last executing test programs: 19.6659278s ago: executing program 1 (id=7602): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"/433], 0x4c}, 0x8, 0x3000000000002, 0x0, 0x4000020}, 0x844) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1001}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="200000000000000084000000020000000a00040026000000fcffffff6820"], 0x20, 0x2400e044}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000d40)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000e00)={'tunl0\x00', &(0x7f0000000d80)={'gre0\x00', 0x0, 0x700, 0x7, 0x1, 0x81, {{0xd, 0x4, 0x3, 0x6, 0x34, 0x67, 0x0, 0x6d, 0x29, 0x0, @rand_addr=0x64010102, @local, {[@timestamp={0x44, 0x20, 0xbb, 0x0, 0x2, [0x0, 0x5, 0x8, 0x7, 0x1, 0x1, 0xc]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001180)={r3, 0xe0, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000ec0)=[0x0, 0x0], &(0x7f0000000f00)=[0x0], 0x0, 0xd1, &(0x7f0000000f40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000fc0), &(0x7f0000001000), 0x8, 0xb3, 0x8, 0x8, &(0x7f0000001040)}}, 0x10) r10 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r11, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x40, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8b33}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80020001000001}]}}}, @IFLA_LINK={0x8, 0x5, r12}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f00000011c0)={0x1cc, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x1}, 0x20000880) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000006c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010065bd7000ffdbdf252100000008000300", @ANYRES32=r13, @ANYBLOB="44002d80050001000300000008000200feffffff050004"], 0x60}, 0x1, 0x0, 0x0, 0x4010}, 0x4000880) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, r6, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0xc0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r14, 0x89f2, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x7800, 0x7800, 0x7, 0x101, {{0x15, 0x4, 0x1, 0x7, 0x54, 0x65, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, {[@timestamp={0x44, 0x2c, 0xda, 0x0, 0x9, [0x1, 0x81, 0xfff, 0x9, 0xffffffff, 0x1fad, 0xd3, 0x6, 0x9, 0x9]}, @timestamp_addr={0x44, 0x14, 0xd6, 0x1, 0x1, [{@broadcast, 0x8}, {@broadcast, 0x4}]}]}}}}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r14, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5749f9233812182e994c46fcee392ff21209c8b6bf44dc9b425ab96951a98d6b9cb62298e5be0b15ce49465ca65b619228dc55b4a89a852136b0a34f02f6f487f01e74ed9f2b42491583791d93de64f068125b01f5a484c9bd9f3961088af30882ff84ea3b2d0842214aade26b7ede9fcb6a59b67de5a87f13b2e8c89a7ee99a80e0e0c24db7196d55cadee647162bac1dfc7189339e6a71", @ANYRES16=r16, @ANYBLOB="000428bd7000fddbdf25010000000c00018008000300010000003800018008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000000800030003000000080003000100000014000200626174616476300000000000000000000400030004000300040102802400018008000100050000000800010005000000080001000800000008000100040000001c00018008000100030000000800010001000000080001000000000024000180080001000200000008000100080000000800010006000000080001000600000054000180080001000c000000080001000000000008000100000000000800010002000000080001000100000008000100060000000800010008000000080001000300000008000100020000000800010002000000340001800800010003000000080001000300000008000100010000000800010003000000080001000300000008000100040000001400018008000100070000000800010002000000040003001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB="20000180080003000200000014000200626f6e645f736c6176655f310000000004000300"], 0x1a0}, 0x1, 0x0, 0x0, 0x4000805}, 0x0) vmsplice(r15, &(0x7f0000000000)=[{&(0x7f00000001c0)='\b', 0x1}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 18.093908037s ago: executing program 0 (id=7606): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, 'gre0\x00'}}, 0x1e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) sendmmsg(r1, &(0x7f00000096c0)=[{{&(0x7f0000000680)=@rc={0x1f, @none, 0x2}, 0x80, 0x0}}, {{&(0x7f0000002880)=@ieee802154, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x3c0}}], 0x3, 0x24004010) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x101}, @IFLA_BR_MAX_AGE={0x8}]}}}]}, 0x44}}, 0x0) 18.090337178s ago: executing program 1 (id=7607): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x540, 0x0) close(r3) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x40}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x8}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth1_to_bridge\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000008c0)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x78, 0x0, 0x2, 0x5, 0x4, 0x4}, 0x20) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r8, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) 17.997030286s ago: executing program 0 (id=7610): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@cgroup=r2, 0x3, 0x1, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0}, 0x40) close(r1) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x9, 0x8, 0x2, 0x200, 0x101, 0xd53, 0xf, 0xb3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x24040080) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) (async) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230", @ANYRES32=r1, @ANYBLOB="4f77da85edd07bb86a35e76d6e1d80ee7905cea751632c5f1034a4d7cec233c6b7fefeebeebf2c478e8f73d0606ef5543a7902e56adda054333f2be4966c80436a4f8d6e533daea8cc030dbac83ddce603d9563947e2d42269c3661a5f9a4560a6382b70ae7a5b829551b78fe71952a7d919b2ebbdb1a5112e092ff25d63d3f7b9add2ba0951c601255964aec9399b029fd4d424c74a2c9da895ab4e5195733268dd36378a8b2c0052ea5caeebb572ef63db5188aad6f9e60f61bbf6b4180a7f1b86cc3186c09a3e5f2528bcc33621c664ad21560b99e0ab5f7b219a809d37ece392013174d36841982d5ae00fd530147790379aec0b", @ANYRESHEX=r3, @ANYRES32, @ANYRESDEC, @ANYBLOB="d21671be908e1b5a2478c21c04974fbf621c146763371b423676210abedd4485745f48da391710c5121d0ce39e97ed467774b77286c8d60f73d655535abcd4d3b3c7944799daa50bb52e4a3aa9e952062bd652645a5facaeff243cc0afd71666b908d4a00dc343ea6833"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230", @ANYRES32=r1, @ANYBLOB="4f77da85edd07bb86a35e76d6e1d80ee7905cea751632c5f1034a4d7cec233c6b7fefeebeebf2c478e8f73d0606ef5543a7902e56adda054333f2be4966c80436a4f8d6e533daea8cc030dbac83ddce603d9563947e2d42269c3661a5f9a4560a6382b70ae7a5b829551b78fe71952a7d919b2ebbdb1a5112e092ff25d63d3f7b9add2ba0951c601255964aec9399b029fd4d424c74a2c9da895ab4e5195733268dd36378a8b2c0052ea5caeebb572ef63db5188aad6f9e60f61bbf6b4180a7f1b86cc3186c09a3e5f2528bcc33621c664ad21560b99e0ab5f7b219a809d37ece392013174d36841982d5ae00fd530147790379aec0b", @ANYRESHEX=r3, @ANYRES32, @ANYRESDEC, @ANYBLOB="d21671be908e1b5a2478c21c04974fbf621c146763371b423676210abedd4485745f48da391710c5121d0ce39e97ed467774b77286c8d60f73d655535abcd4d3b3c7944799daa50bb52e4a3aa9e952062bd652645a5facaeff243cc0afd71666b908d4a00dc343ea6833"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x0, 0x36, 0x0, &(0x7f0000000180)="c1188e99b95d02004284860186dd8a2cd3818eee5e140120e0d83bb3e7e8dc37a2c4c1480c309b3db488eb304bafbae18b852d7840ee", 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x0, 0x36, 0x0, &(0x7f0000000180)="c1188e99b95d02004284860186dd8a2cd3818eee5e140120e0d83bb3e7e8dc37a2c4c1480c309b3db488eb304bafbae18b852d7840ee", 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r9) r10 = socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, 0x0, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0x3, 0xb}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb, 0x8, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x2008005) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 17.641819943s ago: executing program 4 (id=7614): unshare(0x68040200) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet6(0xa, 0xa, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x200}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff0000000000000000000000000000400000000000000000020000000000000000020000000000000000000000000000000c0015006dc7350002"], 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087", @ANYRES32=0x0], 0xb8}}, 0x2c000010) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add405000000000000000a117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="6000000002060500000000000000000007000000140007800800114000000040080012400000ffff0500010006000800050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000000)) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000900000000000000b3d00000183b00000200000000000000000000001846000005000000000000000000000085200000020000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x1, 0x0, &(0x7f00000001c0), 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000240)=[{0x2, 0x5, 0xd, 0x5}, {0x1, 0x2, 0x7, 0x5}, {0x0, 0x4, 0xd, 0xd}, {0x0, 0x5, 0x10, 0xc}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x7b, 0x26, &(0x7f00000003c0)="350bace9b502142fe877395fc92415fb3f889d7c35269a57d599e5ce2fb91284838c39bd7d4e1cf9c178a7e226e722b4798ce2d47b600a7670a63aeccdfad44b741c50ac9e51acc9315afd450154458c6454c6190197133a403204db19380621c82dcc9c1488a3510b466983fa0aff948160538a567f95aaf6f804", &(0x7f0000000440)=""/38, 0x81, 0x0, 0x0, 0x25, &(0x7f0000000480), &(0x7f00000004c0)="89a51446cf78a25702fdad3b6be0fccc4a25c0200bb4ee17aede65c8265db93b90f85b28cb", 0x0, 0x0, 0x7}, 0x50) 17.6321135s ago: executing program 0 (id=7616): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x3, 0x6000000, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8}]}], {0x14}}, 0x64}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @address_request={0x11, 0x0, 0x0, 0x2}}}}}, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095", @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, 0x0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x54, &(0x7f0000000540)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, {0x4e22, 0x0, 0x2e, 0x0, @wg=@data={0x4, 0xffff, 0x9, "d9bd3940f69960ef4dddcdcea183a1152656bcd25b24"}}}}}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) 17.52747489s ago: executing program 1 (id=7618): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c80)=ANY=[@ANYBLOB="bf16000000000000b70700001f0000005070000000000000200000000000c00095000000000000002ba728041598d6fbd30cb599e83d24a3aa81d36bb3010100bd2321afb56fa54f26fb0b71afe6adfefcf1d8f7faf75e0f226bd99eea7960717142fa9ea4318123741c4a0e168c1886d0d4d94f2f4e345c652fbc16ee988e6e0dc8cedf3ce99fbfbf9b0a49ef23d410f6296b32a834388107200759cda9036b4e369a9e152ddcc7b1b85f3c4744aeac698890c864d59887a59905f1e07f40b1cd3641f8c192c368590f894cd4e1110bec4e9027a0c8055bbfc3a96d2e8910c2c3b35967dec6e802f5ab3eea57b09a2ed4048d3b867ddd58211d6ececb0cd2b6d357b85a0218ce740068f4025c0bf1aad90738725837079e468ee207d2f73902fbcfcf49822775985bf31b715f5888b24efa000000000000ffffff010100000000000000000000000000020000000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9736bdeab29ea3323aa9fdfb52faf449c3bfd09000000b91ab219efdebb7b3de8f67581cfe36bc120e3b39a6e5a796a1d4223b9ff7ffcad3f6c962b9f292324b7ab7f7da31cf41ab11e0a494034127dd1c6592df1a6c64d8f20a67745409e011f1264d43e153b3d34899f40159e800ea2474b544035a30b23bcee46762c2093bcc9eae5ee3e980026c96f80ee1a74e04bde74fa4ffa4d9aaa705989b8e6731e2401b6a560e3296e52d337c56abf112874ec309bae5fa4c81e5c9f42d9383e41d277b10392a96286744f839c3f128f8f92ef992239eafce5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637598f37ad380a447483cac394c7b06000e3b1c39b2e00916de48a4e70f03cc4146a77af02c1d4cef5379da860aed8477dfa8ceefb405005c6977c78cdbf37704ec737555393c61a008280b064bda144910fe050038ec9e47de89298b7bf4d769ccc18eede00e8ca5457870eb30d211e23ccc8e06cd58b61799257ab55ff413c86ba9affb12ec757c7234c270246c87a901160e6c07bf6cf03b5ed04465746ff8809c3a0d46ff7f000000000000ad1e1f493354b2822b9837421134c0167d78e6c24ed0a2768e827172ea3b774a1467c89fa0f82e8440105051e5510a33dc5a5e143fbfff161c12ca389cbe4c51b3fa00055cc1b66c5fd9c26a54d43fa050645bd6109b113be7664e08add7115c61afcb718cf3c4680b2f6c7a84a4e378a9b15bc20f49e298727340e97cdefb40e56e9cfad973347d0de7ba4754ff231a1b033d8f841ba3442b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf46306f2ef79e184f5e93ba5c8c2a4c0443fb652b8d4c2ff030000000000000007b82e6044f643068cd47ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c99220002af8c5e13d52c83ac3fa7c3a3ee6c08384865b66d2b4dcb5dd9cba16b64ebbbf8702ae12c77e6e34991a225c120a3c950942fe0bc9f2a1a7506d35e5b439edeb5288aeda890cf8a4a6f31ba6d9b8cb098f935bdcbb29fd0f1a342c9eed00000000ab6640a9dea0b6c91996d65da6c24a8f2a86c814459f3cdaaf99000000000000000000bf2130d1b32c826563c508d0ad23bc83ba3f3757210afcf2a64783057e177615c068bd7d74233da1a3b56d4e04a7ec4792b1c4cffddbbdcfdd13ab52f5aaab812201d1aba3d70471fcd9b466569f3ef72f39d87fcccab514fc02b70be8629c9b73ce7bc4be7f8be71cb7b2d0a4acff8f6abe7dbad64d7cfa6396a6ab8487c383e24d4a8051f80e1811e387723a25dda119f64b35e71c5400000000000000000000000000000034c751ebdf3f20a95b817ea3df3d6c0002a41783499d4411ccbbeed215b745058e56c70afe8016b3dd359e785b36e609f173cc6b893ecd138289709839af6c95fbed6c33e401ec747820d6a6283b3452c57a5d44cacd363589845637071320921d22c1663964ed0700000062f3d90f0eb634ae331385d502fc7cc33158bc306d8c3bdae8108a2380000000000000008832ec0906aaec43659c79c8adfdeb1fd291c6fc6737b0f961f3beaa3e02f7762c5dd633d13b5e487e996597b2ab42c81eb7dd8390e13b395aacce4683e55bcfe8c17615257364365fd48bd77da79e52ce9edfe6dca9c43907f3a85cf655ccd9d624e8c6f7932c4d719347f39ef006c2df747e27a2d16304fa000008ffffffffffffff003049ca923d059c0ab5d886a491adacb7e4b43b1b57776e5fe25cf105fa57f000756755b7230e2c0c1fed5487271c4f2981cf8f4351ef5d08641dacaed0000800b805fbd1b474c9ed0dc19ad6e99b66ee0f8c9d697655ebdf5ef30d1b92bd283df88c1096d4bd3686e18ab07f9b580afbd4bd4d8979686422849b04024f609a7b76e902d35343793d99fe395ae73166187c64a501c1f4bb736fcf1dfde7da6bea1945a14f1c578093e6cfb4702a95fb4f653064244950ae227f2a22678e2ff4699bfcba3b7d5656d9be441d07cc3ba51f5b9e825fbec6aee7f9e1b04cdabf99bd760036f74dec91d341c885e785c8517cc50138be2447fa04b77acd2fd078f1da244051e44b5a881197733ba420c9d6b02fd01fa9369f8d3310be2ff1ad5952e025ce59c2dc8327d26fc4facd5915007d22dfccf67dfb53ae2f72a0812ad121fc7de5aba071b83ebf271a5140c6a0b115bd05d7fff46fe144d9fac4ee0a7a2f7242737fd622dc74ca2d79585d4c821d2294b779eebbaac7d81cdaa5ac506ab269be6ff4f7dd9d5ce2e0b1eef2"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x7, 0xe80, 0x0, &(0x7f0000000040)="24c2afc3a2e0527bea33d6541650", 0x0, 0xffb0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000001280)="b9ffddc1ddcccdde75537d5326a4dfff70bf2dfe443b1b5e2a9080f3", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.354350394s ago: executing program 0 (id=7620): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000580)={@in={{0x2, 0x4e23, @local}}, 0x0, 0x0, 0x45, 0x0, "ede10c90e0d6d4b2b1651d4ddc62e17b5f4fa4a45bc87ce8b6cab0b0bf7f4a73a775b18b108887c58ce5057146437a52ff5d0f912a8eff0b48b4c25e7d5ae1e974f8cdaa3dccaccd26482b83f2a4afd0"}, 0xd8) (async) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x4e23, @multicast2}}, 0x3, 0x0, 0x1a, 0x0, "5ec800000000000000fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x4e23, @private=0xa010102}}, 0x0, 0x0, 0x1b, 0x0, "dc6efbc3b54972ba0604b8e20a587d8607043cff9ba01fb10d4df7171eb926b1343726c9a11cc6437caa2dc891b724181fb42d00e3cefe6630aadee9a73a7095657dfccc791536fe9c5268be2bdd7a74"}, 0xd8) (async) close(0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r2, 0x0, 0x0) (async, rerun: 32) socket(0x10, 0x3, 0x0) (async, rerun: 32) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x2c, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2820142b6b7ef621}, 0x40000) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x0) (async) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) (async) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) (async) ioctl$sock_x25_SIOCADDRT(r6, 0x890b, &(0x7f0000000440)={@null, 0x1, 'nr0\x00'}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x198, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x8}}, [@TCA_STAB={0x174, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x1, 0x9, 0x3ff, 0x0, 0x1, 0x7, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0x5, 0xc, 0x7, 0x2, 0x0, 0x2, 0x10000, 0x2}}, {0x8, 0x2, [0x4, 0x4]}}, {{0x1c, 0x1, {0x0, 0x10, 0x4b, 0x1, 0x0, 0x10000, 0x800, 0x6}}, {0x10, 0x2, [0x1, 0x81, 0x9, 0xc916, 0x4, 0x4000]}}, {{0x1c, 0x1, {0x4, 0xb, 0x33d, 0x5, 0x2, 0x7, 0xfb, 0x3}}, {0xa, 0x2, [0x6, 0x7, 0x0]}}, {{0x1c, 0x1, {0xbe, 0x7, 0xfff5, 0x7, 0x2, 0x2, 0xb490, 0x6}}, {0x10, 0x2, [0x4, 0x5, 0x3, 0x7f, 0x4, 0x0]}}, {{0x1c, 0x1, {0xe, 0x0, 0x3, 0x7, 0x2, 0x6, 0x800, 0x3}}, {0xa, 0x2, [0xa20, 0x5, 0x5]}}, {{0x1c, 0x1, {0x0, 0x3, 0x49d3, 0x7, 0x2, 0x4, 0x400, 0x5}}, {0xe, 0x2, [0x2, 0x6, 0x9, 0x9a, 0x4]}}, {{0x1c, 0x1, {0x2, 0x8, 0x1, 0xea33, 0x0, 0xc, 0x90, 0x7}}, {0x12, 0x2, [0x8, 0x8, 0x9, 0x5, 0x2, 0xc, 0x400]}}, {{0x1c, 0x1, {0x3, 0x6, 0x6, 0xd1, 0x0, 0x2, 0x8, 0x1}}, {0x6, 0x2, [0x600]}}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x78, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0xfff5, 0x8}, {0x0, 0xfff1}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x44, 0x2, [@TCA_MATCHALL_ACT={0x40, 0x2, [@m_gact={0x3c, 0x1, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x900, 0x20000000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) (rerun: 32) 17.342775807s ago: executing program 2 (id=7621): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="74010000", @ANYRES16=r1, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) write(r3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x80, 0x700, 0x1, 0x100, {{0x1e, 0x4, 0x2, 0x30, 0x78, 0x67, 0x0, 0x0, 0x4, 0x0, @remote, @multicast1, {[@noop, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x34, 0x9b, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8000}, {@multicast1, 0xa}, {@loopback}, {@multicast2, 0xe5}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x24c}]}, @timestamp={0x44, 0x8, 0x3e, 0x0, 0x9, [0x800]}, @generic={0x7, 0x3, "a8"}, @rr={0x7, 0xb, 0xe8, [@initdev={0xac, 0x1e, 0x8, 0x0}, @local]}, @ssrr={0x89, 0x13, 0x73, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)={0x90, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x71}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5b}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="24000000120001000000000000000000100000000c0000000000000000000010f0002e80"], 0x24}], 0x1}, 0x4000800) 17.226002315s ago: executing program 0 (id=7622): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x850) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac14141500000000000000000000000000000005000000030a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffffffffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000200000000000000000a0000000000000000000000804000000000000000000001000003000000004400050000deffffff0000000400000000000000000004d23c00000000000000ffffffff00000000000000000000000000000000000300004900"/180], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$kcm(0xa, 0x1, 0x106) r3 = socket$inet6(0xa, 0x3, 0x1) r4 = socket$inet(0x2, 0x4000000000000001, 0x100) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'wrr\x00', 0x30, 0x10001, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'wlc\x00', 0x11, 0x4}, {@loopback, 0x4e23, 0x10000, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xdfb, 0x2) sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010001000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec587547"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYRESHEX=r2], 0xfc}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000004000000040000000e00000010000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000006c86e92c87763b1d000000000000e15d000061d8953483b9c75a2d04000000000000006da5a30e80106f4bfdc21513248c437c10f3ba32dbdd"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r10, 0x0, 0x0}, 0x10) sendmsg$key(r8, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="020700"], 0x10}}, 0x0) socket$kcm(0xa, 0x7, 0x106) 17.219292888s ago: executing program 2 (id=7623): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) 17.091880224s ago: executing program 2 (id=7624): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9ea4318123341cf9d90a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a22a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a19eed87b277be335c75e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436e101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521bc9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d2502000000d9051f22614d1f62734d678039a97d2b74f9e8e97f4e8e7025123e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f23128d743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069f6f24e1e1bc976d965ddabb01085f16bff63a06578d6d184f5de7bfb6aaa75f16996d8d60bd0111a8a237a1536256c02284cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798bbe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e2005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9cde5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde330289d6348d183ed9d3dae3cccf109f7c78e8479a345e805e47dfa82cafc6b64b1f4659834aecbeded44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1b7d5f80c580dc31b0963ff953ce09148e8dfea9d03a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e96c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20c290a1f6c09272dbc3b2c0ab2b5baa1b07b16e81f278e54a479f1a06bc06e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4d57b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce788c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f709294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b132876159972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0598700130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80014ff11d9dbceba41d8dfce410333a054e82b1d050331ce0aeacb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6bb956fac1ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a8263e9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dd18f6148354df7e60a489dc543ccdee1fff9d8f8d78844de27a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d64100cc000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2ceae70922989f66827fe9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168e32d7bd6800000000a21008b8d26dabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2935d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95badaf8ed85cd5b03a7352a0fb83398566d1bc133582ce2d9f601cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353c959fd965702f1cd5bcb3c16d4b8bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef07b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c3355fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538b011cb3928b430630b8ccc800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b314bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c921b090000000000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da22ee9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45b4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d5027e81ceec1a6d7441d0b538d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656d9a28f81f6a9465aec94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be184d4ebb942f99581a6fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bbb4ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855cb18b23517ca935a0fa1b630d70c4ca9acbaf0f08910f327fba506d834029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17ecd996d7dea947ee8ce55fa2dea5a000000000000000000000000006f0143d8d4038ef9f57d9e9336f3559558710d1febe7394cf8b02f59dab24d07db3d3c1ebff58f973ba3fc0c3e2fb2c2a674a188614520ecb1d22b49e3550263bf9d669fba198b65ee3512db0e710d2070b5847face7ada12c83f0aea3a8c9e84e6c7406732c952c5695d43bca33d481ef9d442697875e114f4c759af306b3fc8224fdec89bf199234bff488b81438cbe89e4cabdc007139352b5cb69d7987cdf37ab549b7639eeadafd5315d9c9f0e8c9223102e6deaca4ae9cb943a3ad188bcad95e8f97d7fee7c47ea50d222fe67085b4fb3fecfb67dec23b6ab5ee19a5ca5367bff058149acf90a6c4014dea2b763389f77301ea8574d112625300906f480c36f41f82f84991800c37863de349f7"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r0, 0x18000000000002a0, 0x42, 0xfffffffffffffec1, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xfb, &(0x7f0000000000), &(0x7f0000000280)="8dc92a8ff39080a675b6565efa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f5aeabd986d5f491389e9114ba8bd9aeeeed448e227802a455d6ba62aebeebc45885165e2501c30dc33fa47f5627e572e86278239ca2d8aeec7a25c43448bce8000000"}, 0x3d) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x42901, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000240)={0x11, 0xf6, 0x0, 0x1, 0x90, 0x6, @multicast}, 0x14) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b400070000000000791048000000000071182400000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000000000)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x20, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) 16.938253943s ago: executing program 1 (id=7625): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) bind$alg(r3, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20008001}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005200), 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r1}, 0x38) r4 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 16.853744897s ago: executing program 3 (id=7626): socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x6, 0x84) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, 0x0, 0x0) (async) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (async) sendmsg$nl_crypto(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0xc4}, 0x44080) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$bt_hci(r8, &(0x7f0000000040), 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(r5, 0x3) (async) listen(r5, 0x3) sendmsg$inet6(r4, &(0x7f0000000300)={&(0x7f0000000840)={0xa, 0x5e22, 0x906, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000001d40)}, 0x40085) socket$netlink(0x10, 0x3, 0x11) (async) socket$netlink(0x10, 0x3, 0x11) writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000380)="d6", 0x1}], 0x1) (async) writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000380)="d6", 0x1}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) sendfile(r0, r3, 0x0, 0x20000000002) (async) sendfile(r0, r3, 0x0, 0x20000000002) 16.806919128s ago: executing program 2 (id=7627): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000f0089c0127e4e0226ed9fa5e7cf9302000000000000", @ANYRES32=0x1, @ANYBLOB='i\v\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000002000000000000004000010018010000202078a500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fbffffff850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r1}, 0xc) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0x32600) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x5}, 0x1c) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r6, &(0x7f00000001c0)={0xa, 0x4a23, 0x1c5, @empty, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x4, 0x2, 0x7, 0x5, 0x0, 0x70bd28, 0x25dfdbfb, [@sadb_address={0x3, 0x7, 0x0, 0x80, 0x0, @in={0x2, 0x4e22, @broadcast}}]}, 0x28}}, 0x4000800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010002104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000700000000000a000100dd"], 0x48}}, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="000429bd7000fcdbdf258700000008000300", @ANYRES32=r9, @ANYBLOB="f340bc7e6ffbb0e0568c4f2ff5b223da46b4f339869f2689910254308f25e500ac8dafda4641441113c2944c96f42aeba85cbd82b11ff9d52a68ae2b80ff6ce17c2a9b8e45177cedc39c19a71ecb49dc855d0e7c9dc283ed62ab6e2cc808290e99b27612426175b9eace781f9cda0d988bfd5dafd6f78cd97822d6e074e69c6ef9048b778ca554ba2a5332d55d1b1e03d3859cd8d301cd543affe1ee2466dadb59f40fa698f16f173a3af84ec53ffcfa60f71aa56b55a19101cf38e6cd4d66337ae4f6b982acb3b22d071deffa754e12b1edbb"], 0x1c}, 0x1, 0x0, 0x0, 0x80000}, 0x4045081) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) 16.681699591s ago: executing program 0 (id=7628): mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3003, 0xffff96aabfff, 0x832, 0xffffffffffffffff, 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)={'c', ' *:* ', 'rm\x00'}, 0x9) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000002500), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002540)={0x58, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x800}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x58}, 0x1, 0x0, 0x0, 0x4801}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x13, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x8}, 0x94) 16.634227523s ago: executing program 3 (id=7629): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x2c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000) 16.607618685s ago: executing program 3 (id=7630): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x3, 0x6000000, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8}]}], {0x14}}, 0x64}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @address_request={0x11, 0x0, 0x0, 0x2}}}}}, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095", @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, 0x0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x54, &(0x7f0000000540)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, {0x4e22, 0x0, 0x2e, 0x0, @wg=@data={0x4, 0xffff, 0x9, "d9bd3940f69960ef4dddcdcea183a1152656bcd25b24"}}}}}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) 16.414503227s ago: executing program 3 (id=7631): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000050000004943000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdff030018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8b}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008804}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8b}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008804}, 0x0) 16.304462246s ago: executing program 3 (id=7632): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000100)=0x4) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="d80000001c0081044e81f782db44b904021d080201000000120000a118000c000600142603600e3b08000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67ffc94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006000000000000008065b44f95caae586a81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x503, 0x70bd2a, 0xc, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x6249}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x50}}, 0x800) 16.303127322s ago: executing program 2 (id=7633): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) listen(0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000340)="b9ff0a03076804268c989e14f088a8", 0x0, 0x10500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000089120e000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffc}, 0x94) 16.089535489s ago: executing program 3 (id=7634): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_stats}) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000006800010003001000fdffff7f00000000000000000c0002000100000015000000080010"], 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd70000000000001000000080001000300000014000480050003008000000005000300240000000800020003"], 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newsa={0x194, 0x10, 0x1, 0x70bd2b, 0x0, {{@in6=@private1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xecdf, 0x0, 0x200, 0x0, 0x20, 0x0, 0x73}, {@in=@broadcast, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0xfffffffffffffffe, 0x0, 0x6d0, 0x0, 0x0, 0xfffffffffffffffc}, {0x8, 0x4007ff, 0x0, 0x400}, {0x0, 0x0, 0x2}, 0x70bd28, 0x3507, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "e0fad3f10cd3a506627840000000074f"}}, @algo_auth_trunc={0x4c, 0x14, {{'ghash-ce\x00'}, 0x0, 0xc0}}]}, 0x194}}, 0x4050) 16.031437362s ago: executing program 2 (id=7635): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="12000000770000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000180), &(0x7f0000000280)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r2, &(0x7f00000001c0), 0x0}, 0x20) r3 = socket(0x3, 0x5, 0x10000080) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000070000000000000001000000cd600c00f0ffffff9520000000000000"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r4, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="9febf4ff1700000b00000000e700000000000000020000000000"], 0x0, 0x1a}, 0x28) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r9, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001cc0)=@newtaction={0x2884, 0x30, 0x1, 0x70bd28, 0xfffffffe, {}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffff7, 0xfff, 0x1, 0x0, 0x4}, 0x4, r10}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, {0x4}, {0x2818, 0x1, [@m_nat={0x284, 0xf, 0x0, 0x0, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x6, 0xffffffffffffffff, 0x100}, @rand_addr=0x64010101, @empty, 0xffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x1, 0x1, 0x2, 0xfffffff9}, @multicast1, @multicast2, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1ff, 0x6, 0x8, 0x7, 0x9d}, @empty, @local, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xc10, 0x20000000, 0xd, 0xb978}, @local, @loopback, 0xffffff00, 0x4}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x3, 0x8, 0x40, 0xc8}, @rand_addr=0x64010101, @private=0xa010102, 0x80}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x5, 0x5, 0xb9ab, 0x2}, @local, @broadcast, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5d70a0e7, 0x4, 0x3, 0x4, 0xf}, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0xc, 0x3, 0x9, 0x81}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1ff, 0x2, 0x10000000, 0x27, 0x2}, @multicast2, @dev={0xac, 0x14, 0x14, 0x40}, 0xffffff00}}]}, {0xf2, 0x6, "103b34f0ecf82339ed7683582a7d61455b3bb29f90204189fd0d54d74675f41faf7f779108ff6d366ce3d8d60d57063def2964dd8dcd287838de8ff53bc840484343b5f368a259f945f36d3bbffa41a4d6d7136dffe284a8b4e8687708c9c5b62956a51af9d99f47d3c8d947d608bd8e04886cf6c3b585ca452bf5f671bb5f24a1eb6d3a58e5e487c02fe592d28daf3669750eae3fd3238e1af9b8fe145b8a668620e170364994793ab7a16769ed3144f93ebe1cadea0cf05917b825f9141a829a4c291c63cb7bd6988622a0053ca2c58c92388b876a0bd747f1a076ffa5831871380c96c34f58e66fc52ee92945"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_ctinfo={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xfffffffa}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xf36}, @TCA_CTINFO_ACT={0x18, 0x3, {0x9, 0x0, 0x3, 0xc5, 0x9}}]}, {0x5, 0x6, "9a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x110, 0x13, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x6, 0x7, 0x8000, 0x3}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xae, 0x951, 0x0, 0x1, 0xff}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x91, 0x4000, 0x6, 0x8000, 0x8}, 0x4}}]}, {0x89, 0x6, "1c53560a8e242a8de976e67d4337651ccdeaca9d291b33a3147e7c4a72cda100b7fb7f8c706da971112007ff4837c769eafb7a5dfb51a8157a3a020e0330ccb6dc79eb8161336cab75d3a1e808a1f7b8571b45216b87cc35371044b6599ac5cf5d09138da22c44691510032f77a1020a2cac0eee4d1484c0e52622a56a7a5d00c958e6b069"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x7}}}}, @m_police={0x118c, 0xd, 0x0, 0x0, {{0xb}, {0x114c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x6, 0x7, 0x10001, 0x1, {0x0, 0x2, 0x7, 0x5, 0x80, 0x8001}, {0x1, 0x2, 0x9, 0x6d5, 0x1730, 0xf1ad}, 0x1, 0x7e1f, 0xfffffffc}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x8000, 0x3, 0x8, 0x1000, 0xffffff09, 0xfffffff8, 0x1, 0x3, 0xb, 0x80000000, 0x3, 0x1, 0x9, 0xb0, 0x400, 0x7, 0x799c, 0x3, 0x50000, 0xee, 0x7fff, 0x4, 0x8, 0xffff, 0xfc, 0xfffffe00, 0x7, 0x4, 0x8, 0x1, 0x0, 0x9, 0x6, 0x2, 0xb, 0xc878, 0x80000000, 0x9, 0x1, 0x7fff, 0x3, 0x0, 0x5, 0xc, 0x10, 0x3ff, 0x40, 0x906, 0x6, 0x0, 0xffffffff, 0x1d7d, 0x28ec, 0xffffc212, 0x4, 0xfff, 0x9, 0x6, 0x6, 0x5, 0x8, 0x6, 0xfffffffc, 0x6, 0x0, 0x2, 0x4f8, 0x8, 0x5, 0x8a7e, 0x431d, 0xe4, 0x48000, 0x3, 0x3, 0xb, 0x9e3, 0x5, 0x7fffffff, 0x0, 0x5, 0x3, 0x5, 0x3, 0x2, 0xd, 0x7, 0x3, 0x1, 0x7, 0x3, 0x7, 0x2, 0x2c40222c, 0x80000001, 0xc000, 0x2, 0x8, 0x5, 0x7, 0xf, 0xa805, 0xffff7fff, 0x0, 0xbf, 0x7, 0x3, 0x7fff, 0x7f, 0x5, 0x0, 0x4, 0x6, 0x2ffc00, 0xab96, 0x4, 0x1, 0x1, 0x3, 0x1, 0x1d, 0x100, 0x6, 0x2, 0xd, 0xd, 0x2735611a, 0x8, 0xe150, 0x1, 0x9f2d535, 0x101, 0xd0, 0x6, 0x8, 0xba2, 0x7fff, 0x1a3d, 0x0, 0xa0, 0x3, 0xe24, 0x2, 0x4, 0xed, 0x81, 0x5, 0x100, 0x3, 0x9, 0x406, 0x6, 0xff, 0x7, 0x8, 0x8, 0x8c74, 0x7ff, 0x0, 0x9, 0x2, 0x8, 0x400, 0x6, 0x800, 0xb62, 0x1, 0x6, 0x8, 0x4, 0x9, 0x6, 0xffffffff, 0x3215, 0x68, 0xc, 0x0, 0x9, 0xfffffff8, 0xda4, 0xffffffff, 0x800, 0x9, 0x8, 0xfff, 0x7ff, 0x91, 0x8, 0x2, 0x7, 0x4, 0x2, 0x954f, 0x40, 0xfffffffe, 0x30, 0x2, 0x7ff, 0x8, 0x0, 0x14, 0x1, 0x4, 0x7, 0x2, 0x1ff, 0x3, 0x0, 0xffffff01, 0xb3, 0xffffffd3, 0x1, 0xa6, 0x8001, 0xcd11, 0xfffff000, 0xe77, 0x800, 0xa0, 0x400, 0x2, 0x8000, 0x1ff, 0x4, 0xff, 0x6, 0xff, 0x4, 0x432, 0x1ff, 0x3, 0x8, 0xfad, 0xdc, 0xe, 0x2, 0x9, 0x7, 0x0, 0x5, 0x7ff, 0x1e80, 0x0, 0x6, 0xecc, 0x2, 0x1, 0x8, 0x9, 0x916, 0x392c, 0xfff, 0x0, 0x2, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x3, 0x200, 0x9, 0xd, {0x8, 0x1, 0x9, 0xe, 0x10, 0x2}, {0x0, 0x1, 0x8, 0x2, 0x5, 0x2e}, 0x176, 0x10000, 0x7db3}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x4, 0xc7ce, 0x400, 0x3, {0xfc, 0x0, 0x8, 0xfff, 0x5, 0x32ef}, {0x3, 0x1, 0x8, 0x0, 0x1}, 0xef, 0x400, 0x5}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x80ec, 0x6, 0xb6cb, 0x3, 0xd0000000, 0x2, 0x4, 0x8, 0x9, 0x6, 0xfffffff7, 0x4, 0x4, 0x7fffffff, 0x6, 0x5, 0x7, 0xccc, 0x6, 0x5, 0x100, 0x8001, 0x9988, 0x1, 0xffff, 0x2cd, 0x3, 0x17, 0x8, 0x4, 0xc36e, 0x3d, 0xc6ee, 0xd, 0x114beed2, 0x4, 0x5, 0x2, 0x1, 0xc, 0x2, 0x0, 0x2, 0x8, 0x198d, 0x9, 0x40, 0x2, 0xb84, 0x9, 0x0, 0x9f9, 0x3, 0x5, 0x1, 0x5, 0x8, 0x5, 0x0, 0x6, 0x8, 0xfffffffe, 0x3, 0x2d177de, 0x101, 0x8, 0x6, 0x3, 0x9, 0x7fffffff, 0x6, 0x3, 0x9, 0x0, 0x400, 0x5, 0x3, 0x9, 0x7, 0xfffffffa, 0x800, 0x7, 0x7, 0x622, 0x0, 0x7fffffff, 0x200, 0x3, 0x7, 0x87, 0x6, 0xe, 0xfff, 0x7f, 0x6, 0x9, 0x3, 0x12b, 0x7fffffff, 0x0, 0x4f1b, 0x9905, 0x8, 0x80000001, 0x0, 0x200, 0x2, 0x5, 0xfe000000, 0xfffffffa, 0x5, 0x800, 0x9, 0x7fffffff, 0x5, 0x0, 0x2, 0x7, 0xdf, 0xfff, 0xc1, 0x8e3, 0x4, 0x0, 0x0, 0x6cc28ae2, 0x5, 0x4, 0x1, 0xa4, 0x5, 0x3b45, 0xfffffffd, 0x3, 0x6, 0x8001, 0xffffffaf, 0x6, 0xb51e, 0x4, 0x0, 0x7, 0x8, 0x7, 0xfffffff7, 0x4, 0x9, 0x6, 0x7, 0x1, 0x9, 0xd, 0x81e, 0x5, 0x6, 0xf5c, 0x80000001, 0x358e, 0xa13, 0xe7ba, 0x30, 0xfffffffe, 0x8, 0x5, 0x1ff, 0x1, 0x23, 0x6, 0x401, 0x5, 0x5, 0xffffffff, 0xa000000, 0x1, 0x5, 0xc, 0x1, 0xb411, 0x55e1, 0x9, 0xe, 0x1, 0x7fff, 0x81, 0x2cd4, 0x5, 0x2, 0x5, 0x6, 0x5, 0x3, 0x5, 0x1, 0xfffffe00, 0x80000000, 0x8001, 0x0, 0x6, 0xfffffff9, 0x6, 0x8, 0xfffff001, 0x401, 0x80000001, 0x99dd8f45, 0x3, 0x0, 0xf3e7, 0x3c, 0x2, 0x3, 0x6, 0x8, 0x30d, 0x22, 0x8, 0x5, 0x5, 0x5, 0x8, 0x2, 0x10000, 0x20, 0xffff, 0x80, 0x7, 0xf8, 0x101, 0x7fff, 0x4, 0xa6c, 0x24, 0x2, 0x8, 0x7, 0x400, 0x101, 0xc, 0x9, 0x8ada, 0x81, 0xa, 0x2d0a, 0xdd, 0x1ff, 0x7, 0x9bd8, 0x9, 0x2, 0x100, 0x1, 0x10000, 0xfffffe56, 0x79, 0x7ff]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xe}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x20000000, 0x7, 0xfff, 0x0, {0x2, 0x2, 0x98e, 0x8000, 0xa, 0x6}, {0x9, 0x0, 0xfff8, 0x0, 0x9, 0xf}, 0x101, 0xe179, 0x3482}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x5, 0x9, 0x0, 0x400, 0x7, 0x1, 0x7fffffff, 0x8e44, 0x1, 0x8, 0xd30, 0x6, 0x6, 0x8, 0x100, 0x6, 0x3, 0x0, 0x436, 0x1c9, 0x7, 0x3, 0x3, 0x80000001, 0xffffffff, 0xea, 0xfffffffb, 0x7f, 0x4, 0x10000, 0x0, 0x1ff, 0x8, 0x1, 0x7, 0x4, 0x6fe6, 0x4, 0x4, 0x7f80, 0x5, 0xfffffffd, 0x9, 0x1, 0x3, 0x3, 0x80000001, 0xe3, 0x5fd, 0x3, 0x4, 0xfffffffc, 0x8, 0xc120, 0xfff, 0xadb, 0xa7, 0x6, 0x22b5, 0x8, 0xf5, 0x400, 0xac, 0x7, 0xc0, 0xce, 0xfff, 0x90e, 0x7, 0xc306, 0x1, 0x7, 0x1, 0x3, 0x0, 0x1, 0xfab, 0x1, 0xffff57cb, 0x8, 0xc2ea, 0x8000, 0xa, 0x6, 0x23d, 0x2, 0x1000, 0x2, 0x6b21fdbb, 0x0, 0x1, 0x8, 0x1, 0xe, 0x2, 0x3, 0xffffa333, 0x8, 0x2, 0x1ff, 0x101, 0x7, 0x56, 0xa3, 0x5, 0xe49e, 0x5, 0x40, 0x7, 0x22a, 0x0, 0x3d9183b3, 0x7f, 0x6, 0x10001, 0x4, 0x311202e7, 0xffff, 0x3, 0x7fffffff, 0x1, 0x6, 0x101, 0x3, 0x2, 0x63, 0x80000001, 0x4, 0x3, 0xfffffffa, 0x9, 0x2c, 0x1, 0xbdd9, 0x4, 0x0, 0x9, 0x4, 0x1, 0xc, 0x2, 0x9, 0x3, 0x0, 0x1, 0x3, 0x7, 0xfffffff2, 0x5, 0x2, 0x741a90ca, 0x6, 0x0, 0x100, 0x5, 0x9, 0x4, 0x10000, 0x2, 0x2a2, 0x0, 0x8, 0xb, 0x6644, 0x1000, 0x6, 0xfffffffa, 0x2, 0x32ab, 0x101, 0x6, 0xc, 0xfffffffc, 0xe1, 0xd, 0x338000, 0x80000001, 0x1ff, 0x7, 0x2, 0xf, 0x1ff, 0x7, 0x7, 0x8, 0x5, 0x9000000, 0x8, 0x4, 0x7, 0x7, 0xb, 0xc0000, 0xe, 0x3, 0xfffffffc, 0x6, 0xfffffff9, 0x15, 0xc, 0xad, 0x10001, 0xfa6, 0x4, 0xd65, 0xfffffff9, 0xd, 0x3, 0x8000000, 0x0, 0x4a9, 0x5, 0x40, 0x5, 0x10001, 0x3, 0x7fff, 0x0, 0x4, 0x3, 0x5, 0xffff5303, 0x7fffffff, 0x6, 0x7, 0x7, 0x73, 0x5, 0xb, 0x4, 0x9, 0x9, 0xec1, 0x4, 0x7, 0x69, 0xffff, 0x9, 0x5, 0x0, 0x0, 0x4, 0x6, 0xffff35f7, 0x14, 0x0, 0x10001, 0x4, 0x400, 0x0, 0xb, 0x3, 0x1ff, 0x8, 0x1]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8000000000000000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xa1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x3, 0x7496, 0x90, 0xb, 0x6, 0x8c3, 0xfffffffe, 0x3ff, 0xfffffffa, 0x9, 0xfffffffa, 0x80000000, 0x200, 0x1, 0x2, 0x6, 0xa9, 0x343a, 0xfffffffa, 0xc, 0x2, 0xfffffff0, 0x9, 0x3, 0x8, 0xcb8e, 0xfffffe00, 0x1, 0x9, 0x8, 0x0, 0x9, 0x9, 0xa95, 0xe0, 0x6, 0x4, 0x4, 0x7, 0x584, 0xeba8, 0xfffffc7d, 0x9, 0xffff, 0x31, 0x7, 0x36, 0x7, 0x2, 0x101, 0xdbf, 0x3, 0x80000001, 0x6, 0xfffffffa, 0x400, 0x10, 0x3, 0x0, 0x6, 0xc, 0x8, 0x1dd, 0x1, 0xfffffbff, 0x3ab, 0x7fffffff, 0x5266, 0x2, 0x7, 0x8001, 0x8, 0xf539, 0x5, 0xffffff40, 0xff, 0xfc50, 0x2, 0xb35e77e0, 0xa, 0x8, 0x1, 0x80000001, 0x8, 0x0, 0x4, 0x16, 0xe212, 0xa, 0x0, 0x7, 0x5, 0x81, 0x5, 0x1, 0x9, 0x4, 0x80000000, 0x9, 0x7, 0x3, 0x2, 0x1, 0x1, 0x8001, 0x2, 0x2, 0x3, 0x0, 0x2, 0x6b, 0x1, 0x0, 0x4, 0x0, 0x5, 0x200, 0x8, 0x1, 0x7d29, 0x16ca4000, 0x2, 0xe, 0x6, 0x48, 0x8, 0x5, 0xfb1c, 0xfff, 0x30000, 0x3a2422bb, 0x627, 0xf2a2, 0x7, 0xb, 0x8001, 0x7, 0x2, 0x0, 0x5, 0xfffffc00, 0x7, 0x5, 0x4, 0x3, 0xffffff81, 0x17d7, 0x7, 0x5, 0x3, 0x94d, 0x29e1, 0x9, 0x401, 0x4, 0xe1, 0xff8000, 0xfffffe01, 0x2fc, 0x8, 0x8, 0x7ff, 0x2, 0xff, 0x4, 0x6bf, 0x127b, 0x3, 0x5, 0x5, 0xc6a, 0x5, 0x1, 0xff9, 0x80000000, 0x7, 0x6, 0x9c7, 0x6, 0xbe4, 0x2, 0x0, 0x7fffffff, 0x8001, 0x7fffffff, 0x5982, 0x80000000, 0x9, 0x3dc00000, 0xed3d, 0x6, 0xff, 0x4, 0x4, 0x1000, 0x9a, 0x9, 0xffffff01, 0x9, 0x1, 0x410, 0xe, 0x5, 0x14, 0x8, 0xa, 0x4, 0x1, 0x8, 0x0, 0xc, 0x7, 0x4, 0x7, 0x2, 0x2, 0x4, 0x2ef, 0x94ce, 0x7, 0x8, 0x4, 0x6bc, 0x2, 0xffffffff, 0x14000000, 0x8, 0x4, 0x146b, 0x7ff00000, 0x7fffffff, 0xb, 0x3, 0x9, 0xc485, 0xc27e, 0xffffffff, 0x120000, 0x4, 0x3a779a91, 0x2, 0x6, 0x7, 0x8, 0x1, 0xc2e, 0x1, 0x8, 0x6, 0x6, 0x5, 0x81, 0x8, 0x10, 0x8001]}]]}, {0x18, 0x6, "6d2bd07e9aa2f7460ca8218cfb17ec2af26d92c8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x1038, 0x7, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_gact={0xd4, 0x9, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x81, 0x5, 0x3, 0xffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x2, 0x10000000, 0xffff8001, 0x80000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x5, 0x4, 0x6, 0xfff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1604, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x80000000, 0x7, 0x3, 0x7fffffff}}]}, {0x3b, 0x6, "e04410eac4f207b870555dca2e084b0a7c4e8a5ec8c9e638fee64ac8ec719374b9b74ca92be2ebca2d7ce175a4b4ae4c5825a65ff6f073"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0x18c, 0x2, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x40, 0x5, 0xffff8001, 0x7}, @dev={0xac, 0x14, 0x14, 0x14}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0x6, 0x1, 0x10001, 0x8}, @multicast2, @empty, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x800, 0x9, 0xffffffffffffffff, 0xf803, 0x7fff}, @multicast2, @empty, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3ff, 0x7fffffff, 0x10000000, 0x1, 0x9}, @multicast1, @rand_addr=0x64010102, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x180, 0x5, 0x30000006, 0x5b23, 0x6}, @rand_addr=0x64010101, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0xc5, 0x2, 0xb1eb, 0x7fff}, @loopback, @empty, 0xff000000}}]}, {0x74, 0x6, "9516aaf2746d8595fbaff97b7f2e6c6f0ed51296ed1892f861955d96d22f70eceaa57d68b84715f54ab948fc7027d6bf5b2b7f50e9f79f38935c3842ec00701e4ca63687997a926d4a21b8d948f35d7cd8e084a037c8f12621e900e7a90ce1e3867c5df091e2a7d495253758b80dc21f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x2884}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001c40)=@newtaction={0x68, 0x31, 0x123, 0x70bd25, 0x25dfdbf7, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x3, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x0, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x20048844) r12 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000090b00000a4d55e79add41ada0000000000000000", @ANYRES32=r13, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="18000000150001000000000000000000020000006197257d1bddb26a0b1a082ab24c77dae496907ca96b088ec7d18b35fc800061372dadb006db1d8f5fa2abcec42703b92c3e7f7a27b8bce2db438baad5f585fd2202611d2c45a142f87e95df771b81050ed2f6219f2f257fd61391cc03a397afcbd6ff7d72f691a02756fd2ba4ddaf33674588d0d2255a76998def6940582ac8f48ff0c8496dc59957e55565b441", @ANYRES32=r13], 0x18}}, 0x0) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r14 = socket(0x15, 0x5, 0x0) getsockopt(r14, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 15.970790099s ago: executing program 1 (id=7636): socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r4, @ANYBLOB="08000200ac1414aab2c9f47d6e50a2c07a479bf12fd42027dead2f2f50ff3b7132d50bccd92a63e9416d0e2fe2081304928c1f"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet(0x2, 0x3, 0x2) r6 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x1c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0x0, 0xa}, {0xfff1}}}, 0x24}}, 0x0) r9 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r9, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1200000006000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB="000000800000000000000000005641526ce26f5b250ccdff7e19edff65508809991f6ed47387780b365af2e9c8d150f4aea619f2a6966ca9ae8f0d184d78d4d1786999cc0d0951efc59c4c38cc1f8ee5cc8c8a97136f2feec076294b037a42c2cd10c5f3a723ae2964168417c4fd11f9bbdd67230094e7beaec7a27b6b71a1579e502ffaddd46c1caf41de0cd81d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r10}, &(0x7f0000000440), &(0x7f0000000140)=r5}, 0xfffffffffffffcac) 15.733882906s ago: executing program 1 (id=7637): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, r1, 0x201, 0x70bd26, 0xfffffffe, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x31}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x4c}, 0x8, 0x3000000000002, 0x0, 0x4000020}, 0x844) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) close(r2) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000005c0)=""/85, 0x55}], 0x1}, 0x40002142) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="e9932cbd7000fedbdf25060000001400020020010000000000000000000000000002"], 0x28}, 0x1, 0x0, 0x0, 0x20000100}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, r6, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gre0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}]}, 0x6c}}, 0x8000) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r8, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x6c, 0xb, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xfffc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa}}]}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3e}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1ff}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8}, 0x41) close(0x3) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r7, 0x800442d4, &(0x7f0000000000)=0x354e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1b, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001000000000000000900000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018440000030000000000000000000000850000009200000095000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff8500000006000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x1001, &(0x7f0000001cc0)=""/4097, 0x40f00, 0x4d}, 0x94) 15.699382284s ago: executing program 4 (id=7638): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x0, 0x0) ioctl$XFS_IOC_GETBMAPA(r0, 0xc020582c, &(0x7f0000000000)={0x5, 0x6, 0x8, 0x9}) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@setneightbl={0x18, 0x31, 0x1, 0x0, 0x0, {}, [@NDTA_NAME={0x4}]}, 0x18}}, 0x20000000) 15.635077463s ago: executing program 4 (id=7639): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x30, 0x2, 0x6, 0x201, 0x0, 0x6000, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x30}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x30, 0x9, 0x6, 0x5, 0x0, 0x0, {0x6, 0x0, 0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x804) 15.633971342s ago: executing program 4 (id=7640): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f00000000c0)='G', 0x1) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000040)=0x5b9, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffc}, 0x10, 0x0, 0xffffffffffffffff, 0xfffffffffffffeb8}, 0x94) 15.563685992s ago: executing program 4 (id=7641): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x3, 0x6000000, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8}]}], {0x14}}, 0x64}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @address_request={0x11, 0x0, 0x0, 0x2}}}}}, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095", @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, 0x0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x54, &(0x7f0000000540)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, {0x4e22, 0x0, 0x2e, 0x0, @wg=@data={0x4, 0xffff, 0x9, "d9bd3940f69960ef4dddcdcea183a1152656bcd25b24"}}}}}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) 15.454259517s ago: executing program 4 (id=7642): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x14, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x9, 0x1, 0x0, r0}, @ldst={0x3, 0x2, 0x7, 0xb, 0x4, 0x10, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x81, 0x74, &(0x7f0000000200)=""/116, 0x40f00, 0x50, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x136e3, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000002c0)=[{0x5, 0x2, 0x7, 0x5}, {0x3, 0x4, 0xc, 0x2}], 0x10, 0x1}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000003c0)=r3, 0x4) r4 = accept4(r1, &(0x7f0000000400)=@ax25={{}, [@rose, @bcast, @netrom, @remote, @bcast, @netrom, @netrom, @default]}, &(0x7f0000000480)=0x80, 0x80800) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000500)={0x0, 0x1, [0x9, 0x81, 0x9, 0x4, 0x2, 0xd]}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000580), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000005c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000600)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000640)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000680)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r5, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, r6, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}, @NFC_ATTR_FIRMWARE_NAME={0xc, 0x14, '%ps \x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x4c}}, 0x20000014) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(r11, 0xc038586c, &(0x7f00000008c0)={r4, &(0x7f00000007c0)='GPL\x00', 0x200000, &(0x7f0000000800)={@_ha_fsid={[0x8, 0xa]}, {0x7ff, 0x2, 0x2, 0xe241}}, 0x2, &(0x7f0000000840)={@_ha_fsid}, &(0x7f0000000880)=0x80}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x30, 0x2, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9300}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x30}}, 0x8004) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000a00)) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000000a40), 0x4) r12 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r12, &(0x7f0000000a80)={0xa, 0xfffa, 0x1, @mcast1, 0x10}, 0x1c) syz_genetlink_get_family_id$nfc(&(0x7f0000000ac0), r5) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000b00)='\x00', 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000b40)={0x3, 0x8000, 0x3, 0x7, 0x0}, &(0x7f0000000b80)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000bc0)={r13, @in6={{0xa, 0x4e22, 0xed0, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8}}, 0x2, 0x3}, 0x90) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000cc0)={'dvmrp1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)=@newtclass={0x5c, 0x28, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, {0xe, 0x3}, {0x5, 0xfff1}, {0x5, 0xa}}, [@TCA_RATE={0x6, 0x5, {0xa, 0x7}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x6}}}, @TCA_RATE={0x6, 0x5, {0x6, 0x5}}, @TCA_RATE={0x6, 0x5, {0xb, 0xf9}}, @tclass_kind_options=@c_taprio={0xb}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4080}, 0x48800) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000ec0)={0x600000, {0x10, 0x10001, 0x3, 0x3ff000, 0xe}}) 1.037470828s ago: executing program 32 (id=7628): mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3003, 0xffff96aabfff, 0x832, 0xffffffffffffffff, 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)={'c', ' *:* ', 'rm\x00'}, 0x9) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000002500), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002540)={0x58, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x800}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x58}, 0x1, 0x0, 0x0, 0x4801}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x13, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x8}, 0x94) 994.288269ms ago: executing program 33 (id=7634): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_stats}) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000006800010003001000fdffff7f00000000000000000c0002000100000015000000080010"], 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd70000000000001000000080001000300000014000480050003008000000005000300240000000800020003"], 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newsa={0x194, 0x10, 0x1, 0x70bd2b, 0x0, {{@in6=@private1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xecdf, 0x0, 0x200, 0x0, 0x20, 0x0, 0x73}, {@in=@broadcast, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0xfffffffffffffffe, 0x0, 0x6d0, 0x0, 0x0, 0xfffffffffffffffc}, {0x8, 0x4007ff, 0x0, 0x400}, {0x0, 0x0, 0x2}, 0x70bd28, 0x3507, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "e0fad3f10cd3a506627840000000074f"}}, @algo_auth_trunc={0x4c, 0x14, {{'ghash-ce\x00'}, 0x0, 0xc0}}]}, 0x194}}, 0x4050) 529.771164ms ago: executing program 34 (id=7637): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, r1, 0x201, 0x70bd26, 0xfffffffe, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x31}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x4c}, 0x8, 0x3000000000002, 0x0, 0x4000020}, 0x844) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) close(r2) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000005c0)=""/85, 0x55}], 0x1}, 0x40002142) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="e9932cbd7000fedbdf25060000001400020020010000000000000000000000000002"], 0x28}, 0x1, 0x0, 0x0, 0x20000100}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, r6, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gre0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}]}, 0x6c}}, 0x8000) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r8, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x6c, 0xb, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xfffc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa}}]}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3e}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1ff}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8}, 0x41) close(0x3) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r7, 0x800442d4, &(0x7f0000000000)=0x354e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1b, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001000000000000000900000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018440000030000000000000000000000850000009200000095000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff8500000006000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x1001, &(0x7f0000001cc0)=""/4097, 0x40f00, 0x4d}, 0x94) 484.174126ms ago: executing program 35 (id=7635): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="12000000770000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000180), &(0x7f0000000280)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r2, &(0x7f00000001c0), 0x0}, 0x20) r3 = socket(0x3, 0x5, 0x10000080) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000070000000000000001000000cd600c00f0ffffff9520000000000000"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r4, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="9febf4ff1700000b00000000e700000000000000020000000000"], 0x0, 0x1a}, 0x28) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r9, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001cc0)=@newtaction={0x2884, 0x30, 0x1, 0x70bd28, 0xfffffffe, {}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffff7, 0xfff, 0x1, 0x0, 0x4}, 0x4, r10}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, {0x4}, {0x2818, 0x1, [@m_nat={0x284, 0xf, 0x0, 0x0, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x6, 0xffffffffffffffff, 0x100}, @rand_addr=0x64010101, @empty, 0xffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x1, 0x1, 0x2, 0xfffffff9}, @multicast1, @multicast2, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1ff, 0x6, 0x8, 0x7, 0x9d}, @empty, @local, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xc10, 0x20000000, 0xd, 0xb978}, @local, @loopback, 0xffffff00, 0x4}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x3, 0x8, 0x40, 0xc8}, @rand_addr=0x64010101, @private=0xa010102, 0x80}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x5, 0x5, 0xb9ab, 0x2}, @local, @broadcast, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5d70a0e7, 0x4, 0x3, 0x4, 0xf}, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0xc, 0x3, 0x9, 0x81}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1ff, 0x2, 0x10000000, 0x27, 0x2}, @multicast2, @dev={0xac, 0x14, 0x14, 0x40}, 0xffffff00}}]}, {0xf2, 0x6, "103b34f0ecf82339ed7683582a7d61455b3bb29f90204189fd0d54d74675f41faf7f779108ff6d366ce3d8d60d57063def2964dd8dcd287838de8ff53bc840484343b5f368a259f945f36d3bbffa41a4d6d7136dffe284a8b4e8687708c9c5b62956a51af9d99f47d3c8d947d608bd8e04886cf6c3b585ca452bf5f671bb5f24a1eb6d3a58e5e487c02fe592d28daf3669750eae3fd3238e1af9b8fe145b8a668620e170364994793ab7a16769ed3144f93ebe1cadea0cf05917b825f9141a829a4c291c63cb7bd6988622a0053ca2c58c92388b876a0bd747f1a076ffa5831871380c96c34f58e66fc52ee92945"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_ctinfo={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xfffffffa}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xf36}, @TCA_CTINFO_ACT={0x18, 0x3, {0x9, 0x0, 0x3, 0xc5, 0x9}}]}, {0x5, 0x6, "9a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x110, 0x13, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x6, 0x7, 0x8000, 0x3}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xae, 0x951, 0x0, 0x1, 0xff}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x91, 0x4000, 0x6, 0x8000, 0x8}, 0x4}}]}, {0x89, 0x6, "1c53560a8e242a8de976e67d4337651ccdeaca9d291b33a3147e7c4a72cda100b7fb7f8c706da971112007ff4837c769eafb7a5dfb51a8157a3a020e0330ccb6dc79eb8161336cab75d3a1e808a1f7b8571b45216b87cc35371044b6599ac5cf5d09138da22c44691510032f77a1020a2cac0eee4d1484c0e52622a56a7a5d00c958e6b069"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x7}}}}, @m_police={0x118c, 0xd, 0x0, 0x0, {{0xb}, {0x114c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x6, 0x7, 0x10001, 0x1, {0x0, 0x2, 0x7, 0x5, 0x80, 0x8001}, {0x1, 0x2, 0x9, 0x6d5, 0x1730, 0xf1ad}, 0x1, 0x7e1f, 0xfffffffc}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x8000, 0x3, 0x8, 0x1000, 0xffffff09, 0xfffffff8, 0x1, 0x3, 0xb, 0x80000000, 0x3, 0x1, 0x9, 0xb0, 0x400, 0x7, 0x799c, 0x3, 0x50000, 0xee, 0x7fff, 0x4, 0x8, 0xffff, 0xfc, 0xfffffe00, 0x7, 0x4, 0x8, 0x1, 0x0, 0x9, 0x6, 0x2, 0xb, 0xc878, 0x80000000, 0x9, 0x1, 0x7fff, 0x3, 0x0, 0x5, 0xc, 0x10, 0x3ff, 0x40, 0x906, 0x6, 0x0, 0xffffffff, 0x1d7d, 0x28ec, 0xffffc212, 0x4, 0xfff, 0x9, 0x6, 0x6, 0x5, 0x8, 0x6, 0xfffffffc, 0x6, 0x0, 0x2, 0x4f8, 0x8, 0x5, 0x8a7e, 0x431d, 0xe4, 0x48000, 0x3, 0x3, 0xb, 0x9e3, 0x5, 0x7fffffff, 0x0, 0x5, 0x3, 0x5, 0x3, 0x2, 0xd, 0x7, 0x3, 0x1, 0x7, 0x3, 0x7, 0x2, 0x2c40222c, 0x80000001, 0xc000, 0x2, 0x8, 0x5, 0x7, 0xf, 0xa805, 0xffff7fff, 0x0, 0xbf, 0x7, 0x3, 0x7fff, 0x7f, 0x5, 0x0, 0x4, 0x6, 0x2ffc00, 0xab96, 0x4, 0x1, 0x1, 0x3, 0x1, 0x1d, 0x100, 0x6, 0x2, 0xd, 0xd, 0x2735611a, 0x8, 0xe150, 0x1, 0x9f2d535, 0x101, 0xd0, 0x6, 0x8, 0xba2, 0x7fff, 0x1a3d, 0x0, 0xa0, 0x3, 0xe24, 0x2, 0x4, 0xed, 0x81, 0x5, 0x100, 0x3, 0x9, 0x406, 0x6, 0xff, 0x7, 0x8, 0x8, 0x8c74, 0x7ff, 0x0, 0x9, 0x2, 0x8, 0x400, 0x6, 0x800, 0xb62, 0x1, 0x6, 0x8, 0x4, 0x9, 0x6, 0xffffffff, 0x3215, 0x68, 0xc, 0x0, 0x9, 0xfffffff8, 0xda4, 0xffffffff, 0x800, 0x9, 0x8, 0xfff, 0x7ff, 0x91, 0x8, 0x2, 0x7, 0x4, 0x2, 0x954f, 0x40, 0xfffffffe, 0x30, 0x2, 0x7ff, 0x8, 0x0, 0x14, 0x1, 0x4, 0x7, 0x2, 0x1ff, 0x3, 0x0, 0xffffff01, 0xb3, 0xffffffd3, 0x1, 0xa6, 0x8001, 0xcd11, 0xfffff000, 0xe77, 0x800, 0xa0, 0x400, 0x2, 0x8000, 0x1ff, 0x4, 0xff, 0x6, 0xff, 0x4, 0x432, 0x1ff, 0x3, 0x8, 0xfad, 0xdc, 0xe, 0x2, 0x9, 0x7, 0x0, 0x5, 0x7ff, 0x1e80, 0x0, 0x6, 0xecc, 0x2, 0x1, 0x8, 0x9, 0x916, 0x392c, 0xfff, 0x0, 0x2, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x3, 0x200, 0x9, 0xd, {0x8, 0x1, 0x9, 0xe, 0x10, 0x2}, {0x0, 0x1, 0x8, 0x2, 0x5, 0x2e}, 0x176, 0x10000, 0x7db3}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x4, 0xc7ce, 0x400, 0x3, {0xfc, 0x0, 0x8, 0xfff, 0x5, 0x32ef}, {0x3, 0x1, 0x8, 0x0, 0x1}, 0xef, 0x400, 0x5}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x80ec, 0x6, 0xb6cb, 0x3, 0xd0000000, 0x2, 0x4, 0x8, 0x9, 0x6, 0xfffffff7, 0x4, 0x4, 0x7fffffff, 0x6, 0x5, 0x7, 0xccc, 0x6, 0x5, 0x100, 0x8001, 0x9988, 0x1, 0xffff, 0x2cd, 0x3, 0x17, 0x8, 0x4, 0xc36e, 0x3d, 0xc6ee, 0xd, 0x114beed2, 0x4, 0x5, 0x2, 0x1, 0xc, 0x2, 0x0, 0x2, 0x8, 0x198d, 0x9, 0x40, 0x2, 0xb84, 0x9, 0x0, 0x9f9, 0x3, 0x5, 0x1, 0x5, 0x8, 0x5, 0x0, 0x6, 0x8, 0xfffffffe, 0x3, 0x2d177de, 0x101, 0x8, 0x6, 0x3, 0x9, 0x7fffffff, 0x6, 0x3, 0x9, 0x0, 0x400, 0x5, 0x3, 0x9, 0x7, 0xfffffffa, 0x800, 0x7, 0x7, 0x622, 0x0, 0x7fffffff, 0x200, 0x3, 0x7, 0x87, 0x6, 0xe, 0xfff, 0x7f, 0x6, 0x9, 0x3, 0x12b, 0x7fffffff, 0x0, 0x4f1b, 0x9905, 0x8, 0x80000001, 0x0, 0x200, 0x2, 0x5, 0xfe000000, 0xfffffffa, 0x5, 0x800, 0x9, 0x7fffffff, 0x5, 0x0, 0x2, 0x7, 0xdf, 0xfff, 0xc1, 0x8e3, 0x4, 0x0, 0x0, 0x6cc28ae2, 0x5, 0x4, 0x1, 0xa4, 0x5, 0x3b45, 0xfffffffd, 0x3, 0x6, 0x8001, 0xffffffaf, 0x6, 0xb51e, 0x4, 0x0, 0x7, 0x8, 0x7, 0xfffffff7, 0x4, 0x9, 0x6, 0x7, 0x1, 0x9, 0xd, 0x81e, 0x5, 0x6, 0xf5c, 0x80000001, 0x358e, 0xa13, 0xe7ba, 0x30, 0xfffffffe, 0x8, 0x5, 0x1ff, 0x1, 0x23, 0x6, 0x401, 0x5, 0x5, 0xffffffff, 0xa000000, 0x1, 0x5, 0xc, 0x1, 0xb411, 0x55e1, 0x9, 0xe, 0x1, 0x7fff, 0x81, 0x2cd4, 0x5, 0x2, 0x5, 0x6, 0x5, 0x3, 0x5, 0x1, 0xfffffe00, 0x80000000, 0x8001, 0x0, 0x6, 0xfffffff9, 0x6, 0x8, 0xfffff001, 0x401, 0x80000001, 0x99dd8f45, 0x3, 0x0, 0xf3e7, 0x3c, 0x2, 0x3, 0x6, 0x8, 0x30d, 0x22, 0x8, 0x5, 0x5, 0x5, 0x8, 0x2, 0x10000, 0x20, 0xffff, 0x80, 0x7, 0xf8, 0x101, 0x7fff, 0x4, 0xa6c, 0x24, 0x2, 0x8, 0x7, 0x400, 0x101, 0xc, 0x9, 0x8ada, 0x81, 0xa, 0x2d0a, 0xdd, 0x1ff, 0x7, 0x9bd8, 0x9, 0x2, 0x100, 0x1, 0x10000, 0xfffffe56, 0x79, 0x7ff]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xe}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x20000000, 0x7, 0xfff, 0x0, {0x2, 0x2, 0x98e, 0x8000, 0xa, 0x6}, {0x9, 0x0, 0xfff8, 0x0, 0x9, 0xf}, 0x101, 0xe179, 0x3482}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x5, 0x9, 0x0, 0x400, 0x7, 0x1, 0x7fffffff, 0x8e44, 0x1, 0x8, 0xd30, 0x6, 0x6, 0x8, 0x100, 0x6, 0x3, 0x0, 0x436, 0x1c9, 0x7, 0x3, 0x3, 0x80000001, 0xffffffff, 0xea, 0xfffffffb, 0x7f, 0x4, 0x10000, 0x0, 0x1ff, 0x8, 0x1, 0x7, 0x4, 0x6fe6, 0x4, 0x4, 0x7f80, 0x5, 0xfffffffd, 0x9, 0x1, 0x3, 0x3, 0x80000001, 0xe3, 0x5fd, 0x3, 0x4, 0xfffffffc, 0x8, 0xc120, 0xfff, 0xadb, 0xa7, 0x6, 0x22b5, 0x8, 0xf5, 0x400, 0xac, 0x7, 0xc0, 0xce, 0xfff, 0x90e, 0x7, 0xc306, 0x1, 0x7, 0x1, 0x3, 0x0, 0x1, 0xfab, 0x1, 0xffff57cb, 0x8, 0xc2ea, 0x8000, 0xa, 0x6, 0x23d, 0x2, 0x1000, 0x2, 0x6b21fdbb, 0x0, 0x1, 0x8, 0x1, 0xe, 0x2, 0x3, 0xffffa333, 0x8, 0x2, 0x1ff, 0x101, 0x7, 0x56, 0xa3, 0x5, 0xe49e, 0x5, 0x40, 0x7, 0x22a, 0x0, 0x3d9183b3, 0x7f, 0x6, 0x10001, 0x4, 0x311202e7, 0xffff, 0x3, 0x7fffffff, 0x1, 0x6, 0x101, 0x3, 0x2, 0x63, 0x80000001, 0x4, 0x3, 0xfffffffa, 0x9, 0x2c, 0x1, 0xbdd9, 0x4, 0x0, 0x9, 0x4, 0x1, 0xc, 0x2, 0x9, 0x3, 0x0, 0x1, 0x3, 0x7, 0xfffffff2, 0x5, 0x2, 0x741a90ca, 0x6, 0x0, 0x100, 0x5, 0x9, 0x4, 0x10000, 0x2, 0x2a2, 0x0, 0x8, 0xb, 0x6644, 0x1000, 0x6, 0xfffffffa, 0x2, 0x32ab, 0x101, 0x6, 0xc, 0xfffffffc, 0xe1, 0xd, 0x338000, 0x80000001, 0x1ff, 0x7, 0x2, 0xf, 0x1ff, 0x7, 0x7, 0x8, 0x5, 0x9000000, 0x8, 0x4, 0x7, 0x7, 0xb, 0xc0000, 0xe, 0x3, 0xfffffffc, 0x6, 0xfffffff9, 0x15, 0xc, 0xad, 0x10001, 0xfa6, 0x4, 0xd65, 0xfffffff9, 0xd, 0x3, 0x8000000, 0x0, 0x4a9, 0x5, 0x40, 0x5, 0x10001, 0x3, 0x7fff, 0x0, 0x4, 0x3, 0x5, 0xffff5303, 0x7fffffff, 0x6, 0x7, 0x7, 0x73, 0x5, 0xb, 0x4, 0x9, 0x9, 0xec1, 0x4, 0x7, 0x69, 0xffff, 0x9, 0x5, 0x0, 0x0, 0x4, 0x6, 0xffff35f7, 0x14, 0x0, 0x10001, 0x4, 0x400, 0x0, 0xb, 0x3, 0x1ff, 0x8, 0x1]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8000000000000000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xa1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x3, 0x7496, 0x90, 0xb, 0x6, 0x8c3, 0xfffffffe, 0x3ff, 0xfffffffa, 0x9, 0xfffffffa, 0x80000000, 0x200, 0x1, 0x2, 0x6, 0xa9, 0x343a, 0xfffffffa, 0xc, 0x2, 0xfffffff0, 0x9, 0x3, 0x8, 0xcb8e, 0xfffffe00, 0x1, 0x9, 0x8, 0x0, 0x9, 0x9, 0xa95, 0xe0, 0x6, 0x4, 0x4, 0x7, 0x584, 0xeba8, 0xfffffc7d, 0x9, 0xffff, 0x31, 0x7, 0x36, 0x7, 0x2, 0x101, 0xdbf, 0x3, 0x80000001, 0x6, 0xfffffffa, 0x400, 0x10, 0x3, 0x0, 0x6, 0xc, 0x8, 0x1dd, 0x1, 0xfffffbff, 0x3ab, 0x7fffffff, 0x5266, 0x2, 0x7, 0x8001, 0x8, 0xf539, 0x5, 0xffffff40, 0xff, 0xfc50, 0x2, 0xb35e77e0, 0xa, 0x8, 0x1, 0x80000001, 0x8, 0x0, 0x4, 0x16, 0xe212, 0xa, 0x0, 0x7, 0x5, 0x81, 0x5, 0x1, 0x9, 0x4, 0x80000000, 0x9, 0x7, 0x3, 0x2, 0x1, 0x1, 0x8001, 0x2, 0x2, 0x3, 0x0, 0x2, 0x6b, 0x1, 0x0, 0x4, 0x0, 0x5, 0x200, 0x8, 0x1, 0x7d29, 0x16ca4000, 0x2, 0xe, 0x6, 0x48, 0x8, 0x5, 0xfb1c, 0xfff, 0x30000, 0x3a2422bb, 0x627, 0xf2a2, 0x7, 0xb, 0x8001, 0x7, 0x2, 0x0, 0x5, 0xfffffc00, 0x7, 0x5, 0x4, 0x3, 0xffffff81, 0x17d7, 0x7, 0x5, 0x3, 0x94d, 0x29e1, 0x9, 0x401, 0x4, 0xe1, 0xff8000, 0xfffffe01, 0x2fc, 0x8, 0x8, 0x7ff, 0x2, 0xff, 0x4, 0x6bf, 0x127b, 0x3, 0x5, 0x5, 0xc6a, 0x5, 0x1, 0xff9, 0x80000000, 0x7, 0x6, 0x9c7, 0x6, 0xbe4, 0x2, 0x0, 0x7fffffff, 0x8001, 0x7fffffff, 0x5982, 0x80000000, 0x9, 0x3dc00000, 0xed3d, 0x6, 0xff, 0x4, 0x4, 0x1000, 0x9a, 0x9, 0xffffff01, 0x9, 0x1, 0x410, 0xe, 0x5, 0x14, 0x8, 0xa, 0x4, 0x1, 0x8, 0x0, 0xc, 0x7, 0x4, 0x7, 0x2, 0x2, 0x4, 0x2ef, 0x94ce, 0x7, 0x8, 0x4, 0x6bc, 0x2, 0xffffffff, 0x14000000, 0x8, 0x4, 0x146b, 0x7ff00000, 0x7fffffff, 0xb, 0x3, 0x9, 0xc485, 0xc27e, 0xffffffff, 0x120000, 0x4, 0x3a779a91, 0x2, 0x6, 0x7, 0x8, 0x1, 0xc2e, 0x1, 0x8, 0x6, 0x6, 0x5, 0x81, 0x8, 0x10, 0x8001]}]]}, {0x18, 0x6, "6d2bd07e9aa2f7460ca8218cfb17ec2af26d92c8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x1038, 0x7, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}]}, {0x1004, 0x6, "f7988628ec8fd6bbdb68288be7f13990095f99929876e65f739028c8f65b8b61af13a379768151b011ac467a865727029a7ca02346ade208c60b0685ada77fd2fbefa55105aceb807914fec08e2316a89597580db6eb03251344a6f244a050e960cdff17845e55fda03597ed1e317fbbab064ac1ccc6c3cc6056943f9f7915363a033f6170132cef77b1ab4d403750f914f262e0c279fb09217a6f976576a9d35b30b18edab625ed6a23e3ae6d25eb4eae5bb13de26335c56a6f769fa2d61c54eff449705a323084ab56646ccea30cb2f6ecd7629d837cda2a03fecb0d03448736efe72fbb015921697621406dbe1464f1af51666c5e251b0650d258980461ccf08cea5e87cbe82136acbffe8a5fca2f1cf51ebd2352b2cab8c6270e9d1ef191864e01c94e1377ffbf170a4b2a676ae34d2aa64c8e817719248a42dd44722cd6fd9ebd53b1ffd59b1d7ed88af9058a507546fd24817cfbcf405cd8c3d2741961a1a261cb98d945ab23aef9ec912c1a208e63ac9e4157ff726dcd5767fd42454033951cf628110ded75b81f8faf66853d22972bf6a56b3fab0ce4f652c09e37e137bc63bc6e1870250c8e20b289a208c2e0364de95b67c9f093961d5b5ee1a21f59831923a67fd2b831e70381be3cee153817dac220d9dbde76c55b3a9d639ee5b9be707c4e90818c9f5850b2c70b988ab62579bd34b3752f555df5ce41bf9a43df21604794fc2f4e56ee79ff33ac718d9c6e278d55cdd79042c3a8d6ebb45238c1e5c4c84ed06be62089b7ad4297d32f55089d3e7daae4adcc7cc2706cd0903bab0b86de99b844983c7aa38b886f56c872b280b2b67b95ab243fb7ef59e0f882e8fc6fe9b35738d73869e8c0b40b0523c03a35f9417f38b83b4b76ef481c8eca3432dd23209307101fb347ddbf2444e0bcd3b962a30b1ad3f97b3dcd362e39802dc8e831a390ebb8c00aa48575d747cd7890ca19a7713d8469b3806552d98b6890df4ed148b06569262b843b8cde9c4e26a444e5ea694b320fc527a2fbd473281977794bd64cc9529021139c72ed5cb2d71c9e32f64a9aa2060fefb62970def3bb68b353735aa0df53380c62f32d0e499f915f43aac9c19abdcd8e1bd550016181e6df82bf855183e7a62f777af76749259947624bcaaa95e91e55c5b1861e0a1f3c37593fd7cb4d23eebd2f2e813481ebfc72f33dbfd44ae80ed23b90e93b46555d11077d9e9ccb58e43e424f240f147707b9923c6522f09e607785dea59d8c71c204840db87ef7d04597a056b2ffdcf4da7e6ba598ad2b9a61918c50ebfa427e7a276a6179a73852d10637d2c17eafc62aec6aad9e602b1499ce77f98f38e870da5b62f2ec1c6032629f11916dfa1acc3c7d90284723d2377d93817ed21ecfe3429a6cf7f757c1ea2f54d609801295bf456e1fb615f7d6378673d33aaace946f3ad80d4a666fa63126c179593133be2a08510ebb3c4a347671936b43964d68cdb8b405c27d81f281c04f4c57c46639795ca9ff5c9a64c84942e1ccda18dc2107951696f3cc574aee3ad11dd04910d52f98f96b0cb40720ab18bcffefc9c414a34b4306f06c0d2b39610e05e70176d8b57cea66d5552fdf8f01ba29f7a25cd1f93ccf0762a74b427a550db91db2d4f2940f00822ef2654b7392b60371e7eeabe77bb91824e930e9a53ded19fca6b46df5ff2ddee5f724cb770ac15f18cb4367ab3614a0c2e6759895fc598282ffb2f823a5d49ce22aa558aba952e82e1f382e4ca9609d24305742857f5b53a6c2b2dba39ca43e7811cb513d28fc8b0442013f5da87611b0a1cdb8e1dc0be9aa827747243954807e88ebd959b28b1453e499c39d79da99bf20a67160faac2049e0e4730d119e9e6f0eb091b8a9624b20caec7fb1f3a77f4b25edf5e95cdf53ba37cbb33ea6c80ce08d6e5d5addf1fa8dae3dcc3de3eb6dc6ad945a59b77baf2cfe1363a5038feecfb107caf9c77de355e863f8bf94fea9ec27d91685bf7835205feb816b419e1ad20d3d3561cf1abf3f3bbdf32fcb684059fa3f893930c2e585a568d9a7596ff6d7f83418f778787d0337ed09ca0607ab7c81c27dafb54c108428dfbb6e64c85006e4d613f80c823828208b24bb2729e1556122759e424aa99a2efb2d09cb150636d15cf2a4160bab3ea0053156ca0706b71f491d224360cf4d83f1c86a4a1224b010cde251af530578e36ae8217f9c476d9be81d3bf9c41d824dfe66001b0a03e1e3f3ddeef37c2af268b0c8b6a77e9595c6d09bc00d7f6ccb3360acc51f125d9542fc257b5d301afd89cc3bee17b312735034a0841c574a2cc16c68d48ff1a6aa10e10acbed22bf467967e01c5908526b51a4888b4814d4a7bb21dc5568935a4451ef2358678c534dfc80f21782d891e62a582b7032ecea085011ec8c293774f5601beba2f62fb2af4aba0c25eb5f5f63e4246d7a067e607f7a10a286b46ddd00ab60527e6ade43b2e1fad9f73d6c2af75227516906c69febfd121f33bbaa58d3bbac95085546bb9089d9e3a8c2e339f066bb022f92300751f30dfb3183a8ecfddceac128e3a3799a90ea9dfe7eead50a25a862deaa32d6042bdc8d8df51c7e7212f494c78ee1f23dba7c4b0f61b92f333826795c494622eda44453655be5f6a660170dc4bc9884aecd72be553c31c2ff62fadd018747db9c75d1f0744297329a5e298d521031aa2ec6850ae1af28b1c751824105780d6ca02bed74f2baf778601be25c31ed93359f943bd2cffce8de803246d97f37ba468b19b0bf98df8eb91e5587b209612d7a99451d4fcf7896fd2189bb74a21da65cb1c2ae5f0fb4da2f116bae1d35f7ead349e373cf36855e5a04dac2e611f69fffa39d63651b95573f383487882184c506dba8f141eb9bfc03531344e6c6cb3acc61f963813c18b9ba31247eb37aa810333f3ffcd702392e256ec0599a7774f427a17a4b5902c6cef0b9e139a06f61e35af6904f97b5b7d771df948892d711377c2038e785162468ef01902bcb9068f585c3f3d69a1e6c619d16f07e3a50258be507a096dd086760e2d3cc444b8c558dbfbe065df26f118905cd837c6587162db3f72d2c8525ecb20994bb2e703581a3ffd450f3a31b70508d3e30b7a269b15a5f68004101f2e25a7d217d58c237b052b8d057549ed64bf2020952f50bce60ab5a3c06adf1dec11f410e03948661c5ddecd618a3cab818064580b6f43a654acc918f6bc0c837c9e0a2acf4fd1a4d9d4aedfb238f7ae7f3263e69905ff8bb0e6ecd57ec947d6a2310f1646efee7ddf67de9161b06886d9c781d9e5692f9b9f80990ae4fe1838c6f162fd1cf13d80456b8a6099b5443966ef1c642e032a2a63600ce5808b082536010ab2d8c2990e71dcdc806fa1c9048f95e5855bc925b5dc0704678d0ee071ec7595f7901b2a61ef49e2676f23d945bf33d6b087b2f23f6be2b92ea9a94ebe88c90fb18c11744f369096a6e73783ce7df1ce642bb348bba7ba490a419a458fe0167f7ee563e7b5f0235082ddbbe963d24a559df1c5a5a4a7e8bee2ea147c9e16e7d8d6133e0481cff0ada20c1108fa10673e692904499fe6e317d17c38c9585b090676162132528f97f6c26cb3e8fc520a860d5f3ce7c5208e4d506ace3285a76ac4593f1426859e8880813743b64f50120317b1fe3a10583522eacc47a153d47cb89884d73c8f0a3cc5273211f1708eaca1b0993b624cfa4555b446c016fd8eeae2afaca6854266c3cdc764a4a9b1d4f6363be7273ef5b21ea2ec1697b59a901b4907dd4700c046ef4b08575a8f0404dedc820d29b291b131b40a0c24b405b2ae3f64d411c9e84d919212239324aa3bffe708fa054ee562be629a356f98e614fce1d766d86c4f4af0167847ab3c2c5609e7de76c918ea0ebe83da9c3b8c7fe9e0678262468e7afd73d4af58c93b7da6b734b10de98675e49b301074d47367c541008a2c001791ba16e06ce0b67a806d53dcf9818057dd78259e86c68cc30721f9dc9de2db6052da4c1b42c5b4ab9744d78b69889fd11c90442c50ec1661a2614422f3510a54566e27029474f8e332d448c4c407c88d912bd355cbd33e957e1e88d760f06ae04c21991517fd4e7e863ff2c18ba5ac22362953994c80bc7b5be2d41c7d1bd5950e6d90b004ac7f2e9f5211f52e60fce29050dfea2ff67f83460577cbf9733aba07fd4ba25dcf405e2af4df026d780e4c3d585a8722ad2bb85abb36b2bfcb9303b0c23f4ec24bfe64188bfa724da08c9e38564f679377282d28a1ec0177e9913b0823f115f2fe75714ba3b0a0ef355475ea6da6928e58a787c446b678b0d28228cd067b4217580892f15983b53c3d64cbbf5bf32121f726366aa6dcc2c26d694657f0c8b86c42bfe0a5517797ce538870083b893f05574242c28f2dadae978d11910d3de63871f50072099fbd4c079aaa4b4976088ecd4e414e3beabeeae53a2b0d392295c27fbc3ae778949626add83010ca6ee98fd63fc425e0f45c009fdc31b0cea9e4d08046fbdb6df5fbde7b55e5ed33808b7c4c5dd2f30c1aba8a059d8bfcdd16072c31f7e001f2a7286524e587a44d52ffe91dd64ded15d77ebf140d40a2f11611ebc746ed9d40e16299d70a98c5df752b655a0188f433c4f24f94a15cd5279147cefe063c31f77e7e0ea1ac32ec39e7fb1217b27b33f9d32575010f4cc38bffb8c6217d51b3c42dbf72b611778b8b79157776f0feb7ee4b5b1c1499b406bf626b68dd33528c649eab499b7643550684934497df2fda95c909fa14e2037d8c103887ce92cff979b3debb882e03063c3d5e6b0ce55cc5c31a29d95c2f3c646229e2e93547deae9218d4307b4d079322c7b96c4f42c35ce1452279020e2b0a6ce5a1bf4481d718fd7c5dd4a060e8c204fb0ac0e6f1e96d2f90f94cd8dfac4414461500653f80b73bd0deb242833eb7c022e1ea5ad765fe8aca1828c01521a93d626afd379c5c7defd753246b46436a068a62a29842a2d0616d6e8e6f7c08f6668f79c7e48890eb1638f3634c7741ada501c14e3e815c31b9c367e1495ba42027dc35ba6275ed60130c409d734d3ca51e031255f1e9c80cfa76dd8b05c9c249baca3b5175eb198aa260990ba8a2d20a561705e290fa5bf478761694eac67e77461c7791ca191ac38b36a84f5e9adc61142e9e813f565706aff274a13da0fb19817e54b673afe6b6597856574e17de8857935bda0f6ba2858b64eb3199b194f86bdb33fc1c3ff824d479138601820666939beaf8f1874456369b2af561c201f5fffb337cb5f773f30cecdd00e7832af5ca1cc4e24eb68dcc91fabbc3ec7d8067da65e5619685cede9310f0b6010025ec0826f2412d0bb24d623be7f3009d070213eb6af2e9841e00d66d3bd9e445694c86f20bc615b77b9d05c0b30900c8641ec3bc2e03361e834ee8d2289cd6c10ff17327c55380a062f34791bb549ab3f02dcb2ffee9acef7718fe6d10b485ae9fa1bee62f95630eef5d4fa4b03dbd0577f99badd5f3f8dd3c4362e674c8411da2b86f313e9f54455d14a6b0aba94eab5e5850dce4cffe811a1b246f653ac2b53c7682a6f5dba77257d501b4946ae0f22e9dfac30c291d51f8171436ae76b7ed06ab8d0f2fcbcb3c0a8dedde73287804ff8276dc23b98bc180ce1a1546a31374d83e335e66406212cd371d26c6292013e78d2facf5fa3a2d651fd5762b3700e410b33f93c234b469e2a023c599f2c43c1a92d1a9d636c2f414afc9c0108863f96f0c0d1ebc41e4d2f14d91dfaa14b990997d82abf26105a67eb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_gact={0xd4, 0x9, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x81, 0x5, 0x3, 0xffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x2, 0x10000000, 0xffff8001, 0x80000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x5, 0x4, 0x6, 0xfff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1604, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x80000000, 0x7, 0x3, 0x7fffffff}}]}, {0x3b, 0x6, "e04410eac4f207b870555dca2e084b0a7c4e8a5ec8c9e638fee64ac8ec719374b9b74ca92be2ebca2d7ce175a4b4ae4c5825a65ff6f073"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0x18c, 0x2, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x40, 0x5, 0xffff8001, 0x7}, @dev={0xac, 0x14, 0x14, 0x14}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0x6, 0x1, 0x10001, 0x8}, @multicast2, @empty, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x800, 0x9, 0xffffffffffffffff, 0xf803, 0x7fff}, @multicast2, @empty, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3ff, 0x7fffffff, 0x10000000, 0x1, 0x9}, @multicast1, @rand_addr=0x64010102, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x180, 0x5, 0x30000006, 0x5b23, 0x6}, @rand_addr=0x64010101, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0xc5, 0x2, 0xb1eb, 0x7fff}, @loopback, @empty, 0xff000000}}]}, {0x74, 0x6, "9516aaf2746d8595fbaff97b7f2e6c6f0ed51296ed1892f861955d96d22f70eceaa57d68b84715f54ab948fc7027d6bf5b2b7f50e9f79f38935c3842ec00701e4ca63687997a926d4a21b8d948f35d7cd8e084a037c8f12621e900e7a90ce1e3867c5df091e2a7d495253758b80dc21f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x2884}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001c40)=@newtaction={0x68, 0x31, 0x123, 0x70bd25, 0x25dfdbf7, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x3, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x0, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x20048844) r12 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000090b00000a4d55e79add41ada0000000000000000", @ANYRES32=r13, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="18000000150001000000000000000000020000006197257d1bddb26a0b1a082ab24c77dae496907ca96b088ec7d18b35fc800061372dadb006db1d8f5fa2abcec42703b92c3e7f7a27b8bce2db438baad5f585fd2202611d2c45a142f87e95df771b81050ed2f6219f2f257fd61391cc03a397afcbd6ff7d72f691a02756fd2ba4ddaf33674588d0d2255a76998def6940582ac8f48ff0c8496dc59957e55565b441", @ANYRES32=r13], 0x18}}, 0x0) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r14 = socket(0x15, 0x5, 0x0) getsockopt(r14, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 0s ago: executing program 36 (id=7642): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x14, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x9, 0x1, 0x0, r0}, @ldst={0x3, 0x2, 0x7, 0xb, 0x4, 0x10, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x81, 0x74, &(0x7f0000000200)=""/116, 0x40f00, 0x50, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x136e3, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000002c0)=[{0x5, 0x2, 0x7, 0x5}, {0x3, 0x4, 0xc, 0x2}], 0x10, 0x1}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000003c0)=r3, 0x4) r4 = accept4(r1, &(0x7f0000000400)=@ax25={{}, [@rose, @bcast, @netrom, @remote, @bcast, @netrom, @netrom, @default]}, &(0x7f0000000480)=0x80, 0x80800) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000500)={0x0, 0x1, [0x9, 0x81, 0x9, 0x4, 0x2, 0xd]}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000580), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000005c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000600)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000640)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000680)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r5, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, r6, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}, @NFC_ATTR_FIRMWARE_NAME={0xc, 0x14, '%ps \x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x4c}}, 0x20000014) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(r11, 0xc038586c, &(0x7f00000008c0)={r4, &(0x7f00000007c0)='GPL\x00', 0x200000, &(0x7f0000000800)={@_ha_fsid={[0x8, 0xa]}, {0x7ff, 0x2, 0x2, 0xe241}}, 0x2, &(0x7f0000000840)={@_ha_fsid}, &(0x7f0000000880)=0x80}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x30, 0x2, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9300}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x30}}, 0x8004) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000a00)) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000000a40), 0x4) r12 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r12, &(0x7f0000000a80)={0xa, 0xfffa, 0x1, @mcast1, 0x10}, 0x1c) syz_genetlink_get_family_id$nfc(&(0x7f0000000ac0), r5) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000b00)='\x00', 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000b40)={0x3, 0x8000, 0x3, 0x7, 0x0}, &(0x7f0000000b80)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000bc0)={r13, @in6={{0xa, 0x4e22, 0xed0, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8}}, 0x2, 0x3}, 0x90) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000cc0)={'dvmrp1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)=@newtclass={0x5c, 0x28, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, {0xe, 0x3}, {0x5, 0xfff1}, {0x5, 0xa}}, [@TCA_RATE={0x6, 0x5, {0xa, 0x7}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x6}}}, @TCA_RATE={0x6, 0x5, {0x6, 0x5}}, @TCA_RATE={0x6, 0x5, {0xb, 0xf9}}, @tclass_kind_options=@c_taprio={0xb}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4080}, 0x48800) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000ec0)={0x600000, {0x10, 0x10001, 0x3, 0x3ff000, 0xe}}) kernel console output (not intermixed with test programs): 0048) [ 719.192626][T30585] tc_dump_action: action bad kind [ 719.687001][T30626] netlink: 'syz.1.6428': attribute type 97 has an invalid length. [ 719.851932][T30641] netlink: 'syz.4.6431': attribute type 4 has an invalid length. [ 719.887277][T30641] netlink: 'syz.4.6431': attribute type 8 has an invalid length. [ 719.916125][T30641] __nla_validate_parse: 2 callbacks suppressed [ 719.916142][T30641] netlink: 212 bytes leftover after parsing attributes in process `syz.4.6431'. [ 720.099337][T30654] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6434'. [ 720.125286][T30656] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6436'. [ 720.203345][T30667] team0: No ports can be present during mode change [ 720.414635][T30675] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 720.423043][ T5735] team_slave_0: entered promiscuous mode [ 720.434829][T30672] netlink: 'syz.4.6439': attribute type 1 has an invalid length. [ 720.442845][T30672] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6439'. [ 720.550417][T30677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6440'. [ 720.562469][T30679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6441'. [ 720.573889][T30679] netlink: 'syz.4.6441': attribute type 1 has an invalid length. [ 720.583646][T30677] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6440'. [ 720.594406][T30679] geneve1: entered promiscuous mode [ 720.600117][T30679] geneve1: entered allmulticast mode [ 720.624351][T30679] macvlan3: entered promiscuous mode [ 720.636196][T30679] macvlan3: entered allmulticast mode [ 720.795856][T30686] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6443'. [ 721.324379][ T5938] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 721.355112][T30714] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 721.368021][T30727] netlink: 'syz.4.6456': attribute type 5 has an invalid length. [ 721.580606][T30741] netlink: 'syz.4.6462': attribute type 4 has an invalid length. [ 721.620200][T30746] syzkaller0: entered promiscuous mode [ 721.638841][T30746] syzkaller0: entered allmulticast mode [ 722.792604][T30832] bridge0: port 3(syz_tun) entered blocking state [ 722.803487][T30832] bridge0: port 3(syz_tun) entered disabled state [ 722.811366][T30832] syz_tun: entered allmulticast mode [ 722.819514][T30832] syz_tun: entered promiscuous mode [ 722.844222][T30837] siw: device registration error -23 [ 724.856768][ T5938] wlan1: Trigger new scan to find an IBSS to join [ 725.561722][T30809] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 725.637808][T30856] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6492'. [ 725.720967][T30867] netlink: 'syz.2.6494': attribute type 3 has an invalid length. [ 725.750225][T30863] veth0: entered promiscuous mode [ 725.763519][T30867] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 725.777720][T30868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6496'. [ 725.802871][T30868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6496'. [ 725.853410][T30868] syzkaller1: entered promiscuous mode [ 725.871468][T30868] syzkaller1: entered allmulticast mode [ 725.896967][T30859] veth0: left promiscuous mode [ 726.220633][T30890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6503'. [ 726.299011][T30890] ipvlan2: entered allmulticast mode [ 726.481234][T30904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6511'. [ 727.141422][T30931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6521'. [ 727.153661][T30933] netlink: 'syz.2.6522': attribute type 1 has an invalid length. [ 727.164922][T30931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6521'. [ 727.188258][T30933] bond1: entered promiscuous mode [ 727.196999][T30933] 8021q: adding VLAN 0 to HW filter on device bond1 [ 727.356298][T30937] 8021q: adding VLAN 0 to HW filter on device bond1 [ 727.366580][T30937] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 727.386147][T30937] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 727.432925][T30937] bond1: (slave ip6gre1): making interface the new active one [ 727.468091][T30937] ip6gre1: entered promiscuous mode [ 727.488252][T30937] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 727.897739][ T5938] wlan1: Trigger new scan to find an IBSS to join [ 728.123048][T30985] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 728.226541][T30990] netlink: 'syz.3.6546': attribute type 10 has an invalid length. [ 728.269113][T30990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.310903][T30990] team0: Port device bond0 added [ 728.494856][T31003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6552'. [ 728.658284][T31011] syzkaller0: entered promiscuous mode [ 728.674042][T31011] syzkaller0: entered allmulticast mode [ 729.119595][T31036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6568'. [ 729.374409][T31047] syzkaller0: entered promiscuous mode [ 729.382110][T31047] syzkaller0: entered allmulticast mode [ 729.405250][T31051] netlink: 'syz.2.6575': attribute type 39 has an invalid length. [ 729.723768][T31068] syzkaller0: entered promiscuous mode [ 729.800460][T31074] netlink: 'syz.0.6585': attribute type 4 has an invalid length. [ 729.977784][ T1939] block nbd1: Possible stuck request ffff888078847000: control (read@0,4096B). Runtime 90 seconds [ 730.360441][T31107] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6598'. [ 730.715696][T31077] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 730.848742][T31128] __nla_validate_parse: 1 callbacks suppressed [ 730.848763][T31128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6606'. [ 730.936513][ T5951] wlan1: Trigger new scan to find an IBSS to join [ 730.948503][T31131] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6609'. [ 731.000399][T31131] syzkaller1: entered promiscuous mode [ 731.019516][T31131] syzkaller1: entered allmulticast mode [ 731.301236][T31159] netlink: 'syz.4.6620': attribute type 21 has an invalid length. [ 731.329597][T31159] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6620'. [ 731.377721][T31163] netlink: 'syz.4.6620': attribute type 11 has an invalid length. [ 731.658060][T31166] mac80211_hwsim hwsim83 wlan0: entered promiscuous mode [ 731.680558][T31166] bond1: left promiscuous mode [ 731.685513][T31166] ip6gre1: left promiscuous mode [ 731.693976][T31159] netlink: 'syz.4.6620': attribute type 5 has an invalid length. [ 731.708519][T31159] netlink: 'syz.4.6620': attribute type 6 has an invalid length. [ 731.721485][T31159] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6620'. [ 731.742716][T31171] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 731.762013][T31152] lo speed is unknown, defaulting to 1000 [ 731.775121][T31170] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 731.855839][T31170] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 731.888234][ T5931] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 731.915249][T31170] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 731.949332][T31182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6625'. [ 731.959192][T31182] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6625'. [ 731.998622][T31156] bond1: option lacp_active: invalid value (8) [ 732.007243][T31156] bond1 (unregistering): Released all slaves [ 732.041616][T31182] bond1: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 732.068392][T31182] bond1 (unregistering): Released all slaves [ 732.107609][T31170] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 732.224025][ T5953] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.259344][ T5957] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.298882][ T5931] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.345148][ T5938] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.525728][T31206] vti0: entered promiscuous mode [ 732.582405][T31208] netlink: 'syz.4.6632': attribute type 5 has an invalid length. [ 732.601546][T31211] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6634'. [ 732.721620][T31221] netlink: 'syz.0.6638': attribute type 1 has an invalid length. [ 732.864978][T31221] 8021q: adding VLAN 0 to HW filter on device bond4 [ 732.992654][T31235] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 733.042865][T31238] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 733.082648][T31235] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 733.150045][T31235] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 733.200977][T31235] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 733.312212][T31240] netlink: 'syz.1.6643': attribute type 2 has an invalid length. [ 733.583850][ T5957] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 733.601839][ T5957] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 733.623826][ T5957] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 733.642972][ T5931] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 733.963207][T31283] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 734.011289][T31288] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6652'. [ 734.039357][T31292] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6652'. [ 734.060741][T31288] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6652'. [ 734.093034][T31292] geneve3: entered promiscuous mode [ 735.140710][T31352] block nbd0: NBD_DISCONNECT [ 735.724164][T31382] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 736.096279][T31402] __nla_validate_parse: 1 callbacks suppressed [ 736.096299][T31402] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6679'. [ 736.129177][T31402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 736.529968][T31402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 736.549487][T31402] bond0 (unregistering): Released all slaves [ 736.568155][T31408] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6681'. [ 736.821255][T31426] netlink: 112 bytes leftover after parsing attributes in process `syz.4.6686'. [ 737.500031][T31449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6692'. [ 737.831680][T31466] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6697'. [ 737.848468][T31466] geneve4: entered promiscuous mode [ 737.853904][T31466] geneve4: entered allmulticast mode [ 738.148493][T31477] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6700'. [ 738.195765][T31477] openvswitch: netlink: Flow actions attr not present in new flow. [ 739.398816][T31537] rdma_op ffff8880288159f0 conn xmit_rdma 0000000000000000 [ 739.418444][T31539] rdma_op ffff88803455a1f0 conn xmit_rdma 0000000000000000 [ 739.431551][T31540] netlink: 'syz.3.6724': attribute type 1 has an invalid length. [ 739.492327][T31540] 8021q: adding VLAN 0 to HW filter on device bond1 [ 739.599366][T31539] bond1: (slave gretap2): making interface the new active one [ 739.608640][T31539] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 739.625057][T31556] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6728'. [ 740.413269][T31611] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6738'. [ 740.615767][T31617] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 740.652041][T31620] team0: entered promiscuous mode [ 740.669025][T31620] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 740.693858][T31620] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6743'. [ 740.782144][T31624] openvswitch: netlink: Flow key attr not present in new flow. [ 740.835282][T31626] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6745'. [ 740.919141][T31630] xt_CT: You must specify a L4 protocol and not use inversions on it [ 741.058700][T31639] pim6reg: entered allmulticast mode [ 741.131762][T31640] pim6reg: left allmulticast mode [ 741.155420][T31604] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 741.315061][T31647] batadv_slave_0: entered promiscuous mode [ 741.345518][T31647] tipc: Enabling of bearer rejected, failed to enable media [ 741.527166][T31645] batadv_slave_0: left promiscuous mode [ 741.623277][T31672] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6761'. [ 741.767985][T31677] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6758'. [ 741.813195][T31663] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6758'. [ 741.845318][T31677] netlink: 11 bytes leftover after parsing attributes in process `syz.2.6758'. [ 741.867401][T31663] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6758'. [ 741.930758][T31695] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.973861][T31700] netlink: 140 bytes leftover after parsing attributes in process `syz.3.6767'. [ 742.020390][T31700] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6767'. [ 742.080198][T31697] syzkaller0: entered promiscuous mode [ 742.095869][T31697] syzkaller0: entered allmulticast mode [ 742.112317][T31705] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6764'. [ 742.159667][T31695] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.242356][T31695] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.321934][T31695] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.447452][ T5931] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.484247][ T5938] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.510123][ T5938] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.544856][ T5938] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.587829][T31724] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6774'. [ 743.640402][T31771] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6782'. [ 743.708569][T31767] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 743.906121][T31795] syzkaller0: entered promiscuous mode [ 743.923341][T31795] syzkaller0: entered allmulticast mode [ 743.948961][T31795] 0: reclassify loop, rule prio 0, protocol 800 [ 744.111537][T31811] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 744.285776][T31819] vlan2: entered allmulticast mode [ 744.297172][T31819] bond0: entered allmulticast mode [ 744.304007][T31819] bond_slave_0: entered allmulticast mode [ 744.310771][T31819] bond_slave_1: entered allmulticast mode [ 744.336841][T31819] team0: Port device bond0 removed [ 744.352842][T31819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 744.375199][T31819] bond_slave_0: left allmulticast mode [ 744.408107][T31819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 744.432955][T31819] bond_slave_1: left allmulticast mode [ 744.452013][T31819] bond0 (unregistering): Released all slaves [ 745.169861][T31872] netlink: 'syz.1.6809': attribute type 1 has an invalid length. [ 745.206635][T31862] lo speed is unknown, defaulting to 1000 [ 745.228945][T31872] 8021q: adding VLAN 0 to HW filter on device bond2 [ 745.238251][T31872] bond1: (slave bond2): making interface the new active one [ 745.247237][T31872] bond1: (slave bond2): Enslaving as an active interface with an up link [ 745.258544][T31876] tipc: Started in network mode [ 745.269244][T31876] tipc: Node identity 7f000001, cluster identity 4711 [ 745.276734][T31876] tipc: Enabled bearer , priority 10 [ 745.613692][T31901] rose0: renamed from vlan0 (while UP) [ 745.846996][T31919] syzkaller0: entered promiscuous mode [ 745.856606][T31919] syzkaller0: entered allmulticast mode [ 746.154457][T31928] ip6gre1: entered promiscuous mode [ 746.164350][T31928] ip6gre1: entered allmulticast mode [ 746.309005][T31944] netlink: 'syz.3.6830': attribute type 1 has an invalid length. [ 746.374002][T31944] bond0: entered promiscuous mode [ 746.381526][T31944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.413540][T31944] bond0: (slave bridge3): making interface the new active one [ 746.423625][T31944] bridge3: entered promiscuous mode [ 746.432640][T31944] bond0: (slave bridge3): Enslaving as an active interface with an up link [ 746.441902][T10895] tipc: Node number set to 2130706433 [ 746.728262][T31975] __nla_validate_parse: 11 callbacks suppressed [ 746.728284][T31975] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6839'. [ 747.080552][T32001] erspan0: entered promiscuous mode [ 747.086525][T32001] vlan2: entered promiscuous mode [ 747.172445][T32002] syzkaller0: entered promiscuous mode [ 747.188588][T32002] syzkaller0: entered allmulticast mode [ 747.229941][T32010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6849'. [ 747.270563][ T5951] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.308669][T32014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6845'. [ 747.309544][ T5951] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.389283][ T5951] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.561885][ T5953] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.573658][T32018] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.600252][T32021] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 747.722342][T32018] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.761879][T32022] tipc: Enabling of bearer rejected, failed to enable media [ 747.807988][T32018] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.861457][T32035] syzkaller0: entered promiscuous mode [ 747.867721][T32035] syzkaller0: entered allmulticast mode [ 747.911714][T32018] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.012054][ T5953] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.058238][ T5932] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.106440][ T5931] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.119395][T32068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6864'. [ 748.142842][ T5931] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.171352][T32059] siw: device registration error -23 [ 748.565568][T32104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6871'. [ 748.599726][T32074] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 748.619579][T32057] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 748.694478][T32104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 748.703488][T32111] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 748.785812][T32115] veth1_to_bond: entered promiscuous mode [ 748.809927][T32115] veth1_to_bond: entered allmulticast mode [ 748.818342][T32114] veth1_to_bond: left allmulticast mode [ 748.824024][T32114] veth1_to_bond: left promiscuous mode [ 748.883045][T32117] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6879'. [ 748.921578][T32120] netlink: 'syz.0.6881': attribute type 2 has an invalid length. [ 748.984571][T32122] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6880'. [ 749.046197][T32122] nbd0: detected capacity change from 0 to 3 [ 749.062563][T27953] buffer_io_error: 54 callbacks suppressed [ 749.062580][T27953] Buffer I/O error on dev nbd0, logical block 1, async page read [ 749.091025][ T5624] block nbd0: Receive control failed (result -104) [ 749.113030][T32130] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 749.236890][T32120] netlink: 'syz.0.6881': attribute type 21 has an invalid length. [ 749.247653][T32120] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6881'. [ 749.660135][T32161] syzkaller0: entered promiscuous mode [ 749.665776][T32161] syzkaller0: entered allmulticast mode [ 750.210755][T32196] netlink: 'syz.3.6900': attribute type 16 has an invalid length. [ 750.244654][T32196] netlink: 'syz.3.6900': attribute type 17 has an invalid length. [ 750.287812][T32196] bridge0: port 3(syz_tun) entered blocking state [ 750.294411][T32196] bridge0: port 3(syz_tun) entered forwarding state [ 750.322048][T32196] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.329445][T32196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 750.341210][T32196] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.348436][T32196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 750.409181][T32196] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 750.438518][T32196] ip6gre1: left promiscuous mode [ 750.443693][T32196] ip6gre1: left allmulticast mode [ 750.453357][T32196] bond0: left promiscuous mode [ 750.459652][T32196] bridge3: left promiscuous mode [ 750.479367][T32199] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 750.492441][T32199] batman_adv: batadv0: Adding interface: gretap1 [ 750.501287][T32199] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 750.549032][T32199] batman_adv: batadv0: Interface activated: gretap1 [ 751.050998][T32212] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6904'. [ 751.060277][T32212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6904'. [ 752.827765][T32170] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 753.153131][T32232] vxcan1: tx drop: invalid sa for name 0x0000000000000003 [ 753.189389][T32235] xfrm1: entered allmulticast mode [ 753.232506][T32237] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 753.279750][T32240] netlink: 'syz.3.6915': attribute type 1 has an invalid length. [ 753.289916][T32240] netlink: 'syz.3.6915': attribute type 2 has an invalid length. [ 753.345548][T32246] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 753.352726][T10900] IPVS: starting estimator thread 0... [ 753.353802][T32246] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 753.456176][T32247] IPVS: using max 45 ests per chain, 108000 per kthread [ 753.569218][T32261] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 753.583379][T32249] lo speed is unknown, defaulting to 1000 [ 753.751531][T32268] macvtap0: mtu less than device minimum [ 754.533612][T32308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 754.676245][T32310] syzkaller0: entered promiscuous mode [ 754.689107][T32310] syzkaller0: entered allmulticast mode [ 755.202242][ T5735] IPVS: starting estimator thread 0... [ 755.319971][T32334] IPVS: using max 39 ests per chain, 93600 per kthread [ 755.475222][T32358] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6950'. [ 755.588129][T32358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6950'. [ 755.603266][T32358] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6950'. [ 755.792482][T32382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6955'. [ 755.955038][T32395] netlink: 'syz.4.6959': attribute type 13 has an invalid length. [ 755.965276][T32395] netlink: 'syz.4.6959': attribute type 17 has an invalid length. [ 756.151105][T32406] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6953'. [ 756.203120][T32395] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 756.233397][T32398] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 756.261663][T32398] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 756.272336][T32388] lo speed is unknown, defaulting to 1000 [ 756.277927][T32398] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 756.408436][T32411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6962'. [ 756.557910][T32378] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 756.575265][T32378] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 756.635692][T32378] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 756.655765][T32378] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 756.735275][T32378] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 756.750991][T32378] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 756.833279][T32378] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 756.840212][T32378] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 756.893220][T32378] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 756.906696][T32378] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 757.483474][T32435] FAULT_INJECTION: forcing a failure. [ 757.483474][T32435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 757.543020][T32435] CPU: 1 UID: 0 PID: 32435 Comm: syz.0.6969 Not tainted syzkaller #0 PREEMPT(full) [ 757.543050][T32435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 757.543064][T32435] Call Trace: [ 757.543073][T32435] [ 757.543082][T32435] dump_stack_lvl+0xe8/0x150 [ 757.543111][T32435] should_fail_ex+0x40c/0x560 [ 757.543136][T32435] _copy_from_user+0x2d/0xb0 [ 757.543165][T32435] kstrtouint_from_user+0xd6/0x180 [ 757.543187][T32435] ? __might_fault+0xaf/0x130 [ 757.543213][T32435] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 757.543238][T32435] ? __mutex_trylock_common+0x15f/0x270 [ 757.543263][T32435] ? vfs_write+0x22b/0xba0 [ 757.543290][T32435] ? rcu_is_watching+0x15/0xb0 [ 757.543314][T32435] proc_fail_nth_write+0x8e/0x210 [ 757.543342][T32435] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 757.543371][T32435] ? preempt_count_add+0x91/0x190 [ 757.543401][T32435] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 757.543428][T32435] vfs_write+0x296/0xba0 [ 757.543472][T32435] ? __pfx_vfs_write+0x10/0x10 [ 757.543507][T32435] ? __fget_files+0x3a2/0x420 [ 757.543529][T32435] ? __fget_files+0x2a/0x420 [ 757.543556][T32435] ksys_write+0x150/0x270 [ 757.543591][T32435] ? __pfx_ksys_write+0x10/0x10 [ 757.543620][T32435] ? rcu_is_watching+0x15/0xb0 [ 757.543642][T32435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.543663][T32435] do_syscall_64+0x174/0x580 [ 757.543690][T32435] ? trace_irq_disable+0x3b/0x140 [ 757.543716][T32435] ? clear_bhb_loop+0x40/0x90 [ 757.543740][T32435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.543759][T32435] RIP: 0033:0x7f9a8bb5d68e [ 757.543778][T32435] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 757.543795][T32435] RSP: 002b:00007f9a8cad9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 757.543818][T32435] RAX: ffffffffffffffda RBX: 00007f9a8cada6c0 RCX: 00007f9a8bb5d68e [ 757.543852][T32435] RDX: 0000000000000001 RSI: 00007f9a8cada0a0 RDI: 0000000000000006 [ 757.543865][T32435] RBP: 00007f9a8cada090 R08: 0000000000000000 R09: 0000000000000000 [ 757.543878][T32435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 757.543891][T32435] R13: 00007f9a8be16038 R14: 00007f9a8be15fa0 R15: 00007ffd92a2f738 [ 757.543917][T32435] [ 757.822874][ T30] audit: type=1804 audit(1782269401.925:32): pid=32439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.6972" name="/newroot/120/cgroup.controllers" dev="tmpfs" ino=634 res=1 errno=0 [ 757.863380][ T30] audit: type=1800 audit(1782269401.965:33): pid=32439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6972" name="cgroup.controllers" dev="tmpfs" ino=634 res=0 errno=0 [ 758.360371][T32471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6980'. [ 758.454071][T32471] 8021q: adding VLAN 0 to HW filter on device bond6 [ 758.464039][T32476] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 758.711423][T32487] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6987'. [ 759.444943][T32553] netlink: 'syz.0.7006': attribute type 14 has an invalid length. [ 759.497697][T32545] lo speed is unknown, defaulting to 1000 [ 759.514539][T32555] netlink: 5 bytes leftover after parsing attributes in process `syz.0.7006'. [ 759.530393][T32555] 0ªî{X¹¦: renamed from gretap0 [ 759.542458][T32555] 0ªî{X¹¦: entered allmulticast mode [ 759.551410][T32555] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 759.750119][T32565] netlink: 'syz.0.7009': attribute type 12 has an invalid length. [ 759.839396][T32569] macsec0: entered promiscuous mode [ 759.873143][T32564] macsec0: left promiscuous mode [ 760.002254][T32571] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7010'. [ 760.038376][T32574] Bluetooth: MGMT ver 1.23 [ 760.057879][ T1939] block nbd1: Possible stuck request ffff888078847000: control (read@0,4096B). Runtime 120 seconds [ 760.192495][T32580] netlink: 'syz.3.7012': attribute type 1 has an invalid length. [ 760.322078][T32580] bond2: entered promiscuous mode [ 760.359796][T32580] 8021q: adding VLAN 0 to HW filter on device bond2 [ 760.571923][T32603] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 760.579279][T32603] IPv6: NLM_F_CREATE should be set when creating new route [ 760.586604][T32603] IPv6: NLM_F_CREATE should be set when creating new route [ 760.974887][T32610] syzkaller0: entered promiscuous mode [ 760.991369][T32610] syzkaller0: entered allmulticast mode [ 761.215149][T32629] vlan3: entered promiscuous mode [ 761.226650][T32629] bridge0: entered promiscuous mode [ 761.452418][T32652] xt_TCPMSS: Only works on TCP SYN packets [ 761.482160][T32655] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7033'. [ 761.515354][T32652] bond7: option packets_per_slave: invalid value (1048582) [ 761.538012][T32652] bond7: option packets_per_slave: allowed values 0 - 65535 [ 761.550230][T32652] bond7 (unregistering): Released all slaves [ 761.792697][T32667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7036'. [ 761.821919][T32667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7036'. [ 761.862888][T32667] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 762.067119][T32671] lo speed is unknown, defaulting to 1000 [ 762.165339][T32696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7044'. [ 762.185676][T32700] netlink: 'syz.4.7045': attribute type 1 has an invalid length. [ 762.238076][T32700] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7045'. [ 762.267580][T32700] netlink: 'syz.4.7045': attribute type 1 has an invalid length. [ 762.301985][T32700] netlink: 638 bytes leftover after parsing attributes in process `syz.4.7045'. [ 762.342925][T32700] netlink: 1 bytes leftover after parsing attributes in process `syz.4.7045'. [ 762.559418][T32720] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 762.631872][T32724] veth0: entered promiscuous mode [ 762.638003][T32724] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 762.651535][T32724] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 762.672854][T32725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7045'. [ 762.683682][T32724] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7053'. [ 762.743495][T32727] veth0: left promiscuous mode [ 763.347112][T32748] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.420066][T32750] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 763.461225][T32748] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.511803][T32748] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.627648][T32748] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.748616][ T5932] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.774651][ T309] netlink: 'syz.4.7069': attribute type 2 has an invalid length. [ 763.790048][ T309] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7069'. [ 763.819211][ T5931] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.838162][ T312] netlink: 'syz.4.7069': attribute type 2 has an invalid length. [ 763.852674][ T5931] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.882827][ T5931] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.021189][ T324] FAULT_INJECTION: forcing a failure. [ 764.021189][ T324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 764.056352][ T324] CPU: 1 UID: 0 PID: 324 Comm: syz.1.7071 Not tainted syzkaller #0 PREEMPT(full) [ 764.056386][ T324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 764.056400][ T324] Call Trace: [ 764.056407][ T324] [ 764.056416][ T324] dump_stack_lvl+0xe8/0x150 [ 764.056441][ T324] should_fail_ex+0x40c/0x560 [ 764.056465][ T324] _copy_from_iter+0x1d3/0x1660 [ 764.056493][ T324] ? rcu_is_watching+0x15/0xb0 [ 764.056525][ T324] ? __pfx__copy_from_iter+0x10/0x10 [ 764.056547][ T324] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 764.056578][ T324] ? netlink_sendmsg+0x650/0xb40 [ 764.056608][ T324] ? skb_put+0x112/0x210 [ 764.056635][ T324] netlink_sendmsg+0x6c0/0xb40 [ 764.056670][ T324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 764.056700][ T324] ? aa_sock_msg_perm+0xf1/0x1b0 [ 764.056720][ T324] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 764.056743][ T324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 764.056771][ T324] ____sys_sendmsg+0x9b9/0xa20 [ 764.056803][ T324] ? __pfx_____sys_sendmsg+0x10/0x10 [ 764.056834][ T324] ? lock_release+0x4b/0x3c0 [ 764.056863][ T324] ? import_iovec+0x73/0xa0 [ 764.056891][ T324] ___sys_sendmsg+0x2a5/0x360 [ 764.056917][ T324] ? rcu_is_watching+0x15/0xb0 [ 764.056935][ T324] ? get_pid_task+0x20/0x1f0 [ 764.056953][ T324] ? __pfx____sys_sendmsg+0x10/0x10 [ 764.056984][ T324] ? rcu_is_watching+0x15/0xb0 [ 764.057019][ T324] ? __fget_files+0x2a/0x420 [ 764.057040][ T324] ? __fget_files+0x3a2/0x420 [ 764.057068][ T324] __x64_sys_sendmsg+0x1b1/0x290 [ 764.057099][ T324] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 764.057136][ T324] ? rcu_is_watching+0x15/0xb0 [ 764.057158][ T324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.057180][ T324] do_syscall_64+0x174/0x580 [ 764.057206][ T324] ? trace_irq_disable+0x3b/0x140 [ 764.057233][ T324] ? clear_bhb_loop+0x40/0x90 [ 764.057255][ T324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.057275][ T324] RIP: 0033:0x7f6c7819ce59 [ 764.057293][ T324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 764.057311][ T324] RSP: 002b:00007f6c763f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 764.057333][ T324] RAX: ffffffffffffffda RBX: 00007f6c78415fa0 RCX: 00007f6c7819ce59 [ 764.057348][ T324] RDX: 0000000000020000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 764.057362][ T324] RBP: 00007f6c763f6090 R08: 0000000000000000 R09: 0000000000000000 [ 764.057374][ T324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 764.057405][ T324] R13: 00007f6c78416038 R14: 00007f6c78415fa0 R15: 00007ffe7afe0528 [ 764.057432][ T324] [ 764.509637][ T341] 0: reclassify loop, rule prio 0, protocol 700 [ 764.585326][ T343] syzkaller0: entered promiscuous mode [ 764.590964][ T343] syzkaller0: entered allmulticast mode [ 764.842384][ T358] FAULT_INJECTION: forcing a failure. [ 764.842384][ T358] name failslab, interval 1, probability 0, space 0, times 0 [ 764.880986][ T358] CPU: 1 UID: 0 PID: 358 Comm: syz.4.7085 Not tainted syzkaller #0 PREEMPT(full) [ 764.881015][ T358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 764.881028][ T358] Call Trace: [ 764.881037][ T358] [ 764.881045][ T358] dump_stack_lvl+0xe8/0x150 [ 764.881072][ T358] should_fail_ex+0x40c/0x560 [ 764.881097][ T358] should_failslab+0xa8/0x100 [ 764.881128][ T358] ? skb_clone+0x212/0x3a0 [ 764.881146][ T358] kmem_cache_alloc_noprof+0x87/0x650 [ 764.881177][ T358] skb_clone+0x212/0x3a0 [ 764.881198][ T358] __netlink_deliver_tap+0x413/0x860 [ 764.881236][ T358] ? netlink_deliver_tap+0x2e/0x1b0 [ 764.881268][ T358] netlink_deliver_tap+0x19c/0x1b0 [ 764.881299][ T358] netlink_unicast+0x77f/0x940 [ 764.881343][ T358] netlink_sendmsg+0x813/0xb40 [ 764.881378][ T358] ? __pfx_netlink_sendmsg+0x10/0x10 [ 764.881409][ T358] ? aa_sock_msg_perm+0xf1/0x1b0 [ 764.881430][ T358] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 764.881455][ T358] ? __pfx_netlink_sendmsg+0x10/0x10 [ 764.881485][ T358] ____sys_sendmsg+0x9b9/0xa20 [ 764.881520][ T358] ? __pfx_____sys_sendmsg+0x10/0x10 [ 764.881551][ T358] ? lock_release+0x4b/0x3c0 [ 764.881581][ T358] ? import_iovec+0x73/0xa0 [ 764.881609][ T358] ___sys_sendmsg+0x2a5/0x360 [ 764.881637][ T358] ? rcu_is_watching+0x15/0xb0 [ 764.881655][ T358] ? get_pid_task+0x20/0x1f0 [ 764.881675][ T358] ? __pfx____sys_sendmsg+0x10/0x10 [ 764.881705][ T358] ? rcu_is_watching+0x15/0xb0 [ 764.881742][ T358] ? __fget_files+0x2a/0x420 [ 764.881764][ T358] ? __fget_files+0x3a2/0x420 [ 764.881791][ T358] __x64_sys_sendmsg+0x1b1/0x290 [ 764.881821][ T358] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 764.881858][ T358] ? rcu_is_watching+0x15/0xb0 [ 764.881898][ T358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.881919][ T358] do_syscall_64+0x174/0x580 [ 764.881947][ T358] ? trace_irq_disable+0x3b/0x140 [ 764.882001][ T358] ? clear_bhb_loop+0x40/0x90 [ 764.882025][ T358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.882046][ T358] RIP: 0033:0x7f337499ce59 [ 764.882065][ T358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 764.882082][ T358] RSP: 002b:00007f3375936028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 764.882104][ T358] RAX: ffffffffffffffda RBX: 00007f3374c15fa0 RCX: 00007f337499ce59 [ 764.882120][ T358] RDX: 0000000000020000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 764.882133][ T358] RBP: 00007f3375936090 R08: 0000000000000000 R09: 0000000000000000 [ 764.882146][ T358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 764.882169][ T358] R13: 00007f3374c16038 R14: 00007f3374c15fa0 R15: 00007ffc40ace908 [ 764.882195][ T358] [ 765.174727][ T363] netlink: 'syz.0.7087': attribute type 1 has an invalid length. [ 765.261723][ T363] bond7: (slave dummy0): making interface the new active one [ 765.291290][ T363] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 765.360326][ T363] bond7: entered promiscuous mode [ 765.365597][ T363] dummy0: entered promiscuous mode [ 765.388963][ T363] bond7: (slave dummy0): Releasing active interface [ 765.395723][ T363] dummy0: left promiscuous mode [ 765.407620][ T363] bridge_slave_0: left allmulticast mode [ 765.413364][ T363] bridge_slave_0: left promiscuous mode [ 765.419771][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.431394][ T363] bridge_slave_1: left allmulticast mode [ 765.437265][ T363] bridge_slave_1: left promiscuous mode [ 765.443023][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.462487][ T363] team0: Port device team_slave_0 removed [ 765.482498][ T363] team0: Port device team_slave_1 removed [ 765.511524][ T363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 765.550155][ T363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 765.584074][ T363] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 765.642016][ T359] lo speed is unknown, defaulting to 1000 [ 765.666862][ T362] bond7: left promiscuous mode [ 766.192049][ T419] xt_hashlimit: size too large, truncated to 1048576 [ 766.229168][ T416] xt_CT: No such helper "snmp_trap" [ 766.425837][ T427] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 766.721065][ T440] xt_hashlimit: size too large, truncated to 1048576 [ 767.049249][ T447] bond8: option all_slaves_active: invalid value (127) [ 767.094171][ T447] bond8 (unregistering): Released all slaves [ 767.100566][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 767.173824][ T467] __nla_validate_parse: 3 callbacks suppressed [ 767.173847][ T467] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7116'. [ 767.355596][ T478] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7117'. [ 767.435253][ T485] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7123'. [ 767.462810][ T490] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7120'. [ 767.537731][ T488] openvswitch: netlink: Key 32 has unexpected len 16 expected 2 [ 767.620408][ T495] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 767.675507][ T500] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 767.755917][ T495] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 767.850932][ T495] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 767.912494][ T495] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 768.018091][ T510] syzkaller0: entered promiscuous mode [ 768.031131][ T510] syzkaller0: entered allmulticast mode [ 768.146792][ T5932] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 768.187286][ T5931] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 768.212144][ T5932] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 768.252446][ T5945] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 768.407785][ T533] xt_hashlimit: size too large, truncated to 1048576 [ 768.529378][ T549] netlink: 'syz.4.7138': attribute type 23 has an invalid length. [ 768.830935][ T561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7143'. [ 769.062757][ T30] audit: type=1804 audit(1782269413.165:34): pid=577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.7147" name="/newroot/197/cgroup.controllers" dev="tmpfs" ino=1032 res=1 errno=0 [ 769.116182][ T30] audit: type=1800 audit(1782269413.195:35): pid=577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7147" name="cgroup.controllers" dev="tmpfs" ino=1032 res=0 errno=0 [ 769.361047][ T583] netlink: 'syz.0.7149': attribute type 1 has an invalid length. [ 769.370123][ T583] netlink: 228 bytes leftover after parsing attributes in process `syz.0.7149'. [ 769.381548][ T583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7149'. [ 769.446484][ T579] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.822116][ T580] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 769.872354][ T585] bond1: entered promiscuous mode [ 769.879993][ T585] 8021q: adding VLAN 0 to HW filter on device bond1 [ 769.899763][ T586] vlan2: entered promiscuous mode [ 769.914573][ T586] bridge0: entered promiscuous mode [ 769.955477][ T579] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.025083][ T597] xt_hashlimit: size too large, truncated to 1048576 [ 770.122717][ T579] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.205451][ T579] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.268493][ T606] syzkaller0: entered promiscuous mode [ 770.275189][ T606] syzkaller0: entered allmulticast mode [ 770.314115][ T5953] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.436849][ T5945] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.524939][ T5951] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.544115][ T5945] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.622964][ T625] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7164'. [ 770.737383][ T634] netlink: 'syz.3.7166': attribute type 1 has an invalid length. [ 770.778797][ T636] netlink: 'syz.3.7166': attribute type 1 has an invalid length. [ 770.813522][ T639] xt_hashlimit: size too large, truncated to 1048576 [ 770.937790][ T645] netlink: 'syz.2.7171': attribute type 10 has an invalid length. [ 771.160570][ T650] tipc: Started in network mode [ 771.175699][ T650] tipc: Node identity e0000001, cluster identity 4711 [ 771.185828][ T650] tipc: Enabling of bearer rejected, failed to enable media [ 771.413018][ T681] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7183'. [ 771.515539][ T686] bridge0: entered allmulticast mode [ 771.530309][ T687] xt_hashlimit: size too large, truncated to 1048576 [ 771.731473][ T691] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7186'. [ 771.793967][ T679] x_tables: duplicate underflow at hook 2 [ 771.873526][ T674] lo speed is unknown, defaulting to 1000 [ 771.928464][ T696] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 772.349763][ T724] syzkaller0: entered promiscuous mode [ 772.355390][ T724] syzkaller0: entered allmulticast mode [ 772.388885][ T724] FAULT_INJECTION: forcing a failure. [ 772.388885][ T724] name failslab, interval 1, probability 0, space 0, times 0 [ 772.439028][ T724] CPU: 0 UID: 0 PID: 724 Comm: syz.2.7194 Not tainted syzkaller #0 PREEMPT(full) [ 772.439057][ T724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 772.439071][ T724] Call Trace: [ 772.439081][ T724] [ 772.439089][ T724] dump_stack_lvl+0xe8/0x150 [ 772.439117][ T724] should_fail_ex+0x40c/0x560 [ 772.439144][ T724] should_failslab+0xa8/0x100 [ 772.439176][ T724] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 772.439203][ T724] ? rcu_is_watching+0x15/0xb0 [ 772.439225][ T724] ? __alloc_skb+0x1d7/0x7a0 [ 772.439251][ T724] ? trace_irq_enable+0x3b/0x140 [ 772.439281][ T724] __alloc_skb+0x1d7/0x7a0 [ 772.439310][ T724] netlink_dump+0x1e7/0xee0 [ 772.439346][ T724] ? rcu_is_watching+0x15/0xb0 [ 772.439368][ T724] ? __pfx_netlink_dump+0x10/0x10 [ 772.439404][ T724] ? netlink_lookup+0x30/0x200 [ 772.439437][ T724] __netlink_dump_start+0x589/0x7b0 [ 772.439470][ T724] rtnetlink_rcv_msg+0xa48/0xc00 [ 772.439500][ T724] ? __pfx_tc_dump_tclass+0x10/0x10 [ 772.439524][ T724] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 772.439550][ T724] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 772.439575][ T724] ? ref_tracker_free+0x689/0x830 [ 772.439597][ T724] ? __pfx_rtnl_dumpit+0x10/0x10 [ 772.439623][ T724] ? __pfx_tc_dump_tclass+0x10/0x10 [ 772.439654][ T724] netlink_rcv_skb+0x226/0x4a0 [ 772.439683][ T724] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 772.439711][ T724] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 772.439749][ T724] ? netlink_deliver_tap+0x2e/0x1b0 [ 772.439794][ T724] netlink_unicast+0x7bb/0x940 [ 772.439830][ T724] netlink_sendmsg+0x813/0xb40 [ 772.439867][ T724] ? __pfx_netlink_sendmsg+0x10/0x10 [ 772.439900][ T724] ? aa_sock_msg_perm+0xf1/0x1b0 [ 772.439923][ T724] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 772.439948][ T724] ? __pfx_netlink_sendmsg+0x10/0x10 [ 772.439979][ T724] ____sys_sendmsg+0x9b9/0xa20 [ 772.440011][ T724] ? __pfx_____sys_sendmsg+0x10/0x10 [ 772.440041][ T724] ? lock_release+0x4b/0x3c0 [ 772.440070][ T724] ? import_iovec+0x73/0xa0 [ 772.440096][ T724] ___sys_sendmsg+0x2a5/0x360 [ 772.440123][ T724] ? rcu_is_watching+0x15/0xb0 [ 772.440142][ T724] ? get_pid_task+0x20/0x1f0 [ 772.440161][ T724] ? __pfx____sys_sendmsg+0x10/0x10 [ 772.440191][ T724] ? rcu_is_watching+0x15/0xb0 [ 772.440227][ T724] ? __fget_files+0x2a/0x420 [ 772.440250][ T724] ? __fget_files+0x3a2/0x420 [ 772.440276][ T724] __x64_sys_sendmsg+0x1b1/0x290 [ 772.440307][ T724] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 772.440346][ T724] ? rcu_is_watching+0x15/0xb0 [ 772.440369][ T724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.440391][ T724] do_syscall_64+0x174/0x580 [ 772.440418][ T724] ? trace_irq_disable+0x3b/0x140 [ 772.440445][ T724] ? clear_bhb_loop+0x40/0x90 [ 772.440469][ T724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.440489][ T724] RIP: 0033:0x7fa5f219ce59 [ 772.440508][ T724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.440526][ T724] RSP: 002b:00007fa5f304c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 772.440548][ T724] RAX: ffffffffffffffda RBX: 00007fa5f2415fa0 RCX: 00007fa5f219ce59 [ 772.440564][ T724] RDX: 0000000000040004 RSI: 0000200000000280 RDI: 0000000000000008 [ 772.440577][ T724] RBP: 00007fa5f304c090 R08: 0000000000000000 R09: 0000000000000000 [ 772.440590][ T724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 772.440602][ T724] R13: 00007fa5f2416038 R14: 00007fa5f2415fa0 R15: 00007ffead4ee318 [ 772.440628][ T724] [ 772.856152][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 773.006914][ T747] xt_hashlimit: size too large, truncated to 1048576 [ 773.261032][ T754] __nla_validate_parse: 4 callbacks suppressed [ 773.261051][ T754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7200'. [ 773.317976][ T754] netlink: 'syz.2.7200': attribute type 3 has an invalid length. [ 773.440862][ T758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7201'. [ 773.499870][ T763] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.7204'. [ 773.684873][ T769] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7204'. [ 773.741815][ T763] syzkaller0: entered promiscuous mode [ 773.763581][ T763] syzkaller0: entered allmulticast mode [ 773.926035][ T782] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7212'. [ 773.964328][ T782] netlink: 59 bytes leftover after parsing attributes in process `syz.0.7212'. [ 774.186338][ T795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7217'. [ 774.198117][ T796] mac80211_hwsim hwsim83 wlan0: entered allmulticast mode [ 774.205921][ T796] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 774.460473][ T809] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7222'. [ 775.107951][ T840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7231'. [ 775.316813][ T852] xt_hashlimit: size too large, truncated to 1048576 [ 775.469079][ T858] syzkaller0: entered promiscuous mode [ 775.484049][ T858] syzkaller0: entered allmulticast mode [ 775.503936][ T862] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7238'. [ 775.555436][ T867] bond2: Unable to set up delay as MII monitoring is disabled [ 775.568814][ T867] bond2 (unregistering): Released all slaves [ 775.750308][ T874] netlink: 'syz.0.7240': attribute type 5 has an invalid length. [ 775.758677][ T874] netlink: 'syz.0.7240': attribute type 6 has an invalid length. [ 776.131249][ T900] bridge0: port 3(dummy0) entered blocking state [ 776.140700][ T900] bridge0: port 3(dummy0) entered disabled state [ 776.153840][ T900] dummy0: entered allmulticast mode [ 776.164894][ T900] dummy0: entered promiscuous mode [ 776.171691][ T900] bridge0: port 3(dummy0) entered blocking state [ 776.178203][ T900] bridge0: port 3(dummy0) entered forwarding state [ 776.216726][ T907] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 776.429741][ T922] syzkaller0: entered promiscuous mode [ 776.435308][ T922] syzkaller0: entered allmulticast mode [ 776.534395][ T928] netlink: 'syz.0.7256': attribute type 1 has an invalid length. [ 776.587796][ T928] 8021q: adding VLAN 0 to HW filter on device bond8 [ 776.606521][ T928] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 776.624394][ T928] macvlan2: entered promiscuous mode [ 776.630036][ T928] macvlan2: entered allmulticast mode [ 776.636632][ T928] bond8: entered promiscuous mode [ 776.642406][ T928] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 776.650770][ T928] bond8: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 776.674565][ T928] bond8: left promiscuous mode [ 776.681913][ T934] netlink: 'syz.4.7258': attribute type 4 has an invalid length. [ 777.029031][ T967] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 777.088986][ T968] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 777.346957][ T988] syzkaller1: entered promiscuous mode [ 777.376462][ T988] syzkaller1: entered allmulticast mode [ 778.030356][ T1039] netlink: 'syz.2.7287': attribute type 11 has an invalid length. [ 778.327296][ T1063] __nla_validate_parse: 15 callbacks suppressed [ 778.327317][ T1063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7291'. [ 778.453485][ T1086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7290'. [ 778.738605][ T1087] veth5: entered allmulticast mode [ 778.744297][ T1102] xt_hashlimit: size too large, truncated to 1048576 [ 778.759341][ T1100] syzkaller1: entered promiscuous mode [ 778.772954][ T1100] syzkaller1: entered allmulticast mode [ 778.804944][ T1104] xt_hashlimit: size too large, truncated to 1048576 [ 779.013993][ T1115] FAULT_INJECTION: forcing a failure. [ 779.013993][ T1115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 779.061838][ T1115] CPU: 1 UID: 0 PID: 1115 Comm: syz.0.7302 Not tainted syzkaller #0 PREEMPT(full) [ 779.061866][ T1115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 779.061879][ T1115] Call Trace: [ 779.061887][ T1115] [ 779.061897][ T1115] dump_stack_lvl+0xe8/0x150 [ 779.061924][ T1115] should_fail_ex+0x40c/0x560 [ 779.061949][ T1115] _copy_from_user+0x2d/0xb0 [ 779.061977][ T1115] ___sys_sendmsg+0x1c6/0x360 [ 779.062007][ T1115] ? rcu_is_watching+0x15/0xb0 [ 779.062027][ T1115] ? get_pid_task+0x20/0x1f0 [ 779.062048][ T1115] ? __pfx____sys_sendmsg+0x10/0x10 [ 779.062081][ T1115] ? rcu_is_watching+0x15/0xb0 [ 779.062115][ T1115] ? __fget_files+0x2a/0x420 [ 779.062139][ T1115] ? __fget_files+0x3a2/0x420 [ 779.062167][ T1115] __x64_sys_sendmsg+0x1b1/0x290 [ 779.062198][ T1115] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 779.062236][ T1115] ? rcu_is_watching+0x15/0xb0 [ 779.062257][ T1115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.062278][ T1115] do_syscall_64+0x174/0x580 [ 779.062316][ T1115] ? trace_irq_disable+0x3b/0x140 [ 779.062343][ T1115] ? clear_bhb_loop+0x40/0x90 [ 779.062367][ T1115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.062387][ T1115] RIP: 0033:0x7f9a8bb9ce59 [ 779.062415][ T1115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.062433][ T1115] RSP: 002b:00007f9a8cada028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 779.062456][ T1115] RAX: ffffffffffffffda RBX: 00007f9a8be15fa0 RCX: 00007f9a8bb9ce59 [ 779.062470][ T1115] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 779.062483][ T1115] RBP: 00007f9a8cada090 R08: 0000000000000000 R09: 0000000000000000 [ 779.062495][ T1115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 779.062507][ T1115] R13: 00007f9a8be16038 R14: 00007f9a8be15fa0 R15: 00007ffd92a2f738 [ 779.062542][ T1115] [ 779.328594][ T1086] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 779.379281][ T4995] block nbd0: Possible stuck request ffff8880b2ee0000: control (read@0,1024B). Runtime 30 seconds [ 779.512530][ T1139] netlink: 277 bytes leftover after parsing attributes in process `syz.4.7308'. [ 779.533684][ T1138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7307'. [ 779.549908][ T1137] netlink: 277 bytes leftover after parsing attributes in process `syz.4.7308'. [ 779.834326][ T1161] bridge5: entered promiscuous mode [ 779.851620][ T1161] bridge5: entered allmulticast mode [ 779.867579][ T1161] team0: Port device bridge5 added [ 779.915418][ T1161] bridge6: entered promiscuous mode [ 779.933305][ T1161] bridge6: entered allmulticast mode [ 779.946396][ T1161] team0: Port device bridge6 added [ 780.023552][ T1161] xt_hashlimit: size too large, truncated to 1048576 [ 780.291559][ T1188] syzkaller1: entered promiscuous mode [ 780.298208][ T1188] syzkaller1: entered allmulticast mode [ 780.410222][ T1196] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7321'. [ 780.413924][ T1194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7320'. [ 780.472763][ T1191] syzkaller0: entered promiscuous mode [ 780.479703][ T1191] syzkaller0: entered allmulticast mode [ 780.485696][ T1202] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7321'. [ 780.501350][ T1194] gretap2: entered allmulticast mode [ 780.513271][ T1199] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7319'. [ 780.537585][ T1196] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7321'. [ 780.560026][ T1196] bridge0: port 3(syz_tun) entered disabled state [ 780.566751][ T1196] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.574258][ T1196] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.884784][ T1214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 780.901384][ T1214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 780.922612][ T1216] FAULT_INJECTION: forcing a failure. [ 780.922612][ T1216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 780.942331][ T1216] CPU: 1 UID: 0 PID: 1216 Comm: syz.0.7326 Not tainted syzkaller #0 PREEMPT(full) [ 780.942360][ T1216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 780.942374][ T1216] Call Trace: [ 780.942382][ T1216] [ 780.942390][ T1216] dump_stack_lvl+0xe8/0x150 [ 780.942436][ T1216] should_fail_ex+0x40c/0x560 [ 780.942461][ T1216] _copy_from_iter+0x1d3/0x1660 [ 780.942489][ T1216] ? rcu_is_watching+0x15/0xb0 [ 780.942519][ T1216] ? __pfx__copy_from_iter+0x10/0x10 [ 780.942542][ T1216] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 780.942584][ T1216] ? netlink_sendmsg+0x650/0xb40 [ 780.942616][ T1216] ? skb_put+0x112/0x210 [ 780.942645][ T1216] netlink_sendmsg+0x6c0/0xb40 [ 780.942681][ T1216] ? __pfx_netlink_sendmsg+0x10/0x10 [ 780.942714][ T1216] ? aa_sock_msg_perm+0xf1/0x1b0 [ 780.942735][ T1216] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 780.942760][ T1216] ? __pfx_netlink_sendmsg+0x10/0x10 [ 780.942793][ T1216] ____sys_sendmsg+0x9b9/0xa20 [ 780.942828][ T1216] ? __pfx_____sys_sendmsg+0x10/0x10 [ 780.942860][ T1216] ? lock_release+0x4b/0x3c0 [ 780.942891][ T1216] ? import_iovec+0x73/0xa0 [ 780.942920][ T1216] ___sys_sendmsg+0x2a5/0x360 [ 780.942949][ T1216] ? rcu_is_watching+0x15/0xb0 [ 780.942970][ T1216] ? get_pid_task+0x20/0x1f0 [ 780.942990][ T1216] ? __pfx____sys_sendmsg+0x10/0x10 [ 780.943022][ T1216] ? rcu_is_watching+0x15/0xb0 [ 780.943059][ T1216] ? __fget_files+0x2a/0x420 [ 780.943082][ T1216] ? __fget_files+0x3a2/0x420 [ 780.943111][ T1216] __x64_sys_sendmsg+0x1b1/0x290 [ 780.943143][ T1216] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 780.943182][ T1216] ? rcu_is_watching+0x15/0xb0 [ 780.943204][ T1216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.943225][ T1216] do_syscall_64+0x174/0x580 [ 780.943263][ T1216] ? trace_irq_disable+0x3b/0x140 [ 780.943308][ T1216] ? clear_bhb_loop+0x40/0x90 [ 780.943332][ T1216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.943352][ T1216] RIP: 0033:0x7f9a8bb9ce59 [ 780.943372][ T1216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 780.943389][ T1216] RSP: 002b:00007f9a8cada028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 780.943411][ T1216] RAX: ffffffffffffffda RBX: 00007f9a8be15fa0 RCX: 00007f9a8bb9ce59 [ 780.943427][ T1216] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 780.943439][ T1216] RBP: 00007f9a8cada090 R08: 0000000000000000 R09: 0000000000000000 [ 780.943451][ T1216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 780.943463][ T1216] R13: 00007f9a8be16038 R14: 00007f9a8be15fa0 R15: 00007ffd92a2f738 [ 780.943489][ T1216] [ 781.446671][ T1240] xt_hashlimit: size too large, truncated to 1048576 [ 781.547556][ T1251] smc: ib device syz0 ibport 2 erased user defined pnetid SYZ2 [ 781.880073][ T1281] sctp: [Deprecated]: syz.3.7345 (pid 1281) Use of struct sctp_assoc_value in delayed_ack socket option. [ 781.880073][ T1281] Use struct sctp_sack_info instead [ 781.974241][ T1286] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 782.093613][ T1296] FAULT_INJECTION: forcing a failure. [ 782.093613][ T1296] name failslab, interval 1, probability 0, space 0, times 0 [ 782.107500][ T1296] CPU: 1 UID: 0 PID: 1296 Comm: syz.1.7353 Not tainted syzkaller #0 PREEMPT(full) [ 782.107529][ T1296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 782.107542][ T1296] Call Trace: [ 782.107551][ T1296] [ 782.107559][ T1296] dump_stack_lvl+0xe8/0x150 [ 782.107587][ T1296] should_fail_ex+0x40c/0x560 [ 782.107611][ T1296] should_failslab+0xa8/0x100 [ 782.107642][ T1296] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 782.107670][ T1296] ? rcu_is_watching+0x15/0xb0 [ 782.107691][ T1296] ? __alloc_skb+0x1d7/0x7a0 [ 782.107717][ T1296] ? trace_irq_enable+0x3b/0x140 [ 782.107747][ T1296] __alloc_skb+0x1d7/0x7a0 [ 782.107776][ T1296] virtual_ncidev_write+0x55/0x140 [ 782.107801][ T1296] ? __pfx_virtual_ncidev_write+0x10/0x10 [ 782.107825][ T1296] vfs_write+0x296/0xba0 [ 782.107859][ T1296] ? __pfx_vfs_write+0x10/0x10 [ 782.107884][ T1296] ? lock_release+0x4b/0x3c0 [ 782.107916][ T1296] ? __fget_files+0x2a/0x420 [ 782.107939][ T1296] ? __fget_files+0x3a2/0x420 [ 782.107960][ T1296] ? __fget_files+0x2a/0x420 [ 782.107987][ T1296] ksys_write+0x150/0x270 [ 782.108015][ T1296] ? __pfx_ksys_write+0x10/0x10 [ 782.108043][ T1296] ? rcu_is_watching+0x15/0xb0 [ 782.108065][ T1296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.108098][ T1296] do_syscall_64+0x174/0x580 [ 782.108124][ T1296] ? trace_irq_disable+0x3b/0x140 [ 782.108149][ T1296] ? clear_bhb_loop+0x40/0x90 [ 782.108172][ T1296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.108191][ T1296] RIP: 0033:0x7f6c7819ce59 [ 782.108208][ T1296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 782.108226][ T1296] RSP: 002b:00007f6c763f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 782.108247][ T1296] RAX: ffffffffffffffda RBX: 00007f6c78415fa0 RCX: 00007f6c7819ce59 [ 782.108262][ T1296] RDX: 00000000fffffeff RSI: 0000000000000000 RDI: 0000000000000003 [ 782.108275][ T1296] RBP: 00007f6c763f6090 R08: 0000000000000000 R09: 0000000000000000 [ 782.108288][ T1296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 782.108300][ T1296] R13: 00007f6c78416038 R14: 00007f6c78415fa0 R15: 00007ffe7afe0528 [ 782.108325][ T1296] [ 782.413425][ T1306] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20003 [ 782.783859][ T1334] FAULT_INJECTION: forcing a failure. [ 782.783859][ T1334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 782.798359][ T1334] CPU: 0 UID: 0 PID: 1334 Comm: syz.3.7364 Not tainted syzkaller #0 PREEMPT(full) [ 782.798385][ T1334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 782.798397][ T1334] Call Trace: [ 782.798405][ T1334] [ 782.798413][ T1334] dump_stack_lvl+0xe8/0x150 [ 782.798438][ T1334] should_fail_ex+0x40c/0x560 [ 782.798461][ T1334] _copy_from_user+0x2d/0xb0 [ 782.798490][ T1334] kstrtouint_from_user+0xd6/0x180 [ 782.798511][ T1334] ? __might_fault+0xaf/0x130 [ 782.798534][ T1334] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 782.798557][ T1334] ? __mutex_trylock_common+0x15f/0x270 [ 782.798580][ T1334] ? vfs_write+0x22b/0xba0 [ 782.798603][ T1334] ? rcu_is_watching+0x15/0xb0 [ 782.798624][ T1334] proc_fail_nth_write+0x8e/0x210 [ 782.798649][ T1334] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 782.798675][ T1334] ? preempt_count_add+0x91/0x190 [ 782.798701][ T1334] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 782.798725][ T1334] vfs_write+0x296/0xba0 [ 782.798754][ T1334] ? __pfx_vfs_write+0x10/0x10 [ 782.798783][ T1334] ? __fget_files+0x3a2/0x420 [ 782.798803][ T1334] ? __fget_files+0x2a/0x420 [ 782.798846][ T1334] ksys_write+0x150/0x270 [ 782.798874][ T1334] ? __pfx_ksys_write+0x10/0x10 [ 782.798902][ T1334] ? rcu_is_watching+0x15/0xb0 [ 782.798923][ T1334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.798944][ T1334] do_syscall_64+0x174/0x580 [ 782.798969][ T1334] ? trace_irq_disable+0x3b/0x140 [ 782.799006][ T1334] ? clear_bhb_loop+0x40/0x90 [ 782.799030][ T1334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.799049][ T1334] RIP: 0033:0x7f8d07b5d68e [ 782.799067][ T1334] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 782.799084][ T1334] RSP: 002b:00007f8d08b05fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 782.799105][ T1334] RAX: ffffffffffffffda RBX: 00007f8d08b066c0 RCX: 00007f8d07b5d68e [ 782.799120][ T1334] RDX: 0000000000000001 RSI: 00007f8d08b060a0 RDI: 0000000000000004 [ 782.799133][ T1334] RBP: 00007f8d08b06090 R08: 0000000000000000 R09: 0000000000000000 [ 782.799146][ T1334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 782.799157][ T1334] R13: 00007f8d07e16038 R14: 00007f8d07e15fa0 R15: 00007fff73d62318 [ 782.799182][ T1334] [ 783.208318][ T1351] xt_hashlimit: size too large, truncated to 1048576 [ 783.659407][ T1385] batadv_slave_1: entered promiscuous mode [ 783.718320][ T1391] __nla_validate_parse: 8 callbacks suppressed [ 783.718340][ T1391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7378'. [ 783.807548][ T1384] batadv_slave_1: left promiscuous mode [ 783.947278][ T1411] netlink: 7 bytes leftover after parsing attributes in process `syz.3.7385'. [ 783.958390][ T1411] ip6t_rpfilter: unknown options [ 784.060246][ T1418] netlink: set zone limit has 4 unknown bytes [ 784.072767][ T1418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7386'. [ 784.102731][ T1421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7386'. [ 784.125551][ T1418] netlink: set zone limit has 4 unknown bytes [ 784.258455][ T1426] 8021q: VLANs not supported on ip6tnl0 [ 784.354541][ T1435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7391'. [ 784.475866][ T1438] netlink: 'syz.2.7392': attribute type 1 has an invalid length. [ 784.490157][ T1438] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7392'. [ 784.821064][ T1449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7396'. [ 784.915879][ T1454] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7398'. [ 785.111402][ T1471] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7403'. [ 785.201053][ T1476] syzkaller0: entered promiscuous mode [ 785.216024][ T1476] syzkaller0: entered allmulticast mode [ 785.542613][ T1490] netlink: 276 bytes leftover after parsing attributes in process `syz.3.7406'. [ 786.148541][ T1515] netlink: 'syz.2.7414': attribute type 10 has an invalid length. [ 786.400302][ T1535] syzkaller0: entered promiscuous mode [ 786.418689][ T1535] syzkaller0: entered allmulticast mode [ 786.489108][ T1517] lo speed is unknown, defaulting to 1000 [ 787.342538][ T1604] macsec1: entered allmulticast mode [ 787.354063][ T1604] bond0: entered allmulticast mode [ 787.362640][ T1604] bond_slave_0: entered allmulticast mode [ 787.369044][ T1604] bond_slave_1: entered allmulticast mode [ 787.375051][ T1604] bond_slave_0: entered promiscuous mode [ 787.380833][ T1604] bond_slave_1: entered promiscuous mode [ 787.388436][ T1604] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 787.966791][T10895] hsr0: entered promiscuous mode [ 788.220647][ T1655] sctp: [Deprecated]: syz.2.7457 (pid 1655) Use of struct sctp_assoc_value in delayed_ack socket option. [ 788.220647][ T1655] Use struct sctp_sack_info instead [ 788.290253][ T1656] sctp: [Deprecated]: syz.2.7457 (pid 1656) Use of struct sctp_assoc_value in delayed_ack socket option. [ 788.290253][ T1656] Use struct sctp_sack_info instead [ 788.780696][ T1690] __nla_validate_parse: 8 callbacks suppressed [ 788.780719][ T1690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7469'. [ 788.824244][ T1690] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7469'. [ 788.846815][ T1695] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7471'. [ 788.943594][ T1703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7475'. [ 788.948316][ T1695] bond3: entered promiscuous mode [ 788.953366][ T1703] netlink: 'syz.3.7475': attribute type 1 has an invalid length. [ 788.974984][ T1695] bond3: entered allmulticast mode [ 788.993913][ T1695] 8021q: adding VLAN 0 to HW filter on device bond3 [ 789.059989][ T1709] netlink: 'syz.2.7479': attribute type 1 has an invalid length. [ 789.068434][ T1709] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7479'. [ 789.101643][ T1714] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7477'. [ 789.184180][ T1717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7480'. [ 789.289128][ T1724] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7481'. [ 789.721804][ T1751] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 790.011039][ T1781] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 790.136203][ T1939] block nbd1: Possible stuck request ffff888078847000: control (read@0,4096B). Runtime 150 seconds [ 792.652567][ T1751] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 792.789499][ T1790] netlink: zone id is out of range [ 792.828531][ T1797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7503'. [ 792.840192][ T1790] netlink: zone id is out of range [ 792.846742][ T1790] netlink: zone id is out of range [ 792.852883][ T1790] netlink: zone id is out of range [ 792.858783][ T1790] netlink: zone id is out of range [ 792.864228][ T1790] netlink: zone id is out of range [ 792.871662][ T1790] netlink: zone id is out of range [ 792.878046][ T1790] netlink: zone id is out of range [ 792.960740][ T1807] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 793.061042][ T1809] vti0: entered promiscuous mode [ 793.087798][ T1809] vti0: entered allmulticast mode [ 793.401168][ T1838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7511'. [ 793.445088][ T1842] block nbd4: must specify backend [ 793.698338][ T1859] netlink: 'syz.0.7517': attribute type 89 has an invalid length. [ 793.713079][ T1863] xt_hashlimit: size too large, truncated to 1048576 [ 793.773352][ T1870] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.813379][ T1875] netlink: 'syz.2.7518': attribute type 1 has an invalid length. [ 793.829610][ T1870] bridge_slave_0 (unregistering): left allmulticast mode [ 793.830034][ T1875] __nla_validate_parse: 1 callbacks suppressed [ 793.830076][ T1875] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7518'. [ 793.869482][ T1870] bridge_slave_0 (unregistering): left promiscuous mode [ 793.877457][ T1870] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.886834][ T1877] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7518'. [ 794.064000][ T1888] nbd: must specify a device to reconfigure [ 794.126599][ T1873] syzkaller0: entered promiscuous mode [ 794.145884][ T1873] syzkaller0: entered allmulticast mode [ 794.804741][ T1934] xt_hashlimit: size too large, truncated to 1048576 [ 797.051393][ T1888] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 797.169139][ T1947] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7531'. [ 797.355900][ T1953] syzkaller0: entered promiscuous mode [ 797.362171][ T1953] syzkaller0: entered allmulticast mode [ 797.374675][ T1951] netlink: 148 bytes leftover after parsing attributes in process `syz.2.7532'. [ 797.411267][ T1951] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7532'. [ 797.446552][ T1969] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 797.842341][ T1987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7540'. [ 798.027095][ T2009] netlink: 'syz.3.7545': attribute type 10 has an invalid length. [ 798.470633][ T2035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7554'. [ 798.673674][ T2051] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7556'. [ 798.819441][ T2059] tipc: Started in network mode [ 798.824704][ T2059] tipc: Node identity 5e58821f06c7, cluster identity 4711 [ 798.832448][ T2059] tipc: Enabled bearer , priority 0 [ 798.865476][ T2059] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7564'. [ 798.914131][ T2065] SET target dimension over the limit! [ 798.950908][ T2056] tipc: Disabling bearer [ 799.045636][ T2072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7568'. [ 799.248363][ T2086] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7573'. [ 799.285741][ T2086] net_ratelimit: 24 callbacks suppressed [ 799.285762][ T2086] openvswitch: netlink: Key type 769 is out of range max 32 [ 799.702787][ T2105] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7580'. [ 799.728914][ T2111] IPv6: addrconf: prefix option has invalid lifetime [ 799.808538][ T2115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7583'. [ 799.876721][ T2115] 8021q: adding VLAN 0 to HW filter on device bond3 [ 800.139387][ T2134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7588'. [ 800.185807][ T2139] netlink: 'syz.3.7590': attribute type 13 has an invalid length. [ 800.218507][ T2139] netlink: 'syz.3.7590': attribute type 17 has an invalid length. [ 800.581833][ T2132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 800.600146][ T2132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 800.834981][ T2139] bridge0: port 3(syz_tun) entered blocking state [ 800.841597][ T2139] bridge0: port 3(syz_tun) entered listening state [ 800.858418][ T2139] 8021q: adding VLAN 0 to HW filter on device team0 [ 800.871800][ T2139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 800.895846][ T2139] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.903083][ T2139] bridge0: port 1(bridge_slave_0) entered listening state [ 800.925099][ T2139] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.932453][ T2139] bridge0: port 2(bridge_slave_1) entered listening state [ 800.957024][ T2139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 800.968670][ T2139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 800.994180][ T2139] veth1_vlan: left promiscuous mode [ 801.000873][ T2139] veth0_vlan: left promiscuous mode [ 801.007387][ T2139] veth0_vlan: entered promiscuous mode [ 801.016917][ T2139] veth1_vlan: entered promiscuous mode [ 801.027145][ T2139] veth1_macvtap: left promiscuous mode [ 801.033669][ T2139] veth0_macvtap: left promiscuous mode [ 801.041260][ T2139] veth0_macvtap: entered promiscuous mode [ 801.057074][ T2139] veth1_macvtap: entered promiscuous mode [ 801.077581][ T2139] 8021q: adding VLAN 0 to HW filter on device bond1 [ 801.122970][ T2139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.133227][ T2139] xfrm1: left allmulticast mode [ 801.140515][ T2139] bond2: left promiscuous mode [ 801.145579][ T2139] 8021q: adding VLAN 0 to HW filter on device bond2 [ 801.157238][ T2139] 8021q: adding VLAN 0 to HW filter on device eth0 [ 801.169383][ T2139] 8021q: adding VLAN 0 to HW filter on device eth1 [ 801.182104][ T2139] 8021q: adding VLAN 0 to HW filter on device eth2 [ 801.194064][ T2139] 8021q: adding VLAN 0 to HW filter on device eth3 [ 801.208497][ T2139] bridge5: left promiscuous mode [ 801.213461][ T2139] bridge5: left allmulticast mode [ 801.220600][ T2139] bridge6: left promiscuous mode [ 801.225605][ T2139] bridge6: left allmulticast mode [ 801.234734][ T2139] 8021q: adding VLAN 0 to HW filter on device bond3 [ 802.077980][ T2165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7599'. [ 803.056541][ T2182] xt_TCPMSS: Only works on TCP SYN packets [ 804.300140][ T5945] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 804.491318][ T2201] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7607'. [ 804.523782][ T2203] can: request_module (can-proto-0) failed. [ 804.652525][ T2227] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 804.706936][ T2215] tipc: Enabled bearer , priority 0 [ 804.716538][ T2221] syzkaller0: MTU too low for tipc bearer [ 804.745736][ T2221] tipc: Disabling bearer [ 804.757642][ T2224] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.7608'. [ 804.935255][ T2240] pimreg: entered allmulticast mode [ 804.966891][ T2240] pimreg: left allmulticast mode [ 805.149337][ T2255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7621'. [ 805.171253][ T2255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7621'. [ 805.246687][ T2233] lo speed is unknown, defaulting to 1000 [ 805.278884][ T2258] xt_hashlimit: size too large, truncated to 1048576 [ 805.424829][ T2264] netlink: 'syz.0.7622': attribute type 1 has an invalid length. [ 805.447121][ T2264] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7622'. [ 805.623164][ T2270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7626'. [ 805.703227][ T5624] block nbd10: Receive control failed (result -1) [ 806.176814][ T2292] netlink: 'syz.3.7632': attribute type 12 has an invalid length. [ 806.186680][ T2292] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7632'. [ 806.217021][ T2292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7632'. [ 806.528831][ T2305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7636'. [ 806.563545][ T2306] netlink: 'syz.2.7635': attribute type 3 has an invalid length. [ 806.619562][ T2305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7636'. [ 808.056403][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 809.978025][ T4995] block nbd0: Possible stuck request ffff8880b2ee0000: control (read@0,1024B). Runtime 60 seconds [ 810.004970][ T4985] udevd[4985]: worker [26423] /devices/virtual/block/nbd1 is taking a long time [ 810.014258][ T4985] udevd[4985]: worker [27953] /devices/virtual/block/nbd0 is taking a long time [ 815.737314][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 816.376342][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 816.383513][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 816.390724][ C1] bridge0: port 3(syz_tun) entered learning state [ 817.018063][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 820.216249][ T1939] block nbd1: Possible stuck request ffff888078847000: control (read@0,4096B). Runtime 180 seconds [ 821.488978][ T9097] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 821.496995][ T9097] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 821.504300][ T9097] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 821.512428][ T9097] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 821.520690][ T9097] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 821.548359][ T9097] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 821.555683][ T9097] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 821.563376][ T9097] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 821.571424][ T9097] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 821.579910][ T9097] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 821.871240][ T2336] lo speed is unknown, defaulting to 1000 [ 822.062820][ T2340] lo speed is unknown, defaulting to 1000 [ 822.097361][ T5624] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 822.105246][ T5624] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 822.112632][ T5624] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 822.120461][ T5624] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 822.130269][ T5624] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 822.168500][ T5624] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 822.175856][ T5624] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 822.184800][ T5624] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 822.194346][ T5624] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 822.203491][ T5624] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 822.693661][ T5624] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 822.703552][ T5624] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 822.711120][ T5624] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 822.720866][ T5624] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 822.728692][ T5624] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 822.807886][ T2336] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.823358][ T2336] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.831933][ T2336] bridge_slave_0: entered allmulticast mode [ 822.839772][ T2336] bridge_slave_0: entered promiscuous mode [ 822.849330][ T2336] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.857882][ T2336] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.865197][ T2336] bridge_slave_1: entered allmulticast mode [ 822.874669][ T2336] bridge_slave_1: entered promiscuous mode [ 822.935627][ T2336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 822.961440][ T2336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 822.997410][ T2359] lo speed is unknown, defaulting to 1000 [ 823.014521][ T2336] team0: Port device team_slave_0 added [ 823.079360][ T2336] team0: Port device team_slave_1 added [ 823.155029][ T2336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 823.177106][ T2336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.207990][ T2336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 823.225442][ T2336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 823.234784][ T2336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.261892][ T2336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 823.300596][ T2361] lo speed is unknown, defaulting to 1000 [ 823.303156][ T2340] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.313824][ T2340] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.321938][ T2340] bridge_slave_0: entered allmulticast mode [ 823.329596][ T2340] bridge_slave_0: entered promiscuous mode [ 823.347391][ T2340] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.354786][ T2340] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.362704][ T2340] bridge_slave_1: entered allmulticast mode [ 823.370146][ T2340] bridge_slave_1: entered promiscuous mode [ 823.409936][ T2336] hsr_slave_0: entered promiscuous mode [ 823.419775][ T2336] hsr_slave_1: entered promiscuous mode [ 823.437372][ T2336] debugfs: 'hsr0' already exists in 'hsr' [ 823.443177][ T2336] Cannot create hsr debugfs directory [ 823.518669][ T2340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 823.544355][ T2340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 823.576986][ T5624] Bluetooth: hci4: command tx timeout [ 823.637281][ T2340] team0: Port device team_slave_0 added [ 823.652188][ T2386] lo speed is unknown, defaulting to 1000 [ 823.656879][ T5624] Bluetooth: hci6: command tx timeout [ 823.679356][ T2340] team0: Port device team_slave_1 added [ 823.730849][ T2340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 823.740335][ T2340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.768436][ T2340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 823.801910][ T2340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 823.809049][ T2340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.835385][ T2340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 823.932200][ T2340] hsr_slave_0: entered promiscuous mode [ 823.939552][ T2340] hsr_slave_1: entered promiscuous mode [ 823.945791][ T2340] debugfs: 'hsr0' already exists in 'hsr' [ 823.952694][ T2340] Cannot create hsr debugfs directory [ 824.216450][ T9097] Bluetooth: hci7: command tx timeout [ 824.222005][ T5624] Bluetooth: hci8: command tx timeout [ 824.259972][ T2359] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.267216][ T2359] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.274459][ T2359] bridge_slave_0: entered allmulticast mode [ 824.281801][ T2359] bridge_slave_0: entered promiscuous mode [ 824.289873][ T2359] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.297483][ T2359] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.304793][ T2359] bridge_slave_1: entered allmulticast mode [ 824.311913][ T2359] bridge_slave_1: entered promiscuous mode [ 824.373962][ T2359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 824.385606][ T2359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 824.423144][ T2361] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.431130][ T2361] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.438483][ T2361] bridge_slave_0: entered allmulticast mode [ 824.445424][ T2361] bridge_slave_0: entered promiscuous mode [ 824.463601][ T2361] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.470903][ T2361] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.478216][ T2361] bridge_slave_1: entered allmulticast mode [ 824.485090][ T2361] bridge_slave_1: entered promiscuous mode [ 824.493549][ T2359] team0: Port device team_slave_0 added [ 824.512899][ T2359] team0: Port device team_slave_1 added [ 824.544933][ T2361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 824.569511][ T2361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 824.579829][ T2359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 824.586925][ T2359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 824.613391][ T2359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 824.636021][ T2359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 824.643031][ T2359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 824.669368][ T2359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 824.706757][ T2386] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.713935][ T2386] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.721556][ T2386] bridge_slave_0: entered allmulticast mode [ 824.728650][ T2386] bridge_slave_0: entered promiscuous mode [ 824.737469][ T2361] team0: Port device team_slave_0 added [ 824.745256][ T2361] team0: Port device team_slave_1 added [ 824.751309][ T2386] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.759270][ T2386] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.766700][ T2386] bridge_slave_1: entered allmulticast mode [ 824.773570][ T2386] bridge_slave_1: entered promiscuous mode [ 824.779587][ T5624] Bluetooth: hci9: command tx timeout [ 824.826941][ T2386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 824.839924][ T2359] hsr_slave_0: entered promiscuous mode [ 824.846587][ T2359] hsr_slave_1: entered promiscuous mode [ 824.852694][ T2359] debugfs: 'hsr0' already exists in 'hsr' [ 824.859119][ T2359] Cannot create hsr debugfs directory [ 824.865278][ T2361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 824.872718][ T2361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 824.899367][ T2361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 824.912237][ T2386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 824.922871][ T2361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 824.930059][ T2361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 824.956919][ T2361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 824.988806][ T2386] team0: Port device team_slave_0 added [ 825.007544][ T2386] team0: Port device team_slave_1 added [ 825.054508][ T2361] hsr_slave_0: entered promiscuous mode [ 825.060891][ T2361] hsr_slave_1: entered promiscuous mode [ 825.067311][ T2361] debugfs: 'hsr0' already exists in 'hsr' [ 825.073048][ T2361] Cannot create hsr debugfs directory [ 825.083416][ T2386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 825.090621][ T2386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 825.117909][ T2386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 825.130652][ T2386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 825.137712][ T2386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 825.163784][ T2386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 825.244519][ T2386] hsr_slave_0: entered promiscuous mode [ 825.251016][ T2386] hsr_slave_1: entered promiscuous mode [ 825.257386][ T2386] debugfs: 'hsr0' already exists in 'hsr' [ 825.263153][ T2386] Cannot create hsr debugfs directory [ 825.656132][ T5624] Bluetooth: hci4: command tx timeout [ 825.736192][ T5624] Bluetooth: hci6: command tx timeout [ 826.296201][ T9097] Bluetooth: hci7: command tx timeout [ 826.297936][ T5624] Bluetooth: hci8: command tx timeout [ 826.856893][ T5624] Bluetooth: hci9: command tx timeout [ 827.736383][ T5624] Bluetooth: hci4: command tx timeout [ 827.816113][ T5624] Bluetooth: hci6: command tx timeout [ 828.376263][ T9097] Bluetooth: hci8: command tx timeout [ 828.378294][ T5624] Bluetooth: hci7: command tx timeout [ 828.457885][ T4985] udevd[4985]: worker [26423] /devices/virtual/block/nbd1 timeout; kill it [ 828.466665][ T4985] udevd[4985]: seq 44589 '/devices/virtual/block/nbd1' killed [ 828.936452][ T5624] Bluetooth: hci9: command tx timeout [ 829.817517][ T5624] Bluetooth: hci4: command tx timeout [ 829.896425][ T5624] Bluetooth: hci6: command tx timeout [ 830.456233][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 830.464568][ T5624] Bluetooth: hci7: command tx timeout [ 830.466983][ T9097] Bluetooth: hci8: command tx timeout [ 831.016167][ T9097] Bluetooth: hci9: command tx timeout [ 831.736069][ C1] bridge0: port 3(syz_tun) entered forwarding state [ 831.742726][ C1] bridge0: topology change detected, propagating [ 831.749264][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 831.756493][ C0] bridge0: topology change detected, propagating [ 831.762936][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 831.770203][ C1] bridge0: topology change detected, propagating [ 834.309624][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 840.057674][ T4995] block nbd0: Possible stuck request ffff8880b2ee0000: control (read@0,1024B). Runtime 90 seconds [ 850.297731][ T1939] block nbd1: Possible stuck request ffff888078847000: control (read@0,4096B). Runtime 210 seconds [ 859.266384][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 868.856889][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 870.138078][ T4995] block nbd0: Possible stuck request ffff8880b2ee0000: control (read@0,1024B). Runtime 120 seconds [ 880.396111][ T1939] block nbd1: Possible stuck request ffff888078847000: control (read@0,4096B). Runtime 240 seconds [ 882.062346][ T5624] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 882.071076][ T5624] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 882.078608][ T5624] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 882.086890][ T5624] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 882.095016][ T5624] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 882.128266][ T5624] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 882.135647][ T5624] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 882.145104][ T5624] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 882.157919][ T5624] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 882.168537][ T5624] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 882.215210][ T9097] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 882.227692][ T9097] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 882.235264][ T9097] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 882.243887][ T9097] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 882.254915][ T9097] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 882.668666][ T9097] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 882.676254][ T9097] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 882.684371][ T9097] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 882.693237][T22332] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 882.700472][T22332] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 882.707923][T22332] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 882.715418][ T2483] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 882.715653][T22332] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 882.732258][T22332] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 882.740061][T22332] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 882.875713][ T2438] lo speed is unknown, defaulting to 1000 [ 883.087957][ T2440] lo speed is unknown, defaulting to 1000 [ 883.325644][ T2445] lo speed is unknown, defaulting to 1000 [ 883.492039][ T2478] lo speed is unknown, defaulting to 1000 [ 883.735431][ T2476] lo speed is unknown, defaulting to 1000 [ 883.788314][ T2438] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.807733][ T2438] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.826698][ T2438] bridge_slave_0: entered allmulticast mode [ 883.835568][ T2438] bridge_slave_0: entered promiscuous mode [ 883.851430][ T2438] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.859211][ T2438] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.876415][ T2438] bridge_slave_1: entered allmulticast mode [ 883.883842][ T2438] bridge_slave_1: entered promiscuous mode [ 883.958796][ T2438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 883.984311][ T2438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 884.064837][ T2438] team0: Port device team_slave_0 added [ 884.084312][ T2438] team0: Port device team_slave_1 added [ 884.122394][ T2438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 884.129534][ T2438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 884.137549][ T5624] Bluetooth: hci10: command tx timeout [ 884.161457][ T2438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 884.190336][ T2438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 884.197749][ T2438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 884.223900][ T5624] Bluetooth: hci11: command tx timeout [ 884.229717][ T2438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 884.296160][ T5624] Bluetooth: hci12: command tx timeout [ 884.331024][ T2440] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.339136][ T2440] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.346994][ T2440] bridge_slave_0: entered allmulticast mode [ 884.354488][ T2440] bridge_slave_0: entered promiscuous mode [ 884.384437][ T2440] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.391719][ T2440] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.399519][ T2440] bridge_slave_1: entered allmulticast mode [ 884.406661][ T2440] bridge_slave_1: entered promiscuous mode [ 884.417575][ T2438] hsr_slave_0: entered promiscuous mode [ 884.424035][ T2438] hsr_slave_1: entered promiscuous mode [ 884.430442][ T2438] debugfs: 'hsr0' already exists in 'hsr' [ 884.436430][ T2438] Cannot create hsr debugfs directory [ 884.524210][ T2440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 884.561924][ T2440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 884.640161][ T2440] team0: Port device team_slave_0 added [ 884.663855][ T2440] team0: Port device team_slave_1 added [ 884.724999][ T2440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 884.732362][ T2440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 884.758615][ T2440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 884.776160][T22332] Bluetooth: hci14: command tx timeout [ 884.781803][ T5624] Bluetooth: hci13: command tx timeout [ 884.790885][ T2445] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.798631][ T2445] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.806937][ T2445] bridge_slave_0: entered allmulticast mode [ 884.814624][ T2445] bridge_slave_0: entered promiscuous mode [ 884.824234][ T2440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 884.833042][ T2440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 884.859348][ T2440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 884.874997][ T2445] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.882352][ T2445] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.890098][ T2445] bridge_slave_1: entered allmulticast mode [ 884.897541][ T2445] bridge_slave_1: entered promiscuous mode [ 884.936729][ T2445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 884.961423][ T2445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 885.011564][ T2478] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.018995][ T2478] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.026746][ T2478] bridge_slave_0: entered allmulticast mode [ 885.033744][ T2478] bridge_slave_0: entered promiscuous mode [ 885.051675][ T2440] hsr_slave_0: entered promiscuous mode [ 885.058551][ T2440] hsr_slave_1: entered promiscuous mode [ 885.064798][ T2440] debugfs: 'hsr0' already exists in 'hsr' [ 885.070878][ T2440] Cannot create hsr debugfs directory [ 885.080338][ T2445] team0: Port device team_slave_0 added [ 885.086347][ T2478] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.093535][ T2478] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.100965][ T2478] bridge_slave_1: entered allmulticast mode [ 885.108778][ T2478] bridge_slave_1: entered promiscuous mode [ 885.128217][ T2445] team0: Port device team_slave_1 added [ 885.189659][ T2478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 885.210443][ T2445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 885.217748][ T2445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 885.244132][ T2445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 885.258212][ T2478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 885.274141][ T2476] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.281842][ T2476] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.289413][ T2476] bridge_slave_0: entered allmulticast mode [ 885.296477][ T2476] bridge_slave_0: entered promiscuous mode [ 885.308144][ T2445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 885.315202][ T2445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 885.343793][ T2445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 885.365333][ T2476] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.372628][ T2476] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.380185][ T2476] bridge_slave_1: entered allmulticast mode [ 885.387491][ T2476] bridge_slave_1: entered promiscuous mode [ 885.404997][ T2478] team0: Port device team_slave_0 added [ 885.437180][ T2478] team0: Port device team_slave_1 added [ 885.445191][ T2476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 885.484625][ T2476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 885.511357][ T2478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 885.518489][ T2478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 885.545040][ T2478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 885.572587][ T2445] hsr_slave_0: entered promiscuous mode [ 885.579320][ T2445] hsr_slave_1: entered promiscuous mode [ 885.585495][ T2445] debugfs: 'hsr0' already exists in 'hsr' [ 885.591545][ T2445] Cannot create hsr debugfs directory [ 885.607507][ T2478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 885.614499][ T2478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 885.641174][ T2478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 885.661710][ T2476] team0: Port device team_slave_0 added [ 885.669988][ T2476] team0: Port device team_slave_1 added [ 885.751899][ T2476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 885.758994][ T2476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 885.785410][ T2476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 885.800329][ T2478] hsr_slave_0: entered promiscuous mode [ 885.807137][ T2478] hsr_slave_1: entered promiscuous mode [ 885.813335][ T2478] debugfs: 'hsr0' already exists in 'hsr' [ 885.819351][ T2478] Cannot create hsr debugfs directory [ 885.831481][ T2476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 885.838746][ T2476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 885.865755][ T2476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 885.957036][ T2476] hsr_slave_0: entered promiscuous mode [ 885.963541][ T2476] hsr_slave_1: entered promiscuous mode [ 885.971059][ T2476] debugfs: 'hsr0' already exists in 'hsr' [ 885.977643][ T2476] Cannot create hsr debugfs directory [ 886.216099][ T5624] Bluetooth: hci10: command tx timeout [ 886.296634][ T5624] Bluetooth: hci11: command tx timeout [ 886.376098][ T5624] Bluetooth: hci12: command tx timeout [ 886.856199][T22332] Bluetooth: hci14: command tx timeout [ 886.860580][ T5624] Bluetooth: hci13: command tx timeout [ 888.296151][ T5624] Bluetooth: hci10: command tx timeout [ 888.376259][ T5624] Bluetooth: hci11: command tx timeout [ 888.456141][ T5624] Bluetooth: hci12: command tx timeout [ 888.936196][T22332] Bluetooth: hci13: command tx timeout [ 888.941749][ T5624] Bluetooth: hci14: command tx timeout [ 890.376220][ T5624] Bluetooth: hci10: command tx timeout [ 890.456397][ T5624] Bluetooth: hci11: command tx timeout [ 890.536176][ T5624] Bluetooth: hci12: command tx timeout [ 891.016101][ T5624] Bluetooth: hci14: command tx timeout [ 891.016237][T22332] Bluetooth: hci13: command tx timeout [ 895.736677][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 900.216447][ T4995] block nbd0: Possible stuck request ffff8880b2ee0000: control (read@0,1024B). Runtime 150 seconds [ 910.457794][ T1939] block nbd1: Possible stuck request ffff888078847000: control (read@0,4096B). Runtime 270 seconds [ 921.337236][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 930.296305][ T4995] block nbd0: Possible stuck request ffff8880b2ee0000: control (read@0,1024B). Runtime 180 seconds [ 931.736313][ T4985] udevd[4985]: worker [27953] /devices/virtual/block/nbd0 timeout; kill it [ 931.745107][ T4985] udevd[4985]: seq 52519 '/devices/virtual/block/nbd0' killed [ 940.536290][ T1939] block nbd1: Possible stuck request ffff888078847000: control (read@0,4096B). Runtime 300 seconds [ 941.820052][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 942.151254][ T2338] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 942.169498][ T2557] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 942.176803][ T2557] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 942.184943][ T2483] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 942.192764][ T2557] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 942.202194][ T2557] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 942.210260][ T2557] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 942.217984][ T2483] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 942.225298][ T2483] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 942.233861][ T2557] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 942.247479][ T2338] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 942.258366][ T9097] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 942.266459][ T9097] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 942.276859][ T9097] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 942.284440][ T9097] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 942.748271][ T9097] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 942.755816][ T9097] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 942.764693][ T9097] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 942.773034][ T9097] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 942.781030][ T9097] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 942.807309][ T2553] lo speed is unknown, defaulting to 1000 [ 943.000806][ T2559] lo speed is unknown, defaulting to 1000 [ 943.203323][ T9097] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 943.214159][ T9097] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 943.222496][ T9097] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 943.232019][ T9097] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 943.240597][ T9097] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 943.339852][ T2554] lo speed is unknown, defaulting to 1000 [ 943.644661][ T2553] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.652271][ T2553] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.660022][ T2553] bridge_slave_0: entered allmulticast mode [ 943.668933][ T2553] bridge_slave_0: entered promiscuous mode [ 943.676245][ T2595] lo speed is unknown, defaulting to 1000 [ 943.679790][ T2553] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.689580][ T2553] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.697454][ T2553] bridge_slave_1: entered allmulticast mode [ 943.704899][ T2553] bridge_slave_1: entered promiscuous mode [ 943.753851][ T2553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 943.790415][ T2553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 943.882843][ T2553] team0: Port device team_slave_0 added [ 943.897423][ T9097] Bluetooth: hci4: command 0x0406 tx timeout [ 943.903670][ T2557] Bluetooth: hci6: command 0x0406 tx timeout [ 943.911171][ T2553] team0: Port device team_slave_1 added [ 943.946475][ T2553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 943.953891][ T2553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 943.980362][ T2553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 944.009841][ T2553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 944.017148][ T2553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 944.044341][ T2553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 944.055647][ T2606] lo speed is unknown, defaulting to 1000 [ 944.210843][ T2553] hsr_slave_0: entered promiscuous mode [ 944.218137][ T2553] hsr_slave_1: entered promiscuous mode [ 944.224632][ T2553] debugfs: 'hsr0' already exists in 'hsr' [ 944.230895][ T2553] Cannot create hsr debugfs directory [ 944.296654][T22332] Bluetooth: hci17: command tx timeout [ 944.302316][ T5624] Bluetooth: hci15: command tx timeout [ 944.308271][ T2557] Bluetooth: hci16: command tx timeout [ 944.497900][ T2559] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.505192][ T2559] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.512765][ T2559] bridge_slave_0: entered allmulticast mode [ 944.520587][ T2559] bridge_slave_0: entered promiscuous mode [ 944.549930][ T2559] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.557574][ T2559] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.564930][ T2559] bridge_slave_1: entered allmulticast mode [ 944.574041][ T2559] bridge_slave_1: entered promiscuous mode [ 944.618642][ T2559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 944.632296][ T2559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 944.712233][ T2559] team0: Port device team_slave_0 added [ 944.723864][ T2559] team0: Port device team_slave_1 added [ 944.794082][ T2554] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.801397][ T2554] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.809126][ T2554] bridge_slave_0: entered allmulticast mode [ 944.816193][ T2554] bridge_slave_0: entered promiscuous mode [ 944.823790][ T2559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 944.830825][ T2559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 944.857083][ T2559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 944.869293][T22332] Bluetooth: hci18: command tx timeout [ 944.889129][ T2554] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.896433][ T2554] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.903789][ T2554] bridge_slave_1: entered allmulticast mode [ 944.911219][ T2554] bridge_slave_1: entered promiscuous mode [ 944.927240][ T2559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 944.934436][ T2559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 944.961068][ T2559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 945.010218][ T2554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 945.023740][ T2554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 945.099079][ T2559] hsr_slave_0: entered promiscuous mode [ 945.105611][ T2559] hsr_slave_1: entered promiscuous mode [ 945.112703][ T2559] debugfs: 'hsr0' already exists in 'hsr' [ 945.118775][ T2559] Cannot create hsr debugfs directory [ 945.132905][ T2554] team0: Port device team_slave_0 added [ 945.146720][ T2554] team0: Port device team_slave_1 added [ 945.166991][ T2595] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.174243][ T2595] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.181963][ T2595] bridge_slave_0: entered allmulticast mode [ 945.189379][ T2595] bridge_slave_0: entered promiscuous mode [ 945.212254][ T2554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 945.219551][ T2554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 945.246250][ T2554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 945.257083][T22332] Bluetooth: hci19: command tx timeout [ 945.262843][ T2595] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.270140][ T2595] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.277735][ T2595] bridge_slave_1: entered allmulticast mode [ 945.284738][ T2595] bridge_slave_1: entered promiscuous mode [ 945.307718][ T2554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 945.314726][ T2554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 945.341709][ T2554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 945.400201][ T2606] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.407603][ T2606] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.415104][ T2606] bridge_slave_0: entered allmulticast mode [ 945.423299][ T2606] bridge_slave_0: entered promiscuous mode [ 945.433978][ T2595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 945.446652][ T2595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 945.470898][ T2606] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.478238][ T2606] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.485534][ T2606] bridge_slave_1: entered allmulticast mode [ 945.492839][ T2606] bridge_slave_1: entered promiscuous mode [ 945.558754][ T2606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 945.569826][ T2595] team0: Port device team_slave_0 added [ 945.580125][ T2554] hsr_slave_0: entered promiscuous mode [ 945.587132][ T2554] hsr_slave_1: entered promiscuous mode [ 945.593269][ T2554] debugfs: 'hsr0' already exists in 'hsr' [ 945.599155][ T2554] Cannot create hsr debugfs directory [ 945.611124][ T2606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 945.622339][ T2595] team0: Port device team_slave_1 added [ 945.667761][ T2595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 945.674763][ T2595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 945.701581][ T2595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 945.728067][ T2606] team0: Port device team_slave_0 added [ 945.734411][ T2595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 945.741680][ T2595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 945.768241][ T2595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 945.789809][ T2606] team0: Port device team_slave_1 added [ 945.837548][ T2606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 945.844603][ T2606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 945.871303][ T2606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 945.898608][ T2606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 945.905643][ T2606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 945.932239][ T2606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 945.968070][ T2595] hsr_slave_0: entered promiscuous mode [ 945.974490][ T2595] hsr_slave_1: entered promiscuous mode [ 945.981889][ T2595] debugfs: 'hsr0' already exists in 'hsr' [ 945.988791][ T2595] Cannot create hsr debugfs directory [ 946.044718][ T2606] hsr_slave_0: entered promiscuous mode [ 946.051486][ T2606] hsr_slave_1: entered promiscuous mode [ 946.058015][ T2606] debugfs: 'hsr0' already exists in 'hsr' [ 946.063766][ T2606] Cannot create hsr debugfs directory [ 946.376212][T22332] Bluetooth: hci17: command tx timeout [ 946.376251][ T2557] Bluetooth: hci16: command tx timeout [ 946.383498][ T5624] Bluetooth: hci15: command tx timeout [ 946.939748][ T2557] Bluetooth: hci18: command tx timeout [ 947.336151][ T2557] Bluetooth: hci19: command tx timeout [ 948.456276][ T2557] Bluetooth: hci16: command tx timeout [ 948.459065][ T2558] Bluetooth: hci15: command tx timeout [ 948.461913][ T2338] Bluetooth: hci17: command tx timeout [ 949.016154][ T2338] Bluetooth: hci9: command 0x0406 tx timeout [ 949.022254][ T2557] Bluetooth: hci7: command 0x0406 tx timeout [ 949.022321][ T2338] Bluetooth: hci8: command 0x0406 tx timeout [ 949.029207][ T2558] Bluetooth: hci18: command tx timeout [ 949.416424][ T2663] Bluetooth: hci19: command tx timeout [ 950.536508][ T2663] Bluetooth: hci17: command tx timeout [ 950.536551][ T2483] Bluetooth: hci16: command tx timeout [ 950.536575][ T2483] Bluetooth: hci15: command tx timeout [ 951.096115][ T2483] Bluetooth: hci18: command tx timeout [ 951.497251][ T2483] Bluetooth: hci19: command tx timeout [ 960.378361][ T4995] block nbd0: Possible stuck request ffff8880b2ee0000: control (read@0,1024B). Runtime 210 seconds [ 961.656685][ T31] INFO: task syz.0.7628:2280 blocked for more than 143 seconds. [ 961.664525][ T31] Not tainted syzkaller #0 [ 961.669993][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 961.679082][ T31] task:syz.0.7628 state:D stack:24888 pid:2280 tgid:2279 ppid:27788 task_flags:0x480140 flags:0x00080002 [ 961.691402][ T31] Call Trace: [ 961.694737][ T31] [ 961.698091][ T31] __schedule+0x17d9/0x56c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 961.702696][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 961.707863][ T31] ? rcu_is_watching+0x15/0xb0 [ 961.712695][ T31] ? __pfx___schedule+0x10/0x10 [ 961.718173][ T31] ? schedule+0x90/0x360 [ 961.722532][ T31] ? rcu_is_watching+0x15/0xb0 [ 961.727816][ T31] ? lock_release+0x4b/0x3c0 [ 961.732492][ T31] schedule+0x164/0x360 [ 961.737795][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 961.743416][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 961.750420][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 961.757067][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 961.763300][ T31] nbd_set_size+0x454/0x680 [ 961.768496][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 961.773598][ T31] ? nla_memcpy+0x5b/0xc0 [ 961.778690][ T31] nbd_genl_reconfigure+0x7e9/0x1e80 [ 961.784060][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 961.790396][ T31] ? rcu_is_watching+0x15/0xb0 [ 961.795228][ T31] ? trace_kmalloc+0x2a/0xf0 [ 961.800416][ T31] ? __nla_parse+0x40/0x60 [ 961.804907][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 961.811690][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 961.819198][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 961.824840][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 961.831128][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 961.836828][ T31] genl_rcv_msg+0x614/0x7a0 [ 961.841418][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 961.846974][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 961.852759][ T31] ? __netlink_lookup+0xc6/0x8b0 [ 961.857981][ T31] ? rcu_is_watching+0x15/0xb0 [ 961.862826][ T31] netlink_rcv_skb+0x226/0x4a0 [ 961.867907][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 961.872996][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 961.878735][ T31] ? down_read+0x2be/0x330 [ 961.883286][ T31] genl_rcv+0x28/0x40 [ 961.888121][ T31] netlink_unicast+0x7bb/0x940 [ 961.892976][ T31] netlink_sendmsg+0x813/0xb40 [ 961.902522][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 961.908584][ T31] ? futex_unqueue+0x22/0x240 [ 961.913328][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 961.918528][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 961.923884][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 961.929420][ T31] ____sys_sendmsg+0x9b9/0xa20 [ 961.934269][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 961.940013][ T31] ? lock_release+0x4b/0x3c0 [ 961.944659][ T31] ? import_iovec+0x73/0xa0 [ 961.949415][ T31] ___sys_sendmsg+0x2a5/0x360 [ 961.954174][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 961.959662][ T31] ? futex_wait+0x2a2/0x390 [ 961.964250][ T31] ? __fget_files+0x2a/0x420 [ 961.969292][ T31] ? __fget_files+0x3a2/0x420 [ 961.974042][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 961.979454][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 961.985005][ T31] ? rcu_is_watching+0x15/0xb0 [ 961.989989][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.997378][ T31] do_syscall_64+0x174/0x580 [ 962.002053][ T31] ? trace_irq_disable+0x3b/0x140 [ 962.007306][ T31] ? clear_bhb_loop+0x40/0x90 [ 962.015938][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.046550][ T31] RIP: 0033:0x7f9a8bb9ce59 [ 962.062057][ T31] RSP: 002b:00007f9a8cada028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 962.071409][ T31] RAX: ffffffffffffffda RBX: 00007f9a8be15fa0 RCX: 00007f9a8bb9ce59 [ 962.079658][ T31] RDX: 0000000000000800 RSI: 0000200000002600 RDI: 0000000000000004 [ 962.088118][ T31] RBP: 00007f9a8bc32e6f R08: 0000000000000000 R09: 0000000000000000 [ 962.096559][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 962.104601][ T31] R13: 00007f9a8be16038 R14: 00007f9a8be15fa0 R15: 00007ffd92a2f738 [ 962.112748][ T31] [ 962.115827][ T31] INFO: task syz.3.7634:2298 blocked for more than 143 seconds. [ 962.123839][ T31] Not tainted syzkaller #0 [ 962.129286][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 962.138411][ T31] task:syz.3.7634 state:D stack:27856 pid:2298 tgid:2297 ppid:29685 task_flags:0x400140 flags:0x00080002 [ 962.150746][ T31] Call Trace: [ 962.154041][ T31] [ 962.157097][ T31] __schedule+0x17d9/0x56c0 [ 962.161646][ T31] ? ima_match_policy+0x106/0x21c0 [ 962.167004][ T31] ? __update_page_owner_handle+0x5a/0x570 [ 962.172883][ T31] ? __pfx___schedule+0x10/0x10 [ 962.178112][ T31] ? rcu_is_watching+0x15/0xb0 [ 962.182962][ T31] ? rcu_is_watching+0x15/0xb0 [ 962.188026][ T31] ? lock_release+0x4b/0x3c0 [ 962.192709][ T31] ? rcu_is_watching+0x15/0xb0 [ 962.197639][ T31] schedule+0x164/0x360 [ 962.201849][ T31] schedule_preempt_disabled+0x13/0x30 [ 962.207740][ T31] __mutex_lock+0x7bf/0x1550 [ 962.212443][ T31] ? __mutex_lock+0x5d4/0x1550 [ 962.217725][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 962.222474][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 962.227615][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 962.233040][ T31] ? radix_tree_lookup+0x240/0x290 [ 962.238613][ T31] genl_rcv_msg+0x10b/0x7a0 [ 962.243153][ T31] ? __alloc_skb+0x276/0x7a0 [ 962.247870][ T31] ? netlink_sendmsg+0x5d4/0xb40 [ 962.252880][ T31] ? do_syscall_64+0x174/0x580 [ 962.257830][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 962.262915][ T31] ? __netlink_lookup+0xc6/0x8b0 [ 962.268201][ T31] ? rcu_is_watching+0x15/0xb0 [ 962.272991][ T31] netlink_rcv_skb+0x226/0x4a0 [ 962.278119][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 962.283204][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 962.288635][ T31] ? down_read+0x2be/0x330 [ 962.293124][ T31] genl_rcv+0x28/0x40 [ 962.298732][ T31] netlink_unicast+0x7bb/0x940 [ 962.303576][ T31] netlink_sendmsg+0x813/0xb40 [ 962.308454][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 962.313797][ T31] ? __might_fault+0xaf/0x130 [ 962.318654][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 962.323660][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 962.329336][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 962.334650][ T31] __sys_sendto+0x626/0x6c0 [ 962.339281][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 962.344356][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 962.349909][ T31] __x64_sys_sendto+0xde/0x100 [ 962.354740][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.361194][ T31] do_syscall_64+0x174/0x580 [ 962.365826][ T31] ? trace_irq_disable+0x3b/0x140 [ 962.370975][ T31] ? clear_bhb_loop+0x40/0x90 [ 962.375696][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.382059][ T31] RIP: 0033:0x7f8d07b5d68e [ 962.386963][ T31] RSP: 002b:00007f8d08b04e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 962.395457][ T31] RAX: ffffffffffffffda RBX: 00007f8d08b066c0 RCX: 00007f8d07b5d68e [ 962.403521][ T31] RDX: 000000000000001c RSI: 00007f8d08b05000 RDI: 0000000000000006 [ 962.411626][ T31] RBP: 0000000000000000 R08: 00007f8d08b04f04 R09: 000000000000000c [ 962.419941][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 962.428048][ T31] R13: 00007f8d08b04f58 R14: 00007f8d08b05000 R15: 0000000000000000 [ 962.436209][ T31] [ 962.439306][ T31] INFO: task syz.2.7635:2302 blocked for more than 144 seconds. [ 962.447313][ T31] Not tainted syzkaller #0 [ 962.452283][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 962.461609][ T31] task:syz.2.7635 state:D stack:28304 pid:2302 tgid:2301 ppid:29066 task_flags:0x400140 flags:0x00080002 [ 962.473655][ T31] Call Trace: [ 962.477228][ T31] [ 962.480206][ T31] __schedule+0x17d9/0x56c0 [ 962.484730][ T31] ? trace_irq_enable+0x3b/0x140 [ 962.489807][ T31] ? __pfx___schedule+0x10/0x10 [ 962.494711][ T31] ? rcu_is_watching+0x15/0xb0 [ 962.499994][ T31] ? rcu_is_watching+0x15/0xb0 [ 962.504898][ T31] ? lock_release+0x4b/0x3c0 [ 962.509892][ T31] ? rcu_is_watching+0x15/0xb0 [ 962.514705][ T31] schedule+0x164/0x360 [ 962.518980][ T31] schedule_preempt_disabled+0x13/0x30 [ 962.524477][ T31] __mutex_lock+0x7bf/0x1550 [ 962.529207][ T31] ? __mutex_lock+0x5d4/0x1550 [ 962.534017][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 962.539498][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 962.544602][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 962.549839][ T31] ? radix_tree_lookup+0x240/0x290 [ 962.555013][ T31] genl_rcv_msg+0x10b/0x7a0 [ 962.559677][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 962.564768][ T31] ? ref_tracker_free+0x689/0x830 [ 962.570315][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 962.575752][ T31] netlink_rcv_skb+0x226/0x4a0 [ 962.580981][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 962.586156][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 962.591506][ T31] ? down_read+0x2be/0x330 [ 962.596109][ T31] genl_rcv+0x28/0x40 [ 962.600141][ T31] netlink_unicast+0x7bb/0x940 [ 962.604945][ T31] netlink_sendmsg+0x813/0xb40 [ 962.609898][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 962.615264][ T31] ? __might_fault+0xaf/0x130 [ 962.620152][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 962.625128][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 962.630573][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 962.636091][ T31] __sys_sendto+0x626/0x6c0 [ 962.640647][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 962.645701][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 962.651160][ T31] __x64_sys_sendto+0xde/0x100 [ 962.656117][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.662238][ T31] do_syscall_64+0x174/0x580 [ 962.667372][ T31] ? trace_irq_disable+0x3b/0x140 [ 962.672476][ T31] ? clear_bhb_loop+0x40/0x90 [ 962.677439][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.683410][ T31] RIP: 0033:0x7fa5f215d68e [ 962.688710][ T31] RSP: 002b:00007fa5f304ae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 962.697543][ T31] RAX: ffffffffffffffda RBX: 00007fa5f304c6c0 RCX: 00007fa5f215d68e [ 962.705534][ T31] RDX: 0000000000000020 RSI: 00007fa5f304b000 RDI: 0000000000000007 [ 962.713626][ T31] RBP: 0000000000000000 R08: 00007fa5f304af04 R09: 000000000000000c [ 962.721989][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 962.730123][ T31] R13: 00007fa5f304af58 R14: 00007fa5f304b000 R15: 0000000000000000 [ 962.738238][ T31] [ 962.741316][ T31] INFO: task syz.1.7637:2309 blocked for more than 144 seconds. [ 962.752793][ T31] Not tainted syzkaller #0 [ 962.757985][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 962.766784][ T31] task:syz.1.7637 state:D stack:28792 pid:2309 tgid:2308 ppid:29305 task_flags:0x400140 flags:0x00080002 [ 962.779229][ T31] Call Trace: [ 962.782566][ T31] [ 962.785516][ T31] __schedule+0x17d9/0x56c0 [ 962.790318][ T31] ? __update_page_owner_handle+0x5a/0x570 [ 962.796430][ T31] ? __pfx___schedule+0x10/0x10 [ 962.801350][ T31] ? rcu_is_watching+0x15/0xb0 [ 962.806282][ T31] ? rcu_is_watching+0x15/0xb0 [ 962.811104][ T31] ? lock_release+0x4b/0x3c0 [ 962.815737][ T31] ? rcu_is_watching+0x15/0xb0 [ 962.820623][ T31] schedule+0x164/0x360 [ 962.824846][ T31] schedule_preempt_disabled+0x13/0x30 [ 962.830421][ T31] __mutex_lock+0x7bf/0x1550 [ 962.835051][ T31] ? __mutex_lock+0x5d4/0x1550 [ 962.840023][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 962.844752][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 962.849865][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 962.855280][ T31] ? radix_tree_lookup+0x240/0x290 [ 962.860809][ T31] genl_rcv_msg+0x10b/0x7a0 [ 962.865374][ T31] ? __alloc_skb+0x276/0x7a0 [ 962.870106][ T31] ? netlink_sendmsg+0x5d4/0xb40 [ 962.875088][ T31] ? do_syscall_64+0x174/0x580 [ 962.880096][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 962.885185][ T31] ? __netlink_lookup+0xc6/0x8b0 [ 962.890544][ T31] ? rcu_is_watching+0x15/0xb0 [ 962.895388][ T31] netlink_rcv_skb+0x226/0x4a0 [ 962.900636][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 962.905716][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 962.911341][ T31] ? down_read+0x2be/0x330 [ 962.915835][ T31] genl_rcv+0x28/0x40 [ 962.919980][ T31] netlink_unicast+0x7bb/0x940 [ 962.924776][ T31] netlink_sendmsg+0x813/0xb40 [ 962.929945][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 962.935286][ T31] ? __might_fault+0xaf/0x130 [ 962.940585][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 962.945592][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 962.951030][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 962.956612][ T31] __sys_sendto+0x626/0x6c0 [ 962.961138][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 962.966307][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 962.971622][ T31] __x64_sys_sendto+0xde/0x100 [ 962.976558][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.982681][ T31] do_syscall_64+0x174/0x580 [ 962.987663][ T31] ? trace_irq_disable+0x3b/0x140 [ 962.992760][ T31] ? clear_bhb_loop+0x40/0x90 [ 962.997590][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.003530][ T31] RIP: 0033:0x7f6c7815d68e [ 963.008183][ T31] RSP: 002b:00007f6c763f4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 963.017129][ T31] RAX: ffffffffffffffda RBX: 00007f6c763f66c0 RCX: 00007f6c7815d68e [ 963.025132][ T31] RDX: 0000000000000024 RSI: 00007f6c763f5000 RDI: 0000000000000004 [ 963.033324][ T31] RBP: 0000000000000000 R08: 00007f6c763f4f04 R09: 000000000000000c [ 963.041447][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 963.049800][ T31] R13: 00007f6c763f4f58 R14: 00007f6c763f5000 R15: 0000000000000000 [ 963.057960][ T31] [ 963.061066][ T31] INFO: task syz.1.7637:2313 blocked for more than 144 seconds. [ 963.068907][ T31] Not tainted syzkaller #0 [ 963.073879][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 963.082892][ T31] task:syz.1.7637 state:D stack:28304 pid:2313 tgid:2308 ppid:29305 task_flags:0x400140 flags:0x00080002 [ 963.094980][ T31] Call Trace: [ 963.098585][ T31] [ 963.101548][ T31] __schedule+0x17d9/0x56c0 [ 963.106404][ T31] ? trace_irq_enable+0x3b/0x140 [ 963.111397][ T31] ? __pfx___schedule+0x10/0x10 [ 963.116556][ T31] ? rcu_is_watching+0x15/0xb0 [ 963.121374][ T31] ? rcu_is_watching+0x15/0xb0 [ 963.126820][ T31] ? lock_release+0x4b/0x3c0 [ 963.131513][ T31] ? rcu_is_watching+0x15/0xb0 [ 963.136420][ T31] schedule+0x164/0x360 [ 963.140677][ T31] schedule_preempt_disabled+0x13/0x30 [ 963.146265][ T31] __mutex_lock+0x7bf/0x1550 [ 963.150921][ T31] ? __mutex_lock+0x5d4/0x1550 [ 963.155704][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 963.160506][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 963.165577][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 963.170899][ T31] ? radix_tree_lookup+0x240/0x290 [ 963.176273][ T31] genl_rcv_msg+0x10b/0x7a0 [ 963.180866][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 963.186287][ T31] ? ref_tracker_free+0x689/0x830 [ 963.191406][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 963.196923][ T31] netlink_rcv_skb+0x226/0x4a0 [ 963.201754][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 963.207016][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 963.212382][ T31] ? down_read+0x2be/0x330 [ 963.217003][ T31] genl_rcv+0x28/0x40 [ 963.221038][ T31] netlink_unicast+0x7bb/0x940 [ 963.225819][ T31] netlink_sendmsg+0x813/0xb40 [ 963.230812][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 963.236218][ T31] ? __might_fault+0xaf/0x130 [ 963.240946][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 963.246095][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 963.251443][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 963.257084][ T31] __sys_sendto+0x626/0x6c0 [ 963.261664][ T31] ? file_init_path+0x3b/0x5a0 [ 963.266545][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 963.271617][ T31] ? errseq_sample+0x40/0x70 [ 963.276298][ T31] ? rcu_is_watching+0x15/0xb0 [ 963.281106][ T31] ? fd_install+0x94/0x3d0 [ 963.285535][ T31] ? fd_install+0x306/0x3d0 [ 963.290180][ T31] __x64_sys_sendto+0xde/0x100 [ 963.295004][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.301149][ T31] do_syscall_64+0x174/0x580 [ 963.305776][ T31] ? trace_irq_disable+0x3b/0x140 [ 963.310900][ T31] ? clear_bhb_loop+0x40/0x90 [ 963.315625][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.321672][ T31] RIP: 0033:0x7f6c7815d68e [ 963.326277][ T31] RSP: 002b:00007f6c763d3e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 963.334753][ T31] RAX: ffffffffffffffda RBX: 00007f6c763d56c0 RCX: 00007f6c7815d68e [ 963.343974][ T31] RDX: 0000000000000024 RSI: 00007f6c763d4000 RDI: 0000000000000006 [ 963.352888][ T31] RBP: 0000000000000000 R08: 00007f6c763d3f04 R09: 000000000000000c [ 963.361148][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 963.369286][ T31] R13: 00007f6c763d3f58 R14: 00007f6c763d4000 R15: 0000000000000000 [ 963.377705][ T31] [ 963.380826][ T31] INFO: task syz.4.7642:2327 blocked for more than 145 seconds. [ 963.388633][ T31] Not tainted syzkaller #0 [ 963.393614][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 963.402587][ T31] task:syz.4.7642 state:D stack:28048 pid:2327 tgid:2326 ppid:30110 task_flags:0x400140 flags:0x00080002 [ 963.414950][ T31] Call Trace: [ 963.418771][ T31] [ 963.421752][ T31] __schedule+0x17d9/0x56c0 [ 963.426493][ T31] ? trace_irq_enable+0x3b/0x140 [ 963.431520][ T31] ? __pfx___schedule+0x10/0x10 [ 963.436957][ T31] ? rcu_is_watching+0x15/0xb0 [ 963.441957][ T31] ? rcu_is_watching+0x15/0xb0 [ 963.447129][ T31] ? lock_release+0x4b/0x3c0 [ 963.451797][ T31] ? rcu_is_watching+0x15/0xb0 [ 963.456952][ T31] schedule+0x164/0x360 [ 963.461170][ T31] schedule_preempt_disabled+0x13/0x30 [ 963.467017][ T31] __mutex_lock+0x7bf/0x1550 [ 963.471686][ T31] ? __mutex_lock+0x5d4/0x1550 [ 963.476670][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 963.481422][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 963.486653][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 963.491805][ T31] ? radix_tree_lookup+0x240/0x290 [ 963.497491][ T31] genl_rcv_msg+0x10b/0x7a0 [ 963.502045][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 963.507152][ T31] ? ref_tracker_free+0x689/0x830 [ 963.512221][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 963.517796][ T31] netlink_rcv_skb+0x226/0x4a0 [ 963.522629][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 963.528067][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 963.533390][ T31] ? down_read+0x2be/0x330 [ 963.537980][ T31] genl_rcv+0x28/0x40 [ 963.542015][ T31] netlink_unicast+0x7bb/0x940 [ 963.546897][ T31] netlink_sendmsg+0x813/0xb40 [ 963.551720][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 963.557561][ T31] ? __might_fault+0xaf/0x130 [ 963.562274][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 963.567311][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 963.572640][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 963.578535][ T31] __sys_sendto+0x626/0x6c0 [ 963.583131][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 963.588649][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 963.594013][ T31] __x64_sys_sendto+0xde/0x100 [ 963.599006][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.605124][ T31] do_syscall_64+0x174/0x580 [ 963.609839][ T31] ? trace_irq_disable+0x3b/0x140 [ 963.614928][ T31] ? clear_bhb_loop+0x40/0x90 [ 963.620008][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.626008][ T31] RIP: 0033:0x7f337495d68e [ 963.630460][ T31] RSP: 002b:00007f3375934e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 963.639027][ T31] RAX: ffffffffffffffda RBX: 00007f33759366c0 RCX: 00007f337495d68e [ 963.647310][ T31] RDX: 000000000000001c RSI: 00007f3375935000 RDI: 0000000000000005 [ 963.655313][ T31] RBP: 0000000000000000 R08: 00007f3375934f04 R09: 000000000000000c [ 963.664080][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 963.672408][ T31] R13: 00007f3375934f58 R14: 00007f3375935000 R15: 0000000000000000 [ 963.680923][ T31] [ 963.684016][ T31] INFO: task syz.4.7642:2328 blocked for more than 145 seconds. [ 963.691885][ T31] Not tainted syzkaller #0 [ 963.696951][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 963.705639][ T31] task:syz.4.7642 state:D stack:28632 pid:2328 tgid:2326 ppid:30110 task_flags:0x400140 flags:0x00080002 [ 963.718008][ T31] Call Trace: [ 963.721329][ T31] [ 963.724267][ T31] __schedule+0x17d9/0x56c0 [ 963.728857][ T31] ? __update_page_owner_handle+0x5a/0x570 [ 963.734698][ T31] ? __pfx___schedule+0x10/0x10 [ 963.739975][ T31] ? rcu_is_watching+0x15/0xb0 [ 963.744777][ T31] ? rcu_is_watching+0x15/0xb0 [ 963.749900][ T31] ? lock_release+0x4b/0x3c0 [ 963.754517][ T31] ? rcu_is_watching+0x15/0xb0 [ 963.759449][ T31] schedule+0x164/0x360 [ 963.763673][ T31] schedule_preempt_disabled+0x13/0x30 [ 963.769222][ T31] __mutex_lock+0x7bf/0x1550 [ 963.773848][ T31] ? __mutex_lock+0x5d4/0x1550 [ 963.779049][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 963.783759][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 963.788949][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 963.794380][ T31] ? radix_tree_lookup+0x240/0x290 [ 963.799589][ T31] genl_rcv_msg+0x10b/0x7a0 [ 963.804165][ T31] ? __alloc_skb+0x276/0x7a0 [ 963.809305][ T31] ? netlink_sendmsg+0x5d4/0xb40 [ 963.814296][ T31] ? do_syscall_64+0x174/0x580 [ 963.819529][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 963.824611][ T31] ? __netlink_lookup+0xc6/0x8b0 [ 963.829702][ T31] ? rcu_is_watching+0x15/0xb0 [ 963.834530][ T31] netlink_rcv_skb+0x226/0x4a0 [ 963.840016][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 963.845144][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 963.850546][ T31] ? down_read+0x2be/0x330 [ 963.855006][ T31] genl_rcv+0x28/0x40 [ 963.859057][ T31] netlink_unicast+0x7bb/0x940 [ 963.863862][ T31] netlink_sendmsg+0x813/0xb40 [ 963.868962][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 963.874275][ T31] ? __might_fault+0xaf/0x130 [ 963.879136][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 963.884122][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 963.889698][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 963.895033][ T31] __sys_sendto+0x626/0x6c0 [ 963.900500][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 963.905586][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 963.910993][ T31] __x64_sys_sendto+0xde/0x100 [ 963.915807][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.921950][ T31] do_syscall_64+0x174/0x580 [ 963.926881][ T31] ? trace_irq_disable+0x3b/0x140 [ 963.931926][ T31] ? clear_bhb_loop+0x40/0x90 [ 963.936768][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.942720][ T31] RIP: 0033:0x7f337495d68e [ 963.947255][ T31] RSP: 002b:00007f3375913e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 963.955705][ T31] RAX: ffffffffffffffda RBX: 00007f33759156c0 RCX: 00007f337495d68e [ 963.964093][ T31] RDX: 000000000000001c RSI: 00007f3375914000 RDI: 0000000000000006 [ 963.972170][ T31] RBP: 0000000000000000 R08: 00007f3375913f04 R09: 000000000000000c [ 963.980639][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 963.989051][ T31] R13: 00007f3375913f58 R14: 00007f3375914000 R15: 0000000000000000 [ 963.997454][ T31] [ 964.000673][ T31] INFO: lockdep is turned off. [ 964.005454][ T31] NMI backtrace for cpu 1 [ 964.005487][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 964.005504][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 964.005514][ T31] Call Trace: [ 964.005520][ T31] [ 964.005527][ T31] dump_stack_lvl+0xe8/0x150 [ 964.005546][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 964.005564][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 964.005589][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 964.005607][ T31] sys_info+0x135/0x170 [ 964.005619][ T31] watchdog+0xfd7/0x1030 [ 964.005642][ T31] ? watchdog+0x1c7/0x1030 [ 964.005664][ T31] kthread+0x388/0x470 [ 964.005677][ T31] ? __pfx_watchdog+0x10/0x10 [ 964.005695][ T31] ? __pfx_kthread+0x10/0x10 [ 964.005708][ T31] ret_from_fork+0x514/0xb70 [ 964.005724][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 964.005737][ T31] ? __switch_to+0xc89/0x1420 [ 964.005758][ T31] ? __pfx_kthread+0x10/0x10 [ 964.005772][ T31] ret_from_fork_asm+0x1a/0x30 [ 964.005795][ T31] [ 964.005801][ T31] Sending NMI from CPU 1 to CPUs 0: [ 964.119510][ C0] NMI backtrace for cpu 0 [ 964.119529][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 964.119549][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 964.119560][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 964.119588][ C0] Code: 0c 80 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 a7 21 00 fb f4 7c 03 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 964.119604][ C0] RSP: 0018:ffffffff8e607de0 EFLAGS: 00000246 [ 964.119621][ C0] RAX: ffff88812527c000 RBX: ffffffff819a505c RCX: 0000000080000001 [ 964.119634][ C0] RDX: 0000000000000001 RSI: ffffffff8c291100 RDI: ffffffff819a505c [ 964.119647][ C0] RBP: ffffffff8e607eb8 R08: ffff8880b86338db R09: 1ffff110170c671b [ 964.119661][ C0] R10: dffffc0000000000 R11: ffffed10170c671c R12: 0000000000000000 [ 964.119674][ C0] R13: 1ffffffff1cd1de8 R14: 1ffffffff1cc0fc4 R15: dffffc0000000000 [ 964.119688][ C0] FS: 0000000000000000(0000) GS:ffff88812527c000(0000) knlGS:0000000000000000 [ 964.119703][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 964.119715][ C0] CR2: 00005624bc69cee8 CR3: 0000000031a7e000 CR4: 00000000003526f0 [ 964.119732][ C0] Call Trace: [ 964.119739][ C0] [ 964.119746][ C0] default_idle+0x9/0x20 [ 964.119771][ C0] default_idle_call+0x72/0xb0 [ 964.119798][ C0] do_idle+0x1cc/0x540 [ 964.119826][ C0] ? __pfx_do_idle+0x10/0x10 [ 964.119856][ C0] cpu_startup_entry+0x43/0x60 [ 964.119881][ C0] rest_init+0x2de/0x300 [ 964.119898][ C0] start_kernel+0x38a/0x3e0 [ 964.120031][ C0] x86_64_start_reservations+0x24/0x30 [ 964.120061][ C0] x86_64_start_kernel+0x137/0x1b0 [ 964.120083][ C0] common_startup_64+0x13e/0x157 [ 964.120115][ C0] [ 964.298516][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 964.305431][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 964.314550][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 964.324613][ T31] Call Trace: [ 964.327898][ T31] [ 964.330839][ T31] vpanic+0x56c/0xa60 [ 964.334829][ T31] ? __pfx___schedule+0x10/0x10 [ 964.339688][ T31] ? __pfx_vpanic+0x10/0x10 [ 964.344198][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 964.350360][ T31] panic+0xc5/0xd0 [ 964.354090][ T31] ? __pfx_panic+0x10/0x10 [ 964.358523][ T31] ? preempt_schedule_common+0x82/0xd0 [ 964.364024][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 964.369440][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 964.375623][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 964.381798][ T31] watchdog+0x1030/0x1030 [ 964.386156][ T31] ? watchdog+0x1c7/0x1030 [ 964.390597][ T31] kthread+0x388/0x470 [ 964.394683][ T31] ? __pfx_watchdog+0x10/0x10 [ 964.399383][ T31] ? __pfx_kthread+0x10/0x10 [ 964.403988][ T31] ret_from_fork+0x514/0xb70 [ 964.408598][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 964.413731][ T31] ? __switch_to+0xc89/0x1420 [ 964.418439][ T31] ? __pfx_kthread+0x10/0x10 [ 964.423068][ T31] ret_from_fork_asm+0x1a/0x30 [ 964.427873][ T31] [ 964.431445][ T31] Kernel Offset: disabled [ 964.435786][ T31] Rebooting in 86400 seconds..