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1494'. [ 288.880922][T11282] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1494'. [ 288.959561][T11203] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.967157][T11203] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.974530][T11203] bridge_slave_0: entered allmulticast mode [ 288.982910][T11203] bridge_slave_0: entered promiscuous mode [ 289.008293][T11282] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.020077][T11282] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.040857][T11231] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.049817][T11231] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.057803][T11231] bridge_slave_0: entered allmulticast mode [ 289.066395][T11231] bridge_slave_0: entered promiscuous mode [ 289.075357][T11231] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.084959][T11231] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.092321][T11231] bridge_slave_1: entered allmulticast mode [ 289.100682][T11231] bridge_slave_1: entered promiscuous mode [ 289.108258][T11203] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.115704][T11203] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.123114][T11203] bridge_slave_1: entered allmulticast mode [ 289.136652][T11203] bridge_slave_1: entered promiscuous mode [ 289.145783][ T31] INFO: task syz.1.478:7591 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 289.153410][ T31] Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 [ 289.175628][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 289.184375][ T31] task:syz.1.478 state:D stack:25352 pid:7591 tgid:7590 ppid:5841 task_flags:0x400140 flags:0x00004004 [ 289.199546][ T31] Call Trace: [ 289.202881][ T31] [ 289.205926][ T31] __schedule+0x16f5/0x4d00 [ 289.210483][ T31] ? __lock_acquire+0xab9/0xd20 [ 289.215472][ T31] ? schedule+0x165/0x360 [ 289.219985][ T31] ? __pfx___schedule+0x10/0x10 [ 289.224898][ T31] ? schedule+0x91/0x360 [ 289.229255][ T31] schedule+0x165/0x360 [ 289.233555][ T31] schedule_preempt_disabled+0x13/0x30 [ 289.239173][ T31] __mutex_lock+0x724/0xe80 [ 289.243729][ T31] ? __mutex_lock+0x51b/0xe80 [ 289.248500][ T31] ? nfsd_nl_listener_set_doit+0x137/0x1690 [ 289.254525][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 289.259758][ T31] ? __asan_memset+0x22/0x50 [ 289.265226][ T31] ? ____sys_sendmsg+0x505/0x830 [ 289.270388][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 289.285670][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 289.290887][ T31] nfsd_nl_listener_set_doit+0x137/0x1690 [ 289.305587][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 289.311515][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 289.317860][ T31] ? __nla_parse+0x40/0x60 [ 289.322333][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 289.328757][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 289.334639][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 289.340916][ T31] ? bpf_lsm_capable+0x9/0x20 [ 289.345680][ T31] ? security_capable+0x7e/0x2e0 [ 289.350761][ T31] genl_rcv_msg+0x60e/0x790 [ 289.355426][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 289.360688][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 289.367797][ T31] netlink_rcv_skb+0x208/0x470 [ 289.372713][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 289.378025][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 289.383382][ T31] ? down_read+0x1ad/0x2e0 [ 289.388027][ T31] genl_rcv+0x28/0x40 [ 289.392067][ T31] netlink_unicast+0x75b/0x8d0 [ 289.396994][ T31] netlink_sendmsg+0x805/0xb30 [ 289.401988][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.407558][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 289.412635][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 289.418153][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.423559][ T31] __sock_sendmsg+0x21c/0x270 [ 289.428479][ T31] ____sys_sendmsg+0x505/0x830 [ 289.433449][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 289.441323][ T31] ? import_iovec+0x74/0xa0 [ 289.449720][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 289.454524][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 289.463487][ T31] ? __fget_files+0x2a/0x420 [ 289.472888][ T31] ? __fget_files+0x3a0/0x420 [ 289.480934][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 289.487177][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 289.492917][ T31] ? rcu_is_watching+0x15/0xb0 [ 289.498273][ T31] ? do_syscall_64+0xbe/0x3b0 [ 289.503069][ T31] do_syscall_64+0xfa/0x3b0 [ 289.507694][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 289.513079][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.519323][ T31] ? clear_bhb_loop+0x60/0xb0 [ 289.524105][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.530162][ T31] RIP: 0033:0x7f2bbcf8e929 [ 289.534667][ T31] RSP: 002b:00007f2bbdea3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.543322][ T31] RAX: ffffffffffffffda RBX: 00007f2bbd1b5fa0 RCX: 00007f2bbcf8e929 [ 289.551532][ T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 289.560971][ T31] RBP: 00007f2bbd010b39 R08: 0000000000000000 R09: 0000000000000000 [ 289.569091][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.578243][ T31] R13: 0000000000000000 R14: 00007f2bbd1b5fa0 R15: 00007ffd1796faa8 [ 289.586388][ T31] [ 289.601881][ T31] [ 289.601881][ T31] Showing all locks held in the system: [ 289.619720][ T31] 1 lock held by khungtaskd/31: [ 289.642633][ T31] #0: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 289.694551][ T31] 2 locks held by getty/5595: [ 289.700147][ T9502] Bluetooth: hci8: command tx timeout [ 289.715745][ T31] #0: ffff888030dc60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 289.732466][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 289.755612][ T31] 1 lock held by sshd-session/5817: [ 289.760869][ T31] 2 locks held by syz-executor/5831: [ 289.773464][ T31] 1 lock held by syz-executor/5844: [ 289.780005][ T31] 2 locks held by syz.2.477/7584: [ 289.785079][ T31] #0: ffffffff8f5772f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 289.805540][ T31] #1: ffffffff8e41cdc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 289.816153][ T31] 2 locks held by syz.1.478/7591: [ 289.821213][ T31] #0: ffffffff8f5772f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 289.829667][ T31] #1: ffffffff8e41cdc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 289.840035][ T31] 1 lock held by syz-executor/8060: [ 289.845274][ T31] #0: ffffffff8e144978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 289.875652][ T31] 2 locks held by syz.3.616/8078: [ 289.881610][ T31] #0: ffffffff8f5772f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 289.895615][ T31] #1: ffffffff8e41cdc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 289.924624][ T31] 3 locks held by kworker/u8:12/8712: [ 289.931773][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 289.942933][ T31] #1: ffffc9000b88fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 289.953821][ T31] #2: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 289.963952][ T31] 3 locks held by kworker/u8:20/8728: [ 289.969492][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 289.981381][ T31] #1: ffffc9000baefbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 289.992717][ T31] #2: ffffffff8f512588 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 290.007221][ T31] 2 locks held by syz.7.1424/11051: [ 290.012971][ T31] #0: ffffffff8f5772f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.021987][ T31] #1: ffffffff8e41cdc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 290.032549][ T31] 2 locks held by syz-executor/11203: [ 290.039745][ T31] #0: ffffffff8eca6aa0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 290.049734][ T31] #1: ffffffff8f512588 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 290.059103][ T31] 3 locks held by syz-executor/11231: [ 290.064516][ T31] #0: ffffffff8eca6aa0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 290.074552][ T31] #1: ffffffff8f512588 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 290.084057][ T31] #2: ffffffff8e144978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 290.095232][ T31] 4 locks held by syz.0.1494/11282: [ 290.104792][ T31] #0: ffffffff8f5772f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.113305][ T31] #1: ffff8880598c90e8 (&dev->mutex){....}-{4:4}, at: devlink_get_from_attrs_lock+0x240/0x3a0 [ 290.125244][ T31] #2: ffff8880598cb250 (&devlink->lock_key){+.+.}-{4:4}, at: devlink_get_from_attrs_lock+0x24f/0x3a0 [ 290.136484][ T31] #3: ffffffff8f512588 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 290.146326][ T31] [ 290.148778][ T31] ============================================= [ 290.148778][ T31] [ 290.159749][ T31] NMI backtrace for cpu 1 [ 290.159771][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 290.159795][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 290.159808][ T31] Call Trace: [ 290.159816][ T31] [ 290.159825][ T31] dump_stack_lvl+0x189/0x250 [ 290.159860][ T31] ? __wake_up_klogd+0xd9/0x110 [ 290.159887][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.159919][ T31] ? __pfx__printk+0x10/0x10 [ 290.159955][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 290.159991][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 290.160020][ T31] ? _printk+0xcf/0x120 [ 290.160046][ T31] ? __pfx__printk+0x10/0x10 [ 290.160071][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 290.160102][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 290.160137][ T31] watchdog+0xfee/0x1030 [ 290.160167][ T31] ? watchdog+0x1de/0x1030 [ 290.160203][ T31] kthread+0x70e/0x8a0 [ 290.160230][ T31] ? __pfx_watchdog+0x10/0x10 [ 290.160255][ T31] ? __pfx_kthread+0x10/0x10 [ 290.160286][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 290.160307][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.160328][ T31] ? __pfx_kthread+0x10/0x10 [ 290.160351][ T31] ret_from_fork+0x3fc/0x770 [ 290.160381][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 290.160415][ T31] ? __switch_to_asm+0x39/0x70 [ 290.160435][ T31] ? __switch_to_asm+0x33/0x70 [ 290.160454][ T31] ? __pfx_kthread+0x10/0x10 [ 290.160475][ T31] ret_from_fork_asm+0x1a/0x30 [ 290.160503][ T31] [ 290.160510][ T31] Sending NMI from CPU 1 to CPUs 0: [ 290.328368][ C0] NMI backtrace for cpu 0 [ 290.328387][ C0] CPU: 0 UID: 0 PID: 5844 Comm: syz-executor Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 290.328409][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 290.328420][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x18/0x90 [ 290.328449][ C0] Code: 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 14 25 08 80 9d 92 65 8b 0d 08 2c dd 10 <81> e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 3c 16 00 00 [ 290.328464][ C0] RSP: 0018:ffffc90004037848 EFLAGS: 00000246 [ 290.328480][ C0] RAX: ffffffff822ee012 RBX: ffffffff822edfe2 RCX: 0000000080000000 [ 290.328493][ C0] RDX: ffff88807a980000 RSI: 0000000000000001 RDI: 0000000000000000 [ 290.328504][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff822edfe2 [ 290.328515][ C0] R10: dffffc0000000000 R11: fffff9400032b5a7 R12: ffffea000195ad00 [ 290.328528][ C0] R13: ffffea000195ad08 R14: ffffea000195ad00 R15: 0000004398eb27f9 [ 290.328541][ C0] FS: 0000000000000000(0000) GS:ffff888125c48000(0000) knlGS:0000000000000000 [ 290.328555][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 290.328566][ C0] CR2: 0000556a1bab5fb0 CR3: 000000000df38000 CR4: 00000000003526f0 [ 290.328582][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 290.328592][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 290.328603][ C0] Call Trace: [ 290.328610][ C0] [ 290.328616][ C0] page_ext_get+0x52/0x2f0 [ 290.328637][ C0] __reset_page_owner+0x28/0x1f0 [ 290.328654][ C0] __free_frozen_pages+0xc71/0xe70 [ 290.328677][ C0] vfree+0x25a/0x400 [ 290.328693][ C0] ? __pfx_kcov_close+0x10/0x10 [ 290.328716][ C0] kcov_close+0x28/0x50 [ 290.328736][ C0] __fput+0x449/0xa70 [ 290.328762][ C0] task_work_run+0x1d1/0x260 [ 290.328785][ C0] ? __pfx_task_work_run+0x10/0x10 [ 290.328807][ C0] ? kmem_cache_free+0x18f/0x400 [ 290.328825][ C0] do_exit+0x6b5/0x22e0 [ 290.328848][ C0] ? do_raw_spin_lock+0x121/0x290 [ 290.328869][ C0] ? __pfx_do_exit+0x10/0x10 [ 290.328897][ C0] do_group_exit+0x21c/0x2d0 [ 290.328916][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.328936][ C0] get_signal+0x1286/0x1340 [ 290.328973][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 290.328996][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 290.329020][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 290.329050][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 290.329082][ C0] exit_to_user_mode_loop+0x75/0x110 [ 290.329106][ C0] do_syscall_64+0x2bd/0x3b0 [ 290.329126][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.329144][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.329161][ C0] ? clear_bhb_loop+0x60/0xb0 [ 290.329180][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.329196][ C0] RIP: 0033:0x7f56309c11e5 [ 290.329210][ C0] Code: Unable to access opcode bytes at 0x7f56309c11bb. [ 290.329219][ C0] RSP: 002b:00007ffdbcd61450 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 290.329235][ C0] RAX: fffffffffffffdfc RBX: 0000000000000443 RCX: 00007f56309c11e5 [ 290.329247][ C0] RDX: 00007ffdbcd61490 RSI: 0000000000000000 RDI: 0000000000000000 [ 290.329257][ C0] RBP: 00007ffdbcd614fc R08: 0000000000000000 R09: 0000000000000000 [ 290.329268][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 290.329278][ C0] R13: 00000000000927c0 R14: 0000000000046653 R15: 00007ffdbcd61550 [ 290.329299][ C0] [ 290.331219][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 290.673979][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 290.685802][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 290.695964][ T31] Call Trace: [ 290.699252][ T31] [ 290.702188][ T31] dump_stack_lvl+0x99/0x250 [ 290.706802][ T31] ? __asan_memcpy+0x40/0x70 [ 290.711441][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.716658][ T31] ? __pfx__printk+0x10/0x10 [ 290.721269][ T31] panic+0x2db/0x790 [ 290.725188][ T31] ? __pfx_panic+0x10/0x10 [ 290.729616][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 290.735439][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 290.740848][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 290.747028][ T31] watchdog+0x102d/0x1030 [ 290.751398][ T31] ? watchdog+0x1de/0x1030 [ 290.755834][ T31] kthread+0x70e/0x8a0 [ 290.759915][ T31] ? __pfx_watchdog+0x10/0x10 [ 290.764602][ T31] ? __pfx_kthread+0x10/0x10 [ 290.769203][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 290.774414][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.779623][ T31] ? __pfx_kthread+0x10/0x10 [ 290.784317][ T31] ret_from_fork+0x3fc/0x770 [ 290.788929][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 290.794064][ T31] ? __switch_to_asm+0x39/0x70 [ 290.798838][ T31] ? __switch_to_asm+0x33/0x70 [ 290.803647][ T31] ? __pfx_kthread+0x10/0x10 [ 290.808275][ T31] ret_from_fork_asm+0x1a/0x30 [ 290.813079][ T31] [ 290.816454][ T31] Kernel Offset: disabled [ 290.820790][ T31] Rebooting in 86400 seconds..